last executing test programs: 2m48.839273923s ago: executing program 32 (id=31): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000580)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@sysvgroups}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x126) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1\x00', 0x0) 2m23.789165129s ago: executing program 33 (id=429): r0 = io_uring_setup(0x6425, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x800001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/content\x00', 0x5) 2m17.583943386s ago: executing program 34 (id=509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(r0) 2m13.400011816s ago: executing program 35 (id=546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x6e22, 0xfe1f, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 2m2.945255655s ago: executing program 36 (id=658): preadv2(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0xfffffffd, 0x558, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x801, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0x400c4d05, &(0x7f0000000040)={0x12, 0x6, 0x5, 0x9, 0x1}) 1m44.622643241s ago: executing program 37 (id=916): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) 1m36.571829943s ago: executing program 7 (id=1026): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x11880, 0x0, 0x81, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000380)={0xb0000008}) 1m36.476294825s ago: executing program 7 (id=1027): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) 1m36.361406358s ago: executing program 7 (id=1028): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x841, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) fstat(r0, 0x0) 1m36.223228541s ago: executing program 7 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1m36.168231412s ago: executing program 7 (id=1033): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m36.031651486s ago: executing program 7 (id=1037): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x3400c8d4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 1m36.031501926s ago: executing program 38 (id=1037): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x3400c8d4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 45.152036206s ago: executing program 5 (id=1833): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r3, &(0x7f0000000a00)}, 0x20) 45.106730967s ago: executing program 5 (id=1835): r0 = getpid() socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setreuid(0xee01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000180)={0x20071026, r0}, 0x0) 45.068302818s ago: executing program 5 (id=1838): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x12}, {&(0x7f0000000180)=""/250, 0xfa}], 0x2}, 0x10009}], 0x1, 0x30100, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)='\x00', 0x1}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 44.375990355s ago: executing program 5 (id=1848): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x100) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) 44.286557007s ago: executing program 5 (id=1851): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.14478392s ago: executing program 5 (id=1854): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/57, 0x39}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 44.12489192s ago: executing program 39 (id=1854): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/57, 0x39}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 43.936597235s ago: executing program 8 (id=1859): connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e80)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 43.663301312s ago: executing program 8 (id=1864): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 43.594061623s ago: executing program 8 (id=1867): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x3}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 43.539791834s ago: executing program 8 (id=1869): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x267) 43.480030336s ago: executing program 8 (id=1871): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 43.341600679s ago: executing program 8 (id=1873): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x445, 0x0, &(0x7f0000000880)="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", 0x0, 0x3ff, 0x0, 0x95, 0x11, &(0x7f0000001980)="100d3ed3c2e94a82021a46c55272ea983b8ad8479baba0a68e1ffcbdbcd2850bf14cd4076eb529edaf1633cbdc8f439a21d0e62552984f5c045cb4943f676a825ca5e30113becb3e4f47e3e2a3be3d94f0c13671f67d5a4957fbdcc0a2f3a9673d48fb69416edfad40a51db8d7098df20cb1fe3c5bd370514eff5b2e23e2b50697d01aea251ef1f4f36ba37a08fabb4eadbc8efc77", &(0x7f0000001a40)="b292847ba0b07610ad15deb2aaec03906f", 0x5, 0x0, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r0}, 0x38) 43.29554451s ago: executing program 40 (id=1873): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x445, 0x0, &(0x7f0000000880)="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", 0x0, 0x3ff, 0x0, 0x95, 0x11, &(0x7f0000001980)="100d3ed3c2e94a82021a46c55272ea983b8ad8479baba0a68e1ffcbdbcd2850bf14cd4076eb529edaf1633cbdc8f439a21d0e62552984f5c045cb4943f676a825ca5e30113becb3e4f47e3e2a3be3d94f0c13671f67d5a4957fbdcc0a2f3a9673d48fb69416edfad40a51db8d7098df20cb1fe3c5bd370514eff5b2e23e2b50697d01aea251ef1f4f36ba37a08fabb4eadbc8efc77", &(0x7f0000001a40)="b292847ba0b07610ad15deb2aaec03906f", 0x5, 0x0, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r0}, 0x38) 36.106723721s ago: executing program 4 (id=1960): r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='stack\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 36.015682783s ago: executing program 4 (id=1971): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) 35.802618698s ago: executing program 4 (id=1966): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f00000000c0)) 35.73252903s ago: executing program 4 (id=1968): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 35.636562442s ago: executing program 4 (id=1973): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 34.739146864s ago: executing program 4 (id=1988): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) open_tree(r0, 0x0, 0x80800) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) 34.633069886s ago: executing program 41 (id=1988): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) open_tree(r0, 0x0, 0x80800) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) 22.343756499s ago: executing program 2 (id=2200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4800) 22.30523799s ago: executing program 2 (id=2201): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000741000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22.150002473s ago: executing program 2 (id=2202): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syslog(0x0, 0x0, 0x0) 22.035518936s ago: executing program 2 (id=2203): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, 0x0) 22.000965217s ago: executing program 2 (id=2205): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000480)='context\xc0\x01\xca\x9f\x98\x887\xa6tqB\xab`\x81\x85i\x16c)\xa5\x00\x00\x00\x00\xb9\xe7\x9fq\xf6\xc3\x92(\xac\x0e\x9c\x16*\xf9*H\xcb\x06\x0e\xa9 \x18y\x1692\xca\x82\xb1\xa0I\xce\xf5\xb3a:&\x0fm\xd2\x17\xd1\xb7b\xf8R\xc04\xe8', &(0x7f00000003c0)='ramfs\x18%\\b\x00\xf5c\xf8\xd2\xf2\xe4,\fq\xda\x92 \xe3X\xd8pdR\xb5\x18:\xb5\xbb\xce>H\xafVH4\xefei\x92T\x17\xeb\xea\xc7\xa7\x16\xd6\xaf\xb3h\x03\x99\x8e+\x97U\xff\xed\"\xf3\xe3\xc6zS\x19\x8e\x86\xb1&Q5\xe1z(iU\a\"\xed\xc1\xf7\xa0\xeb\xd5\xf5\xf2', 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 21.765780312s ago: executing program 2 (id=2208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 21.634665566s ago: executing program 42 (id=2208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.691623986s ago: executing program 0 (id=2557): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x25dfdbfe, {0xe}}, 0x1c}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 2.550434999s ago: executing program 0 (id=2560): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x2520, &(0x7f0000000080)={0x0, 0xe6d5, 0x40, 0x1, 0x3f}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2.470544471s ago: executing program 0 (id=2563): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x2f, 0x9, 0x70bd2a, 0x0, {0x5}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 2.277884866s ago: executing program 3 (id=2567): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000003f40)=@newtfilter={0x1034, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x1, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1008, 0x2, [@TCA_BPF_NAME={0x1004, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x1034}}, 0x0) 306.059663ms ago: executing program 1 (id=2604): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x4000) socket$rds(0x15, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x80140912, &(0x7f0000000380)) 272.033264ms ago: executing program 6 (id=2605): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x1, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') unshare(0x6020400) 269.213754ms ago: executing program 3 (id=2606): r0 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x4f) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 239.047125ms ago: executing program 3 (id=2607): pselect6(0x40, &(0x7f00000000c0)={0x3, 0xc, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) 227.458845ms ago: executing program 6 (id=2608): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x20001080) 210.196665ms ago: executing program 9 (id=2609): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=2610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd) write$binfmt_aout(r1, &(0x7f0000001340)={{0x108, 0x3, 0x81, 0x33e, 0x30a, 0x1, 0x63, 0x80}}, 0x20) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): tdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.618641][ T51] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.618802][ T51] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.618903][ T51] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.351010][ T9427] loop8: detected capacity change from 0 to 512 [ 160.367543][ T9427] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.367726][ T9427] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.376502][ T29] audit: type=1400 audit(1788633324.936:2746): avc: denied { write } for pid=9426 comm="syz.8.1725" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.425175][ T5255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.444052][ T29] audit: type=1400 audit(1788633325.006:2747): avc: denied { getopt } for pid=9434 comm="syz.8.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.500558][ T8494] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 160.508831][ T8494] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.743567][ T9445] lo: left promiscuous mode [ 160.775359][ T9326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.961408][ T9451] loop5: detected capacity change from 0 to 512 [ 160.989319][ T9451] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 160.989539][ T9451] loop5: lost filesystem error report for type 5 error -117 [ 161.003408][ T9451] EXT4-fs (loop5): 2 truncates cleaned up [ 161.011414][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 161.011447][ C0] EXT4-fs (loop5): initial error at time 1788633325: ext4_process_orphan:346 [ 161.011475][ C0] EXT4-fs (loop5): last error at time 1788633325: ext4_process_orphan:346 [ 161.092596][ T9451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.231485][ T5128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.281330][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1747'. [ 161.370177][ T9484] FAULT_INJECTION: forcing a failure. [ 161.370177][ T9484] name failslab, interval 1, probability 0, space 0, times 0 [ 161.370233][ T9484] CPU: 1 UID: 0 PID: 9484 Comm: syz.1.1749 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.370305][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.370374][ T9484] Call Trace: [ 161.370401][ T9484] [ 161.370434][ T9484] __dump_stack+0x1d/0x30 [ 161.370599][ T9484] dump_stack_lvl+0x95/0xd0 [ 161.370678][ T9484] dump_stack+0x15/0x1b [ 161.370769][ T9484] should_fail_ex+0x262/0x280 [ 161.370944][ T9484] should_failslab+0x8c/0xb0 [ 161.371054][ T9484] kmem_cache_alloc_bulk_noprof+0x65/0x410 [ 161.371185][ T9484] bpf_test_run_xdp_live+0xeeb/0x1330 [ 161.371308][ T9484] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 161.371447][ T9484] ? bpf_test_run_xdp_live+0x436/0x1330 [ 161.371598][ T9484] bpf_prog_test_run_xdp+0x559/0x9e0 [ 161.371764][ T9484] ? __rcu_read_unlock+0x4e/0x70 [ 161.371948][ T9484] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 161.372010][ T9484] bpf_prog_test_run+0x208/0x340 [ 161.372036][ T9484] __sys_bpf+0x8da/0xc30 [ 161.372097][ T9484] ? do_futex+0x350/0x460 [ 161.372274][ T9484] __x64_sys_bpf+0x69/0x80 [ 161.372360][ T9484] x64_sys_call+0xf26/0x2550 [ 161.372448][ T9484] do_syscall_64+0x112/0x360 [ 161.372599][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.372683][ T9484] RIP: 0033:0x7f1726e9e159 [ 161.372745][ T9484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.372809][ T9484] RSP: 002b:00007f17258f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.372875][ T9484] RAX: ffffffffffffffda RBX: 00007f1727125fa0 RCX: 00007f1726e9e159 [ 161.373010][ T9484] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 161.373056][ T9484] RBP: 00007f1726f35024 R08: 0000000000000000 R09: 0000000000000000 [ 161.373112][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.373157][ T9484] R13: 00007f1727126038 R14: 00007f1727125fa0 R15: 00007ffd85737d58 [ 161.373234][ T9484] [ 161.688723][ T9503] FAULT_INJECTION: forcing a failure. [ 161.688723][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 161.688779][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: syz.5.1757 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.688819][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.688837][ T9503] Call Trace: [ 161.688848][ T9503] [ 