last executing test programs: 37.077035887s ago: executing program 1 (id=1055): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) 36.399829666s ago: executing program 1 (id=1071): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mincore(&(0x7f0000400000/0xc00000)=nil, 0xc00000, &(0x7f0000000000)=""/220) 36.06177108s ago: executing program 1 (id=1075): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='ns\x00') getdents64(r0, &(0x7f0000000f40)=""/24, 0x18) getdents64(r0, 0x0, 0x36) 36.044401642s ago: executing program 1 (id=1077): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000480)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 35.996307217s ago: executing program 1 (id=1088): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) unshare(0x2020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xe1) 35.654436342s ago: executing program 1 (id=1092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff58, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f00000002c0)=""/110, 0xe3f741b, 0x736, 0x0, 0xfffffffffffffecb) 35.654360422s ago: executing program 32 (id=1092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff58, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f00000002c0)=""/110, 0xe3f741b, 0x736, 0x0, 0xfffffffffffffecb) 30.929796373s ago: executing program 3 (id=1165): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x7}, 0x1020, 0x0, 0xfffffffd, 0x5, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = add_key(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000a40)='asymmetric\x00', 0x0, &(0x7f0000000a80)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001000)={r1, 0x86}, 0x0, &(0x7f0000001040)="cb4403fa0c2c2a3a518de9000000c11a536275a1d846d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdbcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf74fc08db9f741b76996bf785368bc3b2081647102254e6e9e7a9c19da1095090000000000000039b2c1210500ffeafb477423d888ac47c5", 0x0) 30.641842792s ago: executing program 3 (id=1172): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) unshare(0x20000400) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 30.55881275s ago: executing program 3 (id=1173): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./sys\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/reboot/force\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000c80)={0x4, 0x8}, 0x10) 30.55816387s ago: executing program 3 (id=1175): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000000c0), 0x1, 0x57c, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0b, &(0x7f0000000340)="0400000000000000000000007e01") 30.446487842s ago: executing program 3 (id=1178): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000040)=""/32, 0x20, 0xa00000000004) 30.0749959s ago: executing program 3 (id=1189): chdir(&(0x7f0000000a00)='./cgroup\x00') r0 = open(&(0x7f0000000a40)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000000a80)=""/184, 0xb8) lseek(r0, 0xf, 0x1) getdents(r0, &(0x7f0000000b40)=""/184, 0xb8) 29.987192529s ago: executing program 33 (id=1189): chdir(&(0x7f0000000a00)='./cgroup\x00') r0 = open(&(0x7f0000000a40)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000000a80)=""/184, 0xb8) lseek(r0, 0xf, 0x1) getdents(r0, &(0x7f0000000b40)=""/184, 0xb8) 1.015222627s ago: executing program 2 (id=1906): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x5, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x40, &(0x7f00000022c0)={0xa, 0x0, 0x1, @loopback={0xe0ffffff00000000}, 0x7}, 0x1c) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x0) 958.923943ms ago: executing program 2 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x4, 0x2001, 0x81, r0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 906.187928ms ago: executing program 2 (id=1911): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001740)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000001780)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000017c0)='bridge0\x00', 0x10) write(r0, &(0x7f0000001800)="8f2a0a65bd8c2c2b", 0x8) 878.595261ms ago: executing program 2 (id=1913): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 851.869024ms ago: executing program 2 (id=1914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000004, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000680), 0x7ff, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f00000001c0)}, 0x20) 788.7912ms ago: executing program 4 (id=1920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f0000001c40)=[{&(0x7f0000000080)=""/89, 0x59}], 0x1, 0x8, 0xff) 767.927242ms ago: executing program 2 (id=1921): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f00000006c0)=[{r0, 0x1210}], 0x1, 0x1ff8) sendto$inet(r0, &(0x7f0000000700)='^', 0x34000, 0x0, &(0x7f0000000740)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 538.064576ms ago: executing program 4 (id=1929): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000880)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000008c0)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000900)=0x2000004) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) 492.34698ms ago: executing program 0 (id=1931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000008580), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000085c0)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000008600)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000009780)=[{&(0x7f0000008680)="010000000000140010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0x30}, {&(0x7f0000002640)="00000f0080dba7408481709a41e0a947bf22513229d09344f6fddc40", 0x1c}], 0x2) 441.050376ms ago: executing program 5 (id=1943): r0 = socket$inet_smc(0x2b, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 437.723946ms ago: executing program 5 (id=1944): r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 371.102713ms ago: executing program 5 (id=1946): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x10080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mount$nfs4(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 370.740423ms ago: executing program 0 (id=1932): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000840)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000880)=0xff) 370.582923ms ago: executing program 6 (id=1933): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfe6d, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0), 0x0, 0x10, &(0x7f0000001d00), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000001dc0)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001, 0x0, 0x0, 0x0, &(0x7f0000001e00), &(0x7f0000001e40)}, 0x28) 370.398353ms ago: executing program 5 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) creat(&(0x7f0000000680)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xa283, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lld}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1, r0}, 0xc) 368.844833ms ago: executing program 0 (id=1947): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0xd8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @rand_addr=' \x01\x00', 0xae3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) 163.062253ms ago: executing program 5 (id=1935): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}}}}]}, 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) close(0x3) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x585b53410366b01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', 0x2808080, &(0x7f00000012c0)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@fat=@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_mixed}, {@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@fat=@flush}, {@numtail}]}, 0x81, 0x2b2, &(0x7f0000001380)="$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") 162.950753ms ago: executing program 6 (id=1936): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 157.196244ms ago: executing program 4 (id=1937): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@loopback, {0x0, 0x0, 0x2, 0x5, 0x10008000, 0x5}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae6}, 0x0, 0x3501, 0x2, 0x1, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 154.514254ms ago: executing program 0 (id=1952): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x3b, 0x3}, 0x80d4, 0x35, 0x6, 0x8, 0x10000, 0x6, 0x9, 0x0, 0x0, 0x0, 0x87e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/10, 0x5b) 137.850636ms ago: executing program 6 (id=1938): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r0 = socket$l2tp6(0xa, 0x2, 0x73) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x1) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000640)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hopopts={{0x18, 0x29, 0x3b, {0x32}}}], 0x18}, 0x34004894) 105.293559ms ago: executing program 6 (id=1939): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendfile(r0, r0, 0x0, 0xf2) 104.670309ms ago: executing program 0 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000026ffffaaaaaaaaaabb08004500002c00006000002f90"], 0x3e) 57.910674ms ago: executing program 4 (id=1948): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380), 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x1, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x1}) 49.504085ms ago: executing program 6 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 40.275976ms ago: executing program 4 (id=1960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x8003fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 39.792186ms ago: executing program 5 (id=1949): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x80, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000480)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 18.993708ms ago: executing program 6 (id=1950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8=0x0, @ANYRES16], 0xff, 0x11ef, &(0x7f0000001b00)="$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") write$UHID_INPUT(r0, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 17.658788ms ago: executing program 0 (id=1963): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000900)={0xa, 0x4e33, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000024c0)="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", 0x353}, {&(0x7f0000002340)="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", 0x16a}, {&(0x7f0000000ec0)="dd8ad35a05f68247883f33637734e01a1ea22d623005c50c3ff46bbed74a12cf717914cb4a307931a5fe143b9a14445961406bdbadf61009fde24fccf2021d7aeae1d6", 0x43}, {&(0x7f0000000980)="cef630eda921cbed97adbad453556e05899dd1984423a16217f977b0af37470370048991ae14603d70c2a7f41e4863a52c1bbacf4e0330e321cb87d66d3e2f0aa47fdd9dede1b5852a39188358e6d77e3ad6bbecbf31b457a2bb1ef2b79b7eb795bc91fde42169ad5c0c4d393e3d8e4ac81db2580a9684683ffafa1209c65c27014aa0d967", 0x85}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x840) 0s ago: executing program 4 (id=1951): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000840)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000880)=0xff) kernel console output (not intermixed with test programs): ser failed while replacing table [ 58.664596][ T29] audit: type=1326 audit(1793118661.262:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 58.664630][ T29] audit: type=1326 audit(1793118661.262:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 58.665399][ T29] audit: type=1326 audit(1793118661.262:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 58.665429][ T29] audit: type=1326 audit(1793118661.262:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 58.665455][ T29] audit: type=1326 audit(1793118661.262:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 58.665544][ T29] audit: type=1326 audit(1793118661.262:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 58.665571][ T29] audit: type=1326 audit(1793118661.262:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.3.921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 58.673063][ T5644] batman_adv: batadv0: Adding interface: syz_tun [ 58.673077][ T5644] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.673123][ T5644] batman_adv: batadv0: Interface activated: syz_tun [ 59.054917][ T5663] FAULT_INJECTION: forcing a failure. [ 59.054917][ T5663] name failslab, interval 1, probability 0, space 0, times 0 [ 59.054946][ T5663] CPU: 0 UID: 0 PID: 5663 Comm: syz.3.931 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.054969][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.054983][ T5663] Call Trace: [ 59.054989][ T5663] [ 59.054996][ T5663] __dump_stack+0x1d/0x30 [ 59.055034][ T5663] dump_stack_lvl+0x95/0xd0 [ 59.055060][ T5663] dump_stack+0x15/0x1b [ 59.055121][ T5663] should_fail_ex+0x262/0x280 [ 59.055146][ T5663] ? raw_open+0x59/0x190 [ 59.055175][ T5663] should_failslab+0x8c/0xb0 [ 59.055205][ T5663] __kmalloc_cache_noprof+0x5d/0x3e0 [ 59.055299][ T5663] ? raw_open+0x59/0x190 [ 59.055326][ T5663] ? __pfx_raw_open+0x10/0x10 [ 59.055349][ T5663] raw_open+0x59/0x190 [ 59.055436][ T5663] misc_open+0x1df/0x220 [ 59.055463][ T5663] chrdev_open+0x2eb/0x3a0 [ 59.055537][ T5663] do_dentry_open+0x496/0xa40 [ 59.055561][ T5663] ? __pfx_chrdev_open+0x10/0x10 [ 59.055595][ T5663] vfs_open_consume+0x46/0x1f0 [ 59.055628][ T5663] path_openat+0xc16/0x11c0 [ 59.055732][ T5663] do_file_open+0x16c/0x290 [ 59.055767][ T5663] do_sys_openat2+0xa1/0x140 [ 59.055789][ T5663] __x64_sys_openat+0xf2/0x120 [ 59.055817][ T5663] x64_sys_call+0x1f72/0x2550 [ 59.055853][ T5663] do_syscall_64+0x112/0x360 [ 59.055883][ T5663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.055905][ T5663] RIP: 0033:0x7f923a3dfd8e [ 59.055963][ T5663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.055985][ T5663] RSP: 002b:00007f9238e6cea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 59.056068][ T5663] RAX: ffffffffffffffda RBX: 00007f9238e6f6c0 RCX: 00007f923a3dfd8e [ 59.056085][ T5663] RDX: 0000000000000002 RSI: 00007f923a4b5eb2 RDI: ffffffffffffff9c [ 59.056223][ T5663] RBP: 00007f923a4b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 59.056237][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 59.056249][ T5663] R13: 00002000000001c0 R14: 0000000000000005 R15: 00007ffe9767d408 [ 59.056353][ T5663] [ 59.425089][ T5699] loop4: detected capacity change from 0 to 512 [ 59.434371][ T5699] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.434389][ T5699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 