last executing test programs: 20.343466678s ago: executing program 2 (id=113): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x48, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0x1}}, 0x20}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000002700)='testpacketdata', 0xe, 0x0, &(0x7f0000002740)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 19.794300844s ago: executing program 2 (id=116): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 19.760293988s ago: executing program 2 (id=119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 19.675676846s ago: executing program 2 (id=122): syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000740), 0x1, 0x289, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000480)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r1, &(0x7f0000000a40)='1', 0x1) 19.583596456s ago: executing program 2 (id=124): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 19.233005301s ago: executing program 2 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x2}, 0x400, 0x5, 0x7, 0x9, 0x6, 0x8003, 0x7fff}, 0x0, 0xff6fbfdfffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) listns(&(0x7f0000000600)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) 19.232847081s ago: executing program 32 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x2}, 0x400, 0x5, 0x7, 0x9, 0x6, 0x8003, 0x7fff}, 0x0, 0xff6fbfdfffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) listns(&(0x7f0000000600)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) 7.081575699s ago: executing program 1 (id=270): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 6.7830004s ago: executing program 1 (id=271): socket(0x1e, 0x805, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008095}, 0x24000000) r1 = syz_usbip_server_init(0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000004, 0x0, 0x9, 0x800002, 0x43, 0x4c3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x810, &(0x7f0000000100)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f0000000140)="$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") write$usbip_server(r1, 0x0, 0x30) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x1c, 0x0, @val=@netfilter={0x3, 0x0, 0x4ad6}}, 0x20) 5.316071538s ago: executing program 1 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.880455373s ago: executing program 1 (id=290): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x4000, 0x80000000, 0x2, 0x9, 0x800000, 0x40, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000780), 0x0, 0x4, &(0x7f00000007c0)={0x2, 0x4e24, @empty}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_CAPABILITIES(0x15, &(0x7f0000000180)=""/37, 0x25) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020601040000000100000000000000000d000300686173683a6d61630000000005000500000000000c00078008001200000008000900020073797a32000000000500010007000000050004"], 0x54}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r1) 4.706890191s ago: executing program 1 (id=293): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x49, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x5, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0xfffffffd, 0x3, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$FITRIM(0xffffffffffffffff, 0x80e8662d, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000004c0)) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x14, 0x1, 0x70bd2d, 0x25dfdbf8, {0xb}}, 0x58}}, 0x48064) 4.622419139s ago: executing program 1 (id=297): sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f00000008c0)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/mtrr\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='disable=0', 0x9) 2.882258106s ago: executing program 0 (id=324): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, &(0x7f0000000580), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x70c3, &(0x7f00000005c0)={0x0, 0x2c3f, 0x0, 0x1, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000000680)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.805054674s ago: executing program 3 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)={[{@usrjquota}, {@oldalloc}, {@init_itable}, {@i_version}]}, 0xff, 0x523, &(0x7f00000003c0)="$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") perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x3086, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x20}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 2.45276685s ago: executing program 3 (id=317): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000380)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000640)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000680)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000880)={0x0, 0x3, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000008c0)={0x0, 0x6, 0x7a}, 0x8) 2.365976039s ago: executing program 3 (id=318): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="a7", 0xffe0, 0x48d8, &(0x7f0000000180)={0xa, 0x4e24, 0x7, @loopback, 0xe5f}, 0x1c) getpeername$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) 1.640710083s ago: executing program 5 (id=319): r0 = perf_event_open(&(0x7f0000001880)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000001900)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x8220}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x7, &(0x7f00000016c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x24}]}, &(0x7f0000001700)='GPL\x00', 0x4, 0x9b, &(0x7f0000001740)=""/155}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000008c0), 0x0, 0x10, &(0x7f0000000900), 0xfffffffffffffddd}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r2, 0x18000000000002a0, 0x1e, 0x0, &(0x7f00000015c0)="76380300000000f99c553726d88209f61dca8c2f898cb4c396fb5b77c935", 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x29, 0x3d, 0xfffffffffffffcac, &(0x7f00000009c0)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) 1.639616243s ago: executing program 0 (id=331): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x200000000001, 0x6, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_bp={0x0, 0x6}, 0x11c0e8, 0x1, 0x0, 0x9, 0x10000000008, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3}) 1.432963544s ago: executing program 3 (id=321): perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2, 0x68165, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0xfff8000000000001, 0x2}, 0x10401, 0x1, 0x6, 0x1, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xcb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) 1.025784476s ago: executing program 0 (id=325): r0 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r2, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 954.284143ms ago: executing program 5 (id=326): prlimit64(0x0, 0xe, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xf08, &(0x7f0000001680)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000100)=0x4c) 863.586672ms ago: executing program 3 (id=328): syslog(0x2, &(0x7f0000000500)=""/70, 0x46) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001c40)={'veth1_virt_wifi\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a8d000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c78122e8e46e157941000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000440)=@deltaction={0x8c, 0x31, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000803}, 0x0) 863.219462ms ago: executing program 5 (id=329): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7fffffff}, 0x1c) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x5c, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000180), 0xfffffffffffffc06, 0x2001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000060000000000000000e2001e25b9bb47bc00", [0x8, 0xffffffff9673e35a]}}) 854.123663ms ago: executing program 0 (id=330): clock_nanosleep(0x2, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) io_uring_setup(0x20ac, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, 0x0, 0x0, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f00000001c0)=0x2) 601.813549ms ago: executing program 3 (id=333): socket$inet_icmp(0x2, 0x2, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8010002b) 601.676859ms ago: executing program 4 (id=334): fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x42002) timer_create(0x0, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x1, 0x1) 600.738719ms ago: executing program 0 (id=343): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x9, 0x80000004, 0x0, 0x9, 0x800002, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000300), &(0x7f0000000340)=@udp=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 600.497479ms ago: executing program 5 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r1) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) close(0x3) 399.918099ms ago: executing program 0 (id=336): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040), 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x3f00) 336.972186ms ago: executing program 4 (id=337): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0xc4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 232.449036ms ago: executing program 4 (id=338): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a00), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) flock(0xffffffffffffffff, 0xb90a6240cb3f16b7) 167.051753ms ago: executing program 5 (id=339): r0 = socket(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0xd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000050) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xeb9c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 164.103274ms ago: executing program 4 (id=340): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={0x0, r1, 0x4000, r1}, 0x18) 127.421547ms ago: executing program 4 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x200, 0x4, 0x2, 0x81b}, 0x19}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0007080001000000000014"], 0x4a) 107.239629ms ago: executing program 5 (id=342): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4df, &(0x7f0000000640)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000bc0)='ns/net\x00') unshare(0x20040600) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=344): syz_open_dev$loop(0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x2000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 23.989048][ T30] audit: type=1400 audit(1794779008.234:103): avc: denied { search } for pid=3174 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.989093][ T30] audit: type=1400 audit(1794779008.234:104): avc: denied { search } for pid=3174 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.391867][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 25.391887][ T30] audit: type=1400 audit(1794779009.634:116): avc: denied { write } for pid=3204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.435269][ T30] audit: type=1400 audit(1794779009.674:117): avc: denied { write } for pid=3215 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.510534][ T30] audit: type=1400 audit(1794779009.754:118): avc: denied { write } for pid=3218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.546810][ T30] audit: type=1400 audit(1794779009.784:119): avc: denied { write } for pid=3229 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.624263][ T30] audit: type=1400 audit(1794779009.864:120): avc: denied { write } for pid=3232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.656520][ T30] audit: type=1400 audit(1794779009.894:121): avc: denied { write } for pid=3243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.734722][ T30] audit: type=1400 audit(1794779009.974:122): avc: denied { write } for pid=3247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.766383][ T30] audit: type=1400 audit(1794779010.004:123): avc: denied { write } for pid=3258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.847023][ T30] audit: type=1400 audit(1794779010.084:124): avc: denied { write } for pid=3261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.877731][ T30] audit: type=1400 audit(1794779010.114:125): avc: denied { write } for pid=3272 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 31.226460][ T30] audit: type=1400 audit(1794779015.464:126): avc: denied { mounton } for pid=3280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.226793][ T30] audit: type=1400 audit(1794779015.464:127): avc: denied { mount } for pid=3280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.227412][ T3280] cgroup: Unknown subsys name 'net' [ 31.228329][ T30] audit: type=1400 audit(1794779015.464:128): avc: denied { unmount } for pid=3280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.378432][ T3280] cgroup: Unknown subsys name 'cpuset' [ 31.384856][ T3280] cgroup: Unknown subsys name 'rlimit' [ 31.447413][ T30] audit: type=1400 audit(1794779015.684:129): avc: denied { setattr } for pid=3280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.449481][ T30] audit: type=1400 audit(1794779015.694:130): avc: denied { create } for pid=3280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.450994][ T30] audit: type=1400 audit(1794779015.694:131): avc: denied { write } for pid=3280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.451118][ T30] audit: type=1400 audit(1794779015.694:132): avc: denied { read } for pid=3280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.471966][ T30] audit: type=1400 audit(1794779015.714:133): avc: denied { mounton } for pid=3280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.472085][ T30] audit: type=1400 audit(1794779015.714:134): avc: denied { mount } for pid=3280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.504279][ T30] audit: type=1400 audit(1794779015.744:135): avc: denied { read } for pid=3017 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.579116][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.617815][ T3280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.729700][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.730066][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.730353][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.753903][ T3293] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 32.780877][ T3299] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 32.785860][ T3296] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 32.841827][ T3292] infiniband rxe0: set active [ 32.841846][ T3292] infiniband rxe0: added rxe_eth0 [ 32.842710][ T288] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.845336][ T3297] rxe0: rxe_newlink: already configured on rxe_eth0 [ 32.877451][ T3292] RDS/IB: rxe0: added [ 32.877471][ T3292] smc: adding ib device rxe0 with port count 1 [ 32.877536][ T3292] smc: ib device rxe0 port 1 has no pnetid [ 32.905985][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.919857][ T288] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.957084][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.020311][ T3297] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.071162][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.129894][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.129927][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.130069][ T3299] bridge_slave_0: entered allmulticast mode [ 33.130584][ T3299] bridge_slave_0: entered promiscuous mode [ 33.160778][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.160872][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.160935][ T3299] bridge_slave_1: entered allmulticast mode [ 33.161438][ T3299] bridge_slave_1: entered promiscuous mode [ 33.198395][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.225350][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.225466][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.225533][ T3293] bridge_slave_0: entered allmulticast mode [ 33.226184][ T3293] bridge_slave_0: entered promiscuous mode [ 33.226798][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.226834][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.226893][ T3296] bridge_slave_0: entered allmulticast mode [ 33.227540][ T3296] bridge_slave_0: entered promiscuous mode [ 33.235778][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.237261][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.237365][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.237562][ T3296] bridge_slave_1: entered allmulticast mode [ 33.240822][ T3296] bridge_slave_1: entered promiscuous mode [ 33.242072][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.242178][ T3293] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.242365][ T3293] bridge_slave_1: entered allmulticast mode [ 33.243805][ T3293] bridge_slave_1: entered promiscuous mode [ 33.253894][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.320244][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.355822][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.371247][ T3293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.376734][ T3299] team0: Port device team_slave_0 added [ 33.392590][ T3296] team0: Port device team_slave_0 added [ 33.393604][ T3293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.394463][ T3296] team0: Port device team_slave_1 added [ 33.400327][ T3299] team0: Port device team_slave_1 added [ 33.437457][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.437473][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.437503][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.450450][ T3293] team0: Port device team_slave_0 added [ 33.456497][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.456539][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.456620][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.481912][ T3293] team0: Port device team_slave_1 added [ 33.514393][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.514445][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.514594][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.545191][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.545235][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.545421][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.554927][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.554992][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.555109][ T3293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.581252][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.581295][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.581385][ T3293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.658189][ T3299] hsr_slave_0: entered promiscuous mode [ 33.659372][ T3299] hsr_slave_1: entered promiscuous mode [ 33.686578][ T3296] hsr_slave_0: entered promiscuous mode [ 33.687514][ T3296] hsr_slave_1: entered promiscuous mode [ 33.688611][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 33.688660][ T3296] Cannot create hsr debugfs directory [ 33.750115][ T3293] hsr_slave_0: entered promiscuous mode [ 33.750661][ T3293] hsr_slave_1: entered promiscuous mode [ 33.750915][ T3293] debugfs: 'hsr0' already exists in 'hsr' [ 33.750931][ T3293] Cannot create hsr debugfs directory [ 33.765629][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.765748][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.765999][ T3297] bridge_slave_0: entered allmulticast mode [ 33.767447][ T3297] bridge_slave_0: entered promiscuous mode [ 33.787847][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.787946][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.788148][ T3297] bridge_slave_1: entered allmulticast mode [ 33.789473][ T3297] bridge_slave_1: entered promiscuous mode [ 33.856543][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.877999][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.912116][ T3297] team0: Port device team_slave_0 added [ 33.928214][ T3297] team0: Port device team_slave_1 added [ 33.978012][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.978028][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.978058][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.005685][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.005731][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.005824][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.084926][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.085018][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.085078][ T3292] bridge_slave_0: entered allmulticast mode [ 34.085589][ T3292] bridge_slave_0: entered promiscuous mode [ 34.103658][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.103763][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.104035][ T3292] bridge_slave_1: entered allmulticast mode [ 34.106577][ T3292] bridge_slave_1: entered promiscuous mode [ 34.143635][ T3292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.144709][ T3292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.177589][ T3297] hsr_slave_0: entered promiscuous mode [ 34.178423][ T3297] hsr_slave_1: entered promiscuous mode [ 34.179059][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 34.179099][ T3297] Cannot create hsr debugfs directory [ 34.194028][ T3292] team0: Port device team_slave_0 added [ 34.212082][ T3292] team0: Port device team_slave_1 added [ 34.235317][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.235333][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.235388][ T3292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.260763][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.260827][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.260962][ T3292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.271724][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.285195][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.302209][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.318474][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.351212][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.357098][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.373302][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.375349][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.377567][ T3292] hsr_slave_0: entered promiscuous mode [ 34.378157][ T3292] hsr_slave_1: entered promiscuous mode [ 34.378391][ T3292] debugfs: 'hsr0' already exists in 'hsr' [ 34.378404][ T3292] Cannot create hsr debugfs directory [ 34.415989][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.418472][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.439388][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.441855][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.457104][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.465959][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.486638][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.492299][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.514968][ T3293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.517133][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.534922][ T3293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.537098][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.558240][ T3293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.560216][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.560696][ T3293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.562751][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.605276][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.607269][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.616599][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.625050][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.639335][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.641300][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.655306][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.666435][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.696624][ T3292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.700147][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.712426][ T3292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.714386][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.714976][ T3292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.716989][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.728507][ T3292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.736249][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.766014][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.776384][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.786365][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.786402][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.786520][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.786551][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.822163][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.822705][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.836208][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.856986][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.857023][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.862769][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.862875][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.873097][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.882981][ T3293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.896981][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.897086][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.919965][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.920071][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.946713][ T3293] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.965370][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.965408][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.990439][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.990519][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.997491][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.026348][ T3292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.036649][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.067094][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.076385][ T3293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.076414][ T3293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.100133][ T3292] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.105746][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.105782][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.145644][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.145686][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.151526][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.151652][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.158830][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.159051][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.317254][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.435315][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.452954][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.488184][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.552585][ T3292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.647224][ T3299] veth0_vlan: entered promiscuous mode [ 35.652464][ T3299] veth1_vlan: entered promiscuous mode [ 35.678271][ T3299] veth0_macvtap: entered promiscuous mode [ 35.682366][ T3299] veth1_macvtap: entered promiscuous mode [ 35.709381][ T3297] veth0_vlan: entered promiscuous mode [ 35.710264][ T3293] veth0_vlan: entered promiscuous mode [ 35.717155][ T3297] veth1_vlan: entered promiscuous mode [ 35.737039][ T3293] veth1_vlan: entered promiscuous mode [ 35.748025][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.766633][ T3292] veth0_vlan: entered promiscuous mode [ 35.771412][ T3296] veth0_vlan: entered promiscuous mode [ 35.775194][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.796186][ T3292] veth1_vlan: entered promiscuous mode [ 35.797176][ T3293] veth0_macvtap: entered promiscuous mode [ 35.812675][ T3296] veth1_vlan: entered promiscuous mode [ 35.813854][ T3293] veth1_macvtap: entered promiscuous mode [ 35.837604][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.848463][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.867757][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.870953][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.890809][ T3296] veth0_macvtap: entered promiscuous mode [ 35.894497][ T3296] veth1_macvtap: entered promiscuous mode [ 35.909739][ T3297] veth0_macvtap: entered promiscuous mode [ 35.917228][ T3297] veth1_macvtap: entered promiscuous mode [ 35.928082][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.928540][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.928897][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.944939][ T3292] veth0_macvtap: entered promiscuous mode [ 35.955428][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.968391][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.968565][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.968715][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.997819][ T3292] veth1_macvtap: entered promiscuous mode [ 35.999573][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.025316][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.026061][ T3299] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.049778][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.072088][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.075711][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.097806][ T319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.097854][ T319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.097892][ T319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.097936][ T319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.108545][ T289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.108707][ T289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.108908][ T289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.109107][ T289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.148313][ T289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.148463][ T289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.148569][ T289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.148782][ T289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.249004][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 36.249024][ T30] audit: type=1400 audit(1794779020.494:164): avc: denied { create } for pid=3503 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 36.253588][ T30] audit: type=1400 audit(1794779020.494:165): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.259159][ T30] audit: type=1400 audit(1794779020.504:166): avc: denied { bind } for pid=3503 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 36.271889][ T30] audit: type=1400 audit(1794779020.514:167): avc: denied { listen } for pid=3503 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 36.306293][ T30] audit: type=1400 audit(1794779020.544:168): avc: denied { read } for pid=3293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.306410][ T30] audit: type=1400 audit(1794779020.544:169): avc: denied { open } for pid=3293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.311271][ T30] audit: type=1400 audit(1794779020.554:170): avc: denied { ioctl } for pid=3293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.453466][ T30] audit: type=1400 audit(1794779020.694:171): avc: denied { open } for pid=3511 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.453498][ T30] audit: type=1400 audit(1794779020.694:172): avc: denied { perfmon } for pid=3511 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.453546][ T30] audit: type=1400 audit(1794779020.694:173): avc: denied { kernel } for pid=3511 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.583457][ T3523] loop0: detected capacity change from 0 to 33280 [ 36.617497][ T3523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.638163][ T3523] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.684763][ T3523] capability: warning: `syz.0.6' uses 32-bit capabilities (legacy support in use) [ 36.747583][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.932443][ T3552] loop0: detected capacity change from 0 to 32896 [ 36.975464][ T3552] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.983409][ T3552] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.045311][ T3513] loop1: detected capacity change from 0 to 33280 [ 37.082621][ T3513] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 37.082771][ T3513] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.082880][ T3513] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.242601][ T3513] EXT4-fs (loop1): 1 truncate cleaned up [ 37.267966][ T3513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.421768][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.483194][ T3521] syz.4.5 (3521) used greatest stack depth: 11080 bytes left [ 37.597577][ T3573] loop3: detected capacity change from 0 to 33280 [ 37.647070][ T3571] TC_ACT_REPEAT abuse ? [ 37.656656][ T3573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.670342][ T3573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.670494][ T3573] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.731559][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.152326][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.245771][ T3615] loop4: detected capacity change from 0 to 33280 [ 38.447092][ T3628] syz.4.23 uses obsolete (PF_INET,SOCK_PACKET) [ 38.496329][ T3628] TC_ACT_REPEAT abuse ? [ 38.545652][ T3599] syz.2.17 (3599) used greatest stack depth: 10608 bytes left [ 38.720153][ T3654] FAULT_INJECTION: forcing a failure. [ 38.720153][ T3654] name failslab, interval 1, probability 0, space 0, times 1 [ 38.720263][ T3654] CPU: 1 UID: 0 PID: 3654 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.720294][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.720316][ T3654] Call Trace: [ 38.720325][ T3654] [ 38.720335][ T3654] __dump_stack+0x1d/0x30 [ 38.720476][ T3654] dump_stack_lvl+0x95/0xd0 [ 38.720498][ T3654] dump_stack+0x15/0x1b [ 38.720519][ T3654] should_fail_ex+0x259/0x270 [ 38.720605][ T3654] ? __request_module+0x1c4/0x3c0 [ 38.720664][ T3654] should_failslab+0x8c/0xb0 [ 38.720759][ T3654] __kmalloc_cache_noprof+0x5d/0x3e0 [ 38.720872][ T3654] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 38.720909][ T3654] ? __request_module+0x1c4/0x3c0 [ 38.721020][ T3654] ? inet_create+0x1fe/0x790 [ 38.721086][ T3654] __request_module+0x1c4/0x3c0 [ 38.721124][ T3654] ? kmem_cache_alloc_noprof+0x179/0x3d0 [ 38.721172][ T3654] inet_create+0x1fe/0x790 [ 38.721267][ T3654] __sock_create+0x2e5/0x580 [ 38.721302][ T3654] __sys_socket+0xaf/0x180 [ 38.721333][ T3654] __x64_sys_socket+0x3f/0x50 [ 38.721476][ T3654] x64_sys_call+0x246e/0x2550 [ 38.721564][ T3654] do_syscall_64+0x121/0x390 [ 38.721592][ T3654] ? clear_bhb_loop+0x70/0xc0 [ 38.721620][ T3654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.721667][ T3654] RIP: 0033:0x7fad6de494d9 [ 38.721686][ T3654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.721744][ T3654] RSP: 002b:00007fad6c876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 38.721765][ T3654] RAX: ffffffffffffffda RBX: 00007fad6e0c6090 RCX: 00007fad6de494d9 [ 38.721779][ T3654] RDX: 0000000000000106 RSI: 0000000000080805 RDI: 0000000000000002 [ 38.721793][ T3654] RBP: 00007fad6ded804e R08: 0000000000000000 R09: 0000000000000000 [ 38.721806][ T3654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.721849][ T3654] R13: 00007fad6e0c6128 R14: 00007fad6e0c6090 R15: 00007ffeb9d2b478 [ 38.721875][ T3654] [ 38.841512][ T3603] loop0: detected capacity change from 0 to 33280 [ 39.056852][ T3603] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.18: bg 0: block 385: padding at end of block bitmap is not set [ 39.057252][ T3603] loop0: lost filesystem error report for type 5 error -117 [ 39.057733][ C0] EXT4-fs (loop0): initial error at time 1794779023: ext4_validate_block_bitmap:445 [ 39.058253][ C0] EXT4-fs (loop0): last error at time 1794779023: ext4_validate_block_bitmap:445 [ 39.091438][ T3603] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 39.091497][ T3603] loop0: lost filesystem error report for type 5 error -117 [ 39.093079][ T3667] loop1: detected capacity change from 0 to 33280 [ 39.113464][ T3603] EXT4-fs (loop0): 2 truncates cleaned up [ 39.130528][ T3603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.167324][ T3679] FAULT_INJECTION: forcing a failure. [ 39.167324][ T3679] name failslab, interval 1, probability 0, space 0, times 0 [ 39.167360][ T3679] CPU: 1 UID: 0 PID: 3679 Comm: syz.4.32 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.167474][ T3679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 39.167497][ T3679] Call Trace: [ 39.167505][ T3679] [ 39.167515][ T3679] __dump_stack+0x1d/0x30 [ 39.167549][ T3679] dump_stack_lvl+0x95/0xd0 [ 39.167653][ T3679] dump_stack+0x15/0x1b [ 39.167683][ T3679] should_fail_ex+0x259/0x270 [ 39.167760][ T3679] ? xprt_switch_alloc+0x5e/0x2d0 [ 39.167794][ T3679] should_failslab+0x8c/0xb0 [ 39.167842][ T3679] __kmalloc_cache_noprof+0x5d/0x3e0 [ 39.167932][ T3679] ? xprt_switch_alloc+0x5e/0x2d0 [ 39.167987][ T3679] xprt_switch_alloc+0x5e/0x2d0 [ 39.168029][ T3679] rpc_create_xprt+0x9f/0x620 [ 39.168073][ T3679] ? kstrdup+0x88/0xd0 [ 39.168150][ T3679] rpc_create+0x4a3/0x580 [ 39.168248][ T3679] nfs_create_rpc_client+0x4ef/0x5a0 [ 39.168334][ T3679] nfs4_alloc_client+0x503/0x730 [ 39.168364][ T3679] ? pcpu_block_refresh_hint+0x157/0x170 [ 39.168411][ T3679] ? pcpu_block_update_hint_alloc+0x637/0x650 [ 39.168544][ T3679] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 39.168594][ T3679] nfs_get_client+0x827/0xb80 [ 39.168653][ T3679] ? nfs_alloc_server+0x27a/0x360 [ 39.168678][ T3679] ? timer_init_key+0x75/0x130 [ 39.168718][ T3679] nfs4_set_client+0x28a/0x320 [ 39.168811][ T3679] nfs4_create_server+0x37c/0x960 [ 39.168847][ T3679] nfs4_try_get_tree+0x29/0xc0 [ 39.168878][ T3679] nfs_get_tree+0xb0f/0xbf0 [ 39.168904][ T3679] vfs_get_tree+0x57/0x1d0 [ 39.168951][ T3679] do_new_mount+0x288/0x730 [ 39.169079][ T3679] path_mount+0x4ad/0xba0 [ 39.169110][ T3679] __se_sys_mount+0x28c/0x2e0 [ 39.169144][ T3679] __x64_sys_mount+0x67/0x80 [ 39.169172][ T3679] x64_sys_call+0xc3b/0x2550 [ 39.169209][ T3679] do_syscall_64+0x121/0x390 [ 39.169251][ T3679] ? clear_bhb_loop+0x70/0xc0 [ 39.169292][ T3679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.169322][ T3679] RIP: 0033:0x7f18b59e94d9 [ 39.169344][ T3679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.169367][ T3679] RSP: 002b:00007f18b4437028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.169437][ T3679] RAX: ffffffffffffffda RBX: 00007f18b5c65fa0 RCX: 00007f18b59e94d9 [ 39.169457][ T3679] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 39.169476][ T3679] RBP: 00007f18b5a7804e R08: 0000200000000140 R09: 0000000000000000 [ 39.169494][ T3679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.169513][ T3679] R13: 00007f18b5c66038 R14: 00007f18b5c65fa0 R15: 00007ffc623576a8 [ 39.169566][ T3679] [ 39.291702][ T3667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.304546][ T3667] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.435502][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.482293][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.563402][ T3690] loop2: detected