161.688911][ T9503] __dump_stack+0x1d/0x30 [ 161.688950][ T9503] dump_stack_lvl+0x95/0xd0 [ 161.689108][ T9503] dump_stack+0x15/0x1b [ 161.689141][ T9503] should_fail_ex+0x262/0x280 [ 161.689178][ T9503] should_failslab+0x8c/0xb0 [ 161.689303][ T9503] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 161.689399][ T9503] ? lookup_one_qstr_excl+0x160/0x240 [ 161.689508][ T9503] ? debugfs_alloc_inode+0x34/0x40 [ 161.689679][ T9503] ? debugfs_alloc_inode+0x34/0x40 [ 161.689854][ T9503] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 161.689955][ T9503] debugfs_alloc_inode+0x34/0x40 [ 161.690039][ T9503] alloc_inode+0x40/0x170 [ 161.690180][ T9503] new_inode+0x1d/0xe0 [ 161.690308][ T9503] debugfs_create_symlink+0x7c/0x150 [ 161.690413][ T9503] ref_tracker_dir_symlink+0x1ae/0x2d0 [ 161.690506][ T9503] ? __xas_nomem+0x5c/0x290 [ 161.690699][ T9503] net_ns_net_init+0x8f/0xa0 [ 161.690809][ T9503] ops_init+0x22a/0x2e0 [ 161.690937][ T9503] setup_net+0x9f/0x230 [ 161.691133][ T9503] copy_net_ns+0x333/0x490 [ 161.691220][ T9503] create_new_namespaces+0x1f6/0x420 [ 161.691396][ T9503] unshare_nsproxy_namespaces+0x115/0x150 [ 161.691540][ T9503] ksys_unshare+0x42b/0x710 [ 161.691691][ T9503] __x64_sys_unshare+0x1f/0x30 [ 161.691803][ T9503] x64_sys_call+0x1e33/0x2550 [ 161.691910][ T9503] do_syscall_64+0x112/0x360 [ 161.692037][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.692140][ T9503] RIP: 0033:0x7f926778e159 [ 161.692222][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.692295][ T9503] RSP: 002b:00007f92661e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 161.692396][ T9503] RAX: ffffffffffffffda RBX: 00007f9267a15fa0 RCX: 00007f926778e159 [ 161.692463][ T9503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 161.692534][ T9503] RBP: 00007f9267825024 R08: 0000000000000000 R09: 0000000000000000 [ 161.692583][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.692629][ T9503] R13: 00007f9267a16038 R14: 00007f9267a15fa0 R15: 00007ffd6b9e1ec8 [ 161.692710][ T9503] [ 161.713560][ T9503] debugfs: out of free dentries, can not create symlink 'netns-113-4026533536-notrefcnt' [ 161.821828][ T9510] loop4: detected capacity change from 0 to 512 [ 161.850279][ T9510] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 161.850396][ T9510] loop4: lost filesystem error report for type 5 error -117 [ 161.851124][ T9510] EXT4-fs (loop4): 2 truncates cleaned up [ 161.852320][ T9510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.036781][ T7239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.123742][ T8505] kernel read not supported for file /kmsg (pid: 8505 comm: kworker/1:17) [ 162.185368][ T9523] syzkaller0: entered promiscuous mode [ 162.185396][ T9523] syzkaller0: entered allmulticast mode [ 162.354756][ T29] audit: type=1400 audit(1788633326.916:2748): avc: denied { setopt } for pid=9556 comm="syz.9.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.515841][ T9579] futex_wake_op: syz.4.1778 tries to shift op by 144; fix this program [ 162.530051][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 162.538012][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 162.539063][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 162.688258][ T9591] ip6gre1: entered allmulticast mode [ 162.698684][ T324] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.950770][ T9600] xt_ecn: cannot match TCP bits for non-tcp packets [ 163.174869][ T29] audit: type=1400 audit(1788633327.736:2749): avc: denied { mount } for pid=9647 comm="syz.1.1784" name="/" dev="autofs" ino=24242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 163.175270][ T9650] loop8: detected capacity change from 0 to 128 [ 163.179450][ T9650] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.179688][ T9650] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.250926][ T29] audit: type=1400 audit(1788633327.816:2750): avc: denied { write } for pid=9648 comm="syz.8.1783" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.360117][ T5255] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.517272][ T29] audit: type=1400 audit(1788633328.086:2751): avc: denied { ioctl } for pid=9666 comm="syz.9.1789" path="socket:[24268]" dev="sockfs" ino=24268 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 163.565962][ T9579] infiniband syz0: set down [ 163.566177][ T8505] vcan0 speed is unknown, defaulting to 1000 [ 163.592209][ T9579] infiniband syz0: added vcan0 [ 163.592838][ T9579] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 163.595473][ T9579] infiniband syz0: Couldn't open port 1 [ 163.621619][ T9579] RDS/IB: syz0: added [ 163.621652][ T9579] smc: adding ib device syz0 with port count 1 [ 163.621672][ T9579] smc: ib device syz0 port 1 has no pnetid [ 163.622260][ T8505] vcan0 speed is unknown, defaulting to 1000 [ 163.631726][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 163.741343][ T29] audit: type=1400 audit(1788633328.306:2752): avc: denied { setopt } for pid=9676 comm="syz.9.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.750720][ T29] audit: type=1400 audit(1788633328.316:2753): avc: denied { bind } for pid=9676 comm="syz.9.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.895329][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 164.058602][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 164.170497][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 164.325902][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 164.395565][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 164.395596][ T29] audit: type=1400 audit(1788633328.956:2757): avc: denied { write } for pid=9716 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.497189][ T9722] IPv6: Can't replace route, no match found [ 164.526374][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 164.688499][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1818'. [ 164.734031][ T29] audit: type=1400 audit(1788633329.296:2758): avc: denied { read } for pid=9733 comm="syz.8.1820" path="socket:[24380]" dev="sockfs" ino=24380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.792077][ T8505] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0003/input/input7 [ 164.795937][ T8505] hid-generic 0005:057C:0306.0003: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 164.808518][ T9738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.829072][ T9738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.836889][ T9736] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 164.837007][ T9736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.837107][ T9736] vhci_hcd vhci_hcd.0: Device attached [ 164.866609][ T9741] vhci_hcd: connection closed [ 164.866904][ T53] vhci_hcd vhci_hcd.4: stop threads [ 164.866934][ T53] vhci_hcd vhci_hcd.4: release socket [ 164.866955][ T53] vhci_hcd vhci_hcd.4: disconnect device [ 164.933434][ T9740] fido_id[9740]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.149873][ T9752] loop8: detected capacity change from 0 to 128 [ 165.165250][ T9752] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 165.165618][ T9752] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.192720][ T29] audit: type=1400 audit(1788633329.756:2759): avc: denied { write } for pid=9751 comm="syz.8.1826" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.396831][ T5255] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.640570][ T9779] FAULT_INJECTION: forcing a failure. [ 165.640570][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 165.640730][ T9779] CPU: 1 UID: 0 PID: 9779 Comm: syz.1.1839 Not tainted syzkaller #0 PREEMPT(lazy) [ 165.640773][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.640792][ T9779] Call Trace: [ 165.640820][ T9779] [ 165.640831][ T9779] __dump_stack+0x1d/0x30 [ 165.640866][ T9779] dump_stack_lvl+0x95/0xd0 [ 165.641032][ T9779] dump_stack+0x15/0x1b [ 165.641097][ T9779] should_fail_ex+0x262/0x280 [ 165.641128][ T9779] ? iovec_from_user+0x84/0x200 [ 165.641184][ T9779] should_failslab+0x8c/0xb0 [ 165.641223][ T9779] __kmalloc_noprof+0xd0/0x4d0 [ 165.641295][ T9779] ? iovec_from_user+0x84/0x200 [ 165.641333][ T9779] iovec_from_user+0x84/0x200 [ 165.641363][ T9779] __import_iovec+0xf3/0x530 [ 165.641407][ T9779] import_iovec+0x60/0x80 [ 165.641443][ T9779] vfs_writev+0xf6/0x8c0 [ 165.641557][ T9779] __se_sys_pwritev2+0xfc/0x1c0 [ 165.641637][ T9779] __x64_sys_pwritev2+0x67/0x80 [ 165.641673][ T9779] x64_sys_call+0x899/0x2550 [ 165.641701][ T9779] do_syscall_64+0x112/0x360 [ 165.641743][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.641847][ T9779] RIP: 0033:0x7f1726e9e159 [ 165.641882][ T9779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.641923][ T9779] RSP: 002b:00007f17258f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 165.642030][ T9779] RAX: ffffffffffffffda RBX: 00007f1727125fa0 RCX: 00007f1726e9e159 [ 165.642092][ T9779] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003 [ 165.642132][ T9779] RBP: 00007f1726f35024 R08: 0000000000000000 R09: 0000000000000022 [ 165.642194][ T9779] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 165.642310][ T9779] R13: 00007f1727126038 R14: 00007f1727125fa0 R15: 00007ffd85737d58 [ 165.642384][ T9779] [ 165.904242][ T9789] tipc: Started in network mode [ 165.904316][ T9789] tipc: Node identity ac1414aa, cluster identity 4711 [ 165.904525][ T9789] tipc: New replicast peer: 172.20.20.187 [ 165.904629][ T9789] tipc: Enabled bearer , priority 10 [ 166.013135][ T9794] FAULT_INJECTION: forcing a failure. [ 166.013135][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 166.013180][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.8.1846 Not tainted syzkaller #0 PREEMPT(lazy) [ 166.013206][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.013220][ T9794] Call Trace: [ 166.013228][ T9794] [ 166.013237][ T9794] __dump_stack+0x1d/0x30 [ 166.013278][ T9794] dump_stack_lvl+0x95/0xd0 [ 166.013310][ T9794] dump_stack+0x15/0x1b [ 166.013333][ T9794] should_fail_ex+0x262/0x280 [ 166.013371][ T9794] ? security_file_alloc+0x32/0xf0 [ 166.013412][ T9794] should_failslab+0x8c/0xb0 [ 166.013442][ T9794] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 166.013530][ T9794] ? security_file_alloc+0x32/0xf0 [ 166.013569][ T9794] security_file_alloc+0x32/0xf0 [ 166.013604][ T9794] init_file+0x5b/0x1b0 [ 166.013640][ T9794] alloc_empty_file+0x85/0x1e0 [ 166.013667][ T9794] alloc_file_pseudo+0x92/0x120 [ 166.013751][ T9794] anon_inode_getfile_fmode+0xa5/0x140 [ 166.013940][ T9794] do_signalfd4+0x156/0x320 [ 166.014021][ T9794] __x64_sys_signalfd+0xbe/0xf0 [ 166.014159][ T9794] x64_sys_call+0x115b/0x2550 [ 166.014260][ T9794] do_syscall_64+0x112/0x360 [ 166.014373][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.014459][ T9794] RIP: 0033:0x7fe87e9ae159 [ 166.014538][ T9794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.014645][ T9794] RSP: 002b:00007fe87d407028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 166.014769][ T9794] RAX: ffffffffffffffda RBX: 00007fe87ec35fa0 RCX: 00007fe87e9ae159 [ 166.014821][ T9794] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 166.014922][ T9794] RBP: 00007fe87ea45024 R08: 0000000000000000 R09: 0000000000000000 [ 166.014974][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.015012][ T9794] R13: 00007fe87ec36038 R14: 00007fe87ec35fa0 R15: 00007ffdc6c24bb8 [ 166.015177][ T9794] [ 166.196629][ T9796] loop8: detected capacity change from 0 to 128 [ 166.203653][ T9796] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 166.371944][ T29] audit: type=1400 audit(1788633330.936:2760): avc: denied { unmount } for pid=5128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.543452][ T9811] FAULT_INJECTION: forcing a failure. [ 166.543452][ T9811] name failslab, interval 1, probability 0, space 0, times 0 [ 166.543537][ T9811] CPU: 1 UID: 0 PID: 9811 Comm: syz.9.1855 Not tainted syzkaller #0 PREEMPT(lazy) [ 166.543567][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.543580][ T9811] Call Trace: [ 166.543586][ T9811] [ 166.543594][ T9811] __dump_stack+0x1d/0x30 [ 166.543621][ T9811] dump_stack_lvl+0x95/0xd0 [ 166.543740][ T9811] dump_stack+0x15/0x1b [ 166.543869][ T9811] should_fail_ex+0x262/0x280 [ 166.543975][ T9811] should_failslab+0x8c/0xb0 [ 166.544081][ T9811] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 166.544187][ T9811] ? sock_alloc_inode+0x36/0xf0 [ 166.544355][ T9811] ? sock_alloc_inode+0x36/0xf0 [ 166.544451][ T9811] ? selinux_socket_create+0xfd/0x180 [ 166.544549][ T9811] ? __pfx_sock_alloc_inode+0x10/0x10 [ 166.544673][ T9811] sock_alloc_inode+0x36/0xf0 [ 166.544821][ T9811] alloc_inode+0x40/0x170 [ 166.544985][ T9811] __sock_create+0x121/0x580 [ 166.545080][ T9811] __sys_socketpair+0x1c4/0x430 [ 166.545263][ T9811] __x64_sys_socketpair+0x52/0x60 [ 166.545359][ T9811] x64_sys_call+0x1bf7/0x2550 [ 166.545454][ T9811] do_syscall_64+0x112/0x360 [ 166.545594][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.545677][ T9811] RIP: 0033:0x7eff4f61e159 [ 166.545762][ T9811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.545828][ T9811] RSP: 002b:00007eff4e077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 166.545947][ T9811] RAX: ffffffffffffffda RBX: 00007eff4f8a5fa0 RCX: 00007eff4f61e159 [ 166.545999][ T9811] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 166.546042][ T9811] RBP: 00007eff4f6b5024 R08: 0000000000000000 R09: 0000000000000000 [ 166.546107][ T9811] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 166.546159][ T9811] R13: 00007eff4f8a6038 R14: 00007eff4f8a5fa0 R15: 00007ffefb62ae48 [ 166.546223][ T9811] [ 166.552798][ T9811] socket: no more sockets [ 166.830229][ T29] audit: type=1400 audit(1788633331.396:2761): avc: denied { sys_module } for pid=9819 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.914870][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 167.015072][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.015577][ T8505] tipc: Node number set to 2886997162 [ 167.041522][ T9819] vcan0 speed is unknown, defaulting to 1000 [ 167.085698][ T29] audit: type=1400 