59.434519][ T5699] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.437761][ T5699] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.941: iget: bad i_size value: 12154761577498 [ 59.437794][ T5699] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.437943][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 59.437964][ C1] EXT4-fs (loop4): initial error at time 1793118662: ext4_orphan_get:1404: inode 13 [ 59.437996][ C1] EXT4-fs (loop4): last error at time 1793118662: ext4_orphan_get:1404: inode 13 [ 59.457972][ T5699] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.941: couldn't read orphan inode 13 (err -117) [ 59.458001][ T5699] loop4: lost filesystem error report for type 5 error -117 [ 59.469666][ T5699] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.941: dx entry: limit 65535 != root limit 120 [ 59.469776][ T5699] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.941: Corrupt directory, running e2fsck is recommended [ 59.596577][ T5711] loop4: detected capacity change from 0 to 512 [ 59.623808][ T5711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.631991][ T5711] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 59.632022][ T5711] System zones: 0-2, 18-18, 34-34 [ 59.632249][ T5711] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.634351][ T5711] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.944: bg 0: block 248: padding at end of block bitmap is not set [ 59.634379][ T5711] loop4: lost filesystem error report for type 5 error -117 [ 59.636291][ T5711] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.944: Failed to acquire dquot type 1 [ 59.636357][ T5711] loop4: lost filesystem error report for type 5 error -117 [ 59.637214][ T5711] EXT4-fs (loop4): 1 truncate cleaned up [ 59.653931][ T5718] loop0: detected capacity change from 0 to 164 [ 59.733516][ T5711] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 59.741038][ T5711] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c018, mo2=0102] [ 59.748498][ T5711] EXT4-fs error (device loop4): __ext4_remount:6923: comm syz.4.944: Abort forced by user [ 59.750514][ T5711] EXT4-fs (loop4): Remounting filesystem read-only [ 59.750529][ T5711] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 59.750554][ T5711] ext4 filesystem being remounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.782938][ T5711] syz.4.944 (5711) used greatest stack depth: 9592 bytes left [ 59.784985][ T5727] 9p: Invalid uid '0x00000000ffffffff' [ 59.851636][ T5738] loop0: detected capacity change from 0 to 512 [ 59.874110][ T5738] EXT4-fs (loop0): 1 truncate cleaned up [ 59.965184][ T5747] EXT4-fs error (device loop0): ext4_free_branches:1040: inode #13: comm syz.0.949: invalid indirect mapped block 234881024 (level 0) [ 60.329981][ T5809] ref_ctr_offset mismatch. inode: 0x483 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x30656c69662f2e [ 60.441803][ T5815] loop3: detected capacity change from 0 to 512 [ 60.495912][ T5815] ext4 filesystem being mounted at /191/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.517321][ T5819] loop1: detected capacity change from 0 to 128 [ 60.523783][ T5819] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 60.523864][ T5819] FAT-fs (loop1): data area starts beyond volume (33 > 0) [ 60.523882][ T5819] FAT-fs (loop1): Can't find a valid FAT filesystem [ 60.590071][ T5823] FAULT_INJECTION: forcing a failure. [ 60.590071][ T5823] name failslab, interval 1, probability 0, space 0, times 0 [ 60.590108][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz.0.966 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.590181][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.590196][ T5823] Call Trace: [ 60.590203][ T5823] [ 60.590212][ T5823] __dump_stack+0x1d/0x30 [ 60.590243][ T5823] dump_stack_lvl+0x95/0xd0 [ 60.590265][ T5823] dump_stack+0x15/0x1b [ 60.590336][ T5823] should_fail_ex+0x262/0x280 [ 60.590368][ T5823] ? alloc_empty_file+0x70/0x1e0 [ 60.590414][ T5823] should_failslab+0x8c/0xb0 [ 60.590510][ T5823] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 60.590541][ T5823] ? alloc_empty_file+0x70/0x1e0 [ 60.590567][ T5823] alloc_empty_file+0x70/0x1e0 [ 60.590617][ T5823] alloc_file_pseudo+0x92/0x120 [ 60.590640][ T5823] create_pipe_files+0x1bb/0x440 [ 60.590675][ T5823] __do_pipe_flags+0x44/0x140 [ 60.590757][ T5823] do_pipe2+0x61/0x140 [ 60.590787][ T5823] ? switch_fpu_return+0xe7/0x1b0 [ 60.590841][ T5823] __x64_sys_pipe2+0x30/0x40 [ 60.590899][ T5823] x64_sys_call+0x2085/0x2550 [ 60.590925][ T5823] do_syscall_64+0x112/0x360 [ 60.590953][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.591006][ T5823] RIP: 0033:0x7f947feff559 [ 60.591022][ T5823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.591138][ T5823] RSP: 002b:00007f947e957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 60.591159][ T5823] RAX: ffffffffffffffda RBX: 00007f9480185fa0 RCX: 00007f947feff559 [ 60.591174][ T5823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.591189][ T5823] RBP: 00007f947ff96b20 R08: 0000000000000000 R09: 0000000000000000 [ 60.591204][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.591280][ T5823] R13: 00007f9480186038 R14: 00007f9480185fa0 R15: 00007ffed2120028 [ 60.591303][ T5823] [ 60.626729][ T5825] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.495952][ T5837] loop2: detected capacity change from 0 to 128 [ 61.501441][ T5837] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.537877][ T5835] loop0: detected capacity change from 0 to 128 [ 61.569740][ T5835] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.621721][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 61.759491][ T5855] loop3: detected capacity change from 0 to 1024 [ 61.762649][ T5855] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.762711][ T5855] EXT4-fs: Ignoring removed oldalloc option [ 61.767992][ T5842] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 61.784388][ T5855] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.813670][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 61.813685][ T29] audit: type=1400 audit(1793118664.412:636): avc: denied { write } for pid=5854 comm="syz.3.981" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.816050][ T5855] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 3: comm syz.3.981: lblock 3 mapped to illegal pblock 3 (length 3) [ 61.816294][ T5855] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 61.816319][ T5855] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.816319][ T5855] [ 61.818975][ T5855] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 7: comm syz.3.981: lblock 7 mapped to illegal pblock 7 (length 9) [ 61.819317][ T5855] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 61.819343][ T5855] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.819343][ T5855] [ 61.858820][ T5849] batman_adv: batadv0: Adding interface: syz_tun [ 61.858834][ T5849] batman_adv: batadv0: The MTU of interface syz_tun is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.858908][ T5849] batman_adv: batadv0: Interface activated: syz_tun [ 61.951332][ T5858] pimreg: entered allmulticast mode [ 61.953155][ T5846] pimreg: left allmulticast mode [ 62.022442][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.105332][ T5890] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.139566][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 62.176140][ T5905] loop1: detected capacity change from 0 to 1024 [ 62.176401][ T5905] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.176505][ T5905] EXT4-fs: Ignoring removed oldalloc option [ 62.224131][ T5905] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.227046][ T29] audit: type=1400 audit(1793118661.828:637): avc: denied { write } for pid=5903 comm="syz.1.999" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.227844][ T5905] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 3: comm syz.1.999: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.239856][ T5905] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 62.239884][ T5905] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.239884][ T5905] [ 62.242399][ T5905] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 4: comm syz.1.999: lblock 4 mapped to illegal pblock 4 (length 2) [ 62.242572][ T5905] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 62.242599][ T5905] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.242599][ T5905] [ 62.343374][ T5779] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 62.343676][ T5779] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 62.343699][ T5779] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.343699][ T5779] [ 62.390846][ T5792] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.392325][ T29] audit: type=1400 audit(1793118661.998:638): avc: denied { ioctl } for pid=5918 comm="syz.0.1005" path="socket:[11728]" dev="sockfs" ino=11728 ioctlcmd=0x400448dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.487498][ T29] audit: type=1326 audit(1793118662.088:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.3.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 62.487527][ T29] audit: type=1326 audit(1793118662.088:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.3.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 62.487592][ T29] audit: type=1326 audit(1793118662.088:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.3.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 62.487652][ T29] audit: type=1326 audit(1793118662.088:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.3.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 62.487698][ T29] audit: type=1326 audit(1793118662.088:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.3.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 62.487723][ T29] audit: type=1326 audit(1793118662.088:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.3.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 62.487751][ T29] audit: type=1326 audit(1793118662.088:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.3.1008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923a41f559 code=0x7ffc0000 [ 62.733699][ T5933] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.735515][ T5933] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.760028][ T5931] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.763201][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 62.788217][ T5935] team0: Port device team_slave_0 removed [ 62.946706][ T5951] loop4: detected capacity change from 0 to 512 [ 62.975613][ T5951] ext4 filesystem being mounted at /212/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.343992][ T6003] loop3: detected capacity change from 0 to 1024 [ 63.344359][ T6003] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.344436][ T6003] EXT4-fs: Ignoring removed oldalloc option [ 63.378174][ T6003] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.400189][ T6003] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 3: comm syz.3.1039: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.400461][ T6003] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.400488][ T6003] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.400488][ T6003] [ 63.402771][ T6003] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 4: comm syz.3.1039: lblock 4 mapped to illegal pblock 4 (length 2) [ 63.403019][ T6003] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 63.403047][ T6003] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.403047][ T6003] [ 63.424724][ T5790] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 63.430529][ T5790] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 63.430604][ T5790] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.430604][ T5790] [ 63.567334][ T6023] loop2: detected capacity change from 0 to 512 [ 63.593932][ T6023] ext4 filesystem being mounted at /172/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.645214][ T6034] Invalid argument reading file caps for ./file0 [ 63.682732][ T6037] FAULT_INJECTION: forcing a failure. [ 63.682732][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 63.682760][ T6037] CPU: 1 UID: 0 PID: 6037 Comm: syz.3.1053 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.682870][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.682882][ T6037] Call Trace: [ 63.682888][ T6037] [ 63.682895][ T6037] __dump_stack+0x1d/0x30 [ 63.682920][ T6037] dump_stack_lvl+0x95/0xd0 [ 63.683019][ T6037] dump_stack+0x15/0x1b [ 63.683044][ T6037] should_fail_ex+0x262/0x280 [ 63.683071][ T6037] ? do_fcntl+0xaea/0xfa0 [ 63.683113][ T6037] should_failslab+0x8c/0xb0 [ 63.683141][ T6037] __kmalloc_cache_noprof+0x5d/0x3e0 [ 63.683185][ T6037] ? do_fcntl+0xaea/0xfa0 [ 63.683217][ T6037] do_fcntl+0xaea/0xfa0 [ 63.683244][ T6037] __se_sys_fcntl+0xb1/0x120 [ 63.683367][ T6037] __x64_sys_fcntl+0x43/0x50 [ 63.683392][ T6037] x64_sys_call+0x1a43/0x2550 [ 63.683423][ T6037] do_syscall_64+0x112/0x360 [ 63.683464][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.683485][ T6037] RIP: 0033:0x7f923a41f559 [ 63.683503][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.683525][ T6037] RSP: 002b:00007f9238e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 63.683548][ T6037] RAX: ffffffffffffffda RBX: 00007f923a6a5fa0 RCX: 00007f923a41f559 [ 63.683565][ T6037] RDX: 000000000000001f RSI: 000000000000000a RDI: 0000000000000003 [ 63.683617][ T6037] RBP: 00007f923a4b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 63.683632][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.683647][ T6037] R13: 00007f923a6a6038 R14: 00007f923a6a5fa0 R15: 00007ffe9767d408 [ 63.683667][ T6037] [ 63.742781][ T6042] loop2: detected capacity change from 0 to 1024 [ 63.743115][ T6042] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.743143][ T6042] EXT4-fs: Ignoring removed oldalloc option [ 63.753983][ T6042] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.775767][ T6042] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 3: comm syz.2.1056: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.776025][ T6042] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.776052][ T6042] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.776052][ T6042] [ 63.784953][ T6042] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 4: comm syz.2.1056: lblock 4 mapped to illegal pblock 4 (length 2) [ 63.785356][ T6042] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 