last executing test programs: 4m58.465103892s ago: executing program 32 (id=290): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f00000013c0)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) setgroups(0x0, 0x0) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 4m54.910177638s ago: executing program 33 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000100480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100000000000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m53.481172781s ago: executing program 34 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000003bc0)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000003c80)='.\x00', 0xffffffd3) setresuid(r1, r1, r1) rmdir(&(0x7f0000000000)='./sys\x00') 4m49.808469148s ago: executing program 35 (id=393): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ptrace(0x18, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0xa0000001}) 4m33.429493327s ago: executing program 36 (id=631): mkdirat(0xffffffffffffff9c, 0x0, 0x108) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r1, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000380)) 4m25.90932094s ago: executing program 37 (id=732): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003500)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003580)={0x0, 0x0, &(0x7f00000035c0), &(0x7f0000003600), 0x1003, r2}, 0x38) 4m11.384267193s ago: executing program 38 (id=735): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d9, 0x3ff}, 0x0, 0x20000, 0x0, 0x8, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x8000000) r0 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 4m4.836427659s ago: executing program 39 (id=961): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x908a, 0x5d, 0x0, 0x9, 0x7ffffc, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x1ff) sendmsg$inet_sctp(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@sndrcv={0x30, 0x84, 0x1, {0x228b, 0xfff8, 0x8000, 0x40, 0x5, 0x0, 0x14, 0x6, 0x1}}], 0x30}, 0x0) 3m56.581014965s ago: executing program 40 (id=1099): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24000000000000, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000004c0)="8f7b24c0a825695abd59c27518664a475090c28bebee45c1b62d654e13421d25f11c859bd3a5900cfc16dd352baf1b4aff4de8fbfa77", 0x1003, r3}, 0x38) 3m47.347707599s ago: executing program 41 (id=1204): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x400, 0x80000001}, 0x0, 0x35, 0x6, 0x9, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="54000000000801030000000000000000030000000900010072797ab10000000024000480080009400000000c080003400001000008000540000080a3080009400000000606000240920000000500030006"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) 3m43.834856381s ago: executing program 42 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 3m39.176504247s ago: executing program 43 (id=1323): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x207, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4088, 0xff8}, 0xadb}], 0x1, 0x40002000, 0x0) 3m32.383422286s ago: executing program 44 (id=1377): perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x40, 0x39133, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x7}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x3) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)='3', 0x4e) ioperm(0x1, 0x3, 0x163f) 3m23.464133419s ago: executing program 45 (id=1488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000000940)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000009c0)) timer_settime(0x0, 0x1, &(0x7f0000000a00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000a80), 0xffffff98) 2m9.741242146s ago: executing program 2 (id=2323): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$ext4(&(0x7f0000003040)='ext4\x00', &(0x7f0000003080)='./file1\x00', 0x1010040, &(0x7f00000030c0)={[{@nolazytime}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@auto_da_alloc}, {}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000003140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000003700)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000003740)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f00000037c0)='./file1\x00', 0x28c42, 0x31) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m9.602562751s ago: executing program 2 (id=2326): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000040000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], 0x0, 0xd98, 0x0, 0x0, 0x41100, 0xd}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2d1814af, 0x2}, 0x9640, 0xa4, 0x800, 0x1, 0xa1, 0x9b98, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r3, &(0x7f0000001040)={&(0x7f0000001080)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f00000011c0)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000001280)="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", 0x1a1}, {&(0x7f0000001440)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 2m9.482472902s ago: executing program 2 (id=2328): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140), 0x3, 0x42f, &(0x7f0000000200)="$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") keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./proc\x00', 