audit(1788633331.656:2762): avc: denied { name_bind } for pid=9839 comm="syz.8.1867" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 167.132176][ T29] audit: type=1400 audit(1788633331.696:2763): avc: denied { mounton } for pid=9844 comm="syz.8.1869" path="/283/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 167.384786][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.384838][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.384968][ T9819] bridge_slave_0: entered allmulticast mode [ 167.387664][ T9819] bridge_slave_0: entered promiscuous mode [ 167.390328][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.390369][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.390559][ T9819] bridge_slave_1: entered allmulticast mode [ 167.391624][ T9819] bridge_slave_1: entered promiscuous mode [ 167.457945][ T9819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.463775][ T9819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.510534][ T9819] team0: Port device team_slave_0 added [ 167.511852][ T9819] team0: Port device team_slave_1 added [ 167.574171][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.574197][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.574255][ T9819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.634452][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.634508][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.634578][ T9819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.670446][ T53] rpcbind: server 127.0.0.1 not responding, timed out [ 167.752609][ T9635] bond0 (unregistering): Released all slaves [ 167.791270][ T9819] hsr_slave_0: entered promiscuous mode [ 167.792866][ T9819] hsr_slave_1: entered promiscuous mode [ 167.793497][ T9819] debugfs: 'hsr0' already exists in 'hsr' [ 167.793539][ T9819] Cannot create hsr debugfs directory [ 167.810359][ T9876] vcan0 speed is unknown, defaulting to 1000 [ 167.935130][ T29] audit: type=1400 audit(1788633332.496:2764): avc: denied { write } for pid=9886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.961321][ T9819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.979738][ T9898] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1880'. [ 168.003127][ T29] audit: type=1400 audit(1788633332.566:2765): avc: denied { write } for pid=9899 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.027750][ T9868] vcan0 speed is unknown, defaulting to 1000 [ 168.059348][ T9819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.071500][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 168.122144][ T29] audit: type=1326 audit(1788633332.686:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.1.1882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1726e9e159 code=0x7ffc0000 [ 168.186941][ T9819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.228260][ T9819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.348727][ T9819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.362813][ T9819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.363755][ T9819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.391659][ T9819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.394977][ T9819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.412156][ T9819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.429630][ T9819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.447451][ T9819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.456946][ T9635] IPVS: stop unused estimator thread 0... [ 168.520247][ T9622] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.522005][ T9943] FAULT_INJECTION: forcing a failure. [ 168.522005][ T9943] name failslab, interval 1, probability 0, space 0, times 0 [ 168.522109][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.4.1889 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.522189][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.522237][ T9943] Call Trace: [ 168.522287][ T9943] [ 168.522309][ T9943] __dump_stack+0x1d/0x30 [ 168.522395][ T9943] dump_stack_lvl+0x95/0xd0 [ 168.522472][ T9943] dump_stack+0x15/0x1b [ 168.522557][ T9943] should_fail_ex+0x262/0x280 [ 168.522638][ T9943] ? get_callchain_buffers+0xbe/0x2f0 [ 168.522727][ T9943] should_failslab+0x8c/0xb0 [ 168.522834][ T9943] __kmalloc_noprof+0xd0/0x4d0 [ 168.522961][ T9943] ? __kmalloc_node_noprof+0x34a/0x500 [ 168.523057][ T9943] ? get_callchain_buffers+0xbe/0x2f0 [ 168.523167][ T9943] get_callchain_buffers+0xbe/0x2f0 [ 168.523247][ T9943] stack_map_alloc+0x247/0x2b0 [ 168.523399][ T9943] map_create+0xaf2/0xfe0 [ 168.523500][ T9943] __sys_bpf+0x99a/0xc30 [ 168.523585][ T9943] ? do_futex+0x350/0x460 [ 168.523701][ T9943] __x64_sys_bpf+0x69/0x80 [ 168.523783][ T9943] x64_sys_call+0xf26/0x2550 [ 168.523871][ T9943] do_syscall_64+0x112/0x360 [ 168.523982][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.524066][ T9943] RIP: 0033:0x7fcbe780e159 [ 168.524218][ T9943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.524354][ T9943] RSP: 002b:00007fcbe6267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.524414][ T9943] RAX: ffffffffffffffda RBX: 00007fcbe7a95fa0 RCX: 00007fcbe780e159 [ 168.524456][ T9943] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 168.524506][ T9943] RBP: 00007fcbe78a5024 R08: 0000000000000000 R09: 0000000000000000 [ 168.524550][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.524588][ T9943] R13: 00007fcbe7a96038 R14: 00007fcbe7a95fa0 R15: 00007ffc54e36388 [ 168.524684][ T9943] [ 168.730192][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.730286][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.730602][ T9868] bridge_slave_0: entered allmulticast mode [ 168.735791][ T9868] bridge_slave_0: entered promiscuous mode [ 168.741437][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.741543][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.748083][ T9868] bridge_slave_1: entered allmulticast mode [ 168.751189][ T9868] bridge_slave_1: entered promiscuous mode [ 168.809098][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 168.810335][ T9952] syz_tun: left promiscuous mode [ 168.820071][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.830094][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.857287][ T9868] team0: Port device team_slave_0 added [ 168.861491][ T9868] team0: Port device team_slave_1 added [ 168.903077][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.903102][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.903199][ T9868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.908805][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.908866][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.909002][ T9868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.016499][ T9868] hsr_slave_0: entered promiscuous mode [ 169.016936][ T9868] hsr_slave_1: entered promiscuous mode [ 169.030076][ T9819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.767454][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 169.815448][ T9819] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.835201][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.835300][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.842760][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.842876][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.948415][ T9976] loop4: detected capacity change from 0 to 512 [ 169.982677][ T9819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.049464][ T9976] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1896: bg 0: block 5: invalid block bitmap [ 170.049600][ T9976] loop4: lost filesystem error report for type 5 error -117 [ 170.062270][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 170.062296][ C1] EXT4-fs (loop4): initial error at time 1788633334: ext4_validate_block_bitmap:436 [ 170.062328][ C1] EXT4-fs (loop4): last error at time 1788633334: ext4_validate_block_bitmap:436 [ 170.099339][ T9976] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 170.099458][ T9976] loop4: lost filesystem error report for type 5 error -117 [ 170.112321][ T9976] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1896: invalid indirect mapped block 3 (level 2) [ 170.112711][ T9976] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.157481][ T9992] FAULT_INJECTION: forcing a failure. [ 170.157481][ T9992] name failslab, interval 1, probability 0, space 0, times 0 [ 170.157528][ T9992] CPU: 0 UID: 0 PID: 9992 Comm: syz.9.1899 Not tainted syzkaller #0 PREEMPT(lazy) [ 170.157632][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.157650][ T9992] Call Trace: [ 170.157658][ T9992] [ 170.157669][ T9992] __dump_stack+0x1d/0x30 [ 170.157713][ T9992] dump_stack_lvl+0x95/0xd0 [ 170.157740][ T9992] dump_stack+0x15/0x1b [ 170.157829][ T9992] should_fail_ex+0x262/0x280 [ 170.157860][ T9992] ? prepare_creds+0x38/0x550 [ 170.157892][ T9992] should_failslab+0x8c/0xb0 [ 170.157931][ T9992] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 170.157978][ T9992] ? prepare_creds+0x38/0x550 [ 170.158092][ T9992] prepare_creds+0x38/0x550 [ 170.158188][ T9992] set_current_groups+0x1b/0x180 [ 170.158290][ T9992] __se_sys_setgroups+0x286/0x310 [ 170.158440][ T9992] __x64_sys_setgroups+0x31/0x40 [ 170.158525][ T9992] x64_sys_call+0x1916/0x2550 [ 170.158624][ T9992] do_syscall_64+0x112/0x360 [ 170.158783][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.158938][ T9992] RIP: 0033:0x7eff4f61e159 [ 170.158970][ T9992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.159086][ T9992] RSP: 002b:00007eff4e077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 170.159125][ T9992] RAX: ffffffffffffffda RBX: 00007eff4f8a5fa0 RCX: 00007eff4f61e159 [ 170.159172][ T9992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.159216][ T9992] RBP: 00007eff4f6b5024 R08: 0000000000000000 R09: 0000000000000000 [ 170.159260][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.159309][ T9992] R13: 00007eff4f8a6038 R14: 00007eff4f8a5fa0 R15: 00007ffefb62ae48 [ 170.159394][ T9992] [ 170.243721][ T9976] EXT4-fs (loop4): 1 orphan inode deleted [ 170.243740][ T9976] EXT4-fs (loop4): 1 truncate cleaned up [ 170.253169][ T9976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.386975][ T9635] bond1 (unregistering): (slave gretap1): Releasing active interface [ 170.403611][ T9635] bond2 (unregistering): (slave geneve2): Releasing active interface [ 170.406903][ T7239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.449273][ T9635] bond0 (unregistering): Released all slaves [ 170.450563][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 170.450590][ T29] audit: type=1400 audit(1788633335.016:2776): avc: denied { write } for pid=9984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.463492][ T9635] bond1 (unregistering): Released all slaves [ 170.485967][ T9635] bond2 (unregistering): Released all slaves [ 170.522732][ T29] audit: type=1400 audit(1788633335.086:2777): avc: denied { write } for pid=10007 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.545181][ T4088] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.619871][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 170.712957][ T9635] tipc: Disabling bearer [ 170.712999][ T9635] tipc: Left network mode [ 170.798330][ T29] audit: type=1400 audit(1788633335.356:2778): avc: denied { read write } for pid=10021 comm="syz.1.1905" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.798419][ T29] audit: type=1400 audit(1788633335.366:2779): avc: denied { open } for pid=10021 comm="syz.1.1905" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.824318][ T29] audit: type=1400 audit(1788633335.366:2780): avc: denied { ioctl } for pid=10021 comm="syz.1.1905" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.922380][ T9819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.951892][T10033] vcan0 speed is unknown, defaulting to 1000 [ 170.974574][ T29] audit: type=1400 audit(1788633335.536:2781): avc: denied { write } for pid=10019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.012821][ T29] audit: type=1400 audit(1788633335.576:2782): avc: denied { write } for pid=10045 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.104292][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 171.239267][ T9819] veth0_vlan: entered promiscuous mode [ 171.247699][ T9819] veth1_vlan: entered promiscuous mode [ 171.282578][ T9819] veth0_macvtap: entered promiscuous mode [ 171.286143][ T9819] veth1_macvtap: entered promiscuous mode [ 171.301245][ T29] audit: type=1400 audit(1788633335.866:2783): avc: denied { write } for pid=10055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.305778][ T9819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.320452][ T9819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.376238][ T29] audit: type=1326 audit(1788633335.936:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.4.1910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe780e159 code=0x7ffc0000 [ 171.376288][ T29] audit: type=1400 audit(1788633335.946:2786): avc: denied { write } for pid=10070 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.435805][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.464079][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 171.475459][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.475546][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.475606][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.657568][T10093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10093 comm=syz.2.1915 [ 171.744623][ T9868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.756277][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.759176][ T9868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.772056][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.779090][ T9868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.799115][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.807236][ T9868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.816124][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.869755][T10085] program