63.785437][ T6042] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.785437][ T6042] [ 63.835614][ T5788] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 63.835942][ T5788] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 63.835966][ T5788] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.835966][ T5788] [ 64.408024][ T3741] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.408024][ T5920] Bluetooth: hci0: command 0x1003 tx timeout [ 64.408161][ T5919] Bluetooth: hci0: Opcode 0x0c1a failed: -19 [ 64.517071][ T6064] pimreg: entered allmulticast mode [ 64.522910][ T6061] pimreg: left allmulticast mode [ 64.653154][ T6071] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.741344][ T6090] veth0: entered allmulticast mode [ 64.780777][ T3337] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.781295][ T3337] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.835614][ T6072] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.851319][ T6105] fido_id[6105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.876750][ T6110] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 64.883069][ T6085] batman_adv: batadv0: Interface deactivated: syz_tun [ 64.897157][ T6085] batman_adv: batadv0: Removing interface: syz_tun [ 64.970735][ T6111] pimreg: entered allmulticast mode [ 65.006374][ T6109] pimreg: left allmulticast mode [ 65.037108][ T5792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.095340][ T5792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.161362][ T5792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.209118][ T5792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.324664][ T6156] FAULT_INJECTION: forcing a failure. [ 65.324664][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 65.324761][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.0.1097 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.324787][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.324798][ T6156] Call Trace: [ 65.324804][ T6156] [ 65.324811][ T6156] __dump_stack+0x1d/0x30 [ 65.324839][ T6156] dump_stack_lvl+0x95/0xd0 [ 65.324933][ T6156] dump_stack+0x15/0x1b [ 65.324954][ T6156] should_fail_ex+0x262/0x280 [ 65.324981][ T6156] ? shrinker_alloc+0x3b/0x6e0 [ 65.325059][ T6156] should_failslab+0x8c/0xb0 [ 65.325090][ T6156] __kmalloc_cache_noprof+0x5d/0x3e0 [ 65.325123][ T6156] ? shrinker_alloc+0x3b/0x6e0 [ 65.325205][ T6156] shrinker_alloc+0x3b/0x6e0 [ 65.325227][ T6156] ? __percpu_init_rwsem+0x24/0x90 [ 65.325300][ T6156] ? rcu_sync_init+0x32/0x40 [ 65.325327][ T6156] sget_fc+0x870/0xfa0 [ 65.325357][ T6156] ? __pfx_set_anon_super_fc+0x10/0x10 [ 65.325443][ T6156] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 65.325505][ T6156] ? mqueue_init_fs_context+0x38/0x2c0 [ 65.325529][ T6156] ? __pfx_mqueue_fill_super+0x10/0x10 [ 65.325553][ T6156] get_tree_nodev+0x2a/0x100 [ 65.325578][ T6156] mqueue_get_tree+0x5d/0x80 [ 65.325597][ T6156] vfs_get_tree+0x57/0x1d0 [ 65.325700][ T6156] fc_mount_longterm+0x18/0xb0 [ 65.325732][ T6156] mq_init_ns+0x2db/0x370 [ 65.325764][ T6156] copy_ipcs+0x26d/0x460 [ 65.325849][ T6156] create_new_namespaces+0x121/0x420 [ 65.325873][ T6156] unshare_nsproxy_namespaces+0x115/0x150 [ 65.325902][ T6156] ksys_unshare+0x3a3/0x690 [ 65.325992][ T6156] __x64_sys_unshare+0x1f/0x30 [ 65.326020][ T6156] x64_sys_call+0x1e33/0x2550 [ 65.326073][ T6156] do_syscall_64+0x112/0x360 [ 65.326102][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.326173][ T6156] RIP: 0033:0x7f947feff559 [ 65.326192][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.326214][ T6156] RSP: 002b:00007f947e957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 65.326238][ T6156] RAX: ffffffffffffffda RBX: 00007f9480185fa0 RCX: 00007f947feff559 [ 65.326255][ T6156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 65.326334][ T6156] RBP: 00007f947ff96b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.326349][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.326364][ T6156] R13: 00007f9480186038 R14: 00007f9480185fa0 R15: 00007ffed2120028 [ 65.326409][ T6156] [ 65.354506][ T5792] bridge_slave_1: left allmulticast mode [ 65.354525][ T5792] bridge_slave_1: left promiscuous mode [ 65.354753][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.376581][ T5792] bridge_slave_0: left allmulticast mode [ 65.376602][ T5792] bridge_slave_0: left promiscuous mode [ 65.376717][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.476758][ T5792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.497334][ T5792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.509367][ T5792] bond0 (unregistering): Released all slaves [ 65.606344][ T6163] all (unregistering): Released all slaves [ 65.631123][ T6170] pimreg: entered allmulticast mode [ 65.638137][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.638172][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.638268][ T6072] bridge_slave_0: entered allmulticast mode [ 65.638736][ T6072] bridge_slave_0: entered promiscuous mode [ 65.640091][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.640120][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.640165][ T6072] bridge_slave_1: entered allmulticast mode [ 65.640720][ T6072] bridge_slave_1: entered promiscuous mode [ 65.651970][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.652949][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.674105][ T6164] pimreg: left allmulticast mode [ 65.704729][ T6072] team0: Port device team_slave_0 added [ 65.710171][ T6072] team0: Port device team_slave_1 added [ 65.771239][ T6139] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.794080][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.794095][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.794191][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.794776][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.794787][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.794885][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.907693][ T5792] hsr_slave_0: left promiscuous mode [ 65.911920][ T5792] hsr_slave_1: left promiscuous mode [ 65.912331][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.912345][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.915577][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.915591][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.931701][ T5792] veth1_macvtap: left promiscuous mode [ 65.931773][ T5792] veth0_macvtap: left promiscuous mode [ 65.931953][ T5792] veth1_vlan: left promiscuous mode [ 65.932012][ T5792] veth0_vlan: left promiscuous mode [ 66.049112][ T5792] team0 (unregistering): Port device team_slave_1 removed [ 66.052201][ T5792] team0 (unregistering): Port device team_slave_0 removed [ 66.086678][ T6072] hsr_slave_0: entered promiscuous mode [ 66.087241][ T6072] hsr_slave_1: entered promiscuous mode [ 66.087749][ T6072] debugfs: 'hsr0' already exists in 'hsr' [ 66.087765][ T6072] Cannot create hsr debugfs directory [ 66.090866][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 66.312560][ T6072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.312596][ T6072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.362710][ T6072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.362749][ T6072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.404966][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.405169][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.405196][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.405291][ T6139] bridge_slave_0: entered allmulticast mode [ 66.405759][ T6139] bridge_slave_0: entered promiscuous mode [ 66.406598][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.406696][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.406807][ T6139] bridge_slave_1: entered allmulticast mode [ 66.407295][ T6139] bridge_slave_1: entered promiscuous mode [ 66.444841][ T6139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.453424][ T6139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.476745][ T6139] team0: Port device team_slave_0 added [ 66.479340][ T6139] team0: Port device team_slave_1 added [ 66.505501][ T6072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.505538][ T6072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.534203][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.534217][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.534245][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.535016][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.535029][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.535057][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.584112][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.608635][ T6139] hsr_slave_0: entered promiscuous mode [ 66.610620][ T6139] hsr_slave_1: entered promiscuous mode [ 66.610863][ T6139] debugfs: 'hsr0' already exists in 'hsr' [ 66.610877][ T6139] Cannot create hsr debugfs directory [ 66.662223][ T6072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.662259][ T6072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.739516][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 66.739759][ T6139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.742757][ T6139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.743122][ T6139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.744995][ T6139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.745635][ T6139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.747706][ T6139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.766322][ T6139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.774532][ T6139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.792114][ T6072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.798923][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.803148][ T6072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.806303][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.813111][ T6072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.824339][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.825406][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.825438][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.825535][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.825583][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.831071][ T6072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.839622][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.885934][ T6139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.898416][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.905972][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.939970][ T6139] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.946155][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.946319][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.949285][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.949331][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.969833][ T6139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.976709][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.982082][ T6072] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.996034][ T6072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.996103][ T6072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.007802][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.007835][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.012318][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.012350][ T5795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.134272][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.146916][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.258071][ T6139] veth0_vlan: entered promiscuous mode [ 67.265447][ T6072] veth0_vlan: entered promiscuous mode [ 67.265852][ T6139] veth1_vlan: entered promiscuous mode [ 67.269216][ T6072] veth1_vlan: entered promiscuous mode [ 67.276643][ T6072] veth0_macvtap: entered promiscuous mode [ 67.278579][ T6072] veth1_macvtap: entered promiscuous mode [ 67.283975][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.285495][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.300303][ T6139] veth0_macvtap: entered promiscuous mode [ 67.302165][ T6139] veth1_macvtap: entered promiscuous mode [ 67.307639][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.309646][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.359918][ T5788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.360043][ T5788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.360294][ T5788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.360534][ T5788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.363470][ T5788] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.363740][ T5788] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.364019][ T5788] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.364276][ T5788] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.364837][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 67.364848][ T29] audit: type=1400 audit(1793118666.968:710): avc: denied { mounton } for pid=6072 comm="syz-executor" path="/root/syzkaller.NVOapj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.367840][ T29] audit: type=1400 audit(1793118666.968:712): avc: denied { mount } for pid=6139 comm="syz-executor" name="/" dev="gadgetfs" ino=2895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.368154][ T29] audit: type=1400 audit(1793118666.968:711): avc: denied { mount } for pid=6072 comm="syz-executor" name="/" dev="gadgetfs" ino=2895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.548915][ T6324] set_capacity_and_notify: 1 callbacks suppressed [ 67.548940][ T6324] loop2: detected capacity change from 0 to 164 [ 67.600029][ T6324] rock: directory entry would overflow storage [ 67.600048][ T6324] rock: sig=0x4f50, size=4, remaining=3 [ 67.600069][ T6324] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 67.751382][ T6333] pimreg: entered allmulticast mode [ 67.769619][ T6332] pimreg: left allmulticast mode [ 67.922489][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 67.922586][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 67.948287][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1116'. [ 67.978619][ T6361] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1122'. [ 67.978639][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 68.047309][ T29] audit: type=1400 audit(1793118667.648:713): avc: denied { create } for pid=6365 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.051688][ T29] audit: type=1400 audit(1793118667.658:714): avc: denied { ioctl } for pid=6365 comm="syz.3.1125" path="socket:[14033]" dev="sockfs" ino=14033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.070350][ T29] audit: type=1400 audit(1793118667.678:715): avc: denied { sys_module } for pid=6365 comm="syz.3.1125" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.083918][ T29] audit: type=1400 audit(1793118667.678:716): avc: denied { bind } for pid=6365 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.084035][ T29] audit: type=1400 audit(1793118667.678:717): avc: denied { setopt } for pid=6365 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.084425][ T29] audit: type=1400 audit(1793118667.678:718): avc: denied { write } for pid=6365 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.254944][ T6375] loop3: detected capacity change from 0 to 512 [ 68.262400][ T6375] EXT4-fs: Ignoring removed oldalloc option [ 68.266018][ T6375] EXT4-fs (loop3): filesystem is read-only [ 68.266268][ T6375] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 68.272297][ T6375] EXT4-fs (loop3): filesystem is read-only [ 68.272350][ T6375] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.272869][ T6375] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.1127: bg 0: block 64: padding at end of block bitmap is not set [ 68.272932][ T6375] loop3: lost filesystem error report for type 5 error -117 [ 68.273259][ T6375] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 68.273289][ T6375] loop3: lost filesystem error report for type 5 error -117 [ 68.273740][ T6375] EXT4-fs (loop3): 1 orphan inode deleted [ 68.274890][ T6375] EXT4-fs mount: 34 callbacks suppressed [ 68.277727][ T6375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.321043][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.386690][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1131'. [ 68.640723][ T29] audit: type=1400 audit(1793118668.248:719): avc: denied { write } for pid=6396 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.871944][ T6423] loop0: detected capacity change from 0 to 128 [ 68.887017][ T6423] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.887266][ T6423] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.924777][ T6431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1150'. [ 68.925139][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1150'. [ 68.951902][ T3291] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.733956][ T6446] loop3: detected capacity change from 0 to 512 [ 69.752872][ T6442] pimreg: entered allmulticast mode [ 69.765363][ T6446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.797793][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.798778][ T6439] pimreg: left allmulticast mode [ 69.840386][ T6454] FAULT_INJECTION: forcing a failure. [ 69.840386][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 69.840446][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.3.1159 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.840473][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.840487][ T6454] Call Trace: [ 69.840494][ T6454] [ 69.840503][ T6454] __dump_stack+0x1d/0x30 [ 69.840527][ T6454] dump_stack_lvl+0x95/0xd0 [ 69.840552][ T6454] dump_stack+0x15/0x1b [ 69.840719][ T6454] should_fail_ex+0x262/0x280 [ 69.840742][ T6454] ? hugetlbfs_init_fs_context+0x38/0x170 [ 69.840820][ T6454] should_failslab+0x8c/0xb0 [ 69.840905][ T6454] __kmalloc_cache_noprof+0x5d/0x3e0 [ 69.840939][ T6454] ? hugetlbfs_init_fs_context+0x38/0x170 [ 69.841059][ T6454] hugetlbfs_init_fs_context+0x38/0x170 [ 69.841096][ T6454] alloc_fs_context+0x490/0x570 [ 69.841147][ T6454] fs_context_for_mount+0x22/0x30 [ 69.841172][ T6454] __se_sys_fsopen+0xee/0x230 [ 69.841200][ T6454] __x64_sys_fsopen+0x31/0x40 [ 69.841291][ T6454] x64_sys_call+0x1f0f/0x2550 [ 69.841316][ T6454] do_syscall_64+0x112/0x360 [ 69.841366][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.841388][ T6454] RIP: 0033:0x7f923a41f559 [ 69.841405][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.841423][ T6454] RSP: 002b:00007f9238e6f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 69.841442][ T6454] RAX: ffffffffffffffda RBX: 00007f923a6a5fa0 RCX: 00007f923a41f559 [ 69.841465][ T6454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 69.841480][ T6454] RBP: 00007f923a4b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 69.841533][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.841548][ T6454] R13: 00007f923a6a6038 R14: 00007f923a6a5fa0 R15: 00007ffe9767d408 [ 69.841568][ T6454] [ 70.150924][ T6477] syzkaller1: entered promiscuous mode [ 70.150968][ T6477] syzkaller1: entered allmulticast mode [ 70.260438][ T6488] loop3: detected capacity change from 0 to 1024 [ 70.279365][ T6488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.465115][ T6492] pimreg: entered allmulticast mode [ 70.486076][ T6503] netlink: 'syz.2.1182': attribute type 5 has an invalid length. [ 70.486093][ T6503] netlink: 'syz.2.1182': attribute type 9 has an invalid length. [ 70.486104][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 70.492532][ T6491] pimreg: left allmulticast mode [ 70.564014][ T6509] FAULT_INJECTION: forcing a failure. [ 70.564014][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 70.564041][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.4.1185 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.564067][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.564080][ T6509] Call Trace: [ 70.564137][ T6509] [ 70.564145][ T6509] __dump_stack+0x1d/0x30 [ 70.564232][ T6509] dump_stack_lvl+0x95/0xd0 [ 70.564253][ T6509] dump_stack+0x15/0x1b [ 70.564293][ T6509] should_fail_ex+0x262/0x280 [ 70.564320][ T6509] should_failslab+0x8c/0xb0 [ 70.564409][ T6509] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 70.564442][ T6509] ? alloc_inode+0x9a/0x170 [ 70.564463][ T6509] ? alloc_inode+0x9a/0x170 [ 70.564484][ T6509] alloc_inode+0x9a/0x170 [ 70.564555][ T6509] create_pipe_files+0x3e/0x440 [ 70.564610][ T6509] __do_pipe_flags+0x44/0x140 [ 70.564644][ T6509] do_pipe2+0x61/0x140 [ 70.564676][ T6509] ? switch_fpu_return+0xe7/0x1b0 [ 70.564744][ T6509] __x64_sys_pipe+0x21/0x30 [ 70.564776][ T6509] x64_sys_call+0x24fd/0x2550 [ 70.564824][ T6509] do_syscall_64+0x112/0x360 [ 70.564854][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.564878][ T6509] RIP: 0033:0x7f58b34bf559 [ 70.564896][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.564964][ T6509] RSP: 002b:00007f58b1f17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 70.564985][ T6509] RAX: ffffffffffffffda RBX: 00007f58b3745fa0 RCX: 00007f58b34bf559 [ 70.565008][ T6509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.565094][ T6509] RBP: 00007f58b3556b20 R08: 0000000000000000 R09: 0000000000000000 [ 70.565110][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.565125][ T6509] R13: 00007f58b3746038 R14: 00007f58b3745fa0 R15: 00007ffeea742178 [ 70.565146][ T6509] [ 70.700873][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.811446][ T6542] loop5: detected capacity change from 0 to 128 [ 71.834647][ T6542] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.835730][ T6542] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.864282][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'. [ 73.691014][ T6534] all (unregistering): Released all slaves [ 73.746651][ T6139] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.776141][ T6545] batman_adv: batadv0: Interface deactivated: syz_tun [ 73.781543][ T6545] batman_adv: batadv0: Removing interface: syz_tun [ 73.796452][ T5790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.806980][ T6518] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.870460][ T5790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.925090][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.925111][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.925183][ T6518] bridge_slave_0: entered allmulticast mode [ 73.925650][ T6518] bridge_slave_0: entered promiscuous mode [ 73.926474][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.926516][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.926638][ T6518] bridge_slave_1: entered allmulticast mode [ 73.927157][ T6518] bridge_slave_1: entered promiscuous mode [ 73.937708][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.938851][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.948710][ T6518] team0: Port device team_slave_0 added [ 73.954214][ T6518] team0: Port device team_slave_1 added [ 73.971555][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.971568][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.971595][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.974577][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.974590][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.974618][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.991996][ T6518] hsr_slave_0: entered promiscuous mode [ 73.992488][ T6518] hsr_slave_1: entered promiscuous mode [ 73.992795][ T6518] debugfs: 'hsr0' already exists in 'hsr' [ 73.992808][ T6518] Cannot create hsr debugfs directory [ 74.026077][ T5790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.106764][ T6518] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 74.121679][ T6518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.139185][ T5790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.149944][ T6518] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 74.159351][ T6518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.159901][ T6518] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 74.166399][ T6518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.166922][ T6518] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 74.178555][ T6518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.197989][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.198024][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.198208][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.198238][ T6518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.259779][ T5790] bridge_slave_1: left allmulticast mode [ 74.259837][ T5790] bridge_slave_1: left promiscuous mode [ 74.259976][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.260570][ T5790] bridge_slave_0: left allmulticast mode [ 74.260584][ T5790] bridge_slave_0: left promiscuous mode [ 74.260718][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.317835][ T5790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.329174][ T5790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.329909][ T5790] bond0 (unregistering): Released all slaves [ 74.331019][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.331506][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.371285][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.377142][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.394983][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.395018][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.397781][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.397816][ T5795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.447680][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 74.447717][ T29] audit: type=1400 audit(1793118674.048:725): avc: denied { write } for pid=6564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.478757][ T29] audit: type=1400 audit(1793118674.078:726): avc: denied { write } for pid=6575 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.482286][ T5790] hsr_slave_0: left promiscuous mode [ 74.482657][ T5790] hsr_slave_1: left promiscuous mode [ 74.482954][ T5790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.482969][ T5790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.507100][ T5790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.507124][ T5790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.519685][ T5790] veth1_macvtap: left promiscuous mode [ 74.519762][ T5790] veth0_macvtap: left promiscuous mode [ 74.581321][ T5790] team0 (unregistering): Port device team_slave_1 removed [ 74.602636][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 74.693925][ T29] audit: type=1400 audit(1793118674.298:727): avc: denied { write } for pid=6581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.711256][ T29] audit: type=1400 audit(1793118674.318:728): avc: denied { write } for pid=6598 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.728790][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.767864][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.813084][ T29] audit: type=1400 audit(1793118674.418:729): avc: denied { write } for pid=6601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.830487][ T29] audit: type=1400 audit(1793118674.438:730): avc: denied { write } for pid=6619 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.844761][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 74.935687][ T6518] veth0_vlan: entered promiscuous mode [ 74.937680][ T6518] veth1_vlan: entered promiscuous mode [ 74.949279][ T29] audit: type=1400 audit(1793118674.558:731): avc: denied { write } for pid=6624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.967146][ T29] audit: type=1400 audit(1793118674.568:732): avc: denied { write } for pid=6640 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.996457][ T6518] veth0_macvtap: entered promiscuous mode [ 74.997850][ T6518] veth1_macvtap: entered promiscuous mode [ 75.001239][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 75.005544][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.011793][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.016922][ T5790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.017045][ T5790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.017084][ T5790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.017201][ T5790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.145811][ T6654] smc: net device lo applied user defined pnetid SYZ2 [ 75.146089][ T6654] smc: net device lo erased user defined pnetid SYZ2 [ 75.372529][ T6660] pimreg: entered allmulticast mode [ 75.386044][ T6659] pimreg: left allmulticast mode [ 75.403182][ T29] audit: type=1400 audit(1793118675.008:733): avc: denied { create } for pid=6663 comm="syz.5.