capacity change from 0 to 34816 [ 39.591879][ T3690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.633436][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.702253][ T3701] tipc: Failed to remove unknown binding: 66,0,0/0:1838928932/1838928933 [ 39.702517][ T3701] tipc: Failed to remove unknown binding: 66,0,0/0:1838928932/1838928933 [ 39.780727][ T54] IPVS: starting estimator thread 0... [ 39.854464][ T3692] loop3: detected capacity change from 0 to 33280 [ 39.867748][ T3708] IPVS: using max 2208 ests per chain, 110400 per kthread [ 39.893505][ T3692] ext4: Unknown parameter 'measure' [ 39.926042][ T3713] 0: reclassify loop, rule prio 0, protocol 03 [ 40.026261][ T24] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 40.026299][ T24] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 40.026436][ T24] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 40.026473][ T24] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 40.026504][ T24] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 40.026550][ T24] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 40.026575][ T24] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 40.026642][ T24] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 40.027082][ T24] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 40.133646][ T3724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 40.138331][ T3727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 40.145363][ T3728] bridge0: port 3(syz_tun) entered blocking state [ 40.145502][ T3728] bridge0: port 3(syz_tun) entered disabled state [ 40.145800][ T3728] syz_tun: entered allmulticast mode [ 40.149857][ T3728] syz_tun: entered promiscuous mode [ 40.150039][ T3728] bridge0: port 3(syz_tun) entered blocking state [ 40.150151][ T3728] bridge0: port 3(syz_tun) entered forwarding state [ 40.200265][ T3722] fido_id[3722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.259765][ T3732] loop3: detected capacity change from 0 to 32896 [ 40.286890][ T3732] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.287137][ T3732] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.288488][ T3733] syzkaller1: entered promiscuous mode [ 40.288542][ T3733] syzkaller1: entered allmulticast mode [ 40.371125][ T3292] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.516069][ T3746] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 40.548289][ T3721] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.638728][ T3751] FAULT_INJECTION: forcing a failure. [ 40.638728][ T3751] name failslab, interval 1, probability 0, space 0, times 0 [ 40.638764][ T3751] CPU: 1 UID: 0 PID: 3751 Comm: syz.3.60 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.638868][ T3751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.638885][ T3751] Call Trace: [ 40.638894][ T3751] [ 40.638905][ T3751] __dump_stack+0x1d/0x30 [ 40.638941][ T3751] dump_stack_lvl+0x95/0xd0 [ 40.638973][ T3751] dump_stack+0x15/0x1b [ 40.639000][ T3751] should_fail_ex+0x259/0x270 [ 40.639167][ T3751] ? security_file_alloc+0x32/0xf0 [ 40.639259][ T3751] should_failslab+0x8c/0xb0 [ 40.639304][ T3751] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 40.639348][ T3751] ? security_file_alloc+0x32/0xf0 [ 40.639407][ T3751] security_file_alloc+0x32/0xf0 [ 40.639459][ T3751] init_file+0x5b/0x1b0 [ 40.639495][ T3751] alloc_empty_file+0x85/0x1e0 [ 40.639530][ T3751] alloc_file_pseudo+0x92/0x120 [ 40.639581][ T3751] anon_inode_getfd+0xc1/0x190 [ 40.639764][ T3751] do_inotify_init+0x21d/0x280 [ 40.639807][ T3751] __ia32_sys_inotify_init+0x10/0x20 [ 40.639953][ T3751] x64_sys_call+0x1ef9/0x2550 [ 40.639990][ T3751] do_syscall_64+0x121/0x390 [ 40.640069][ T3751] ? clear_bhb_loop+0x70/0xc0 [ 40.640100][ T3751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.640130][ T3751] RIP: 0033:0x7fbc54c794d9 [ 40.640151][ T3751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.640208][ T3751] RSP: 002b:00007fbc536bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 40.640232][ T3751] RAX: ffffffffffffffda RBX: 00007fbc54ef5fa0 RCX: 00007fbc54c794d9 [ 40.640252][ T3751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.640310][ T3751] RBP: 00007fbc54ef5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 40.640329][ T3751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.640346][ T3751] R13: 00007fbc54ef6038 R14: 00007fbc54ef5fa0 R15: 00007ffcf3739198 [ 40.640393][ T3751] [ 41.110529][ T3778] netlink: 44 bytes leftover after parsing attributes in process `syz.3.70'. [ 41.168390][ T3784] FAULT_INJECTION: forcing a failure. [ 41.168390][ T3784] name failslab, interval 1, probability 0, space 0, times 0 [ 41.168426][ T3784] CPU: 1 UID: 0 PID: 3784 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.168458][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.168474][ T3784] Call Trace: [ 41.168480][ T3784] [ 41.168493][ T3784] __dump_stack+0x1d/0x30 [ 41.168526][ T3784] dump_stack_lvl+0x95/0xd0 [ 41.168576][ T3784] dump_stack+0x15/0x1b [ 41.168600][ T3784] should_fail_ex+0x259/0x270 [ 41.168673][ T3784] ? security_inode_alloc+0x37/0x100 [ 41.168701][ T3784] should_failslab+0x8c/0xb0 [ 41.168741][ T3784] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 41.168845][ T3784] ? security_inode_alloc+0x37/0x100 [ 41.168922][ T3784] security_inode_alloc+0x37/0x100 [ 41.169008][ T3784] inode_init_always_gfp+0x49b/0x4e0 [ 41.169088][ T3784] ? __pfx_aio_alloc_inode+0x10/0x10 [ 41.169111][ T3784] alloc_inode+0x58/0x170 [ 41.169198][ T3784] alloc_anon_inode+0x1e/0x170 [ 41.169233][ T3784] aio_setup_ring+0x90/0x740 [ 41.169255][ T3784] ? ioctx_alloc+0x271/0x480 [ 41.169349][ T3784] ioctx_alloc+0x296/0x480 [ 41.169423][ T3784] __se_sys_io_setup+0x6b/0x1b0 [ 41.169499][ T3784] __x64_sys_io_setup+0x31/0x40 [ 41.169542][ T3784] x64_sys_call+0x1a9f/0x2550 [ 41.169653][ T3784] do_syscall_64+0x121/0x390 [ 41.169684][ T3784] ? clear_bhb_loop+0x70/0xc0 [ 41.169716][ T3784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.169750][ T3784] RIP: 0033:0x7fbc54c794d9 [ 41.169766][ T3784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.169785][ T3784] RSP: 002b:00007fbc536bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 41.169808][ T3784] RAX: ffffffffffffffda RBX: 00007fbc54ef5fa0 RCX: 00007fbc54c794d9 [ 41.169903][ T3784] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000239f [ 41.169917][ T3784] RBP: 00007fbc54d0804e R08: 0000000000000000 R09: 0000000000000000 [ 41.169938][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.169951][ T3784] R13: 00007fbc54ef6038 R14: 00007fbc54ef5fa0 R15: 00007ffcf3739198 [ 41.169978][ T3784] [ 41.314104][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 41.314157][ T30] audit: type=1400 audit(1794779025.554:292): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 41.482360][ T30] audit: type=1400 audit(1794779025.724:293): avc: denied { module_request } for pid=3789 comm="syz.3.76" kmod="crypto-krb5enc(hmac(sha1),cts(cbc(aes)))-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 41.539685][ T30] audit: type=1400 audit(1794779025.784:294): avc: denied { perfmon } for pid=3799 comm="syz.0.79" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.598434][ T3802] netlink: 108 bytes leftover after parsing attributes in process `syz.3.80'. [ 41.622120][ T3802] netlink: 80 bytes leftover after parsing attributes in process `syz.3.80'. [ 41.688792][ T30] audit: type=1400 audit(1794779025.934:295): avc: denied { create } for pid=3806 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.694093][ T30] audit: type=1400 audit(1794779025.934:296): avc: denied { setopt } for pid=3806 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.796698][ T30] audit: type=1400 audit(1794779026.024:297): avc: denied { ioctl } for pid=3806 comm="syz.4.82" path="socket:[5083]" dev="sockfs" ino=5083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.796735][ T30] audit: type=1400 audit(1794779026.024:298): avc: denied { bind } for pid=3806 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.796764][ T30] audit: type=1400 audit(1794779026.034:299): avc: denied { mounton } for pid=3806 comm="syz.4.82" path="/13/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.893688][ T30] audit: type=1400 audit(1794779026.134:300): avc: denied { bind } for pid=3815 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.894894][ T30] audit: type=1400 audit(1794779026.134:301): avc: denied { setopt } for pid=3815 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.896133][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 42.053225][ T3800] loop0: detected capacity change from 0 to 33280 [ 42.195747][ T3800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.199160][ T3800] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.750339][ T3800] syz.0.79 (3800) used greatest stack depth: 9928 bytes left [ 42.753881][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.807771][ T3851] FAULT_INJECTION: forcing a failure. [ 42.807771][ T3851] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 42.807811][ T3851] CPU: 0 UID: 0 PID: 3851 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.807846][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.807864][ T3851] Call Trace: [ 42.807913][ T3851] [ 42.807921][ T3851] __dump_stack+0x1d/0x30 [ 42.807954][ T3851] dump_stack_lvl+0x95/0xd0 [ 42.808108][ T3851] dump_stack+0x15/0x1b [ 42.808183][ T3851] should_fail_ex+0x259/0x270 [ 42.808215][ T3851] should_fail_alloc_page+0xf2/0x100 [ 42.808335][ T3851] __alloc_frozen_pages_noprof+0x13b/0x3d0 [ 42.808375][ T3851] alloc_pages_mpol+0xaf/0x1d0 [ 42.808484][ T3851] vma_alloc_folio_noprof+0x1b3/0x300 [ 42.808518][ T3851] do_wp_page+0x666/0x1ea0 [ 42.808543][ T3851] ? __css_rstat_updated+0xbb/0x280 [ 42.808611][ T3851] ? __rcu_read_lock+0x36/0x50 [ 42.808690][ T3851] handle_mm_fault+0xe44/0x3bd0 [ 42.808717][ T3851] ? vma_start_read+0x1de/0x2e0 [ 42.808775][ T3851] do_user_addr_fault+0x3ce/0xde0 [ 42.808822][ T3851] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 42.808897][ T3851] ? trace_page_fault_user+0x1f/0xa0 [ 42.808943][ T3851] exc_page_fault+0x62/0xa0 [ 42.808988][ T3851] asm_exc_page_fault+0x26/0x30 [ 42.809089][ T3851] RIP: 0033:0x7f47954292c5 [ 42.809110][ T3851] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 42.809135][ T3851] RSP: 002b:00007f4793eadde0 EFLAGS: 00010293 [ 42.809158][ T3851] RAX: 0000000000000008 RBX: 00007f4796217e20 RCX: 0000000000000000 [ 42.809177][ T3851] RDX: 0000000000000000 RSI: 00007f47954f5720 RDI: 00007f4796217e20 [ 42.809193][ T3851] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 42.809224][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4795515e0d [ 42.809243][ T3851] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007f47954f5720 [ 42.809270][ T3851] [ 42.809309][ T3851] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 43.222926][ T3860] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 43.253080][ T3860] socket: no more sockets [ 43.341537][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 43.341608][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 43.354149][ T3865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 43.369398][ T3865] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 43.369560][ T3865] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 43.369686][ T3865] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 43.369760][ T3865] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 43.369933][ T3865] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 43.370066][ T3865] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 43.370201][ T3865] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 43.370286][ T3865] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 43.370369][ T3865] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 43.496486][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 43.699432][ T3886] syz.1.109 (3886) used greatest stack depth: 9736 bytes left [ 43.921080][ T3890] loop3: detected capacity change from 0 to 33280 [ 43.946578][ T3898] sctp: [Deprecated]: syz.4.114 (pid 3898) Use of int in max_burst socket option. [ 43.946578][ T3898] Use struct sctp_assoc_value instead [ 43.946720][ T3898] FAULT_INJECTION: forcing a failure. [ 43.946720][ T3898] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.946795][ T3898] CPU: 0 UID: 0 PID: 3898 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.946834][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.946852][ T3898] Call Trace: [ 43.946860][ T3898] [ 43.946950][ T3898] __dump_stack+0x1d/0x30 [ 43.947047][ T3898] dump_stack_lvl+0x95/0xd0 [ 43.947158][ T3898] dump_stack+0x15/0x1b [ 43.947184][ T3898] should_fail_ex+0x259/0x270 [ 43.947226][ T3898] should_fail+0xb/0x20 [ 43.947293][ T3898] should_fail_usercopy+0x1a/0x20 [ 43.947336][ T3898] _copy_from_user+0x1c/0xb0 [ 43.947378][ T3898] sctp_setsockopt+0x161/0xea0 [ 43.947436][ T3898] sock_common_setsockopt+0x69/0x80 [ 43.947518][ T3898] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 43.947562][ T3898] __sys_setsockopt+0x184/0x200 [ 43.947594][ T3898] __x64_sys_setsockopt+0x64/0x80 [ 43.947629][ T3898] x64_sys_call+0x248f/0x2550 [ 43.947664][ T3898] do_syscall_64+0x121/0x390 [ 43.947692][ T3898] ? clear_bhb_loop+0x70/0xc0 [ 43.947748][ T3898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.947779][ T3898] RIP: 0033:0x7f18b59e94d9 [ 43.947844][ T3898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.947932][ T3898] RSP: 002b:00007f18b4437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.947954][ T3898] RAX: ffffffffffffffda RBX: 00007f18b5c65fa0 RCX: 00007f18b59e94d9 [ 43.947974][ T3898] RDX: 000000000000000a RSI: 0000000000000084 RDI: 0000000000000004 [ 43.947992][ T3898] RBP: 00007f18b5a7804e R08: 0000000000000020 R09: 0000000000000000 [ 43.948011][ T3898] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 43.948029][ T3898] R13: 00007f18b5c66038 R14: 00007f18b5c65fa0 R15: 00007ffc623576a8 [ 43.948087][ T3898] [ 44.052293][ T3890] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.106186][ T3890] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.106728][ T3890] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.110: bg 0: block 248: padding at end of block bitmap is not set [ 44.106827][ T3890] loop3: lost filesystem error report for type 5 error -117 [ 44.107748][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 44.107800][ C0] EXT4-fs (loop3): last error at time 1794779284: ext4_validate_block_bitmap:445 [ 44.115089][ T3890] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.110: Failed to acquire dquot type 1 [ 44.115438][ T3890] loop3: lost filesystem error report for type 5 error -28 [ 44.123868][ T3890] EXT4-fs (loop3): 1 truncate cleaned up [ 44.130403][ T3890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 44.251313][ T3890] bridge0 (3890) used greatest stack depth: 9224 bytes left [ 44.284346][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 44.407454][ T3909] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 44.425409][ T3918] loop2: detected capacity change from 0 to 32896 [ 44.429534][ T3918] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 44.432440][ T3918] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.433028][ T3918] ext2 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.580612][ T3931] FAULT_INJECTION: forcing a failure. [ 44.580612][ T3931] name failslab, interval 1, probability 0, space 0, times 0 [ 44.580645][ T3931] CPU: 1 UID: 0 PID: 3931 Comm: syz.3.128 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.580721][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 44.580816][ T3931] Call Trace: [ 44.580823][ T3931] [ 44.580831][ T3931] __dump_stack+0x1d/0x30 [ 44.580921][ T3931] dump_stack_lvl+0x95/0xd0 [ 44.580947][ T3931] dump_stack+0x15/0x1b [ 44.580971][ T3931] should_fail_ex+0x259/0x270 [ 44.581082][ T3931] should_failslab+0x8c/0xb0 [ 44.581212][ T3931] __kvmalloc_node_noprof+0x14f/0x5b0 [ 44.581242][ T3931] ? bpf_compute_scc+0x7e/0x6c0 [ 44.581283][ T3931] ? sort_subprogs_topo+0x9f2/0xa10 [ 44.581320][ T3931] ? bpf_compute_scc+0x7e/0x6c0 [ 44.581407][ T3931] bpf_compute_scc+0x7e/0x6c0 [ 44.581505][ T3931] bpf_check+0x1dd6/0x20e0 [ 44.581549][ T3931] bpf_prog_load+0xf52/0x10b0 [ 44.581595][ T3931] __sys_bpf+0xbce/0xc50 [ 44.581632][ T3931] ? do_futex+0x380/0x460 [ 44.581671][ T3931] __x64_sys_bpf+0x69/0x80 [ 44.581697][ T3931] x64_sys_call+0xf26/0x2550 [ 44.581810][ T3931] do_syscall_64+0x121/0x390 [ 44.581840][ T3931] ? clear_bhb_loop+0x70/0xc0 [ 44.581873][ T3931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.581902][ T3931] RIP: 0033:0x7fbc54c794d9 [ 44.581931][ T3931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.581954][ T3931] RSP: 002b:00007fbc536bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.581975][ T3931] RAX: ffffffffffffffda RBX: 00007fbc54ef5fa0 RCX: 00007fbc54c794d9 [ 44.582125][ T3931] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 44.582146][ T3931] RBP: 00007fbc54d0804e R08: 0000000000000000 R09: 0000000000000000 [ 44.582161][ T3931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.582185][ T3931] R13: 00007fbc54ef6038 R14: 00007fbc54ef5fa0 R15: 00007ffcf3739198 [ 44.582206][ T3931] [ 44.771914][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.043826][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.127608][ T3945] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.186129][ T3967] FAULT_INJECTION: forcing a failure. [ 45.186129][ T3967] name failslab, interval 1, probability 0, space 0, times 0 [ 45.186224][ T3967] CPU: 0 UID: 0 PID: 3967 Comm: syz.4.136 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.186258][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.186276][ T3967] Call Trace: [ 45.186293][ T3967] [ 45.186300][ T3967] __dump_stack+0x1d/0x30 [ 45.186334][ T3967] dump_stack_lvl+0x95/0xd0 [ 45.186361][ T3967] dump_stack+0x15/0x1b [ 45.186383][ T3967] should_fail_ex+0x259/0x270 [ 45.186417][ T3967] ? call_usermodehelper_setup+0x72/0x190 [ 45.186459][ T3967] should_failslab+0x8c/0xb0 [ 45.186497][ T3967] __kmalloc_cache_noprof+0x5d/0x3e0 [ 45.186554][ T3967] ? call_usermodehelper_setup+0x72/0x190 [ 45.186628][ T3967] ? __pfx_free_modprobe_argv+0x10/0x10 [ 45.186714][ T3967] call_usermodehelper_setup+0x72/0x190 [ 45.186750][ T3967] __request_module+0x264/0x3c0 [ 45.186786][ T3967] ? kmem_cache_alloc_noprof+0x179/0x3d0 [ 45.186872][ T3967] inet_create+0x13d/0x790 [ 45.186958][ T3967] __sock_create+0x2e5/0x580 [ 45.187002][ T3967] __sys_socket+0xaf/0x180 [ 45.187123][ T3967] __x64_sys_socket+0x3f/0x50 [ 45.187156][ T3967] x64_sys_call+0x246e/0x2550 [ 45.187183][ T3967] do_syscall_64+0x121/0x390 [ 45.187364][ T3967] ? clear_bhb_loop+0x70/0xc0 [ 45.187391][ T3967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.187538][ T3967] RIP: 0033:0x7f18b59e94d9 [ 45.187558][ T3967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.187581][ T3967] RSP: 002b:00007f18b4416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 45.187602][ T3967] RAX: ffffffffffffffda RBX: 00007f18b5c66090 RCX: 00007f18b59e94d9 [ 45.187681][ T3967] RDX: 0000000000000106 RSI: 0000000000080805 RDI: 0000000000000002 [ 45.187698][ T3967] RBP: 00007f18b5a7804e R08: 0000000000000000 R09: 0000000000000000 [ 45.187714][ T3967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.187731][ T3967] R13: 00007f18b5c66128 R14: 00007f18b5c66090 R15: 00007ffc623576a8 [ 45.187756][ T3967] [ 45.576621][ T3986] FAULT_INJECTION: forcing a failure. [ 45.576621][ T3986] name failslab, interval 1, probability 0, space 0, times 0 [ 45.576651][ T3986] CPU: 0 UID: 0 PID: 3986 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.576748][ T3986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.576819][ T3986] Call Trace: [ 45.576825][ T3986] [ 45.576834][ T3986] __dump_stack+0x1d/0x30 [ 45.576867][ T3986] dump_stack_lvl+0x95/0xd0 [ 45.576897][ T3986] dump_stack+0x15/0x1b [ 45.576925][ T3986] should_fail_ex+0x259/0x270 [ 45.577043][ T3986] ? rpc_sysfs_xprt_switch_setup+0xb1/0x1f0 [ 45.577084][ T3986] should_failslab+0x8c/0xb0 [ 45.577122][ T3986] __kmalloc_cache_noprof+0x5d/0x3e0 [ 45.577196][ T3986] ? rpc_sysfs_xprt_switch_setup+0xb1/0x1f0 [ 45.577249][ T3986] rpc_sysfs_xprt_switch_setup+0xb1/0x1f0 [ 45.577322][ T3986] xprt_switch_alloc+0x14f/0x2d0 [ 45.577373][ T3986] rpc_create_xprt+0x9f/0x620 [ 45.577406][ T3986] ? kstrdup+0x88/0xd0 [ 45.577474][ T3986] rpc_create+0x4a3/0x580 [ 45.577521][ T3986] nfs_create_rpc_client+0x4ef/0x5a0 [ 45.577570][ T3986] nfs4_alloc_client+0x503/0x730 [ 45.577607][ T3986] ? irqentry_exit+0x58f/0x610 [ 45.577647][ T3986] ? pcpu_block_update_hint_alloc+0x637/0x650 [ 45.577695][ T3986] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 45.577815][ T3986] nfs_get_client+0x827/0xb80 [ 45.577868][ T3986] ? nfs_alloc_server+0x27a/0x360 [ 45.577886][ T3986] ? timer_init_key+0x75/0x130 [ 45.577910][ T3986] nfs4_set_client+0x28a/0x320 [ 45.577995][ T3986] nfs4_create_server+0x37c/0x960 [ 45.578040][ T3986] nfs4_try_get_tree+0x29/0xc0 [ 45.578068][ T3986] nfs_get_tree+0xb0f/0xbf0 [ 45.578096][ T3986] vfs_get_tree+0x57/0x1d0 [ 45.578228][ T3986] do_new_mount+0x288/0x730 [ 45.578301][ T3986] path_mount+0x4ad/0xba0 [ 45.578328][ T3986] __se_sys_mount+0x28c/0x2e0 [ 45.578363][ T3986] __x64_sys_mount+0x67/0x80 [ 45.578394][ T3986] x64_sys_call+0xc3b/0x2550 [ 45.578423][ T3986] do_syscall_64+0x121/0x390 [ 45.578475][ T3986] ? clear_bhb_loop+0x70/0xc0 [ 45.578511][ T3986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.578540][ T3986] RIP: 0033:0x7f47954694d9 [ 45.578639][ T3986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.578700][ T3986] RSP: 002b:00007f4793eaf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.578722][ T3986] RAX: ffffffffffffffda RBX: 00007f47956e5fa0 RCX: 00007f47954694d9 [ 45.578820][ T3986] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 45.578839][ T3986] RBP: 00007f47954f804e R08: 0000200000000140 R09: 0000000000000000 [ 45.578854][ T3986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.578867][ T3986] R13: 00007f47956e6038 R14: 00007f47956e5fa0 R15: 00007ffd3f212dd8 [ 45.578888][ T3986] [ 45.635533][ T3945] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.635672][ T3945] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.635878][ T3945] bridge_slave_0: entered allmulticast mode [ 45.638239][ T3945] bridge_slave_0: entered promiscuous mode [ 45.643931][ T3945] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.644008][ T3945] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.644242][ T3945] bridge_slave_1: entered allmulticast mode [ 45.647743][ T3945] bridge_slave_1: entered promiscuous mode [ 45.706573][ T3945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.724381][ T3945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.829739][ T3945] team0: Port device team_slave_0 added [ 45.840703][ T3945] team0: Port device team_slave_1 added [ 45.994037][ T3945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.994059][ T3945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.994110][ T3945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.994821][ T3945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.994838][ T3945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.994937][ T3945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.103609][ T3945] hsr_slave_0: entered promiscuous mode [ 46.104051][ T3945] hsr_slave_1: entered promiscuous mode [ 46.104271][ T3945] debugfs: 'hsr0' already exists in 'hsr' [ 46.104287][ T3945] Cannot create hsr debugfs directory [ 46.104752][ T3992] syzkaller1: entered promiscuous mode [ 46.104772][ T3992] syzkaller1: entered allmulticast mode [ 46.247345][ T4005] __nla_validate_parse: 4 callbacks suppressed [ 46.247366][ T4005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 46.312720][ T3945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.325724][ T3945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.326196][ T3945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.341696][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 46.341714][ T30] audit: type=1400 audit(1794779286.578:436): avc: denied { create } for pid=4011 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.341748][ T30] audit: type=1400 audit(1794779286.578:437): avc: denied { read } for pid=4011 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.367414][ T30] audit: type=1326 audit(1794779286.598:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.3.154" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc54c794d9 code=0x7fc00000 [ 46.367456][ T30] audit: type=1326 audit(1794779286.598:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.3.154" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbc54c794d9 code=0x7fc00000 [ 46.412096][ T30] audit: type=1400 audit(1794779286.628:440): avc: denied { write } for pid=4011 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.435330][ T3945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.440945][ T3945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.471282][ T3945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.471783][ T3945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.475768][ T3945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.584243][ T3945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.611477][ T3945] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.626024][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.626065][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.646551][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.646585][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.919674][ T3945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.143102][ T4046] netlink: 'syz.3.148': attribute type 1 has an invalid length. [ 47.218007][ T3945] veth0_vlan: entered promiscuous mode [ 47.225631][ T3945] veth1_vlan: entered promiscuous mode [ 47.275533][ T4051] loop3: detected capacity change from 0 to 512 [ 47.275999][ T4051] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 47.300213][ T3945] veth0_macvtap: entered promiscuous mode [ 47.316270][ T3945] veth1_macvtap: entered promiscuous mode [ 47.331646][ T3945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.339760][ T3945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.388098][ T54] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.388158][ T54] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.388221][ T54] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.388261][ T54] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.509589][ T4057] lo: entered allmulticast mode [ 47.524409][ T4055] lo: left allmulticast mode [ 47.707713][ T30] audit: type=1326 audit(1794779287.948:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.3.