syz.4.1913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.906166][ T9868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.918099][ T9868] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.931811][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.931861][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.948279][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.948329][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.227894][ T9868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.486119][ T9868] veth0_vlan: entered promiscuous mode [ 172.503006][ T9868] veth1_vlan: entered promiscuous mode [ 172.558140][ T9868] veth0_macvtap: entered promiscuous mode [ 172.570079][ T9868] veth1_macvtap: entered promiscuous mode [ 172.598224][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.609333][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.637023][ T3435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.637119][ T3435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.637157][ T3435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.637368][ T3435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.886937][T10197] FAULT_INJECTION: forcing a failure. [ 172.886937][T10197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.887003][T10197] CPU: 0 UID: 0 PID: 10197 Comm: syz.4.1930 Not tainted syzkaller #0 PREEMPT(lazy) [ 172.887102][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.887119][T10197] Call Trace: [ 172.887127][T10197] [ 172.887199][T10197] __dump_stack+0x1d/0x30 [ 172.887229][T10197] dump_stack_lvl+0x95/0xd0 [ 172.887252][T10197] dump_stack+0x15/0x1b [ 172.887276][T10197] should_fail_ex+0x262/0x280 [ 172.887307][T10197] should_fail+0xb/0x20 [ 172.887375][T10197] should_fail_usercopy+0x1a/0x20 [ 172.887400][T10197] _copy_from_user+0x1c/0xb0 [ 172.887471][T10197] bpf_vlog_reverse_ubuf+0x9f/0x360 [ 172.887673][T10197] bpf_vlog_finalize+0x11a/0x200 [ 172.887840][T10197] bpf_log_attr_finalize+0x33/0x100 [ 172.887927][T10197] btf_new_fd+0x34a/0x670 [ 172.888045][T10197] bpf_btf_load+0x116/0x130 [ 172.888225][T10197] __sys_bpf+0xbce/0xc30 [ 172.888313][T10197] ? do_futex+0x350/0x460 [ 172.888440][T10197] __x64_sys_bpf+0x69/0x80 [ 172.888516][T10197] x64_sys_call+0xf26/0x2550 [ 172.888676][T10197] do_syscall_64+0x112/0x360 [ 172.888829][T10197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.888956][T10197] RIP: 0033:0x7fcbe780e159 [ 172.889025][T10197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.889089][T10197] RSP: 002b:00007fcbe6267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.889209][T10197] RAX: ffffffffffffffda RBX: 00007fcbe7a95fa0 RCX: 00007fcbe780e159 [ 172.889303][T10197] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 172.889403][T10197] RBP: 00007fcbe78a5024 R08: 0000000000000000 R09: 0000000000000000 [ 172.889447][T10197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.889497][T10197] R13: 00007fcbe7a96038 R14: 00007fcbe7a95fa0 R15: 00007ffc54e36388 [ 172.889585][T10197] [ 173.283328][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 173.382108][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 173.479380][T10227] netlink: 'syz.1.1936': attribute type 3 has an invalid length. [ 173.479406][T10227] netlink: 'syz.1.1936': attribute type 1 has an invalid length. [ 173.479423][T10227] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1936'. [ 173.671231][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 173.733881][T10252] FAULT_INJECTION: forcing a failure. [ 173.733881][T10252] name failslab, interval 1, probability 0, space 0, times 0 [ 173.733918][T10252] CPU: 0 UID: 0 PID: 10252 Comm: syz.9.1944 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.733944][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.734096][T10252] Call Trace: [ 173.734128][T10252] [ 173.734161][T10252] __dump_stack+0x1d/0x30 [ 173.734250][T10252] dump_stack_lvl+0x95/0xd0 [ 173.734377][T10252] dump_stack+0x15/0x1b [ 173.734452][T10252] should_fail_ex+0x262/0x280 [ 173.734598][T10252] should_failslab+0x8c/0xb0 [ 173.734703][T10252] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 173.734815][T10252] ? kstrdup_const+0x3e/0x50 [ 173.734958][T10252] ? kstrdup_const+0x3e/0x50 [ 173.735032][T10252] kstrdup+0x3e/0xd0 [ 173.735097][T10252] kstrdup_const+0x3e/0x50 [ 173.735169][T10252] alloc_vfsmnt+0xe2/0x2f0 [ 173.735310][T10252] clone_mnt+0x30/0x5d0 [ 173.735398][T10252] ? copy_tree+0xa3/0x890 [ 173.735515][T10252] copy_tree+0xb9/0x890 [ 173.735679][T10252] ? proc_alloc_inum+0x4f/0x70 [ 173.735754][T10252] ? __ns_common_init+0xd7/0x120 [ 173.735819][T10252] ? __ns_tree_gen_id+0x48/0x60 [ 173.735972][T10252] copy_mnt_ns+0x1d2/0x720 [ 173.736088][T10252] create_new_namespaces+0x7f/0x420 [ 173.736210][T10252] unshare_nsproxy_namespaces+0x115/0x150 [ 173.736397][T10252] ksys_unshare+0x42b/0x710 [ 173.736543][T10252] __x64_sys_unshare+0x1f/0x30 [ 173.736632][T10252] x64_sys_call+0x1e33/0x2550 [ 173.736725][T10252] do_syscall_64+0x112/0x360 [ 173.736845][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.736927][T10252] RIP: 0033:0x7eff4f61e159 [ 173.737077][T10252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.737141][T10252] RSP: 002b:00007eff4e077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 173.737214][T10252] RAX: ffffffffffffffda RBX: 00007eff4f8a5fa0 RCX: 00007eff4f61e159 [ 173.737286][T10252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 173.737331][T10252] RBP: 00007eff4f6b5024 R08: 0000000000000000 R09: 0000000000000000 [ 173.737455][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.737506][T10252] R13: 00007eff4f8a6038 R14: 00007eff4f8a5fa0 R15: 00007ffefb62ae48 [ 173.737571][T10252] [ 174.102445][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1948'. [ 174.126020][T10271] ip6gre1: entered promiscuous mode [ 174.126050][T10271] ip6gre1: entered allmulticast mode [ 174.203917][T10274] loop4: detected capacity change from 0 to 1024 [ 174.237237][T10274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.237379][T10274] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.283799][T10274] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.1950: lblock 3 mapped to illegal pblock 3 (length 3) [ 174.289583][T10274] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 174.289680][T10274] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.289680][T10274] [ 174.309896][T10274] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm syz.4.1950: lblock 8 mapped to illegal pblock 8 (length 8) [ 174.310920][T10274] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 174.311060][T10274] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.311060][T10274] [ 174.415825][ T7239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.498390][T10297] loop0: detected capacity change from 0 to 1024 [ 174.528217][T10297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.709324][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.982583][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 175.062320][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1974'. [ 175.321239][T10355] bond2: Invalid ad_actor_system MAC address. [ 175.321270][T10355] bond2: option ad_actor_system: invalid value (1) [ 175.337903][T10355] bond2 (unregistering): Released all slaves [ 175.373993][ T9622] IPVS: starting estimator thread 0... [ 175.465342][T10365] IPVS: using max 1920 ests per chain, 96000 per kthread [ 175.585420][T10385] vcan0: left promiscuous mode [ 175.599310][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 175.599364][ T29] audit: type=1400 audit(1788633340.166:2845): avc: denied { write } for pid=10360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.710307][ T29] audit: type=1400 audit(1788633340.276:2846): avc: denied { write } for pid=10394 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.895014][ T29] audit: type=1400 audit(1788633340.456:2847): avc: denied { write } for pid=10398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.944320][ T29] audit: type=1400 audit(1788633340.506:2848): avc: denied { write } for pid=10414 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.083514][ T29] audit: type=1400 audit(1788633340.646:2849): avc: denied { mount } for pid=10423 comm="syz.0.1992" name="/" dev="hugetlbfs" ino=27899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 176.119732][ T9635] bond0 (unregistering): Released all slaves [ 176.128787][ T9635] bond1 (unregistering): Released all slaves [ 176.215602][ T29] audit: type=1400 audit(1788633340.776:2850): avc: denied { write } for pid=10418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.276111][ T29] audit: type=1400 audit(1788633340.846:2851): avc: denied { write } for pid=10441 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.345729][T10427] vcan0 speed is unknown, defaulting to 1000 [ 176.487190][ T29] audit: type=1400 audit(1788633341.056:2852): avc: denied { write } for pid=10447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.571760][ T29] audit: type=1400 audit(1788633341.136:2853): avc: denied { write } for pid=10463 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.746269][T10469] loop2: detected capacity change from 0 to 512 [ 176.850576][ T53] smc: removing ib device syz0 [ 176.854333][ T29] audit: type=1400 audit(1788633341.416:2854): avc: denied { write } for pid=10470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.903724][T10487] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 177.126947][T10502] loop0: detected capacity change from 0 to 512 [ 177.139138][T10502] EXT4-fs (loop0): 1 truncate cleaned up [ 177.140065][T10502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.165968][T10502] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2004: invalid indirect mapped block 234881024 (level 0) [ 177.180290][T10502] EXT4-fs (loop0): Remounting filesystem read-only [ 177.209753][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.307352][T10469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.320701][T10469] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.406873][ T9819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.625171][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.625217][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.625350][T10427] bridge_slave_0: entered allmulticast mode [ 177.652959][T10427] bridge_slave_0: entered promiscuous mode [ 177.654606][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.654761][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.654948][T10427] bridge_slave_1: entered allmulticast mode [ 177.657307][T10427] bridge_slave_1: entered promiscuous mode [ 177.773900][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.787245][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.849979][T10427] team0: Port device team_slave_0 added [ 177.853153][T10427] team0: Port device team_slave_1 added [ 177.910648][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.910676][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.910714][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.916660][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.916718][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.916833][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.072129][T10427] hsr_slave_0: entered promiscuous mode [ 178.072719][T10427] hsr_slave_1: entered promiscuous mode [ 178.072969][T10427] debugfs: 'hsr0' already exists in 'hsr' [ 178.072992][T10427] Cannot create hsr debugfs directory [ 178.075946][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 178.113430][ T9635] IPVS: stop unused estimator thread 0... [ 178.226951][ T9635] bridge_slave_1: left allmulticast mode [ 178.227017][ T9635] bridge_slave_1: left promiscuous mode [ 178.227177][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.236815][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.354730][ T9635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.364425][ T9635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.375676][ T9635] bond0 (unregistering): Released all slaves [ 178.449493][ T9635] hsr_slave_0: left promiscuous mode [ 178.455740][ T9635] hsr_slave_1: left promiscuous mode [ 178.607064][ T9635] team0 (unregistering): Port device team_slave_1 removed [ 178.644594][ T9635] team0 (unregistering): Port device team_slave_0 removed [ 178.727472][ T9635] team0 (unregistering): Port device dummy0 removed [ 178.744137][T10594] loop1: detected capacity change from 0 to 512 [ 178.772396][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 178.798533][T10594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.798618][T10594] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.841070][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.034143][T10427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.047832][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.051458][T10427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.080659][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.086848][T10427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.097618][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.103870][T10427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.119705][T10427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.259517][T10633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2026'. [ 179.316276][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.350269][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.362343][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.362393][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.378952][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.379019][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.415683][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 179.710567][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.804131][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 180.009887][T10427] veth0_vlan: entered promiscuous mode [ 180.023198][T10427] veth1_vlan: entered promiscuous mode [ 180.089800][T10427] veth0_macvtap: entered promiscuous mode [ 180.101309][T10427] veth1_macvtap: entered promiscuous mode [ 180.159066][T10427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.178447][T10427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.225279][T10703] netlink: 'syz.0.2033': attribute type 4 has an invalid length. [ 180.238504][T10703] netlink: 'syz.0.2033': attribute type 4 has an invalid length. [ 180.265059][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.265125][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.265198][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.265243][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.396899][T10720] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1991'. [ 180.614114][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 180.614215][ T29] audit: type=1400 audit(1788633345.176:2872): avc: denied { write } for pid=10721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.678478][ T29] audit: type=1400 audit(1788633345.246:2873): avc: denied { write } for pid=10746 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.699356][T10743] loop3: detected capacity change from 0 to 256 [ 180.709037][T10743] msdos: Bad value for 'check' [ 180.801136][T10729] loop0: detected capacity change from 0 to 512 [ 180.909815][T10729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.911053][T10729] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.003497][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.045226][ T29] audit: type=1400 audit(1788633345.672:2874): avc: denied { write } for pid=10748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.107783][ T29] audit: type=1400 audit(1788633345.732:2875): avc: denied { write } for pid=10772 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.176402][T10771] FAULT_INJECTION: forcing a failure. [ 181.176402][T10771] name failslab, interval 1, probability 0, space 0, times 0 [ 181.176483][T10771] CPU: 0 UID: 0 PID: 10771 Comm: syz.0.2047 Not tainted syzkaller #0 PREEMPT(lazy) [ 181.176549][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.176566][T10771] Call Trace: [ 181.176619][T10771] [ 181.176656][T10771] __dump_stack+0x1d/0x30 [ 181.176746][T10771] dump_stack_lvl+0x95/0xd0 [ 181.176894][T10771] dump_stack+0x15/0x1b [ 181.177013][T10771] should_fail_ex+0x262/0x280 [ 181.177101][T10771] ? usb_alloc_urb+0x42/0xc0 [ 181.177189][T10771] should_failslab+0x8c/0xb0 [ 181.177292][T10771] __kmalloc_noprof+0xd0/0x4d0 [ 181.177392][T10771] ? usb_alloc_urb+0x42/0xc0 [ 181.177550][T10771] ? usb_control_msg+0x58/0x240 [ 181.177656][T10771] usb_alloc_urb+0x42/0xc0 [ 181.177747][T10771] usb_control_msg+0xc0/0x240 [ 181.177923][T10771] hub_ext_port_status+0xb4/0x410 [ 181.178013][T10771] ? schedule_timeout+0x103/0x180 [ 181.178227][T10771] hub_activate+0x4d4/0x1180 [ 181.178310][T10771] hub_resume+0x47/0x1e0 [ 181.178427][T10771] usb_resume_both+0x3ea/0x5b0 [ 181.178533][T10771] ? __pfx_usb_runtime_resume+0x10/0x10 [ 181.178620][T10771] usb_runtime_resume+0x21/0x30 [ 181.178749][T10771] __rpm_callback+0x2e6/0x6d0 [ 181.178880][T10771] ? __pfx_usb_runtime_resume+0x10/0x10 [ 181.179087][T10771] rpm_resume+0x94e/0xce0 [ 181.179182][T10771] __pm_runtime_resume+0xd6/0x100 [ 181.179263][T10771] usb_autoresume_device+0x23/0xc0 [ 181.179352][T10771] usbdev_open+0x102/0x450 [ 181.179498][T10771] chrdev_open+0x2eb/0x3a0 [ 181.179631][T10771] do_dentry_open+0x49f/0xa60 [ 181.179753][T10771] ? __pfx_chrdev_open+0x10/0x10 [ 181.179935][T10771] ? may_open+0x1ee/0x350 [ 181.180061][T10771] vfs_open+0x37/0x1e0 [ 181.180210][T10771] path_openat+0xc01/0x10d0 [ 181.180309][T10771] do_file_open+0x16c/0x290 [ 181.180443][T10771] do_sys_openat2+0xa0/0x130 [ 181.180557][T10771] __x64_sys_openat+0xf2/0x120 [ 181.180656][T10771] x64_sys_call+0x1f72/0x2550 [ 181.180691][T10771] do_syscall_64+0x112/0x360 [ 181.180774][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.180856][T10771] RIP: 0033:0x7f580c73e98e [ 181.180925][T10771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.180967][T10771] RSP: 002b:00007f580b1d6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.181094][T10771] RAX: ffffffffffffffda RBX: 00007f580b1d76c0 RCX: 00007f580c73e98e [ 181.181152][T10771] RDX: 0000000000000000 RSI: 00007f580b1d6c00 RDI: ffffffffffffff9c [ 181.181197][T10771] RBP: 00007f580b1d6c00 R08: 0000000000000000 R09: 0000000000000000 [ 181.181249][T10771] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 181.181294][T10771] R13: 00007f580ca06038 R14: 00007f580ca05fa0 R15: 00007ffcf6fe59b8 [ 181.181365][T10771] [ 181.231676][T10778] loop3: detected capacity change from 0 to 764 [ 181.579994][ T29] audit: type=1400 audit(1788633346.202:2876): avc: denied { connect } for pid=10792 comm="syz.3.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.678639][ T29] audit: type=1400 audit(1788633346.302:2877): avc: denied { write } for pid=10777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.770758][ T29] audit: type=1400 audit(1788633346.392:2878): avc: denied { write } for pid=10823 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.836886][T10822] loop1: detected capacity change from 0 to 4096 [ 181.868305][T10822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.902512][ T29] audit: type=1400 audit(1788633346.522:2879): avc: denied { write } for pid=10819 comm="syz.1.2059" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.045740][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.101639][ T29] audit: type=1400 audit(1788633346.722:2880): avc: denied { write } for pid=10826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.158385][T10856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2067'. [ 182.184968][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.185261][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.185445][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.185619][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.185767][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.196957][ T29] audit: type=1400 audit(1788633346.812:2881): avc: denied { write } for pid=10861 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.275252][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.275463][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.305298][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.314308][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.333860][T10859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=10859 comm=syz.1.2065 [ 182.451774][T10868] bridge_slave_0: left allmulticast mode [ 182.451818][T10868] bridge_slave_0: left promiscuous mode [ 182.452022][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.471265][T10876] netlink: 'syz.2.2070': attribute type 10 has an invalid length. [ 182.507034][T10868] bridge_slave_1: left allmulticast mode [ 182.507063][T10868] bridge_slave_1: left promiscuous mode [ 182.507251][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.553477][T10868] bond0: (slave bond_slave_0): Releasing backup interface [ 182.617931][T10868] bond0: (slave bond_slave_1): Releasing backup interface [ 182.688504][T10868] team0: Port device team_slave_0 removed [ 182.716018][T10868] team0: Port device team_slave_1 removed [ 182.721383][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.721438][T10868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.758710][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.758746][T10868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.790099][T10868] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.824070][T10876] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 183.009152][T10916] loop0: detected capacity change from 0 to 2048 [ 183.036039][T10916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.138187][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.471243][T10958] loop1: detected capacity change from 0 to 164 [ 183.484873][T10958] Format for deleting device is "id" (uint). [ 183.730223][T10984] loop0: detected capacity change from 0 to 512 [ 183.748807][T10984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.748897][T10984] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.931514][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.965183][T10968] loop1: detected capacity change from 0 to 512 [ 184.099879][T10968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.127262][T10968] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.284280][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.435455][T11043] loop0: detected capacity change from 0 to 512 [ 184.443072][T11043] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.2102: Unrecognised inode hash code 255 [ 184.443175][T11043] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2102: Corrupt directory, running e2fsck is recommended [ 184.521844][T11043] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 184.521906][T11043] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.2102: corrupted in-inode xattr: invalid ea_ino [ 184.522005][T11043] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.535229][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 184.535368][ C0] EXT4-fs (loop0): initial error at time 1788633349: ext4_iget_extra_inode:5210: inode 15 [ 184.535873][ C0] EXT4-fs (loop0): last error at time 1788633349: ext4_iget_extra_inode:5210: inode 15 [ 184.554945][T11043] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2102: couldn't read orphan inode 15 (err -117) [ 184.554999][T11043] loop0: lost filesystem error report for type 5 error -117 [ 184.588219][T11043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.649570][T11043] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.2102: Unrecognised inode hash code 255 [ 184.649685][T11043] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2102: Corrupt directory, running e2fsck is recommended [ 184.691779][T11033] loop1: detected capacity change from 0 to 8192 [ 184.852939][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.172410][T11107] loop3: detected capacity change from 0 to 512 [ 185.174441][T11107] EXT4-fs: Ignoring removed oldalloc option [ 185.179689][T11107] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.2115: bg 0: block 5: invalid block bitmap [ 185.179923][T11107] loop3: lost filesystem error report for type 5 error -117 [ 185.181552][T11107] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 185.181636][T11107] loop3: lost filesystem error report for type 5 error -117 [ 185.182692][T11107] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2115: invalid indirect mapped block 3 (level 2) [ 185.182793][T11107] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 185.184413][T11107] EXT4-fs (loop3): 1 orphan inode deleted [ 185.184475][T11107] EXT4-fs (loop3): 1 truncate cleaned up [ 185.189669][T11107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.204101][T11107] EXT4-fs (loop3): shut down requested (0) [ 185.303090][T11116] netlink: 'syz.9.2117': attribute type 5 has an invalid length. [ 185.303119][T11116] netlink: 'syz.9.2117': attribute type 9 has an invalid length. [ 185.303158][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2117'. [ 185.351582][T10427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.394063][T11121] loop2: detected capacity change from 0 to 128 [ 185.425411][T11121] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.439916][T11121] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.441313][T11128] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.441462][T11128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.441565][T11128] IPv6: NLM_F_CREATE should be set when creating new route [ 185.444230][T11128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.444273][T11128] IPv6: NLM_F_CREATE should be set when creating new route [ 185.539025][T11121] Invalid argument reading file caps for ./file0 [ 185.560076][T11137] xt_hashlimit: size too large, truncated to 1048576 [ 185.601883][ T9819] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.915135][T11162] bridge_slave_0: left allmulticast mode [ 185.915170][T11162] bridge_slave_0: left promiscuous mode [ 185.915323][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.962899][T11164] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 185.968298][T11162] bridge_slave_1: left allmulticast mode [ 185.968365][T11162] bridge_slave_1: left promiscuous mode [ 185.968687][T11162] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.991943][T11162] bond0: (slave bond_slave_0): Releasing backup interface [ 186.024190][T11162] bond0: (slave bond_slave_1): Releasing backup interface [ 186.049872][T11162] team0: Port device team_slave_0 removed [ 186.065484][T11162] team0: Port device team_slave_1 removed [ 186.075796][T11162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.075831][T11162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.098752][T11162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.098788][T11162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.119104][T11173] loop3: detected capacity change from 0 to 512 [ 186.129209][T11173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.134169][T11162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.173778][T11173] EXT4-fs (loop3): 1 truncate cleaned up [ 186.174767][T11173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.195048][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 186.195098][ T29] audit: type=1400 audit(1788633350.852:3062): avc: denied { write } for pid=11170 comm="syz.3.2135" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.219401][T11164] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 186.377825][ T29] audit: type=1400 audit(1788633351.042:3063): avc: denied { append } for pid=11179 comm="syz.1.2140" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.420369][T10427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.500628][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2145'. [ 186.567866][T11200] lo: Caught tx_queue_len zero misconfig [ 186.812666][ T29] audit: type=1400 