0x4) mount(0x0, &(0x7f0000001780)='./proc\x00', &(0x7f00000017c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f0000001840)=0x8, 0x12) pwrite64(r0, &(0x7f0000001880)='\"', 0xe7d, 0xe7c) 2m9.416154719s ago: executing program 2 (id=2329): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='0', 0x1) write(r1, &(0x7f0000000140)='1', 0x1) sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)="2e00000011008188040f46ecdb4cb9cca7590e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) 2m9.157637855s ago: executing program 2 (id=2333): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffd, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000400)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=r2, 0x4) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r3, r1, 0x4, r0}, 0x10) 2m9.062834924s ago: executing program 48 (id=2333): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffd, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000400)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=r2, 0x4) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r3, r1, 0x4, r0}, 0x10) 1m53.479608424s ago: executing program 7 (id=2535): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0xa0800, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000740)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000780)={'syzkaller0\x00', @random="110000000002"}) 1m53.305842951s ago: executing program 7 (id=2540): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x10e, &(0x7f0000000380), 0x1, 0x464, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000dc0)=[{&(0x7f0000000e00)='G', 0x1}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m53.108047421s ago: executing program 7 (id=2542): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c0) openat(r1, &(0x7f0000000240)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', r1, &(0x7f0000001140)='./file0\x00', 0x0) 1m52.81576455s ago: executing program 7 (id=2549): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140), 0x3, 0x42f, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./proc\x00', 0x4) mount(0x0, &(0x7f0000001780)='./proc\x00', &(0x7f00000017c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f0000001840)=0x8, 0x12) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pwrite64(r0, &(0x7f0000001880)='\"', 0xe7d, 0xe7c) 1m52.41555497s ago: executing program 7 (id=2554): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x7c, 0xf, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x2, 0x6, @remote}, 0x14) 1m51.475638184s ago: executing program 7 (id=2574): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000f00)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000f40)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x62a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000fc0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001000)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="080008000600050000001400000045320014006512"], 0xfce) 1m51.296440532s ago: executing program 49 (id=2574): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000f00)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000f40)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x62a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000fc0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001000)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="080008000600050000001400000045320014006512"], 0xfce) 1m17.450797779s ago: executing program 6 (id=3042): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 1m17.407438603s ago: executing program 6 (id=3043): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f0000000200), 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 1m17.364567138s ago: executing program 6 (id=3045): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x205, 0xfffffff8, 0xff, r2}, &(0x7f0000000080)=0x10) 1m17.34011814s ago: executing program 6 (id=3046): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m17.300401925s ago: executing program 6 (id=3047): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m17.051907959s ago: executing program 6 (id=3052): mkdir(&(0x7f0000000340)='./dev\x00', 0x1fc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x10800, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000580)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1m17.019652682s ago: executing program 50 (id=3052): mkdir(&(0x7f0000000340)='./dev\x00', 0x1fc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x10800, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000580)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 56.436270712s ago: executing program 5 (id=3425): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x10180, 0x0, 0x0) socket$inet(0x2, 0x4, 0x262) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 56.435950672s ago: executing program 5 (id=3426): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r0, &(0x7f0000001640)="8b", 0x23000) 56.294006936s ago: executing program 5 (id=3428): socketpair(0x27, 0x2, 0x8, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x1f, 0x18, &(0x7f0000002f80)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000073000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000003040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003080)={r1}, 