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc54c794d9 code=0x7ffc0000 [ 47.707938][ T30] audit: type=1326 audit(1794779287.958:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.3.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc54c794d9 code=0x7ffc0000 [ 47.709739][ T30] audit: type=1326 audit(1794779287.958:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.3.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbc54c794d9 code=0x7ffc0000 [ 47.833891][ T30] audit: type=1326 audit(1794779288.078:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.3.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc54c794d9 code=0x7ffc0000 [ 47.834027][ T30] audit: type=1326 audit(1794779288.078:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.3.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc54c794d9 code=0x7ffc0000 [ 47.990234][ T4077] FAULT_INJECTION: forcing a failure. [ 47.990234][ T4077] name failslab, interval 1, probability 0, space 0, times 0 [ 47.990274][ T4077] CPU: 1 UID: 0 PID: 4077 Comm: syz.4.157 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.990310][ T4077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.990329][ T4077] Call Trace: [ 47.990338][ T4077] [ 47.990347][ T4077] __dump_stack+0x1d/0x30 [ 47.990426][ T4077] dump_stack_lvl+0x95/0xd0 [ 47.990451][ T4077] dump_stack+0x15/0x1b [ 47.990474][ T4077] should_fail_ex+0x259/0x270 [ 47.990514][ T4077] ? batadv_tvlv_container_register+0x40/0x450 [ 47.990571][ T4077] should_failslab+0x8c/0xb0 [ 47.990608][ T4077] __kmalloc_noprof+0xb6/0x4b0 [ 47.990653][ T4077] ? batadv_tvlv_container_register+0x40/0x450 [ 47.990688][ T4077] batadv_tvlv_container_register+0x40/0x450 [ 47.990744][ T4077] batadv_dat_init+0x168/0x1b0 [ 47.990770][ T4077] batadv_mesh_init+0x30a/0x410 [ 47.990849][ T4077] batadv_meshif_init_late+0x3e1/0x460 [ 47.990874][ T4077] register_netdevice+0x234/0x13f0 [ 47.990975][ T4077] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 47.990998][ T4077] batadv_meshif_newlink+0x7d/0x90 [ 47.991020][ T4077] rtnl_newlink_create+0x1e4/0x4a0 [ 47.991107][ T4077] rtnl_newlink+0x1255/0x1510 [ 47.991199][ T4077] ? __css_rstat_updated+0xbb/0x280 [ 47.991246][ T4077] ? try_charge_memcg+0x284/0xb30 [ 47.991279][ T4077] ? ktime_get+0x212/0x240 [ 47.991299][ T4077] ? __memcg_slab_free_hook+0x154/0x340 [ 47.991392][ T4077] ? __rcu_read_unlock+0x4e/0x70 [ 47.991419][ T4077] ? avc_has_perm_noaudit+0xac/0x160 [ 47.991511][ T4077] ? cred_has_capability+0x224/0x2a0 [ 47.991540][ T4077] ? selinux_capable+0x31/0x40 [ 47.991571][ T4077] ? security_capable+0x7b/0x90 [ 47.991597][ T4077] ? ns_capable+0x80/0xb0 [ 47.991724][ T4077] ? __pfx_rtnl_newlink+0x10/0x10 [ 47.991771][ T4077] rtnetlink_rcv_msg+0x64b/0x720 [ 47.991807][ T4077] ? __copy_skb_header+0x22f/0x2b0 [ 47.991832][ T4077] netlink_rcv_skb+0x11e/0x220 [ 47.991865][ T4077] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.991909][ T4077] rtnetlink_rcv+0x1c/0x30 [ 47.991991][ T4077] netlink_unicast+0x665/0x740 [ 47.992016][ T4077] netlink_sendmsg+0x5ef/0x740 [ 47.992045][ T4077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.992079][ T4077] ____sys_sendmsg+0x50f/0x550 [ 47.992107][ T4077] ___sys_sendmsg+0x1c8/0x220 [ 47.992213][ T4077] __x64_sys_sendmsg+0xd4/0x160 [ 47.992310][ T4077] x64_sys_call+0x22ab/0x2550 [ 47.992416][ T4077] do_syscall_64+0x121/0x390 [ 47.992440][ T4077] ? clear_bhb_loop+0x70/0xc0 [ 47.992469][ T4077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.992493][ T4077] RIP: 0033:0x7f18b59e94d9 [ 47.992577][ T4077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.992596][ T4077] RSP: 002b:00007f18b4437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.992621][ T4077] RAX: ffffffffffffffda RBX: 00007f18b5c65fa0 RCX: 00007f18b59e94d9 [ 47.992636][ T4077] RDX: 0000000020000840 RSI: 0000200000001c00 RDI: 0000000000000008 [ 47.992650][ T4077] RBP: 00007f18b5a7804e R08: 0000000000000000 R09: 0000000000000000 [ 47.992683][ T4077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.992697][ T4077] R13: 00007f18b5c66038 R14: 00007f18b5c65fa0 R15: 00007ffc623576a8 [ 47.992718][ T4077] [ 48.170382][ T4077] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 48.354125][ T4073] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 48.412578][ T4082] syzkaller0: entered promiscuous mode [ 48.412604][ T4082] syzkaller0: entered allmulticast mode [ 48.443593][ T4092] net_ratelimit: 41 callbacks suppressed [ 48.443673][ T4092] ip_tables: iptables: counters copy to user failed while replacing table [ 48.489747][ T4094] lo: entered allmulticast mode [ 48.505667][ T4093] lo: left allmulticast mode [ 48.803851][ T4108] loop5: detected capacity change from 0 to 512 [ 48.805445][ T4108] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 49.019167][ T4114] FAULT_INJECTION: forcing a failure. [ 49.019167][ T4114] name failslab, interval 1, probability 0, space 0, times 0 [ 49.019212][ T4114] CPU: 1 UID: 0 PID: 4114 Comm: syz.1.172 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.019247][ T4114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 49.019295][ T4114] Call Trace: [ 49.019304][ T4114] [ 49.019314][ T4114] __dump_stack+0x1d/0x30 [ 49.019457][ T4114] dump_stack_lvl+0x95/0xd0 [ 49.019519][ T4114] dump_stack+0x15/0x1b [ 49.019549][ T4114] should_fail_ex+0x259/0x270 [ 49.019612][ T4114] ? device_add+0x88/0x790 [ 49.019642][ T4114] should_failslab+0x8c/0xb0 [ 49.019735][ T4114] __kmalloc_cache_noprof+0x5d/0x3e0 [ 49.019783][ T4114] ? device_add+0x88/0x790 [ 49.019808][ T4114] device_add+0x88/0x790 [ 49.019886][ T4114] netdev_register_kobject+0x127/0x240 [ 49.019914][ T4114] register_netdevice+0xc68/0x13f0 [ 49.019939][ T4114] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 49.019963][ T4114] batadv_meshif_newlink+0x7d/0x90 [ 49.019990][ T4114] rtnl_newlink_create+0x1e4/0x4a0 [ 49.020118][ T4114] ? security_capable+0x7b/0x90 [ 49.020185][ T4114] ? netlink_ns_capable+0x86/0xa0 [ 49.020214][ T4114] rtnl_newlink+0x1255/0x1510 [ 49.020327][ T4114] ? __css_rstat_updated+0xbb/0x280 [ 49.020359][ T4114] ? strlen+0x19/0x40 [ 49.020419][ T4114] ? __memcg_slab_free_hook+0x154/0x340 [ 49.020449][ T4114] ? __rcu_read_unlock+0x4e/0x70 [ 49.020477][ T4114] ? avc_has_perm_noaudit+0xac/0x160 [ 49.020523][ T4114] ? cred_has_capability+0x224/0x2a0 [ 49.020560][ T4114] ? selinux_capable+0x31/0x40 [ 49.020592][ T4114] ? security_capable+0x7b/0x90 [ 49.020616][ T4114] ? ns_capable+0x80/0xb0 [ 49.020641][ T4114] ? __pfx_rtnl_newlink+0x10/0x10 [ 49.020729][ T4114] rtnetlink_rcv_msg+0x64b/0x720 [ 49.020763][ T4114] ? netlink_rcv_skb+0xbf/0x220 [ 49.020789][ T4114] netlink_rcv_skb+0x11e/0x220 [ 49.020812][ T4114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.020866][ T4114] rtnetlink_rcv+0x1c/0x30 [ 49.020901][ T4114] netlink_unicast+0x665/0x740 [ 49.020933][ T4114] netlink_sendmsg+0x5ef/0x740 [ 49.020962][ T4114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.020988][ T4114] ____sys_sendmsg+0x50f/0x550 [ 49.021016][ T4114] ___sys_sendmsg+0x1c8/0x220 [ 49.021120][ T4114] __x64_sys_sendmsg+0xd4/0x160 [ 49.021213][ T4114] x64_sys_call+0x22ab/0x2550 [ 49.021241][ T4114] do_syscall_64+0x121/0x390 [ 49.021265][ T4114] ? clear_bhb_loop+0x70/0xc0 [ 49.021331][ T4114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.021354][ T4114] RIP: 0033:0x7fd502f094d9 [ 49.021372][ T4114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.021391][ T4114] RSP: 002b:00007fd501936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.021413][ T4114] RAX: ffffffffffffffda RBX: 00007fd503186090 RCX: 00007fd502f094d9 [ 49.021429][ T4114] RDX: 0000000020000840 RSI: 0000200000001c00 RDI: 0000000000000008 [ 49.021508][ T4114] RBP: 00007fd502f9804e R08: 0000000000000000 R09: 0000000000000000 [ 49.021521][ T4114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.021535][ T4114] R13: 00007fd503186128 R14: 00007fd503186090 R15: 00007ffe437acbf8 [ 49.021556][ T4114] [ 49.075358][ T4105] loop3: detected capacity change from 0 to 33280 [ 49.239588][ T4105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.246149][ T4105] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.403106][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.562913][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 49.564115][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 49.564446][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 49.571032][ T4138] FAULT_INJECTION: forcing a failure. [ 49.571032][ T4138] name fail_futex, interval 1, probability 0, space 0, times 1 [ 49.571116][ T4138] CPU: 1 UID: 0 PID: 4138 Comm: syz.1.181 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.571224][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 49.571267][ T4138] Call Trace: [ 49.571288][ T4138] [ 49.571370][ T4138] __dump_stack+0x1d/0x30 [ 49.571457][ T4138] dump_stack_lvl+0x95/0xd0 [ 49.571549][ T4138] dump_stack+0x15/0x1b [ 49.571623][ T4138] should_fail_ex+0x259/0x270 [ 49.571782][ T4138] should_fail+0xb/0x20 [ 49.571946][ T4138] get_futex_key+0x12c/0xc40 [ 49.572018][ T4138] ? __pfx_netlink_recvmsg+0x10/0x10 [ 49.572119][ T4138] futex_wait_setup+0x49/0x3e0 [ 49.572223][ T4138] ? __rb_insert_augmented+0x76/0x2c0 [ 49.572340][ T4138] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 49.572434][ T4138] ? hrtimer_active+0xe7/0x110 [ 49.572541][ T4138] __futex_wait+0xb2/0x2a0 [ 49.572744][ T4138] ? __pfx_futex_wake_mark+0x10/0x10 [ 49.572851][ T4138] futex_wait+0x98/0x1c0 [ 49.573003][ T4138] do_futex+0x391/0x460 [ 49.573029][ T4138] __se_sys_futex+0x2f6/0x370 [ 49.573052][ T4138] ? tick_program_event+0x79/0xc0 [ 49.573140][ T4138] __x64_sys_futex+0x78/0x90 [ 49.573229][ T4138] x64_sys_call+0x22e2/0x2550 [ 49.573322][ T4138] do_syscall_64+0x121/0x390 [ 49.573431][ T4138] ? clear_bhb_loop+0x70/0xc0 [ 49.573588][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.573701][ T4138] RIP: 0033:0x7fd502f094d9 [ 49.573754][ T4138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.573874][ T4138] RSP: 002b:00007fd5019570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.573944][ T4138] RAX: ffffffffffffffda RBX: 00007fd503185fa8 RCX: 00007fd502f094d9 [ 49.573988][ T4138] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd503185fa8 [ 49.574037][ T4138] RBP: 00007fd503185fa0 R08: 0000000000000000 R09: 0000000000000000 [ 49.574088][ T4138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.574140][ T4138] R13: 00007fd503186038 R14: 00007ffe437acb10 R15: 00007ffe437acbf8 [ 49.574203][ T4138] [ 49.598822][ T4133] syzkaller0: entered promiscuous mode [ 49.598865][ T4133] syzkaller0: entered allmulticast mode [ 49.680451][ T4125] loop3: detected capacity change from 0 to 33280 [ 49.758264][ T4125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.762059][ T4125] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.908446][ T4147] loop4: detected capacity change from 0 to 512 [ 49.910431][ T4147] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 50.435997][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.452316][ T4159] loop5: detected capacity change from 0 to 33280 [ 50.474711][ T4159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.474775][ T4159] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.527603][ T3945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.625941][ T4170] FAULT_INJECTION: forcing a failure. [ 50.625941][ T4170] name failslab, interval 1, probability 0, space 0, times 0 [ 50.625975][ T4170] CPU: 1 UID: 0 PID: 4170 Comm: syz.5.188 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.626009][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 50.626024][ T4170] Call Trace: [ 50.626087][ T4170] [ 50.626098][ T4170] __dump_stack+0x1d/0x30 [ 50.626133][ T4170] dump_stack_lvl+0x95/0xd0 [ 50.626238][ T4170] dump_stack+0x15/0x1b [ 50.626267][ T4170] should_fail_ex+0x259/0x270 [ 50.626306][ T4170] ? batadv_tvlv_handler_register+0xbd/0x2c0 [ 50.626353][ T4170] should_failslab+0x8c/0xb0 [ 50.626506][ T4170] ? __pfx_batadv_mcast_forw_tracker_tvlv_handler+0x10/0x10 [ 50.626542][ T4170] __kmalloc_cache_noprof+0x5d/0x3e0 [ 50.626590][ T4170] ? batadv_tvlv_handler_register+0xbd/0x2c0 [ 50.626655][ T4170] ? __pfx_batadv_mcast_forw_tracker_tvlv_handler+0x10/0x10 [ 50.626695][ T4170] batadv_tvlv_handler_register+0xbd/0x2c0 [ 50.626816][ T4170] ? __pfx_batadv_mcast_forw_tracker_tvlv_handler+0x10/0x10 [ 50.626858][ T4170] batadv_mcast_init+0x57/0x110 [ 50.626913][ T4170] batadv_mesh_init+0x336/0x410 [ 50.627031][ T4170] batadv_meshif_init_late+0x3e1/0x460 [ 50.627064][ T4170] register_netdevice+0x234/0x13f0 [ 50.627143][ T4170] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 50.627173][ T4170] batadv_meshif_newlink+0x7d/0x90 [ 50.627252][ T4170] rtnl_newlink_create+0x1e4/0x4a0 [ 50.627301][ T4170] ? security_capable+0x7b/0x90 [ 50.627335][ T4170] ? netlink_ns_capable+0x86/0xa0 [ 50.627364][ T4170] rtnl_newlink+0x1255/0x1510 [ 50.627472][ T4170] ? __css_rstat_updated+0xbb/0x280 [ 50.627516][ T4170] ? strlen+0x19/0x40 [ 50.627547][ T4170] ? __memcg_slab_free_hook+0x154/0x340 [ 50.627651][ T4170] ? __rcu_read_unlock+0x4e/0x70 [ 50.627685][ T4170] ? avc_has_perm_noaudit+0xac/0x160 [ 50.627721][ T4170] ? cred_has_capability+0x224/0x2a0 [ 50.627753][ T4170] ? selinux_capable+0x31/0x40 [ 50.627927][ T4170] ? security_capable+0x7b/0x90 [ 50.628004][ T4170] ? ns_capable+0x80/0xb0 [ 50.628051][ T4170] ? __pfx_rtnl_newlink+0x10/0x10 [ 50.628093][ T4170] rtnetlink_rcv_msg+0x64b/0x720 [ 50.628136][ T4170] ? __copy_skb_header+0x22f/0x2b0 [ 50.628168][ T4170] netlink_rcv_skb+0x11e/0x220 [ 50.628257][ T4170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.628309][ T4170] rtnetlink_rcv+0x1c/0x30 [ 50.628432][ T4170] netlink_unicast+0x665/0x740 [ 50.628463][ T4170] netlink_sendmsg+0x5ef/0x740 [ 50.628500][ T4170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.628533][ T4170] ____sys_sendmsg+0x50f/0x550 [ 50.628610][ T4170] ___sys_sendmsg+0x1c8/0x220 [ 50.628707][ T4170] __x64_sys_sendmsg+0xd4/0x160 [ 50.628750][ T4170] x64_sys_call+0x22ab/0x2550 [ 50.628787][ T4170] do_syscall_64+0x121/0x390 [ 50.628946][ T4170] ? clear_bhb_loop+0x70/0xc0 [ 50.628979][ T4170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.629006][ T4170] RIP: 0033:0x7f8bb34094d9 [ 50.629027][ T4170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.629084][ T4170] RSP: 002b:00007f8bb1e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.629188][ T4170] RAX: ffffffffffffffda RBX: 00007f8bb3685fa0 RCX: 00007f8bb34094d9 [ 50.629209][ T4170] RDX: 0000000020000840 RSI: 0000200000001c00 RDI: 0000000000000008 [ 50.629299][ T4170] RBP: 00007f8bb349804e R08: 0000000000000000 R09: 0000000000000000 [ 50.629317][ T4170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.629335][ T4170] R13: 00007f8bb3686038 R14: 00007f8bb3685fa0 R15: 00007ffc936a1a88 [ 50.629362][ T4170] [ 50.644301][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 50.662253][ T4150] loop1: detected capacity change from 0 to 33280 [ 50.788546][ T4150] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.185: bg 0: block 385: padding at end of block bitmap is not set [ 50.789075][ T4150] loop1: lost filesystem error report for type 5 error -117 [ 50.795085][ T4150] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 50.795270][ T4150] loop1: lost filesystem error report for type 5 error -117 [ 50.797326][ T4150] EXT4-fs (loop1): 2 truncates cleaned up [ 50.806572][ T4150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.956840][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.077205][ T4179] loop1: detected capacity change from 0 to 33280 [ 51.090009][ T4179] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.108250][ T4179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.108386][ T4179] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.150040][ T4184] syzkaller0: entered promiscuous mode [ 51.150128][ T4184] syzkaller0: entered allmulticast mode [ 51.311385][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.398485][ T4190] loop4: detected capacity change from 0 to 33280 [ 51.487278][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 51.487296][ T30] audit: type=1400 audit(1794779547.727:451): avc: denied { read write } for pid=4196 comm="syz.1.199" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.491973][ T30] audit: type=1400 audit(1794779547.737:452): avc: denied { open } for pid=4196 comm="syz.1.199" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.516303][ T30] audit: type=1400 audit(1794779547.757:453): avc: denied { ioctl } for pid=4196 comm="syz.1.199" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.525678][ T4190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.526335][ T4190] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.528012][ T4197] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 51.748380][ T4204] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 51.766245][ T4208] socket: no more sockets [ 52.021422][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.105962][ T4217] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 52.135982][ T30] audit: type=1400 audit(1794779548.377:454): avc: denied { name_bind } for pid=4218 comm="syz.4.207" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 52.172371][ T4210] loop3: detected capacity change from 0 to 33280 [ 52.296209][ T39] IPVS: starting estimator thread 0... [ 52.378234][ T4227] IPVS: using max 2304 ests per chain, 115200 per kthread [ 52.427191][ T30] audit: type=1400 audit(1794779548.667:455): avc: denied { mount } for pid=4213 comm="syz.1.205" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.476622][ T4210] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.203: bg 0: block 385: padding at end of block bitmap is not set [ 52.476769][ T4210] loop3: lost filesystem error report for type 5 error -117 [ 52.477679][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 52.477698][ C0] EXT4-fs (loop3): initial error at time 1794779548: ext4_validate_block_bitmap:445 [ 52.477745][ C0] EXT4-fs (loop3): last error at time 1794779548: ext4_validate_block_bitmap:445 [ 52.478263][ T4210] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 52.478348][ T4210] loop3: lost filesystem error report for type 5 error -117 [ 52.483552][ T4210] EXT4-fs (loop3): 2 truncates cleaned up [ 52.487634][ T4210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.662444][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.775182][ T30] audit: type=1400 audit(1794779549.017:456): avc: denied { connect } for pid=4242 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.847638][ T30] audit: type=1400 audit(1794779549.087:457): avc: denied { watch watch_reads } for pid=4244 comm="syz.3.213" path="/42/pipefs" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.045593][ T4249] socket: no more sockets [ 53.343603][ T4261] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 53.545585][ T4265] TC_ACT_REPEAT abuse ? [ 53.824098][ T4269] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 53.893918][ T4263] loop5: detected capacity change from 0 to 33280 [ 53.981624][ T30] audit: type=1400 audit(1794779550.227:458): avc: denied { read } for pid=4272 comm="syz.0.234" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.981670][ T30] audit: type=1400 audit(1794779550.227:459): avc: denied { open } for pid=4272 comm="syz.0.234" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.062412][ T30] audit: type=1400 audit(1794779550.307:460): avc: denied { read write } for pid=4272 comm="syz.0.234" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 54.236993][ T4263] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.298431][ T4280] loop4: detected capacity change from 0 to 33280 [ 54.303768][ T4280] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.332358][ T4280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.332438][ T4280] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.364260][ T4263] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.365576][ T4263] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.221: bg 0: block 248: padding at end of block bitmap is not set [ 54.365800][ T4263] loop5: lost filesystem error report for type 5 error -117 [ 54.382439][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 54.382470][ C1] EXT4-fs (loop5): last error at time 1794779550: ext4_validate_block_bitmap:445 [ 54.421943][ T4263] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.221: Failed to acquire dquot type 1 [ 54.422074][ T4263] loop5: lost filesystem error report for type 5 error -28 [ 54.457328][ T4263] EXT4-fs (loop5): 1 truncate cleaned up [ 54.499284][ T4263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 54.588077][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.589351][ T3945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 54.706416][ T4298] ======================================================= [ 54.706416][ T4298] WARNING: The mand mount option has been deprecated and [ 54.706416][ T4298] and is ignored by this kernel. Remove the mand [ 54.706416][ T4298] option from the mount to silence this warning. [ 54.706416][ T4298] ======================================================= [ 54.708255][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 54.975112][ T4302] Unsupported ieee802154 address type: 0 [ 55.378599][ T4320] loop0: detected capacity change from 0 to 33280 [ 55.396500][ T4320] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.402563][ T4320] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.403174][ T4320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.241: bg 0: block 248: padding at end of block bitmap is not set [ 55.403309][ T4320] loop0: lost filesystem error report for type 5 error -117 [ 55.403974][ T4320] EXT4-fs error (device loop0): ext4_acquire_dquot:7120: comm syz.0.241: Failed to acquire dquot type 1 [ 55.404136][ T4320] loop0: lost filesystem error report for type 5 error -28 [ 55.405881][ T4320] EXT4-fs (loop0): 1 truncate cleaned up [ 55.408080][ T4320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 55.438782][ T4325] loop1: detected capacity change from 0 to 33280 [ 55.442326][ T4325] ext4: Unknown parameter 'measure' [ 55.506027][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 55.553145][ T4336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.249'. [ 55.553181][ T4336] netlink: 6 bytes leftover after parsing attributes in process `syz.3.249'. [ 55.553261][ T4336] Zero length message leads to an empty skb [ 55.674943][ T4347] ip_tables: iptables: counters copy to user failed while replacing table [ 55.687872][ T4347] syzkaller1: entered promiscuous mode [ 55.687910][ T4347] syzkaller1: entered allmulticast mode [ 55.868983][ T4352] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 56.408981][ T4365] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 56.675568][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 56.675585][ T30] audit: type=1400 audit(1794779552.917:483): avc: denied { read write } for pid=4381 comm="syz.3.268" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.675622][ T30] audit: type=1400 audit(1794779552.917:484): avc: denied { open } for pid=4381 comm="syz.3.268" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.677172][ T24] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 56.677209][ T24] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 56.677233][ T24] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 56.677255][ T24] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 56.677277][ T24] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 56.677300][ T24] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 56.677352][ T24] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 56.677381][ T24] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 56.768527][ T24] hid-generic 0000:0000:0001.0002: hidraw0: HID v0.10 Device [syz0] on syz1 [ 56.827739][ T4384] fido_id[4384]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.851297][ T4382] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.893284][ T30] audit: type=1400 audit(1794779553.137:485): avc: denied { bind } for pid=4386 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.913056][ T30] audit: type=1400 audit(1794779553.157:486): avc: denied { setopt } for pid=4386 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.020046][ T4390] FAULT_INJECTION: forcing a failure. [ 57.020046][ T4390] name failslab, interval 1, probability 0, space 0, times 0 [ 57.020090][ T4390] CPU: 0 UID: 0 PID: 4390 Comm: syz.1.270 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.020159][ T4390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 57.020175][ T4390] Call Trace: [ 57.020181][ T4390] [ 57.020191][ T4390] __dump_stack+0x1d/0x30 [ 57.020226][ T4390] dump_stack_lvl+0x95/0xd0 [ 57.020280][ T4390] dump_stack+0x15/0x1b [ 57.020343][ T4390] should_fail_ex+0x259/0x270 [ 57.020425][ T4390] ? __kernfs_new_node+0x70/0x440 [ 57.020457][ T4390] should_failslab+0x8c/0xb0 [ 57.020502][ T4390] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 57.020615][ T4390] ? __kernfs_new_node+0x70/0x440 [ 57.020641][ T4390] __kernfs_new_node+0x70/0x440 [ 57.020673][ T4390] ? rb_insert_color+0x25c/0x2a0 [ 57.020737][ T4390] ? __rcu_read_unlock+0x4e/0x70 [ 57.020768][ T4390] ? up_write+0x19/0x60 [ 57.020792][ T4390] ? kernfs_link_sibling+0x2f5/0x320 [ 57.020817][ T4390] ? __rcu_read_unlock+0x4e/0x70 [ 57.020900][ T4390] kernfs_new_node+0xcf/0xf0 [ 57.020933][ T4390] __kernfs_create_file+0x4b/0x180 [ 57.020968][ T4390] ? __pfx_dev_attr_show+0x10/0x10 [ 57.021031][ T4390] ? __pfx_dev_attr_store+0x10/0x10 [ 57.021084][ T4390] sysfs_add_file_mode_ns+0x132/0x1b0 [ 57.021125][ T4390] internal_create_group+0x43e/0x9e0 [ 