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.481107][ T6682] loop6: detected capacity change from 0 to 256 [ 75.488485][ T6680] loop0: detected capacity change from 0 to 512 [ 75.491670][ T6680] EXT4-fs: Ignoring removed oldalloc option [ 75.492569][ T6680] EXT4-fs (loop0): filesystem is read-only [ 75.492836][ T6680] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 75.527021][ T6680] EXT4-fs (loop0): filesystem is read-only [ 75.527055][ T6680] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.528266][ T6680] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1206: bg 0: block 64: padding at end of block bitmap is not set [ 75.528329][ T6680] loop0: lost filesystem error report for type 5 error -117 [ 75.528613][ T6680] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 75.528643][ T6680] loop0: lost filesystem error report for type 5 error -117 [ 75.529318][ T6680] EXT4-fs (loop0): 1 orphan inode deleted [ 75.532820][ T6680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.587509][ T6694] loop5: detected capacity change from 0 to 128 [ 75.600475][ T6694] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.603930][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.604615][ T6694] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.624727][ T6694] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 75.669889][ T6139] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.725367][ T29] audit: type=1400 audit(1793118675.328:734): avc: denied { read } for pid=6707 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.761635][ T6712] netlink: 'syz.4.1223': attribute type 4 has an invalid length. [ 75.761652][ T6712] netlink: 'syz.4.1223': attribute type 4 has an invalid length. [ 75.761669][ T6712] netlink: 'syz.4.1223': attribute type 7 has an invalid length. [ 75.761714][ T6712] netlink: 197284 bytes leftover after parsing attributes in process `syz.4.1223'. [ 75.806848][ T6717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.870484][ T6730] Invalid argument reading file caps for ./file0 [ 75.892012][ T6734] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.892064][ T6734] TCP: tcp_parse_options: Illegal window scaling value 170 > 14 received [ 75.892081][ T6734] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 75.981405][ T6751] FAULT_INJECTION: forcing a failure. [ 75.981405][ T6751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.981500][ T6751] CPU: 1 UID: 0 PID: 6751 Comm: syz.6.1241 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.981530][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.981630][ T6751] Call Trace: [ 75.981637][ T6751] [ 75.981646][ T6751] __dump_stack+0x1d/0x30 [ 75.981676][ T6751] dump_stack_lvl+0x95/0xd0 [ 75.981702][ T6751] dump_stack+0x15/0x1b [ 75.981727][ T6751] should_fail_ex+0x262/0x280 [ 75.981811][ T6751] should_fail+0xb/0x20 [ 75.981835][ T6751] should_fail_usercopy+0x1a/0x20 [ 75.981900][ T6751] _copy_from_user+0x1c/0xb0 [ 75.981928][ T6751] btf_new_fd+0x218/0x6a0 [ 75.981985][ T6751] bpf_btf_load+0x116/0x130 [ 75.982009][ T6751] __sys_bpf+0xbee/0xc50 [ 75.982032][ T6751] ? do_futex+0x390/0x460 [ 75.982059][ T6751] __x64_sys_bpf+0x69/0x80 [ 75.982144][ T6751] x64_sys_call+0xf26/0x2550 [ 75.982176][ T6751] do_syscall_64+0x112/0x360 [ 75.982206][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.982231][ T6751] RIP: 0033:0x7f44b2d9f559 [ 75.982326][ T6751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.982417][ T6751] RSP: 002b:00007f44b17ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.982441][ T6751] RAX: ffffffffffffffda RBX: 00007f44b3025fa0 RCX: 00007f44b2d9f559 [ 75.982459][ T6751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 75.982482][ T6751] RBP: 00007f44b2e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.982505][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.982521][ T6751] R13: 00007f44b3026038 R14: 00007f44b3025fa0 R15: 00007ffe1500d738 [ 75.982543][ T6751] [ 76.206353][ T6764] loop4: detected capacity change from 0 to 164 [ 76.264398][ T6764] rock: directory entry would overflow storage [ 76.264546][ T6764] rock: sig=0x4f50, size=4, remaining=3 [ 76.264596][ T6764] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 76.415370][ T6774] pimreg: entered allmulticast mode [ 76.429154][ T6772] pimreg: left allmulticast mode [ 76.512610][ T6788] netlink: 'syz.5.1258': attribute type 3 has an invalid length. [ 76.512632][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1258'. [ 76.717170][ T6798] loop5: detected capacity change from 0 to 512 [ 76.729763][ T6798] EXT4-fs: Ignoring removed oldalloc option [ 76.759009][ T6798] EXT4-fs (loop5): filesystem is read-only [ 76.759366][ T6798] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 76.762798][ T6798] EXT4-fs (loop5): filesystem is read-only [ 76.762831][ T6798] EXT4-fs (loop5): orphan cleanup on readonly fs [ 76.763509][ T6798] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1262: bg 0: block 64: padding at end of block bitmap is not set [ 76.763560][ T6798] loop5: lost filesystem error report for type 5 error -117 [ 76.764052][ T6798] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 76.764167][ T6798] loop5: lost filesystem error report for type 5 error -117 [ 76.764764][ T6798] EXT4-fs (loop5): 1 orphan inode deleted [ 76.765882][ T6798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.502590][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.509751][ T6807] macsec0: entered promiscuous mode [ 77.528852][ T6808] veth1_macvtap: left promiscuous mode [ 77.540858][ T6808] macsec0 (unregistering): left promiscuous mode [ 77.590103][ T6818] bond0: entered promiscuous mode [ 77.590120][ T6818] bond_slave_0: entered promiscuous mode [ 77.590250][ T6818] bond_slave_1: entered promiscuous mode [ 77.593006][ T6818] batadv0: entered promiscuous mode [ 77.593859][ T6818] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 77.675490][ T6829] sctp: [Deprecated]: syz.4.1276 (pid 6829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.675490][ T6829] Use struct sctp_sack_info instead [ 77.870391][ T6823] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 78.180743][ T6846] bond0: (slave ip6tnl1): refused to change device type [ 78.678021][ T6851] FAULT_INJECTION: forcing a failure. [ 78.678021][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 78.678054][ T6851] CPU: 1 UID: 0 PID: 6851 Comm: syz.6.1286 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.678083][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.678098][ T6851] Call Trace: [ 78.678105][ T6851] [ 78.678113][ T6851] __dump_stack+0x1d/0x30 [ 78.678142][ T6851] dump_stack_lvl+0x95/0xd0 [ 78.678193][ T6851] dump_stack+0x15/0x1b [ 78.678217][ T6851] should_fail_ex+0x262/0x280 [ 78.678274][ T6851] ? setup_ipc_sysctls+0x49/0x8d0 [ 78.678374][ T6851] should_failslab+0x8c/0xb0 [ 78.678458][ T6851] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 78.678494][ T6851] ? setup_ipc_sysctls+0x49/0x8d0 [ 78.678582][ T6851] kmemdup_noprof+0x2b/0x70 [ 78.678604][ T6851] setup_ipc_sysctls+0x49/0x8d0 [ 78.678635][ T6851] copy_ipcs+0x297/0x460 [ 78.678729][ T6851] create_new_namespaces+0x121/0x420 [ 78.678776][ T6851] unshare_nsproxy_namespaces+0x115/0x150 [ 78.678875][ T6851] ksys_unshare+0x3a3/0x690 [ 78.678911][ T6851] __x64_sys_unshare+0x1f/0x30 [ 78.678945][ T6851] x64_sys_call+0x1e33/0x2550 [ 78.679010][ T6851] do_syscall_64+0x112/0x360 [ 78.679038][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.679063][ T6851] RIP: 0033:0x7f44b2d9f559 [ 78.679082][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.679104][ T6851] RSP: 002b:00007f44b17ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 78.679162][ T6851] RAX: ffffffffffffffda RBX: 00007f44b3025fa0 RCX: 00007f44b2d9f559 [ 78.679178][ T6851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 78.679190][ T6851] RBP: 00007f44b2e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 78.679202][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.679214][ T6851] R13: 00007f44b3026038 R14: 00007f44b3025fa0 R15: 00007ffe1500d738 [ 78.679237][ T6851] [ 78.965848][ T6865] Invalid argument reading file caps for ./file0 [ 79.055310][ T6879] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1294'. [ 79.449014][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 79.449032][ T29] audit: type=1326 audit(1793118679.048:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.449086][ T29] audit: type=1326 audit(1793118679.048:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.449131][ T29] audit: type=1326 audit(1793118679.058:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.450247][ T29] audit: type=1326 audit(1793118679.058:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.452014][ T29] audit: type=1326 audit(1793118679.058:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.452826][ T29] audit: type=1326 audit(1793118679.058:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.453933][ T29] audit: type=1326 audit(1793118679.058:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.454810][ T29] audit: type=1326 audit(1793118679.058:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.456068][ T29] audit: type=1326 audit(1793118679.058:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.456312][ T6957] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6957 comm=syz.4.1312 [ 79.457373][ T29] audit: type=1326 audit(1793118679.058:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6921 comm="syz.5.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f253a37fd8e code=0x7ffc0000 [ 79.995042][ T6981] FAULT_INJECTION: forcing a failure. [ 79.995042][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 79.995062][ T6981] CPU: 0 UID: 0 PID: 6981 Comm: syz.6.1318 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.995077][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.995085][ T6981] Call Trace: [ 79.995089][ T6981] [ 79.995094][ T6981] __dump_stack+0x1d/0x30 [ 79.995179][ T6981] dump_stack_lvl+0x95/0xd0 [ 79.995192][ T6981] dump_stack+0x15/0x1b [ 79.995207][ T6981] should_fail_ex+0x262/0x280 [ 79.995221][ T6981] should_failslab+0x8c/0xb0 [ 79.995271][ T6981] __kvmalloc_node_noprof+0x14f/0x5b0 [ 79.995289][ T6981] ? bpf_int_jit_compile+0x502/0xf20 [ 79.995306][ T6981] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 79.995344][ T6981] ? bpf_int_jit_compile+0x502/0xf20 [ 79.995365][ T6981] bpf_int_jit_compile+0x502/0xf20 [ 79.995413][ T6981] bpf_jit_subprogs+0x125d/0x23a0 [ 79.995432][ T6981] bpf_fixup_call_args+0x245/0x530 [ 79.995448][ T6981] bpf_check+0x1795/0x20f0 [ 79.995519][ T6981] bpf_prog_load+0xf38/0x10a0 [ 79.995603][ T6981] ? avc_has_perm_noaudit+0xac/0x160 [ 79.995635][ T6981] __sys_bpf+0xbce/0xc50 [ 79.995659][ T6981] ? do_futex+0x390/0x460 [ 79.995679][ T6981] __x64_sys_bpf+0x69/0x80 [ 79.995810][ T6981] x64_sys_call+0xf26/0x2550 [ 79.995838][ T6981] do_syscall_64+0x112/0x360 [ 79.995932][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.995945][ T6981] RIP: 0033:0x7f44b2d9f559 [ 79.995955][ T6981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.996005][ T6981] RSP: 002b:00007f44b17ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.996018][ T6981] RAX: ffffffffffffffda RBX: 00007f44b3025fa0 RCX: 00007f44b2d9f559 [ 79.996105][ T6981] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 79.996113][ T6981] RBP: 00007f44b2e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.996121][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.996128][ T6981] R13: 00007f44b3026038 R14: 00007f44b3025fa0 R15: 00007ffe1500d738 [ 79.996139][ T6981] [ 80.122792][ T6989] loop0: detected capacity change from 0 to 1024 [ 80.144242][ T6989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.144392][ T6989] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.181963][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.186657][ T6988] loop6: detected capacity change from 0 to 8192 [ 80.191921][ T6988] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.396120][ T7010] loop0: detected capacity change from 0 to 164 [ 80.749964][ T7019] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.295466][ T7028] loop4: detected capacity change from 0 to 8192 [ 81.299984][ T7028] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.461227][ T7049] loop0: detected capacity change from 0 to 128 [ 81.520621][ T7055] FAULT_INJECTION: forcing a failure. [ 81.520621][ T7055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.520651][ T7055] CPU: 0 UID: 0 PID: 7055 Comm: syz.5.1350 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.520749][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.520763][ T7055] Call Trace: [ 81.520773][ T7055] [ 81.520782][ T7055] __dump_stack+0x1d/0x30 [ 81.520876][ T7055] dump_stack_lvl+0x95/0xd0 [ 81.520901][ T7055] dump_stack+0x15/0x1b [ 81.520921][ T7055] should_fail_ex+0x262/0x280 [ 81.520944][ T7055] should_fail+0xb/0x20 [ 81.520972][ T7055] should_fail_usercopy+0x1a/0x20 [ 81.520998][ T7055] strncpy_from_user+0x27/0x250 [ 81.521095][ T7055] __se_sys_request_key+0x57/0x2a0 [ 81.521129][ T7055] __x64_sys_request_key+0x55/0x70 [ 81.521164][ T7055] x64_sys_call+0x1741/0x2550 [ 81.521193][ T7055] do_syscall_64+0x112/0x360 [ 81.521235][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.521258][ T7055] RIP: 0033:0x7f253a3bf559 [ 81.521340][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.521362][ T7055] RSP: 002b:00007f2538e0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 81.521384][ T7055] RAX: ffffffffffffffda RBX: 00007f253a645fa0 RCX: 00007f253a3bf559 [ 81.521402][ T7055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.521417][ T7055] RBP: 00007f253a456b20 R08: 0000000000000000 R09: 0000000000000000 [ 81.521454][ T7055] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 81.521468][ T7055] R13: 00007f253a646038 R14: 00007f253a645fa0 R15: 00007ffedaaec8a8 [ 81.521538][ T7055] [ 81.524788][ T7058] loop4: detected capacity change from 0 to 164 [ 81.769507][ T7079] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1362'. [ 81.801533][ T7072] loop0: detected capacity change from 0 to 8192 [ 81.810658][ T7072] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.664324][ T7096] loop5: detected capacity change from 0 to 2048 [ 82.682104][ T7096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.734216][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.790716][ T7117] pimreg1: tun_chr_ioctl cmd 2147767520 [ 82.790874][ T7117] pimreg1: tun_chr_ioctl cmd 35111 [ 82.831408][ T7127] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.864690][ T7132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7132 comm=syz.5.1385 [ 82.993528][ T7155] loop0: detected capacity change from 0 to 512 [ 83.029004][ T7155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.029138][ T7155] ext4 filesystem being mounted at /277/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.069651][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.089110][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.089175][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.089281][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.089377][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.089419][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.089459][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.089535][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.089629][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.089681][ T7169] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 83.091828][ T7171] bond0: entered promiscuous mode [ 83.091844][ T7171] bond_slave_0: entered promiscuous mode [ 83.091914][ T7171] bond_slave_1: entered promiscuous mode [ 83.093039][ T7171] batadv0: entered promiscuous mode [ 83.093464][ T7171] debugfs: 'hsr1' already exists in 'hsr' [ 83.093477][ T7171] Cannot create hsr debugfs directory [ 83.093644][ T7171] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.106653][ T7171] bond0: left promiscuous mode [ 83.106680][ T7171] bond_slave_0: left promiscuous mode [ 83.106808][ T7171] bond_slave_1: left promiscuous mode [ 83.130720][ T5788] IPVS: starting estimator thread 0... [ 83.140073][ T7173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7173 comm=syz.5.1402 [ 83.193740][ T7171] batadv0: left promiscuous mode [ 83.222286][ T7176] IPVS: using max 2208 ests per chain, 110400 per kthread [ 83.231145][ T7183] tipc: Started in network mode [ 83.231183][ T7183] tipc: Node identity 4, cluster identity 4711 [ 83.231261][ T7183] tipc: Node number set to 4 [ 83.309482][ T7190] 9p: Could not find request transport: .dma [ 83.350982][ T7197] loop0: detected capacity change from 0 to 128 [ 83.370760][ T3424] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 83.372290][ T3424] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.419935][ T7199] fido_id[7199]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.669289][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1428'. [ 83.706395][ T7241] loop6: detected capacity change from 0 to 512 [ 83.844543][ T843] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.845015][ T843] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.874238][ T7258] loop4: detected capacity change from 0 to 512 [ 83.899398][ T7261] loop5: detected capacity change from 0 to 4096 [ 83.899811][ T7261] EXT4-fs: test_dummy_encryption option not supported [ 83.909358][ T7258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.909543][ T7258] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.967245][ T6072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.288960][ T7283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.291639][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.291785][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.291863][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.291967][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.292047][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.292115][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.292196][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.292260][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.292311][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.292358][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.292507][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.292573][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.293006][ T7283] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.294174][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294243][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294310][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294355][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294469][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294516][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294632][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294698][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294770][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294909][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.294961][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.295091][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.295143][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.295194][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.295308][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.295371][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.296941][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297022][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297072][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297121][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297182][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297250][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297317][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297365][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297431][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297480][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297563][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297608][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297678][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297729][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297858][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.297955][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.298071][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.298118][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.298202][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.298253][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.302656][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.302730][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.302782][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.302868][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303018][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303066][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303162][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303210][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303342][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303393][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303477][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303525][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303656][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303703][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303750][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303851][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303920][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.303998][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.305563][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.305630][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.305776][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.305881][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.305929][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.305977][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306093][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306186][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306261][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306307][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306429][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306487][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306549][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306601][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306716][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.306799][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308292][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308401][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308492][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308586][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308653][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308702][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308750][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308803][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308868][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.308946][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.309012][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.309080][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.309128][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.309179][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.309328][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.309437][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.309521][ T7291] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.320328][ T6072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.409660][ T7302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.471100][ T7310] EXT4-fs (loop0): shut down requested (2) [ 84.472495][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 84.472509][ T29] audit: type=1400 audit(1793118684.068:898): avc: denied { ioctl } for pid=7301 comm="syz.0.1459" path="/285/file0/bus" dev="loop0" ino=18 ioctlcmd=0x8004587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.479601][ T29] audit: type=1400 audit(1793118684.078:899): avc: denied { read } for pid=2960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 84.479625][ T29] audit: type=1400 audit(1793118684.078:900): avc: denied { search } for pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.479649][ T29] audit: type=1400 audit(1793118684.078:901): avc: denied { write search } for pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.479693][ T29] audit: type=1400 audit(1793118684.078:902): avc: denied { add_name } for pid=2960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.486593][ T29] audit: type=1400 audit(1793118684.088:903): avc: denied { create } for pid=2960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.486624][ T29] audit: type=1400 audit(1793118684.088:904): avc: denied { append open } for pid=2960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.486651][ T29] audit: type=1400 audit(1793118684.088:905): avc: denied { getattr } for pid=2960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.162388][ T7323] FAULT_INJECTION: forcing a failure. [ 85.162388][ T7323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.162565][ T7323] CPU: 1 UID: 0 PID: 7323 Comm: syz.6.1466 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.162596][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.162640][ T7323] Call Trace: [ 85.162647][ T7323] [ 85.162656][ T7323] __dump_stack+0x1d/0x30 [ 85.162716][ T7323] dump_stack_lvl+0x95/0xd0 [ 85.162741][ T7323] dump_stack+0x15/0x1b [ 85.162839][ T7323] should_fail_ex+0x262/0x280 [ 85.162878][ T7323] should_fail+0xb/0x20 [ 85.162899][ T7323] should_fail_usercopy+0x1a/0x20 [ 85.162925][ T7323] _copy_from_user+0x1c/0xb0 [ 85.162950][ T7323] copy_from_bpfptr+0x5c/0x90 [ 85.163011][ T7323] bpf_prog_load+0x8ad/0x10a0 [ 85.163047][ T7323] ? avc_has_perm_noaudit+0xac/0x160 [ 85.163079][ T7323] __sys_bpf+0xbce/0xc50 [ 85.163102][ T7323] ? do_futex+0x390/0x460 [ 85.163134][ T7323] __x64_sys_bpf+0x69/0x80 [ 85.163230][ T7323] x64_sys_call+0xf26/0x2550 [ 85.163257][ T7323] do_syscall_64+0x112/0x360 [ 85.163286][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.163335][ T7323] RIP: 0033:0x7f44b2d9f559 [ 85.163353][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.163435][ T7323] RSP: 002b:00007f44b17ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.163458][ T7323] RAX: ffffffffffffffda RBX: 00007f44b3025fa0 RCX: 00007f44b2d9f559 [ 85.163480][ T7323] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 85.163494][ T7323] RBP: 00007f44b2e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.163562][ T7323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.163576][ T7323] R13: 00007f44b3026038 R14: 00007f44b3025fa0 R15: 00007ffe1500d738 [ 85.163594][ T7323] [ 85.256009][ T7326] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1467'. [ 85.256034][ T7326] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1467'. [ 85.263752][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.423302][ T7334] isofs: Unable to find the "." directory for NFS. [ 85.604085][ T29] audit: type=1400 audit(1793118685.208:906): avc: denied { write } for pid=7327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.633257][ T29] audit: type=1400 audit(1793118685.218:907): avc: denied { mount } for pid=7354 comm="syz.6.1473" name="/" dev="rpc_pipefs" ino=18646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 86.160959][ T7419] FAULT_INJECTION: forcing a failure. [ 86.160959][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 86.161043][ T7419] CPU: 1 UID: 0 PID: 7419 Comm: syz.0.1504 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.161073][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.161088][ T7419] Call Trace: [ 86.161096][ T7419] [ 86.161105][ T7419] __dump_stack+0x1d/0x30 [ 86.161133][ T7419] dump_stack_lvl+0x95/0xd0 [ 86.161162][ T7419] dump_stack+0x15/0x1b [ 86.161185][ T7419] should_fail_ex+0x262/0x280 [ 86.161211][ T7419] ? radix_tree_node_alloc+0xa0/0x200 [ 86.161264][ T7419] should_failslab+0x8c/0xb0 [ 86.161292][ T7419] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 86.161381][ T7419] ? radix_tree_node_alloc+0xa0/0x200 [ 86.161409][ T7419] radix_tree_node_alloc+0xa0/0x200 [ 86.161453][ T7419] idr_get_free+0x1fc/0x560 [ 86.161480][ T7419] idr_alloc_u32+0xe9/0x1a0 [ 86.161512][ T7419] idr_alloc_cyclic+0x7b/0x140 [ 86.161620][ T7419] map_create+0x332/0xfe0 [ 86.161645][ T7419] __sys_bpf+0x8e0/0xc50 [ 86.161730][ T7419] ? do_futex+0x390/0x460 [ 86.161757][ T7419] __x64_sys_bpf+0x69/0x80 [ 86.161792][ T7419] x64_sys_call+0xf26/0x2550 [ 86.161876][ T7419] do_syscall_64+0x112/0x360 [ 86.161902][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.161927][ T7419] RIP: 0033:0x7f947feff559 [ 86.161944][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.162021][ T7419] RSP: 002b:00007f947e957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.162044][ T7419] RAX: ffffffffffffffda RBX: 00007f9480185fa0 RCX: 00007f947feff559 [ 86.162061][ T7419] RDX: 0000000000000050 RSI: 0000200000000c00 RDI: 0000000000000000 [ 86.162076][ T7419] RBP: 00007f947ff96b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.162089][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.162101][ T7419] R13: 00007f9480186038 R14: 00007f9480185fa0 R15: 00007ffed2120028 [ 86.162182][ T7419] [ 86.280866][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 86.280909][ T7428] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.312369][ T7417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.387627][ T7435] EXT4-fs (loop4): shut down requested (2) [ 86.431465][ T7436] set_capacity_and_notify: 4 callbacks suppressed [ 86.431486][ T7436] loop6: detected capacity change from 0 to 1024 [ 86.451920][ T7436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.452063][ T7436] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.458135][ T7436] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1509: bg 0: block 112: padding at end of block bitmap is not set [ 86.474596][ T7432] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: comm syz.6.1509: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.474874][ T7432] EXT4-fs error (device loop6): ext4_map_blocks:895: inode #15: comm syz.6.1509: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.475031][ T7432] EXT4-fs error (device loop6): ext4_map_blocks:895: inode #15: comm syz.6.1509: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.475237][ T7432] EXT4-fs error (device loop6): ext4_map_blocks:895: inode #15: comm syz.6.1509: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.475458][ T7432] EXT4-fs error (device loop6): ext4_map_blocks:895: inode #15: comm syz.6.1509: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.475826][ T7432] EXT4-fs error (device loop6): ext4_map_blocks:895: inode #15: comm syz.6.1509: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.476123][ T7436] EXT4-fs error (device loop6): ext4_map_blocks:895: inode #15: comm syz.6.1509: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.476879][ T7436] EXT4-fs error (device loop6): ext4_map_blocks:895: inode #15: comm syz.6.1509: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.530589][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.590909][ T6072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.618425][ T7446] loop6: detected capacity change from 0 to 512 [ 86.626103][ T7446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.626247][ T7446] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.693735][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.693926][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1516'. [ 86.868411][ T7484] loop6: detected capacity change from 0 to 2048 [ 86.902684][ T7484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.917060][ T7485] loop5: detected capacity change from 0 to 4096 [ 86.936447][ T7485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.986937][ T7485] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.1522: Failed to acquire dquot type 1 [ 87.002999][ T7500] EXT4-fs (loop6): shut down requested (2) [ 87.035444][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.056550][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 87.138650][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.148016][ T7512] loop4: detected capacity change from 0 to 512 [ 87.194756][ T7512] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 87.194819][ T7512] FAT-fs (loop4): Filesystem has been set read-only [ 87.298670][ T7524] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1533'. [ 87.298692][ T7524] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1533'. [ 87.426160][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 87.438117][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 87.583606][ T7572] option changes via remount are deprecated (pid=7571 comm=syz.6.1549) [ 87.626232][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'. [ 87.732513][ T7593] syzkaller1: entered promiscuous mode [ 87.732535][ T7593] syzkaller1: entered allmulticast mode [ 87.797059][ T7602] team0 (unregistering): Port device team_slave_0 removed [ 87.804000][ T7602] team0 (unregistering): Port device team_slave_1 removed [ 87.843652][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1566'. [ 87.954564][ T7632] loop6: detected capacity change from 0 to 512 [ 87.966321][ T7632] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 87.967272][ T7632] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 87.967315][ T7632] loop6: lost filesystem error report for type 5 error -12 [ 87.967684][ T7632] EXT4-fs (loop6): 1 truncate cleaned up [ 88.001174][ T7632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.030586][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.142015][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1583'. [ 88.436683][ T7670] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.766336][ T7685] loop6: detected capacity change from 0 to 512 [ 88.800142][ T7685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.800257][ T7685] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.889732][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.094975][ T7696] loop6: detected capacity change from 0 to 512 [ 89.136295][ T7696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.137045][ T7696] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.213467][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.322565][ T7730] loop0: detected capacity change from 0 to 512 [ 89.337599][ T7730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.403166][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.443903][ T7735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1619'. [ 89.690259][ T7757] Invalid argument reading file caps for ./file0 [ 90.757375][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 90.989203][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 90.989281][ T29] audit: type=1400 audit(1793118690.598:1014): avc: denied { mounton } for pid=7828 comm="syz.4.1663" path="/proc/260/task" dev="proc" ino=18004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 90.992196][ T29] audit: type=1400 audit(1793118690.598:1015): avc: denied { associate } for pid=7830 comm="syz.4.1663" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.086843][ T29] audit: type=1400 audit(1793118690.688:1016): avc: denied { ioctl } for pid=7832 comm="syz.4.1664" path="/120/file0" dev="tmpfs" ino=642 ioctlcmd=0xc0c0128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.241692][ T7842] loop6: detected capacity change from 0 to 2048 [ 91.276722][ T29] audit: type=1400 audit(1793118690.878:1017): avc: denied { write } for pid=7846 comm="syz.4.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.277097][ T29] audit: type=1400 audit(1793118690.878:1018): avc: denied { read } for pid=7846 comm="syz.4.1669" path="socket:[18017]" dev="sockfs" ino=18017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.325305][ T7842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.335749][ T29] audit: type=1400 audit(1793118690.938:1019): avc: denied { read } for pid=7843 comm="syz.2.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.462725][ T5790] IPVS: starting estimator thread 0... [ 91.477884][ T29] audit: type=1400 audit(1793118691.078:1020): avc: denied { write } for pid=7834 comm="syz.6.1662" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.566613][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.570323][ T7861] IPVS: using max 2688 ests per chain, 134400 per kthread [ 91.854989][ T29] audit: type=1400 audit(1793118691.458:1021): avc: denied { mount } for pid=7871 comm="syz.0.1679" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 91.895255][ T7899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.084355][ T7904] loop0: detected capacity change from 0 to 512 [ 92.203221][ T7909] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.367202][ T7910] loop4: detected capacity change from 0 to 512 [ 92.407602][ T7910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.407674][ T7910] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.514908][ T7919] net_ratelimit: 46 callbacks suppressed [ 92.514951][ T7919] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.514973][ T7919] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 92.671280][ T29] audit: type=1400 audit(1793118692.268:1022): avc: denied { getopt } for pid=7928 comm="syz.6.1702" laddr=::ffff:127.0.0.1 faddr=::ffff:127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.751909][ T6072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.848352][ T7949] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.893303][ T7954] __nla_validate_parse: 1 callbacks suppressed [ 92.893319][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1714'. [ 93.046932][ T5790] IPVS: starting estimator thread 0... [ 93.128728][ T7968] IPVS: using max 2016 ests per chain, 100800 per kthread [ 93.190896][ T7980] FAULT_INJECTION: forcing a failure. [ 93.190896][ T7980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.190927][ T7980] CPU: 1 UID: 0 PID: 7980 Comm: syz.5.1725 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.190965][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.191018][ T7980] Call Trace: [ 93.191026][ T7980] [ 93.191034][ T7980] __dump_stack+0x1d/0x30 [ 93.191063][ T7980] dump_stack_lvl+0x95/0xd0 [ 93.191084][ T7980] dump_stack+0x15/0x1b [ 93.191176][ T7980] should_fail_ex+0x262/0x280 [ 93.191204][ T7980] should_fail+0xb/0x20 [ 93.191227][ T7980] should_fail_usercopy+0x1a/0x20 [ 93.191253][ T7980] _copy_from_user+0x1c/0xb0 [ 93.191360][ T7980] __se_sys_rt_sigprocmask+0x9b/0x250 [ 93.191387][ T7980] __x64_sys_rt_sigprocmask+0x55/0x70 [ 93.191414][ T7980] x64_sys_call+0x212a/0x2550 [ 93.191443][ T7980] do_syscall_64+0x112/0x360 [ 93.191531][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.191606][ T7980] RIP: 0033:0x7f253a3bf559 [ 93.191626][ T7980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.191648][ T7980] RSP: 002b:00007f2538e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000000e [ 93.191667][ T7980] RAX: ffffffffffffffda RBX: 00007f253a645fa0 RCX: 00007f253a3bf559 [ 93.191705][ T7980] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000002 [ 93.191717][ T7980] RBP: 00007f253a456b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.191731][ T7980] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 93.191746][ T7980] R13: 00007f253a646038 R14: 00007f253a645fa0 R15: 00007ffedaaec8a8 [ 93.191768][ T7980] [ 93.511838][ T7984] loop4: detected capacity change from 0 to 512 [ 93.526709][ T7984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.526773][ T7984] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.604211][ T7993] FAULT_INJECTION: forcing a failure. [ 93.604211][ T7993] name failslab, interval 1, probability 0, space 0, times 0 [ 93.604245][ T7993] CPU: 1 UID: 0 PID: 7993 Comm: syz.0.1732 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.604347][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.604361][ T7993] Call Trace: [ 93.604369][ T7993] [ 93.604378][ T7993] __dump_stack+0x1d/0x30 [ 93.604406][ T7993] dump_stack_lvl+0x95/0xd0 [ 93.604433][ T7993] dump_stack+0x15/0x1b [ 93.604501][ T7993] should_fail_ex+0x262/0x280 [ 93.604528][ T7993] ? snd_seq_pool_new+0x32/0xe0 [ 93.604556][ T7993] should_failslab+0x8c/0xb0 [ 93.604589][ T7993] __kmalloc_cache_noprof+0x5d/0x3e0 [ 93.604626][ T7993] ? snd_seq_pool_new+0x32/0xe0 [ 93.604652][ T7993] ? snd_seq_fifo_new+0x31/0x110 [ 93.604755][ T7993] snd_seq_pool_new+0x32/0xe0 [ 93.604787][ T7993] snd_seq_fifo_new+0x44/0x110 [ 93.604817][ T7993] snd_seq_open+0x142/0x300 [ 93.604848][ T7993] ? __pfx_snd_seq_open+0x10/0x10 [ 93.604885][ T7993] snd_open+0x23b/0x290 [ 93.604980][ T7993] chrdev_open+0x2eb/0x3a0 [ 93.605041][ T7993] do_dentry_open+0x496/0xa40 [ 93.605063][ T7993] ? __pfx_chrdev_open+0x10/0x10 [ 93.605097][ T7993] ? may_open+0x1ee/0x350 [ 93.605127][ T7993] vfs_open_consume+0x46/0x1f0 [ 93.605223][ T7993] path_openat+0xc16/0x11c0 [ 93.605261][ T7993] do_file_open+0x16c/0x290 [ 93.605300][ T7993] do_sys_openat2+0xa1/0x140 [ 93.605327][ T7993] __x64_sys_openat+0xf2/0x120 [ 93.605396][ T7993] x64_sys_call+0x1f72/0x2550 [ 93.605427][ T7993] do_syscall_64+0x112/0x360 [ 93.605494][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.605520][ T7993] RIP: 0033:0x7f947feff559 [ 93.605540][ T7993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.605571][ T7993] RSP: 002b:00007f947e957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.605595][ T7993] RAX: ffffffffffffffda RBX: 00007f9480185fa0 RCX: 00007f947feff559 [ 93.605640][ T7993] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 93.605656][ T7993] RBP: 00007f947ff96b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.605672][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.605687][ T7993] R13: 00007f9480186038 R14: 00007f9480185fa0 R15: 00007ffed2120028 [ 93.605707][ T7993] [ 93.725204][ T6072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.725790][ T7991] loop6: detected capacity change from 0 to 1024 [ 93.731375][ T7991] EXT4-fs: Ignoring removed bh option [ 93.770982][ T7991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.783388][ T7991] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.784605][ T29] audit: type=1400 audit(1793118693.388:1023): avc: denied { write } for pid=7990 comm="syz.6.1730" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.891692][ T7997] loop0: detected capacity change from 0 to 256 [ 93.951540][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.199821][ T8028] loop0: detected capacity change from 0 to 512 [ 94.222526][ T8028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.222737][ T8028] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.225194][ T8030] FAULT_INJECTION: forcing a failure. [ 