0xc) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 56.191957557s ago: executing program 5 (id=3430): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x1000c40, &(0x7f0000000380), 0x5, 0x51c, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1fb) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) symlink(0x0, 0x0) unlink(0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x104000, 0x0) 56.124187553s ago: executing program 5 (id=3432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0xf0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 55.885118677s ago: executing program 5 (id=3437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2}}}}}}}, 0x0) 55.849967031s ago: executing program 51 (id=3437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2}}}}}}}, 0x0) 11.69317256s ago: executing program 9 (id=3934): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000f80)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000fc0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f00000010c0), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 11.620791537s ago: executing program 9 (id=3935): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ff6000/0x1000)=nil) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 11.349922184s ago: executing program 9 (id=3938): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x100000, 0x0) flock(r2, 0x1) mknod(&(0x7f0000000300)='./file0\x00', 0x8000, 0x0) 11.311064678s ago: executing program 9 (id=3940): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x200008, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3af, &(0x7f0000000380)="$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") open(&(0x7f0000000740)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000780)=@loop={'/dev/loop', 0x0}, &(0x7f00000007c0)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000800)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x3, 0x0, 0x0, 0x2, 0xd, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x42, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) 11.095968749s ago: executing program 9 (id=3944): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x841e, &(0x7f0000000180)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f00000002c0)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000740)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x200008, &(0x7f0000000840)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x3a0, &(0x7f0000000880)="$eJzs3T9vW1UUAPATp4mTQOIMCAkQ4qobi5WEL9AItRIiEijUqHRAvBKnWHHjyLaCXCHogMTKN2CvGNmQEF8gA+xsbFkYO1Q1sh2nTur+I3UelX4/KbrH797jd6+f3tNZXu7htR9v7Wy3yttZOwqXUhQionAvYrkfDUwdtYV+PBuj7sS7pWt/vf3JZ9c/XN/YuLyZ0pX1q++tpZSW3vnt629+vvh7+5VPf1n6tRgHy58f/rP298HrB28cPrj6Va2Vaq2022inLN1oNNrZjXo1bdVaO+WUPq5Xs1Y11XZb1eaJ/u16Y2+vk7LdrcWFvWa11UrZbiftVDup3UjtZidlN7PabiqXy2lxIXiayt3NzWx9EM89Ydyl85oQE9Bsrme9e7j4SE/lbi4TAgByddb6f/aZ6v/rhZH6fy4eV/8XI9T/L8TMsw0brf//85fwP9er/2eP7t+T1P8AAAAAAAAAAAAAAPAyuNftlrrdbmnYdocvCR99znl6TNgj1//UX97zY7JGXtybi6j/sF/ZrwzaQf/6dtSiHtVYiVLc7z0WhgbxlQ82Lq+kvuVYvPVdP//iHxGV6f7/GzjOX41SLI/Nn18d5Kfj/Oi1M7Ewmr8WX8Rr48+/NjZ/NlZ+GskvRyn+/DIaUY/p/uPtYf63qym9/9HGqfxibOV9cQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4N+U09FYM9r3fr0TMx35letD/cMDyyf3xB/nH++uvRCnuj9+ff2Xs/vwX4s0L+a4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIZands7Wb1ebZ5XMNzzv39kdhg8PmtqMPzOqa75ODm4+LTvOWNQeK6s+aNFjul60O12+8HN71/ExHpnOT4yd76X8izBTEQ8YUz36Ac8+7lejYjRI9MnxxQjYqIrXeoFhfx/8OcOcngYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQM6ON/3ufZjKezYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkpdW5vZPV69XmBIO81wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAy+TcAAP//CKIItQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10.98885552s ago: executing program 9 (id=3945): getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001140), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001180)='ext4\x00', &(0x7f00000011c0)='./file1\x00', 0x200000, &(0x7f0000001200)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x582, &(0x7f0000001280)="$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") write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) setxattr$trusted_overlay_upper(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900), &(0x7f0000000940)=ANY=[], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x15, 0x6, 0x7f, "258496fadb70de87694a5f84ad5e8d19"}, 0x15, 0x2) 10.98875422s ago: executing program 52 (id=3945): getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001140), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001180)='ext4\x00', &(0x7f00000011c0)='./file1\x00', 0x200000, &(0x7f0000001200)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x582, &(0x7f0000001280)="$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") write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) setxattr$trusted_overlay_upper(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900), &(0x7f0000000940)=ANY=[], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x15, 0x6, 0x7f, "258496fadb70de87694a5f84ad5e8d19"}, 0x15, 0x2) 8.205646939s ago: executing program 1 (id=3988): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x200008, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3af, &(0x7f0000000380)="$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") open(&(0x7f0000000740)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000780)=@loop={'/dev/loop', 0x0}, &(0x7f00000007c0)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000800)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x3, 0x0, 0x0, 0x2, 0xd, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x42, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) 7.711086068s ago: executing program 1 (id=3992): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2040800) 5.938833675s ago: executing program 1 (id=3994): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4.759283484s ago: executing program 1 (id=4006): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x490, 0x0, 0x0, 0x5, 0x2000, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8800) write(r0, &(0x7f0000000140)='27', 0x2) unshare(0x40000000) 3.675080432s ago: executing program 1 (id=4012): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1f, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x80408, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8e, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='10', 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.151078284s ago: executing program 1 (id=4017): socket$nl_route(0x10, 0x3, 0x0) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffdfffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b702000002000000bfa300000000000007030000007effff7a0af0ff3f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27126e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb6220fd8d4b470e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef0420f0000cac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e885340133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421a8223fe5308e4e65ee93e107000000f8ddeff70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b12000000000000000030711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dabec3d18fd0699ff3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623243643db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e69578e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea7e764dde8725d2b4a0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10b98c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5924948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476f9e0407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd96d2da66059de81abfa1acc9f889555eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b4fdc08000be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd9b31bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac4794680f3037f250e96f61cb20d46d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401413f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60530000000000000004b023e4954c9eb6cd70627f5c03edd4f5ce48b8a874c852064dd0efafc3df20ec8faf3d194db76127f88f1b4fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8b310900000c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1d8e80311895f0b99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44b57e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db6e3080000000000003e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f27b6c15b1ba971de1cb9c7e6a000000000000001478b2a78f9abfefce4448303ef54c71199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b462426ff9293a28a544a6a9e2279b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718b3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5f61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6485987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434cbd52325296e22802475edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a1471bab551bd6beae7dbf58530136c238e545b28211a92000000001501ae7d7cc75007e8ff56e6d8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db9966addf4877204047be633792118efdb6b88023e80da74fdf723c7f000000009f13c7e851dfc91ec01219af568825de0cedd55a92eafe9edd98a8529d64cbaa0b9f89f391b2db7369e934085e486b946a4558c68e195af1a6e6e878609f9ed7406dc9c93a5d5cc76e037d66abe4fe54f18b4c969814c7f2094ebe736ef0f0cd65b90942f2e8de44f6fd69a94ca27bb6d92e2282d4a0b0ee3abe30d877579aed9b54f460247890aed19ef12e45097631548d8639fb2b6eb9b41c7e89ee7223cdeae1b2d02cf664df99e4a661feecb63953a4d86f3060372861ac184824b7a4fd1c605128f1307f2bba91b9fbfe2884639073c1d51e42feeb5312b23b8e1e468aa31ea8e7597f5eb6ad1897a04afc8369ebec808165218b625a64a237ed01636880f70f0ed"], &(0x7f0000001980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001a80)="7cf13307000000000008000081001a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.411669248s ago: executing program 0 (id=4025): socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b81, &(0x7f0000000040)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.19368435s ago: executing program 0 (id=4028): sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x4000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xd548, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)="2a7562d751f911e16c3a65f406a35b36743a6d6f643a", 0x16) 2.045339945s ago: executing program 0 (id=4032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000840)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 1.838140426s ago: executing program 0 (id=4035): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r1) exit(0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1.682210621s ago: executing program 4 (id=4040): r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000280)=@in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x46}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newspdinfo={0x14, 0x24, 0x8, 0x70bd27, 0x25dfdbfb, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000090) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r2, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000200)="11eb030086dd", 0x6, 0x2404c081, &(0x7f0000000240)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) 1.604697539s ago: executing program 3 (id=4042): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pnp/drivers/serial\x00', 0x80, 0x0) r1 = openat(r0, &(0x7f00000002c0)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='00:03', 0x5) r2 = openat(r0, &(0x7f0000000340)='bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='00:03', 0x5) 984.676301ms ago: executing program 0 (id=4043): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000b80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000bc0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 983.223931ms ago: executing program 4 (id=4044): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="034886dd1200befd0000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef) 952.053144ms ago: executing program 3 (id=4045): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x2) dup(r0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10000, &(0x7f0000000500), 0x1, 0x50a, &(0x7f0000000540)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') getdents(r1, &(0x7f00000011c0)=""/4114, 0x1012) 872.795982ms ago: executing program 8 (id=4046): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x340) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000580)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 799.63393ms ago: executing program 3 (id=4047): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073"], 0x104}}, 0x48004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d080300000000e8fea4a11800150006001470c1600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 751.379645ms ago: executing program 8 (id=4048): socket$inet(0x2, 0xa, 0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') fcntl$setstatus(r0, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2c2f, &(0x7f0000000040)={0x0, 0x555d, 0xc000, 0x10000002, 0xc1, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r1, 0x4095, 0x7721, 0x16, 0x0, 0x500) 721.380718ms ago: executing program 4 (id=4049): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r0, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r1, 0x4095, 0x7721, 0x16, 0x0, 0x500) 640.053536ms ago: executing program 3 (id=4050): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x5, 0x252, &(0x7f0000000bc0)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x2c020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc800000000c0a010100000000000100000a0000060900020073797a31000000000900010073797a31000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140000000000000100014000180090001006c617374000000000400028014000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) 627.174457ms ago: executing program 4 (id=4051): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "b7a41f2300", "d200", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8cd", 0xffffffa0}, {&(0x7f0000000440)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f00000004c0)="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", 0x149}], 0x3) 583.998931ms ago: executing program 8 (id=4052): r0 = fsopen(&(0x7f0000000b00)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000b40)='.\x00', 0x60000526) r3 = open(&(0x7f0000000b80)='.\x00', 0x149080, 0x112) getdents(r3, 0x0, 0x0) 492.196511ms ago: executing program 8 (id=4054): syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x31, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf, 0x0, @gue={{0x1, 0x1, 0x1, 0xc, 0x0, @void}, "e73897"}}}}}}, 0x0) 491.709641ms ago: executing program 3 (id=4055): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team_slave_0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 420.666178ms ago: executing program 8 (id=4056): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a80)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='!o', 0x2) 376.103402ms ago: executing program 3 (id=4057): ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000b40)={0x6, 0xf2, 0x5, 0xa0fe, 0x6, 0xd, 0x7fff}, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x989680}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000a, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f0000000bc0)=""/16384, 0x4000) 230.403506ms ago: executing program 0 (id=4058): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff35a}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000440)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@noload}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@discard}, {@debug}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x495, &(0x7f00000006c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b80)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000bc0)={0x0, r0, 