57.021148][ T4390] ? kernfs_add_one+0xf4/0x310 [ 57.021263][ T4390] sysfs_create_groups+0x3f/0xf0 [ 57.021294][ T4390] device_add_attrs+0xf2/0x3f0 [ 57.021317][ T4390] ? kobject_put+0x108/0x180 [ 57.021380][ T4390] device_add+0x37a/0x790 [ 57.021470][ T4390] netdev_register_kobject+0x127/0x240 [ 57.021498][ T4390] register_netdevice+0xc68/0x13f0 [ 57.021546][ T4390] lapbeth_new_device+0x232/0x390 [ 57.021591][ T4390] lapbeth_device_event+0x24b/0x300 [ 57.021628][ T4390] ? __pfx_lapbeth_device_event+0x10/0x10 [ 57.021675][ T4390] raw_notifier_call_chain+0x72/0x1a0 [ 57.021724][ T4390] ? rtmsg_ifinfo+0xef/0x110 [ 57.021755][ T4390] __dev_notify_flags+0x2b4/0x490 [ 57.021859][ T4390] netif_change_flags+0xa5/0xc0 [ 57.021932][ T4390] dev_change_flags+0xbc/0x180 [ 57.021965][ T4390] dev_ifsioc+0x439/0xfc0 [ 57.022005][ T4390] ? mutex_lock+0x52/0x90 [ 57.022138][ T4390] dev_ioctl+0x709/0x960 [ 57.022169][ T4390] sock_do_ioctl+0x1aa/0x230 [ 57.022250][ T4390] sock_ioctl+0x439/0x610 [ 57.022284][ T4390] ? __pfx_sock_ioctl+0x10/0x10 [ 57.022311][ T4390] __se_sys_ioctl+0xce/0x140 [ 57.022418][ T4390] __x64_sys_ioctl+0x43/0x50 [ 57.022480][ T4390] x64_sys_call+0x239d/0x2550 [ 57.022507][ T4390] do_syscall_64+0x121/0x390 [ 57.022534][ T4390] ? clear_bhb_loop+0x70/0xc0 [ 57.022566][ T4390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.022666][ T4390] RIP: 0033:0x7fd502f094d9 [ 57.022716][ T4390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.022742][ T4390] RSP: 002b:00007fd501957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.022768][ T4390] RAX: ffffffffffffffda RBX: 00007fd503185fa0 RCX: 00007fd502f094d9 [ 57.022783][ T4390] RDX: 00002000000004c0 RSI: 0000000000008914 RDI: 0000000000000006 [ 57.022796][ T4390] RBP: 00007fd502f9804e R08: 0000000000000000 R09: 0000000000000000 [ 57.022809][ T4390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.022970][ T4390] R13: 00007fd503186038 R14: 00007fd503185fa0 R15: 00007ffe437acbf8 [ 57.022990][ T4390] [ 57.037394][ T4387] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 57.071274][ T30] audit: type=1400 audit(1794779553.317:487): avc: denied { read } for pid=3017 comm="dhcpcd" name="n28" dev="tmpfs" ino=1039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.071385][ T30] audit: type=1400 audit(1794779553.317:488): avc: denied { open } for pid=3017 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=1039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.071950][ T30] audit: type=1400 audit(1794779553.317:489): avc: denied { getattr } for pid=3017 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=1039 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.457569][ T4392] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 57.457665][ T4392] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.458245][ T4392] vhci_hcd vhci_hcd.0: Device attached [ 57.490542][ T4399] loop0: detected capacity change from 0 to 33280 [ 57.525971][ T4399] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.540831][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.540910][ T4399] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.574320][ T30] audit: type=1400 audit(1794779553.817:490): avc: denied { remount } for pid=4393 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.574919][ T4405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 57.577074][ T30] audit: type=1400 audit(1794779553.817:491): avc: denied { write } for pid=4395 comm="syz.0.272" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.650454][ T4392] loop1: detected capacity change from 0 to 33280 [ 57.697749][ T10] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 57.736108][ T4407] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 57.861821][ T4392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.863014][ T4392] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.886009][ T4397] vhci_hcd: connection reset by peer [ 57.886677][ T319] vhci_hcd vhci_hcd.1: stop threads [ 57.886739][ T319] vhci_hcd vhci_hcd.1: release socket [ 57.886802][ T319] vhci_hcd vhci_hcd.1: disconnect device [ 57.943694][ T4424] mmap: syz.4.282 (4424) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.001451][ T4425] MTRR 0 not used [ 58.800104][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.800077][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.965109][ T4440] loop4: detected capacity change from 0 to 33280 [ 58.974750][ T4440] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.286: bg 0: block 385: padding at end of block bitmap is not set [ 58.974835][ T4440] loop4: lost filesystem error report for type 5 error -117 [ 58.974979][ T4440] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 58.975004][ T4440] loop4: lost filesystem error report for type 5 error -117 [ 58.975432][ T4440] EXT4-fs (loop4): 2 truncates cleaned up [ 58.975807][ T4440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.095020][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.134300][ T3404] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 59.134388][ T3404] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 59.136895][ T3404] hid-generic 0000:0000:0001.0003: hidraw0: HID v0.10 Device [syz0] on syz1 [ 59.287456][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.287'. [ 59.298927][ T4449] syzkaller0: entered promiscuous mode [ 59.298948][ T4449] syzkaller0: entered allmulticast mode [ 59.303579][ T4455] tipc: Started in network mode [ 59.303618][ T4455] tipc: Node identity ac1414aa, cluster identity 4711 [ 59.303797][ T4455] tipc: New replicast peer: 172.20.20.187 [ 59.304177][ T4455] tipc: Enabled bearer , priority 10 [ 59.384569][ T4453] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.509348][ T4470] syz.3.299(4470): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 59.564384][ T4472] MTRR 0 not used [ 60.417862][ T3404] tipc: Node number set to 2886997162 [ 60.572361][ T4492] TC_ACT_REPEAT abuse ? [ 60.672055][ T4488] loop4: detected capacity change from 0 to 33280 [ 60.799482][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.309'. [ 60.811499][ T4488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.811912][ T4488] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.984750][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.027902][ T4490] loop5: detected capacity change from 0 to 33280 [ 61.083442][ T30] audit: type=1400 audit(1794779557.327:492): avc: denied { write } for pid=4504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.119511][ T4490] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.302: bg 0: block 385: padding at end of block bitmap is not set [ 61.120320][ T4490] loop5: lost filesystem error report for type 5 error -117 [ 61.142591][ T4490] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 61.142775][ T4490] loop5: lost filesystem error report for type 5 error -117 [ 61.147715][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 61.147799][ C1] EXT4-fs (loop5): initial error at time 1794779557: ext4_validate_block_bitmap:445 [ 61.147872][ C1] EXT4-fs (loop5): last error at time 1794779557: ext4_mb_clear_bb:6678 [ 61.172690][ T4490] EXT4-fs (loop5): 2 truncates cleaned up [ 61.181137][ T4490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.200724][ T4524] tipc: Started in network mode [ 61.200759][ T4524] tipc: Node identity ac1414aa, cluster identity 4711 [ 61.200944][ T4524] tipc: New replicast peer: 172.20.20.187 [ 61.201204][ T4524] tipc: Enabled bearer , priority 10 [ 61.293137][ T4517] netlink: 5 bytes leftover after parsing attributes in process `syz.4.312'. [ 61.293230][ T4517] xt_IDLETIMER: label is empty or not nul-terminated [ 61.356512][ T4532] loop3: detected capacity change from 0 to 33280 [ 61.371699][ T4532] EXT4-fs: Ignoring removed oldalloc option [ 61.371796][ T4532] EXT4-fs: Ignoring removed i_version option [ 61.377739][ T4532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.383341][ T4532] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 61.383415][ T4532] loop3: lost filesystem error report for type 5 error -117 [ 61.383823][ T4532] EXT4-fs (loop3): 2 truncates cleaned up [ 61.384741][ T4532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.422577][ T3945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.615229][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.317792][ T24] tipc: Node number set to 2886997162 [ 62.500946][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 62.500968][ T30] audit: type=1400 audit(1794779558.747:506): avc: denied { cpu } for pid=4558 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.734125][ T4570] loop4: detected capacity change from 0 to 33792 [ 62.734492][ T4570] EXT4-fs: Ignoring removed orlov option [ 62.764955][ T4570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.765076][ T4570] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.787851][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 62.799630][ T30] audit: type=1400 audit(1794779559.047:507): avc: denied { write } for pid=4569 comm="syz.4.322" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.803958][ T4570] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.322: bg 0: block 112: padding at end of block bitmap is not set [ 62.804158][ T30] audit: type=1400 audit(1794779559.047:508): avc: denied { write } for pid=4569 comm="syz.4.322" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.867170][ T30] audit: type=1400 audit(1794779559.107:509): avc: denied { map } for pid=4569 comm="syz.4.322" path="/67/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.867224][ T30] audit: type=1400 audit(1794779559.107:510): avc: denied { execute } for pid=4569 comm="syz.4.322" path="/67/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.914234][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:946: inode #15: comm syz.4.322: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.915678][ T4570] EXT4-fs error (device loop4): ext4_map_blocks:862: inode #15: comm syz.4.322: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.915916][ T4570] EXT4-fs error (device loop4): ext4_map_blocks:862: inode #15: comm syz.4.322: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.916307][ T4570] EXT4-fs error (device loop4): ext4_map_blocks:862: inode #15: comm syz.4.322: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.916578][ T4570] EXT4-fs error (device loop4): ext4_map_blocks:862: inode #15: comm syz.4.322: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.054643][ T30] audit: type=1400 audit(1794779559.297:511): avc: denied { mount } for pid=4575 comm="syz.0.325" name="/" dev="hugetlbfs" ino=8991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 63.059492][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.145942][ T30] audit: type=1400 audit(1794779559.387:512): avc: denied { getopt } for pid=4577 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.239932][ T4585] loop8: detected capacity change from 0 to 7 [ 63.426325][ T4589] netlink: 5 bytes leftover after parsing attributes in process `syz.3.328'. [ 63.428657][ T4589] xt_IDLETIMER: label is empty or not nul-terminated [ 63.733007][ T4595] syzkaller0: entered promiscuous mode [ 63.733033][ T4595] syzkaller0: entered allmulticast mode [ 63.786574][ T30] audit: type=1400 audit(1794779560.027:513): avc: denied { mounton } for pid=4605 comm="syz.4.337" path="/71/file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.795876][ T319] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.239209][ T4619] loop5: detected capacity change from 0 to 33280 [ 64.501097][ T4599] ================================================================== [ 64.501145][ T4599] BUG: KCSAN: data-race in do_sendfile / ksys_write [ 64.501195][ T4599] [ 64.501202][ T4599] write to 0xffff88810cdaa068 of 8 bytes by task 4597 on cpu 1: [ 64.501218][ T4599] ksys_write+0x11c/0x1a0 [ 64.501261][ T4599] __x64_sys_write+0x40/0x50 [ 64.501304][ T4599] x64_sys_call+0x154e/0x2550 [ 64.501343][ T4599] do_syscall_64+0x121/0x390 [ 64.501366][ T4599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.501387][ T4599] [ 64.501392][ T4599] write to 0xffff88810cdaa068 of 8 bytes by task 4599 on cpu 0: [ 64.501408][ T4599] do_sendfile+0x44c/0x640 [ 64.501437][ T4599] __x64_sys_sendfile64+0x105/0x150 [ 64.501466][ T4599] x64_sys_call+0x1015/0x2550 [ 64.501499][ T4599] do_syscall_64+0x121/0x390 [ 64.501526][ T4599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.501553][ T4599] [ 64.501558][ T4599] value changed: 0x0000000000000000 -> 0x0000000000e08e80 [ 64.501574][ T4599] [ 64.501578][ T4599] Reported by Kernel Concurrency Sanitizer on: [ 64.501591][ T4599] CPU: 0 UID: 0 PID: 4599 Comm: syz.3.333 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.501625][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.501642][ T4599] ================================================================== [ 64.505011][ T4619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.506221][ T4619] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.952987][ T3945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.841117][ T3776] Bluetooth: hci0: Opcode 0x1003 failed: -110