audit(1788633351.472:3064): avc: denied { write } for pid=11219 comm="syz.3.2156" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 186.949289][ T29] audit: type=1400 audit(1788633351.612:3065): avc: denied { write } for pid=11227 comm="syz.9.2160" path="socket:[30123]" dev="sockfs" ino=30123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.097588][T11238] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.097672][T11238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.097692][T11238] IPv6: NLM_F_CREATE should be set when creating new route [ 187.103154][T11238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.103246][T11238] IPv6: NLM_F_CREATE should be set when creating new route [ 187.190375][T11210] set_capacity_and_notify: 1 callbacks suppressed [ 187.198849][T11210] loop1: detected capacity change from 0 to 2048 [ 187.344903][T11255] netlink: 'syz.3.2168': attribute type 10 has an invalid length. [ 187.356526][T11249] bridge_slave_0: left allmulticast mode [ 187.356564][T11249] bridge_slave_0: left promiscuous mode [ 187.356700][T11249] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.366539][T11210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.417230][ T29] audit: type=1400 audit(1788633352.072:3066): avc: denied { remount } for pid=11209 comm="syz.1.2151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 187.422937][T11249] bridge_slave_1: left allmulticast mode [ 187.423004][T11249] bridge_slave_1: left promiscuous mode [ 187.423386][T11249] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.458997][T11249] bond0: (slave bond_slave_0): Releasing backup interface [ 187.468189][T11210] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 187.478675][T11249] bond0: (slave bond_slave_1): Releasing backup interface [ 187.494389][T11249] team0: Port device team_slave_0 removed [ 187.507152][T11249] team0: Port device team_slave_1 removed [ 187.514528][T11249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.514558][T11249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.521570][T11210] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 187.541754][T11249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.541779][T11249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.557471][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.569310][T11249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.618651][T11255] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 187.640025][T11265] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 188.078242][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2193'. [ 188.078307][T11311] netlink: 'syz.2.2193': attribute type 3 has an invalid length. [ 188.187175][ T29] audit: type=1400 audit(1788633352.852:3067): avc: denied { getopt } for pid=11317 comm="syz.3.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.371150][ T29] audit: type=1326 audit(1788633353.032:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.2.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b59ce159 code=0x7ffc0000 [ 188.371266][ T29] audit: type=1326 audit(1788633353.032:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.2.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f95b59ce159 code=0x7ffc0000 [ 188.372335][ T29] audit: type=1326 audit(1788633353.032:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.2.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b59ce159 code=0x7ffc0000 [ 188.373720][ T29] audit: type=1326 audit(1788633353.032:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.2.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f95b59ce159 code=0x7ffc0000 [ 188.492408][T11326] loop3: detected capacity change from 0 to 512 [ 188.600552][T11326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.600892][T11326] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.645807][T10427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.678626][T11340] FAULT_INJECTION: forcing a failure. [ 188.678626][T11340] name failslab, interval 1, probability 0, space 0, times 0 [ 188.678672][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.3.2204 Not tainted syzkaller #0 PREEMPT(lazy) [ 188.678705][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.678746][T11340] Call Trace: [ 188.678754][T11340] [ 188.678762][T11340] __dump_stack+0x1d/0x30 [ 188.678878][T11340] dump_stack_lvl+0x95/0xd0 [ 188.679007][T11340] dump_stack+0x15/0x1b [ 188.679088][T11340] should_fail_ex+0x262/0x280 [ 188.679187][T11340] ? sget_fc+0x4ad/0xf70 [ 188.679272][T11340] should_failslab+0x8c/0xb0 [ 188.679480][T11340] __kmalloc_cache_noprof+0x7a/0x400 [ 188.679586][T11340] ? sget_fc+0x4ad/0xf70 [ 188.679730][T11340] sget_fc+0x4ad/0xf70 [ 188.679794][T11340] ? __pfx_set_anon_super_fc+0x10/0x10 [ 188.679892][T11340] ? __kmalloc_cache_noprof+0x19b/0x400 [ 188.680029][T11340] ? mqueue_init_fs_context+0x38/0x2c0 [ 188.680187][T11340] ? __pfx_mqueue_fill_super+0x10/0x10 [ 188.680298][T11340] get_tree_nodev+0x2a/0x100 [ 188.680419][T11340] mqueue_get_tree+0x5d/0x80 [ 188.680492][T11340] vfs_get_tree+0x57/0x1d0 [ 188.680589][T11340] fc_mount_longterm+0x18/0xb0 [ 188.680736][T11340] mq_init_ns+0x2db/0x370 [ 188.680842][T11340] copy_ipcs+0x26d/0x460 [ 188.680918][T11340] create_new_namespaces+0x121/0x420 [ 188.681124][T11340] unshare_nsproxy_namespaces+0x115/0x150 [ 188.681250][T11340] ksys_unshare+0x42b/0x710 [ 188.681334][T11340] __x64_sys_unshare+0x1f/0x30 [ 188.681500][T11340] x64_sys_call+0x1e33/0x2550 [ 188.681568][T11340] do_syscall_64+0x112/0x360 [ 188.681685][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.681838][T11340] RIP: 0033:0x7f75545be159 [ 188.681894][T11340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.681964][T11340] RSP: 002b:00007f7553017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.682047][T11340] RAX: ffffffffffffffda RBX: 00007f7554845fa0 RCX: 00007f75545be159 [ 188.682100][T11340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 188.682154][T11340] RBP: 00007f7554655024 R08: 0000000000000000 R09: 0000000000000000 [ 188.682200][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.682261][T11340] R13: 00007f7554846038 R14: 00007f7554845fa0 R15: 00007ffecf914ad8 [ 188.682332][T11340] [ 188.940065][ T3435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.006462][T11344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.050564][ T3435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.070958][T11348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2209'. [ 189.082782][T11344] netlink: 'syz.9.2206': attribute type 10 has an invalid length. [ 189.091711][T11344] bridge0: left promiscuous mode [ 189.099832][T11344] bridge0: entered promiscuous mode [ 189.100503][T11344] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 189.126670][ T3435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.180580][ T3435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.240502][T11369] selinux_netlink_send: 21 callbacks suppressed [ 189.240556][T11369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11369 comm=syz.1.2214 [ 189.403194][ T3435] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 189.416664][ T3435] bond0 (unregistering): Released all slaves [ 189.472561][ T3435] hsr_slave_0: left promiscuous mode [ 189.472944][ T3435] hsr_slave_1: left promiscuous mode [ 189.485870][ T3435] veth1_macvtap: left promiscuous mode [ 189.485958][ T3435] veth0_macvtap: left promiscuous mode [ 189.486009][ T3435] veth1_vlan: left promiscuous mode [ 189.486069][ T3435] veth0_vlan: left promiscuous mode [ 189.768635][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 189.915593][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.915641][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.915777][T11350] bridge_slave_0: entered allmulticast mode [ 189.916378][T11350] bridge_slave_0: entered promiscuous mode [ 189.944220][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.944270][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.944425][T11350] bridge_slave_1: entered allmulticast mode [ 189.969111][T11350] bridge_slave_1: entered promiscuous mode [ 189.987233][T11350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.997971][T11350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.026257][T11350] team0: Port device team_slave_0 added [ 190.033628][T11350] team0: Port device team_slave_1 added [ 190.052699][T11350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.052720][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.052764][T11350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.171812][T11350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.171836][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.171882][T11350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.255338][T11350] hsr_slave_0: entered promiscuous mode [ 190.255734][T11350] hsr_slave_1: entered promiscuous mode [ 190.256074][T11350] debugfs: 'hsr0' already exists in 'hsr' [ 190.256091][T11350] Cannot create hsr debugfs directory [ 190.472812][T11488] netlink: 'syz.3.2225': attribute type 2 has an invalid length. [ 190.472966][T11490] program syz.1.2226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.500248][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 190.521877][T11493] loop1: detected capacity change from 0 to 512 [ 190.529387][T11493] EXT4-fs: Ignoring removed nobh option [ 190.578094][T11493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.578248][T11493] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.631560][T11499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2229'. [ 190.661576][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.818837][T11350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 190.827892][T11350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.834268][T11350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.847052][T11350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.855750][T11350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 190.867218][T11350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.872597][T11350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.882659][T11350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.942458][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 191.043513][T11350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.060822][T11350] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.069596][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.069645][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.090388][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.090437][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.196139][T11551] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.207605][T11551] bond1: (slave lo): Enslaving as an active interface with an up link [ 191.218422][T11551] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 191.284883][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 191.284912][ T29] audit: type=1400 audit(1788633355.942:3081): avc: denied { write } for pid=11547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.417325][ T29] audit: type=1400 audit(1788633356.082:3082): avc: denied { write } for pid=11573 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.491059][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 191.613969][T11350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.730132][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2244'. [ 191.775033][ T29] audit: type=1400 audit(1788633356.432:3083): avc: denied { write } for pid=11593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.892632][ T29] audit: type=1400 audit(1788633356.552:3084): avc: denied { write } for pid=11624 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.014551][T11350] veth0_vlan: entered promiscuous mode [ 192.023388][ T29] audit: type=1400 audit(1788633356.682:3085): avc: denied { firmware_load } for pid=11628 comm="syz.1.2248" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 192.048409][T11350] veth1_vlan: entered promiscuous mode [ 192.142740][T11350] veth0_macvtap: entered promiscuous mode [ 192.161029][T11350] veth1_macvtap: entered promiscuous mode [ 192.201877][T11350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.217974][T11350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.292764][ T29] audit: type=1400 audit(1788633356.952:3086): avc: denied { write } for pid=11634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.327362][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.338510][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.340616][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.340722][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.389551][ T29] audit: type=1400 audit(1788633357.052:3087): avc: denied { write } for pid=11654 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.616283][ T29] audit: type=1400 audit(1788633357.272:3088): avc: denied { write } for pid=11660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.754211][ T29] audit: type=1400 audit(1788633357.412:3089): avc: denied { write } for pid=11681 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.014846][ T29] audit: type=1400 audit(1788633357.672:3090): avc: denied { write } for pid=11699 comm="syz.6.2263" path="socket:[30610]" dev="sockfs" ino=30610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 193.584906][T11762] ip_tables: iptables: counters copy to user failed while replacing table [ 194.091549][T11811] loop3: detected capacity change from 0 to 512 [ 194.109485][T11811] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.2284: inode has both inline data and extents flags [ 194.109531][T11811] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.109848][T11811] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2284: couldn't read orphan inode 15 (err -117) [ 194.109888][T11811] loop3: lost filesystem error report for type 5 error -117 [ 194.123969][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 194.124012][ C1] EXT4-fs (loop3): initial error at time 1788633358: ext4_orphan_get:1403: inode 15 [ 194.124054][ C1] EXT4-fs (loop3): last error at time 1788633358: ext4_orphan_get:1408 [ 194.124544][T11811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.259730][T11815] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.266351][T11815] bond1: (slave lo): Enslaving as an active interface with an up link [ 194.271118][T11815] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 194.276190][T10427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.451543][T11830] FAULT_INJECTION: forcing a failure. [ 194.451543][T11830] name failslab, interval 1, probability 0, space 0, times 0 [ 194.451657][T11830] CPU: 0 UID: 0 PID: 11830 Comm: syz.6.2288 Not tainted syzkaller #0 PREEMPT(lazy) [ 194.451690][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.451710][T11830] Call Trace: [ 194.451721][T11830] [ 194.451732][T11830] __dump_stack+0x1d/0x30 [ 194.451760][T11830] dump_stack_lvl+0x95/0xd0 [ 194.451862][T11830] dump_stack+0x15/0x1b [ 194.451891][T11830] should_fail_ex+0x262/0x280 [ 194.451923][T11830] ? alloc_empty_file+0x70/0x1e0 [ 194.451950][T11830] should_failslab+0x8c/0xb0 [ 194.452125][T11830] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 194.452310][T11830] ? alloc_empty_file+0x70/0x1e0 [ 194.452397][T11830] alloc_empty_file+0x70/0x1e0 [ 194.452464][T11830] path_openat+0x50/0x10d0 [ 194.452592][T11830] do_file_open+0x16c/0x290 [ 194.452712][T11830] do_sys_openat2+0xa0/0x130 [ 194.452787][T11830] __x64_sys_openat+0xf2/0x120 [ 194.452969][T11830] x64_sys_call+0x1f72/0x2550 [ 194.453056][T11830] do_syscall_64+0x112/0x360 [ 194.453205][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.453282][T11830] RIP: 0033:0x7fcf35bce159 [ 194.453411][T11830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.453483][T11830] RSP: 002b:00007fcf34627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.453571][T11830] RAX: ffffffffffffffda RBX: 00007fcf35e55fa0 RCX: 00007fcf35bce159 [ 194.453624][T11830] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 194.453655][T11830] RBP: 00007fcf35c65024 R08: 0000000000000000 R09: 0000000000000000 [ 194.453668][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.453680][T11830] R13: 00007fcf35e56038 R14: 00007fcf35e55fa0 R15: 00007ffd8377b578 [ 194.453710][T11830] [ 194.651662][T11839] loop6: detected capacity change from 0 to 256 [ 194.913529][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2292'. [ 195.809448][T11930] FAULT_INJECTION: forcing a failure. [ 195.809448][T11930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.809509][T11930] CPU: 0 UID: 0 PID: 11930 Comm: syz.9.2304 Not tainted syzkaller #0 PREEMPT(lazy) [ 195.809541][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.809555][T11930] Call Trace: [ 195.809565][T11930] [ 195.809576][T11930] __dump_stack+0x1d/0x30 [ 195.809603][T11930] dump_stack_lvl+0x95/0xd0 [ 195.809692][T11930] dump_stack+0x15/0x1b [ 195.809716][T11930] should_fail_ex+0x262/0x280 [ 195.809745][T11930] should_fail+0xb/0x20 [ 195.809777][T11930] should_fail_usercopy+0x1a/0x20 [ 195.809809][T11930] _copy_from_user+0x1c/0xb0 [ 195.809842][T11930] core_sys_select+0x27d/0x730 [ 195.809909][T11930] __se_sys_pselect6+0x23f/0x2a0 [ 195.809978][T11930] __x64_sys_pselect6+0x78/0x90 [ 195.810016][T11930] x64_sys_call+0x1dfc/0x2550 [ 195.810044][T11930] do_syscall_64+0x112/0x360 [ 195.810085][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.810161][T11930] RIP: 0033:0x7eff4f61e159 [ 195.810178][T11930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.810197][T11930] RSP: 002b:00007eff4e077028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 195.810250][T11930] RAX: ffffffffffffffda RBX: 00007eff4f8a5fa0 RCX: 00007eff4f61e159 [ 195.810267][T11930] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 195.810286][T11930] RBP: 00007eff4f6b5024 R08: 0000200000000280 R09: 0000000000000000 [ 195.810306][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.810324][T11930] R13: 00007eff4f8a6038 R14: 00007eff4f8a5fa0 R15: 00007ffefb62ae48 [ 195.810418][T11930] [ 196.032027][T11934] loop3: detected capacity change from 0 to 8192 [ 196.246920][T11946] netlink: 'syz.6.2310': attribute type 1 has an invalid length. [ 196.290882][T11951] FAULT_INJECTION: forcing a failure. [ 196.290882][T11951] name failslab, interval 1, probability 0, space 0, times 0 [ 196.290932][T11951] CPU: 0 UID: 0 PID: 11951 Comm: syz.9.2312 Not tainted syzkaller #0 PREEMPT(lazy) [ 196.291039][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.291114][T11951] Call Trace: [ 196.291122][T11951] [ 196.291133][T11951] __dump_stack+0x1d/0x30 [ 196.291173][T11951] dump_stack_lvl+0x95/0xd0 [ 196.291240][T11951] dump_stack+0x15/0x1b [ 196.291336][T11951] should_fail_ex+0x262/0x280 [ 196.291367][T11951] should_failslab+0x8c/0xb0 [ 196.291408][T11951] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 196.291528][T11951] ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0 [ 196.291616][T11951] ? __d_alloc+0x34/0x320 [ 196.291647][T11951] ? __d_alloc+0x34/0x320 [ 196.291682][T11951] __d_alloc+0x34/0x320 [ 196.291712][T11951] ? d_alloc_anon+0xd/0x20 [ 196.291778][T11951] d_alloc_anon+0x17/0x20 [ 196.291811][T11951] path_from_stashed+0x1cf/0x330 [ 196.291834][T11951] ? __pfx_proc_ns_get_link+0x10/0x10 [ 196.291868][T11951] ns_get_path+0x62/0x80 [ 196.291977][T11951] proc_ns_get_link+0xdd/0x1c0 [ 196.292011][T11951] pick_link+0x4b1/0x8e0 [ 196.292097][T11951] step_into_slowpath+0x36a/0x4c0 [ 196.292125][T11951] path_openat+0x665/0x10d0 [ 196.292185][T11951] do_file_open+0x16c/0x290 [ 196.292266][T11951] do_sys_openat2+0xa0/0x130 [ 196.292297][T11951] __x64_sys_openat+0xf2/0x120 [ 196.292330][T11951] x64_sys_call+0x1f72/0x2550 [ 196.292505][T11951] do_syscall_64+0x112/0x360 [ 196.292667][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.292756][T11951] RIP: 0033:0x7eff4f5de98e [ 196.292810][T11951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.292874][T11951] RSP: 002b:00007eff4e076ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.292942][T11951] RAX: ffffffffffffffda RBX: 00007eff4e0776c0 RCX: 00007eff4f5de98e [ 196.292995][T11951] RDX: 0000000000000000 RSI: 00007eff4e076f90 RDI: ffffffffffffff9c [ 196.293072][T11951] RBP: 00007eff4f6b5024 R08: 0000000000000000 R09: 0000000000000000 [ 196.293109][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.293154][T11951] R13: 00007eff4f8a6038 R14: 00007eff4f8a5fa0 R15: 00007ffefb62ae48 [ 196.293230][T11951] [ 196.965102][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 196.965138][ T29] audit: type=1400 audit(1788633361.622:3141): avc: denied { write } for pid=11981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.065032][ T29] audit: type=1400 audit(1788633361.722:3142): avc: denied { write } for pid=12008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.333038][ T29] audit: type=1400 audit(1788633361.992:3143): avc: denied { write } for pid=12018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.401602][ T29] audit: type=1400 audit(1788633362.052:3144): avc: denied { write } for pid=12037 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.412874][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 197.675108][T12056] loop3: detected capacity change from 0 to 128 [ 197.739816][ T29] audit: type=1400 audit(1788633362.402:3145): avc: denied { write } for pid=12044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.813141][ T29] audit: type=1400 audit(1788633362.472:3146): avc: denied { write } for pid=12064 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.027970][ T29] audit: type=1326 audit(1788633362.692:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.9.2349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4f61e159 code=0x7ffc0000 [ 198.028021][ T29] audit: type=1326 audit(1788633362.692:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.9.2349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4f61e159 code=0x7ffc0000 [ 198.086549][ T29] audit: type=1326 audit(1788633362.752:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.9.2349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4f61e159 code=0x7ffc0000 [ 198.086591][ T29] audit: type=1326 audit(1788633362.752:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.9.2349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4f61e159 code=0x7ffc0000 [ 198.236072][T12093] loop1: detected capacity change from 0 to 512 [ 198.260797][T12093] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 198.261131][T12093] EXT4-fs (loop1): orphan cleanup on readonly fs [ 198.276242][T12093] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.276728][T12093] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 198.277116][T12093] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #16: comm syz.1.2352: inode has both inline data and extents flags [ 198.277201][T12093] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.277660][T12093] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2352: couldn't read orphan inode 16 (err -117) [ 198.277746][T12093] loop1: lost filesystem error report for type 5 error -117 [ 198.279219][T12093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.334121][T12093] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 198.419808][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.440283][T12104] gre1: entered promiscuous mode [ 198.440339][T12104] gre1: entered allmulticast mode [ 198.557674][T12115] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2357'. [ 199.317372][T12181] loop3: detected capacity change from 0 to 256 [ 199.675365][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2375'. [ 199.988531][T12232] loop6: detected capacity change from 0 to 512 [ 200.000994][T12232] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2378: inode has both inline data and extents flags [ 200.001118][T12232] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.001448][T12232] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2378: couldn't read orphan inode 15 (err -117) [ 200.001531][T12232] loop6: lost filesystem error report for type 5 error -117 [ 200.002194][T12232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.133355][T12206] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 200.557909][T12253] loop0: detected capacity change from 0 to 1024 [ 200.579060][T12253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.624448][T11350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.696879][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.951747][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2399'. [ 200.951778][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2399'. [ 200.951922][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2399'. [ 200.951942][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2399'. [ 200.953362][T12284] loop0: detected capacity change from 0 to 2048 [ 200.990460][T12284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.043034][T12284] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 201.043126][T12284] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 201.043191][T12284] EXT4-fs (loop0): This should not happen!! Data will be lost [ 201.043191][T12284] [ 201.043211][T12284] EXT4-fs (loop0): Total free blocks count 0 [ 201.043228][T12284] EXT4-fs (loop0): Free/Dirty block details [ 201.043270][T12284] EXT4-fs (loop0): free_blocks=4096 [ 201.043331][T12284] EXT4-fs (loop0): dirty_blocks=64 [ 201.043369][T12284] EXT4-fs (loop0): Block reservation details [ 201.043398][T12284] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 201.053547][T12283] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 201.448766][T12302] loop1: detected capacity change from 0 to 512 [ 201.479070][T12302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.479175][T12302] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.568779][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.669325][T12313] loop1: detected capacity change from 0 to 512 [ 201.688236][T12313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.688385][T12313] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.172856][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 202.172880][ T29] audit: type=1400 audit(1788633366.832:3254): avc: denied { append } for pid=12341 comm="syz.6.2421" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.215984][ T29] audit: type=1400 audit(1788633366.872:3255): avc: denied { ioctl } for pid=12341 comm="syz.6.2421" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 202.237712][T12345] loop0: detected capacity change from 0 to 512 [ 202.240703][T12345] EXT4-fs: Ignoring removed bh option [ 202.241435][T12345] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 202.248232][T12345] EXT4-fs (loop0): 1 truncate cleaned up [ 202.249273][T12345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.258159][ T29] audit: type=1400 audit(1788633366.922:3256): avc: denied { write } for pid=12344 comm="syz.0.2423" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.261734][ T29] audit: type=1400 audit(1788633366.922:3257): avc: denied { write } for pid=12344 comm="syz.0.2423" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.265226][ T29] audit: type=1400 audit(1788633366.922:3258): avc: denied { write } for pid=12344 comm="syz.0.2423" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.268173][ T29] audit: type=1400 audit(1788633366.922:3259): avc: denied { write } for pid=12344 comm="syz.0.2423" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.268288][ T29] audit: type=1400 audit(1788633366.922:3260): avc: denied { write } for pid=12344 comm="syz.0.2423" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.268403][ T29] audit: type=1400 audit(1788633366.922:3261): avc: denied { rename } for pid=12344 comm="syz.0.2423" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 202.448244][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.551286][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.590597][T12355] loop1: detected capacity change from 0 to 512 [ 