94.225194][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 94.225222][ T8030] CPU: 0 UID: 0 PID: 8030 Comm: syz.6.1747 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.225250][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.225264][ T8030] Call Trace: [ 94.225271][ T8030] [ 94.225279][ T8030] __dump_stack+0x1d/0x30 [ 94.225306][ T8030] dump_stack_lvl+0x95/0xd0 [ 94.225369][ T8030] dump_stack+0x15/0x1b [ 94.225390][ T8030] should_fail_ex+0x262/0x280 [ 94.225416][ T8030] ? __se_sys_mount+0xef/0x2e0 [ 94.225435][ T8030] should_failslab+0x8c/0xb0 [ 94.225489][ T8030] __kmalloc_cache_noprof+0x5d/0x3e0 [ 94.225519][ T8030] ? __se_sys_mount+0xef/0x2e0 [ 94.225538][ T8030] __se_sys_mount+0xef/0x2e0 [ 94.225626][ T8030] ? restore_fpregs_from_fpstate+0x61/0x110 [ 94.225664][ T8030] __x64_sys_mount+0x67/0x80 [ 94.225686][ T8030] x64_sys_call+0xc3b/0x2550 [ 94.225717][ T8030] do_syscall_64+0x112/0x360 [ 94.225798][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.225823][ T8030] RIP: 0033:0x7f44b2d9f559 [ 94.225856][ T8030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.225878][ T8030] RSP: 002b:00007f44b17ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.225901][ T8030] RAX: ffffffffffffffda RBX: 00007f44b3025fa0 RCX: 00007f44b2d9f559 [ 94.225918][ T8030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.225934][ T8030] RBP: 00007f44b2e36b20 R08: 0000200000000140 R09: 0000000000000000 [ 94.225951][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.226042][ T8030] R13: 00007f44b3026038 R14: 00007f44b3025fa0 R15: 00007ffe1500d738 [ 94.226064][ T8030] [ 94.281136][ T8034] syz.6.1748 (8034): drop_caches: 0 [ 94.340391][ T8038] FAULT_INJECTION: forcing a failure. [ 94.340391][ T8038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.340423][ T8038] CPU: 0 UID: 0 PID: 8038 Comm: syz.4.1750 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.340467][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.340480][ T8038] Call Trace: [ 94.340488][ T8038] [ 94.340497][ T8038] __dump_stack+0x1d/0x30 [ 94.340525][ T8038] dump_stack_lvl+0x95/0xd0 [ 94.340587][ T8038] dump_stack+0x15/0x1b [ 94.340663][ T8038] should_fail_ex+0x262/0x280 [ 94.340702][ T8038] should_fail+0xb/0x20 [ 94.340722][ T8038] should_fail_usercopy+0x1a/0x20 [ 94.340750][ T8038] _copy_from_user+0x1c/0xb0 [ 94.340787][ T8038] __se_sys_rt_sigqueueinfo+0x5a/0x410 [ 94.340815][ T8038] ? xfd_validate_state+0x45/0xf0 [ 94.340844][ T8038] ? restore_fpregs_from_fpstate+0x61/0x110 [ 94.340934][ T8038] __x64_sys_rt_sigqueueinfo+0x43/0x50 [ 94.340963][ T8038] x64_sys_call+0x235b/0x2550 [ 94.340991][ T8038] do_syscall_64+0x112/0x360 [ 94.341056][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.341079][ T8038] RIP: 0033:0x7f58b34bf559 [ 94.341097][ T8038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.341187][ T8038] RSP: 002b:00007f58b1f17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 94.341215][ T8038] RAX: ffffffffffffffda RBX: 00007f58b3745fa0 RCX: 00007f58b34bf559 [ 94.341232][ T8038] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffffffffffffff [ 94.341247][ T8038] RBP: 00007f58b3556b20 R08: 0000000000000000 R09: 0000000000000000 [ 94.341261][ T8038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.341333][ T8038] R13: 00007f58b3746038 R14: 00007f58b3745fa0 R15: 00007ffeea742178 [ 94.341397][ T8038] [ 94.411855][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.543766][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1751'. [ 94.827920][ T5792] IPVS: starting estimator thread 0... [ 94.918034][ T8062] IPVS: using max 2640 ests per chain, 132000 per kthread [ 94.971823][ T8072] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.105719][ T8082] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 95.105737][ T8082] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1768'. [ 95.194954][ T5792] IPVS: starting estimator thread 0... [ 95.288171][ T8092] IPVS: using max 2496 ests per chain, 124800 per kthread [ 95.543565][ T8125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.569392][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1787'. [ 96.295961][ T8147] loop4: detected capacity change from 0 to 512 [ 96.296348][ T8147] EXT4-fs: Ignoring removed nobh option [ 96.296784][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 96.296796][ T29] audit: type=1400 audit(1793118695.898:1028): avc: denied { unmount } for pid=6518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 96.359856][ T8147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.359937][ T8147] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.397362][ T6072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.479903][ T8163] loop4: detected capacity change from 0 to 1024 [ 96.486053][ T8165] loop6: detected capacity change from 0 to 512 [ 96.495383][ T8163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.495518][ T8163] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.504679][ T8163] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: comm syz.4.1802: lblock 0 mapped to illegal pblock 0 (length 6) [ 96.515133][ T29] audit: type=1400 audit(1793118696.108:1029): avc: denied { write } for pid=8160 comm="syz.4.1802" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.532592][ T8163] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: comm syz.4.1802: lblock 0 mapped to illegal pblock 0 (length 1) [ 96.532757][ T8163] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 96.532824][ T8163] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.532824][ T8163] [ 96.584860][ T6072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.631295][ T8165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.631353][ T8165] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.641745][ T8165] netlink: 'syz.6.1804': attribute type 4 has an invalid length. [ 96.641763][ T8165] netlink: 'syz.6.1804': attribute type 5 has an invalid length. [ 96.641776][ T8165] netlink: 'syz.6.1804': attribute type 1 has an invalid length. [ 96.641788][ T8165] netlink: 'syz.6.1804': attribute type 4 has an invalid length. [ 96.641801][ T8165] netlink: 'syz.6.1804': attribute type 5 has an invalid length. [ 96.641813][ T8165] netlink: 'syz.6.1804': attribute type 1 has an invalid length. [ 96.641825][ T8165] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 96.716962][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.310749][ T8214] loop6: detected capacity change from 0 to 8192 [ 97.326303][ T8214] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.368502][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.368573][ T8214] FAT-fs (loop6): Filesystem has been set read-only [ 97.368914][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.369083][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.369214][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.369314][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.369423][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.369533][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.369573][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.369763][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.383731][ T8214] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 97.837980][ T29] audit: type=1400 audit(1793118697.438:1030): avc: denied { write } for pid=8250 comm="syz.0.1840" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.321070][ T29] audit: type=1400 audit(1793118697.928:1031): avc: denied { mount } for pid=8276 comm="syz.0.1849" name="/" dev="mqueue" ino=2439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.378026][ T8275] loop6: detected capacity change from 0 to 256 [ 98.576762][ T29] audit: type=1326 audit(1793118698.178:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.6.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b2d9f559 code=0x7ffc0000 [ 98.576871][ T29] audit: type=1326 audit(1793118698.178:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.6.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b2d9f559 code=0x7ffc0000 [ 98.576950][ T29] audit: type=1326 audit(1793118698.178:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.6.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b2d9f559 code=0x7ffc0000 [ 98.576977][ T29] audit: type=1326 audit(1793118698.178:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.6.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f44b2d9f559 code=0x7ffc0000 [ 98.577006][ T29] audit: type=1326 audit(1793118698.178:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.6.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b2d9f559 code=0x7ffc0000 [ 98.663053][ T29] audit: type=1326 audit(1793118698.178:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.6.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f44b2d9f559 code=0x7ffc0000 [ 98.758877][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.759167][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.357807][ T8361] netlink: 'syz.4.1888': attribute type 10 has an invalid length. [ 99.368751][ T8362] FAULT_INJECTION: forcing a failure. [ 99.368751][ T8362] name fail_futex, interval 1, probability 0, space 0, times 1 [ 99.368783][ T8362] CPU: 0 UID: 0 PID: 8362 Comm: syz.5.1889 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.368823][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.368835][ T8362] Call Trace: [ 99.368852][ T8362] [ 99.368859][ T8362] __dump_stack+0x1d/0x30 [ 99.368944][ T8362] dump_stack_lvl+0x95/0xd0 [ 99.368967][ T8362] dump_stack+0x15/0x1b [ 99.368987][ T8362] should_fail_ex+0x262/0x280 [ 99.369054][ T8362] should_fail+0xb/0x20 [ 99.369118][ T8362] get_futex_key+0x12c/0xc40 [ 99.369146][ T8362] futex_wake+0x89/0x400 [ 99.369182][ T8362] do_futex+0x3f8/0x460 [ 99.369204][ T8362] __se_sys_futex+0x2f6/0x370 [ 99.369225][ T8362] ? xfd_validate_state+0x45/0xf0 [ 99.369310][ T8362] __x64_sys_futex+0x78/0x90 [ 99.369389][ T8362] x64_sys_call+0x22e2/0x2550 [ 99.369461][ T8362] do_syscall_64+0x112/0x360 [ 99.369490][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.369572][ T8362] RIP: 0033:0x7f253a3bf559 [ 99.369618][ T8362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.369678][ T8362] RSP: 002b:00007f2538e0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.369704][ T8362] RAX: ffffffffffffffda RBX: 00007f253a645fa0 RCX: 00007f253a3bf559 [ 99.369721][ T8362] RDX: 0000000000000002 RSI: 000000000000000a RDI: 0000000000000000 [ 99.369737][ T8362] RBP: 00007f253a456b20 R08: 0000000000000000 R09: 0000000000000002 [ 99.369753][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.369766][ T8362] R13: 00007f253a646038 R14: 00007f253a645fa0 R15: 00007ffedaaec8a8 [ 99.369877][ T8362] [ 99.397565][ T8364] batadv_slave_1: entered promiscuous mode [ 99.398550][ T8363] batadv_slave_1: left promiscuous mode [ 99.600069][ T23] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 99.608757][ T23] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 99.651541][ T8368] loop4: detected capacity change from 0 to 256 [ 100.007416][ T8425] Invalid argument reading file caps for ./file0 [ 100.120752][ T8440] tap0: tun_chr_ioctl cmd 1074025676 [ 100.120774][ T8440] tap0: owner set to 0 [ 100.253453][ T8452] loop6: detected capacity change from 0 to 1024 [ 100.274048][ T8452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.329541][ T6518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.704715][ T8485] loop5: detected capacity change from 0 to 256 [ 100.794424][ C1] ================================================================== [ 100.794457][ C1] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 100.794495][ C1] [ 100.794503][ C1] write to 0xffff8881036bd488 of 2 bytes by task 4268 on cpu 0: [ 100.794524][ C1] virtqueue_disable_cb+0x75/0x2c0 [ 100.794552][ C1] start_xmit+0x104/0x1bf0 [ 100.794576][ C1] dev_hard_start_xmit+0x10c/0x380 [ 100.794602][ C1] sch_direct_xmit+0x199/0x580 [ 100.794635][ C1] __dev_queue_xmit+0xda5/0x1ec0 [ 100.794663][ C1] ip_finish_output2+0x807/0x8e0 [ 100.794693][ C1] ip_finish_output+0x112/0x290 [ 100.794717][ C1] ip_output+0xbd/0x1c0 [ 100.794744][ C1] __ip_queue_xmit+0xb7c/0xbb0 [ 100.794772][ C1] ip_queue_xmit+0x39/0x50 [ 100.794800][ C1] __tcp_transmit_skb+0x1c5e/0x2110 [ 100.794833][ C1] tcp_write_xmit+0x17fd/0x3590 [ 100.794857][ C1] __tcp_push_pending_frames+0x6d/0x1b0 [ 100.794883][ C1] tcp_rcv_established+0xdc8/0x1330 [ 100.794915][ C1] tcp_v4_do_rcv+0x3b1/0xa20 [ 100.794934][ C1] tcp_v4_rcv+0x190e/0x1c50 [ 100.794954][ C1] ip_protocol_deliver_rcu+0x38c/0x7a0 [ 100.794988][ C1] ip_local_deliver_finish+0x1f0/0x2e0 [ 100.795011][ C1] ip_local_deliver+0xe8/0x1e0 [ 100.795031][ C1] ip_sublist_rcv+0x587/0x680 [ 100.795052][ C1] ip_list_rcv+0x261/0x290 [ 100.795072][ C1] __netif_receive_skb_list_core+0x4ef/0x520 [ 100.795104][ C1] netif_receive_skb_list_internal+0x471/0x5e0 [ 100.795137][ C1] napi_complete_done+0x19c/0x3f0 [ 100.795166][ C1] virtnet_poll+0x1b41/0x1fe0 [ 100.795198][ C1] __napi_poll+0x61/0x300 [ 100.795216][ C1] napi_threaded_poll_loop+0x1e9/0x6c0 [ 100.795236][ C1] napi_threaded_poll+0x193/0x240 [ 100.795252][ C1] kthread+0x223/0x270 [ 100.795277][ C1] ret_from_fork+0x146/0x330 [ 100.795309][ C1] ret_from_fork_asm+0x1a/0x30 [ 100.795335][ C1] [ 100.795340][ C1] read to 0xffff8881036bd488 of 2 bytes by interrupt on cpu 1: [ 100.795357][ C1] virtqueue_disable_cb+0x4c/0x2c0 [ 100.795379][ C1] skb_xmit_done+0x67/0x1a0 [ 100.795396][ C1] vring_interrupt+0x2d7/0x310 [ 100.795420][ C1] __handle_irq_event_percpu+0x8b/0x480 [ 100.795443][ C1] handle_irq_event+0x64/0xf0 [ 100.795463][ C1] handle_edge_irq+0x155/0x440 [ 100.795482][ C1] __common_interrupt+0x60/0xb0 [ 100.795510][ C1] common_interrupt+0x7e/0x90 [ 100.795537][ C1] asm_common_interrupt+0x26/0x40 [ 100.795558][ C1] do_syscall_64+0x112/0x360 [ 100.795579][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.795597][ C1] [ 100.795601][ C1] value changed: 0x0000 -> 0x0001 [ 100.795611][ C1] [ 100.795616][ C1] Reported by Kernel Concurrency Sanitizer on: [ 100.795629][ C1] CPU: 1 UID: 0 PID: 8431 Comm: syz.2.1921 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.795658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.795669][ C1] ================================================================== [ 100.885189][ T8506] loop6: detected capacity change from 0 to 8192 [ 100.995295][ T8511] ip6_tables: ip6tables: counters copy to user failed while replacing table