202.610661][T12355] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 202.625668][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 202.625696][ C0] EXT4-fs (loop1): initial error at time 1788633367: ext4_mb_generate_buddy:1317 [ 202.625723][ C0] EXT4-fs (loop1): last error at time 1788633367: ext4_mb_generate_buddy:1317 [ 202.653629][T12355] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2426: attempt to clear invalid blocks 1024 len 1 [ 202.653755][T12355] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 202.667761][T12355] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2426: invalid indirect mapped block 1819239214 (level 0) [ 202.667885][T12355] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 202.702929][T12355] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2426: invalid indirect mapped block 33554432 (level 2) [ 202.702995][T12355] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 202.720640][T12355] EXT4-fs (loop1): 1 truncate cleaned up [ 202.721902][T12355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.757224][ T29] audit: type=1400 audit(1788633367.422:3262): avc: denied { write } for pid=12354 comm="syz.1.2426" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.835324][ T6692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.320979][ T29] audit: type=1400 audit(1788633367.982:3263): avc: denied { write } for pid=12395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.425173][ T9629] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.425291][ T9629] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.425359][ T9629] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.425467][ T9629] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.425689][ T8497] kernel read not supported for file /kmsg (pid: 8497 comm: kworker/1:12) [ 203.509575][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2453'. [ 203.509625][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2453'. [ 203.516307][T12434] geneve2: entered promiscuous mode [ 203.516372][T12434] geneve2: entered allmulticast mode [ 203.703860][T12457] syzkaller1: entered promiscuous mode [ 203.703900][T12457] syzkaller1: entered allmulticast mode [ 203.900945][T12466] loop0: detected capacity change from 0 to 128 [ 203.909070][T12466] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.922459][T12466] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.998352][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 204.112957][ T9868] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.247701][T12493] syzkaller1: entered promiscuous mode [ 204.247759][T12493] syzkaller1: entered allmulticast mode [ 204.338082][ T8497] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 204.340267][ T8497] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.084057][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 205.172585][T12543] tipc: Started in network mode [ 205.172607][T12543] tipc: Node identity aa3a, cluster identity 4711 [ 205.172623][T12543] tipc: Node number set to 43578 [ 205.378674][T12557] FAULT_INJECTION: forcing a failure. [ 205.378674][T12557] name failslab, interval 1, probability 0, space 0, times 0 [ 205.378717][T12557] CPU: 1 UID: 0 PID: 12557 Comm: syz.3.2502 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.378752][T12557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.378770][T12557] Call Trace: [ 205.378780][T12557] [ 205.378790][T12557] __dump_stack+0x1d/0x30 [ 205.378817][T12557] dump_stack_lvl+0x95/0xd0 [ 205.378840][T12557] dump_stack+0x15/0x1b [ 205.378864][T12557] should_fail_ex+0x262/0x280 [ 205.378886][T12557] ? vm_area_dup+0x33/0x300 [ 205.378926][T12557] should_failslab+0x8c/0xb0 [ 205.378968][T12557] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 205.379005][T12557] ? ktime_get+0x212/0x240 [ 205.379029][T12557] ? vm_area_dup+0x33/0x300 [ 205.379058][T12557] ? lapic_next_event+0x11/0x20 [ 205.379083][T12557] vm_area_dup+0x33/0x300 [ 205.379120][T12557] __split_vma+0xe4/0x720 [ 205.379152][T12557] ? __cgroup_account_cputime+0x83/0xa0 [ 205.379179][T12557] ? __mpol_equal+0xd3/0x1f0 [ 205.379207][T12557] ? can_vma_merge_left+0xda/0x3d0 [ 205.379236][T12557] vma_modify+0xc98/0xd50 [ 205.379268][T12557] vma_modify_policy+0x1b3/0x1f0 [ 205.379299][T12557] mbind_range+0x1bb/0x430 [ 205.379325][T12557] __se_sys_set_mempolicy_home_node+0x34b/0x4f0 [ 205.379371][T12557] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 205.379407][T12557] x64_sys_call+0x218/0x2550 [ 205.379436][T12557] do_syscall_64+0x112/0x360 [ 205.379485][T12557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.379516][T12557] RIP: 0033:0x7f75545be159 [ 205.379532][T12557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.379551][T12557] RSP: 002b:00007f7553017028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 205.379572][T12557] RAX: ffffffffffffffda RBX: 00007f7554845fa0 RCX: 00007f75545be159 [ 205.379592][T12557] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 205.379610][T12557] RBP: 00007f7554655024 R08: 0000000000000000 R09: 0000000000000000 [ 205.379629][T12557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.379646][T12557] R13: 00007f7554846038 R14: 00007f7554845fa0 R15: 00007ffecf914ad8 [ 205.379674][T12557] [ 205.656575][T12571] loop8: detected capacity change from 0 to 16384 [ 205.720990][T12571] I/O error, dev loop8, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 205.732887][T12571] I/O error, dev loop8, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 205.733019][T12571] I/O error, dev loop8, sector 3584 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.733060][T12571] Buffer I/O error on dev loop8, logical block 448, async page read [ 205.803152][T12570] I/O error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 205.803192][T12570] Buffer I/O error on dev loop8, logical block 0, lost async page write [ 205.803226][T12570] Buffer I/O error on dev loop8, logical block 1, lost async page write [ 205.803326][T12570] Buffer I/O error on dev loop8, logical block 2, lost async page write [ 205.803350][T12570] Buffer I/O error on dev loop8, logical block 3, lost async page write [ 205.803374][T12570] Buffer I/O error on dev loop8, logical block 4, lost async page write [ 205.803398][T12570] Buffer I/O error on dev loop8, logical block 5, lost async page write [ 205.803423][T12570] Buffer I/O error on dev loop8, logical block 6, lost async page write [ 205.803455][T12570] Buffer I/O error on dev loop8, logical block 7, lost async page write [ 205.803474][T12570] Buffer I/O error on dev loop8, logical block 8, lost async page write [ 205.894720][T12570] I/O error, dev loop8, sector 1024 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 205.908727][T12570] I/O error, dev loop8, sector 2048 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 205.921827][T12570] I/O error, dev loop8, sector 3072 op 0x1:(WRITE) flags 0x800800 phys_seg 64 prio class 2 [ 206.010028][T12587] loop0: detected capacity change from 0 to 8192 [ 206.192051][T12602] SELinux: failed to load policy [ 206.276164][T12615] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 206.285594][ T12] IPVS: starting estimator thread 0... [ 206.319603][T12620] loop8: detected capacity change from 0 to 16384 [ 206.375169][T12616] IPVS: using max 2160 ests per chain, 108000 per kthread [ 206.551154][T12627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.567253][T12627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.620956][T12630] netlink: 'syz.0.2524': attribute type 16 has an invalid length. [ 206.747147][T12634] IPVS: Scheduler module ip_vs_ not found [ 206.979390][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.979547][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.316428][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.316554][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.316601][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.316642][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.555046][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 207.555076][ T29] audit: type=1400 audit(1788633372.212:3303): avc: denied { write } for pid=12691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.627341][T12693] loop3: detected capacity change from 0 to 1024 [ 207.663375][ T29] audit: type=1400 audit(1788633372.322:3304): avc: denied { write } for pid=12714 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.869517][T12693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 207.895273][ T29] audit: type=1400 audit(1788633372.562:3305): avc: denied { listen } for pid=12733 comm="syz.1.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 207.926053][T12693] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.037595][ T29] audit: type=1400 audit(1788633372.662:3306): avc: denied { write } for pid=12690 comm="syz.3.2542" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.152724][ T3435] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 208.153002][ T3435] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 208.153041][ T3435] EXT4-fs (loop3): This should not happen!! Data will be lost [ 208.153041][ T3435] [ 208.154152][T10427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 208.411673][T12763] loop8: detected capacity change from 0 to 16384 [ 208.948589][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2575'. [ 208.969041][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2575'. [ 209.291113][T12794] loop6: detected capacity change from 0 to 512 [ 209.292953][T12794] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.299114][T12794] EXT4-fs (loop6): 1 truncate cleaned up [ 209.299933][T12794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.304141][ T29] audit: type=1400 audit(1788633373.962:3307): avc: denied { write } for pid=12793 comm="syz.6.2581" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.310998][T12775] loop0: detected capacity change from 0 to 1024 [ 209.356751][T12798] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 209.357570][ T29] audit: type=1400 audit(1788633374.022:3308): avc: denied { write } for pid=12793 comm="syz.6.2581" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.456523][T11350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.508515][T12775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.508618][T12775] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.524128][ T29] audit: type=1400 audit(1788633374.182:3309): avc: denied { write } for pid=12774 comm="syz.0.2573" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.571880][ T31] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 209.572501][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 209.572593][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 209.572593][ T31] [ 209.573437][ T31] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 209.574339][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 209.574423][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 209.574423][ T31] [ 209.581428][ T9868] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 209.584286][ T9868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.662165][ T29] audit: type=1400 audit(1788633374.322:3310): avc: denied { unmount } for pid=11350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 209.693929][T12807] all: renamed from bridge_slave_0 (while UP) [ 209.725848][T12811] loop6: detected capacity change from 0 to 256 [ 209.745352][T12811] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.862268][T12814] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 209.862318][T12814] FAT-fs (loop6): Filesystem has been set read-only [ 209.862349][T12814] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 209.893412][ T29] audit: type=1326 audit(1788633374.552:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.9.2589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4f61e159 code=0x7ffc0000 [ 209.893897][ T29] audit: type=1326 audit(1788633374.552:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.9.2589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4f61e159 code=0x7ffc0000 [ 210.127480][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2593'. [ 210.152996][T12827] team1: entered promiscuous mode [ 210.153030][T12827] team1: entered allmulticast mode [ 210.153276][T12827] 8021q: adding VLAN 0 to HW filter on device team1 [ 210.660724][T12870] ================================================================== [ 210.660784][T12870] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 210.660857][T12870] [ 210.660864][T12870] write to 0xffff88810a7853a0 of 8 bytes by task 12866 on cpu 0: [ 210.660882][T12870] shmem_file_splice_read+0x401/0x590 [ 210.660931][T12870] splice_direct_to_actor+0x261/0x680 [ 210.660982][T12870] do_splice_direct+0x119/0x1a0 [ 210.661027][T12870] do_sendfile+0x37d/0x640 [ 210.661046][T12870] __x64_sys_sendfile64+0x105/0x150 [ 210.661083][T12870] x64_sys_call+0x1015/0x2550 [ 210.661120][T12870] do_syscall_64+0x112/0x360 [ 210.661157][T12870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.661187][T12870] [ 210.661193][T12870] write to 0xffff88810a7853a0 of 8 bytes by task 12870 on cpu 1: [ 210.661214][T12870] shmem_file_splice_read+0x401/0x590 [ 210.661259][T12870] splice_direct_to_actor+0x261/0x680 [ 210.661299][T12870] do_splice_direct+0x119/0x1a0 [ 210.661339][T12870] do_sendfile+0x37d/0x640 [ 210.661362][T12870] __x64_sys_sendfile64+0x105/0x150 [ 210.661406][T12870] x64_sys_call+0x1015/0x2550 [ 210.661438][T12870] do_syscall_64+0x112/0x360 [ 210.661464][T12870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.661485][T12870] [ 210.661489][T12870] value changed: 0x00000000000026ee -> 0x00000000000026f3 [ 210.661504][T12870] [ 210.661510][T12870] Reported by Kernel Concurrency Sanitizer on: [ 210.661524][T12870] CPU: 1 UID: 0 PID: 12870 Comm: syz.9.2609 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.661559][T12870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.661574][T12870] ==================================================================