0x8000200000000000, 0x5, 0x85c, 0x2}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 130.099287ms ago: executing program 8 (id=4059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xff) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x6, 0x2d, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 104.394769ms ago: executing program 4 (id=4060): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffff9}, 0xecc8, 0xa, 0x7, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 0s ago: executing program 4 (id=4061): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000b00)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000b40)={0xa, 0x4e25}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000b80)=0x1, 0x4) write$binfmt_elf64(r1, 0x0, 0x4a2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6, 0x0, 0xc, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): beled_t tclass=dir permissive=1 [ 320.080434][T17536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.119458][T18411] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.3731: bg 0: block 5: invalid block bitmap [ 320.128992][T18411] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 44 with error 28 [ 320.129088][T18411] EXT4-fs (loop8): This should not happen!! Data will be lost [ 320.129088][T18411] [ 320.129132][T18411] EXT4-fs (loop8): Total free blocks count 0 [ 320.129228][T18411] EXT4-fs (loop8): Free/Dirty block details [ 320.129240][T18411] EXT4-fs (loop8): free_blocks=0 [ 320.129252][T18411] EXT4-fs (loop8): dirty_blocks=48 [ 320.129265][T18411] EXT4-fs (loop8): Block reservation details [ 320.129276][T18411] EXT4-fs (loop8): i_reserved_data_blocks=48 [ 320.149270][T18411] EXT4-fs (loop8): shut down requested (0) [ 320.248673][T10106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.330824][T18415] FAULT_INJECTION: forcing a failure. [ 320.330824][T18415] name failslab, interval 1, probability 0, space 0, times 0 [ 320.330867][T18415] CPU: 1 UID: 0 PID: 18415 Comm: syz.0.3733 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 320.330978][T18415] Tainted: [W]=WARN [ 320.330987][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 320.331006][T18415] Call Trace: [ 320.331015][T18415] [ 320.331025][T18415] __dump_stack+0x1d/0x30 [ 320.331062][T18415] dump_stack_lvl+0x95/0xd0 [ 320.331165][T18415] dump_stack+0x15/0x1b [ 320.331187][T18415] should_fail_ex+0x259/0x270 [ 320.331228][T18415] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 320.331346][T18415] should_failslab+0x8c/0xb0 [ 320.331400][T18415] __kmalloc_cache_noprof+0x5d/0x3e0 [ 320.331438][T18415] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 320.331486][T18415] ? sock_create_kern+0x38/0x50 [ 320.331551][T18415] selinux_netlbl_sock_genattr+0x88/0x260 [ 320.331677][T18415] selinux_netlbl_socket_post_create+0x66/0x100 [ 320.331756][T18415] selinux_socket_post_create+0x219/0x290 [ 320.331804][T18415] security_socket_post_create+0x59/0xa0 [ 320.331905][T18415] __sock_create+0x356/0x580 [ 320.332005][T18415] sock_create_kern+0x38/0x50 [ 320.332047][T18415] inet_ctl_sock_create+0x58/0x130 [ 320.332093][T18415] igmp6_net_init+0xfc/0x260 [ 320.332126][T18415] ops_init+0x22a/0x2e0 [ 320.332192][T18415] setup_net+0x9f/0x230 [ 320.332225][T18415] copy_net_ns+0x339/0x490 [ 320.332256][T18415] create_new_namespaces+0x1f6/0x420 [ 320.332290][T18415] unshare_nsproxy_namespaces+0x115/0x150 [ 320.332373][T18415] ksys_unshare+0x3a3/0x690 [ 320.332421][T18415] __x64_sys_unshare+0x1f/0x30 [ 320.332536][T18415] x64_sys_call+0x1e33/0x2550 [ 320.332632][T18415] do_syscall_64+0x112/0x360 [ 320.332702][T18415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.332726][T18415] RIP: 0033:0x7fd2d33dfb19 [ 320.332744][T18415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.332770][T18415] RSP: 002b:00007fd2d1e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 320.332800][T18415] RAX: ffffffffffffffda RBX: 00007fd2d3665fa0 RCX: 00007fd2d33dfb19 [ 320.332888][T18415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 320.332907][T18415] RBP: 00007fd2d3477b70 R08: 0000000000000000 R09: 0000000000000000 [ 320.332921][T18415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.332935][T18415] R13: 00007fd2d3666038 R14: 00007fd2d3665fa0 R15: 00007fff76a78508 [ 320.332958][T18415] [ 320.352487][T18415] Failed to initialize the IGMP6 autojoin socket (err -12) [ 320.399928][T18420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.626974][T18422] rxe_eth0 speed is unknown, defaulting to 1000 [ 320.674547][T18425] ip_tables: iptables: counters copy to user failed while replacing table [ 320.677644][T18425] ip_tables: iptables: counters copy to user failed while replacing table [ 320.681675][T18425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.681850][T18425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.891953][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 321.241978][T18452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.243390][T18452] team0: Unable to change to the same mode the team is in [ 321.336612][T18454] FAULT_INJECTION: forcing a failure. [ 321.336612][T18454] name failslab, interval 1, probability 0, space 0, times 0 [ 321.336710][T18454] CPU: 0 UID: 0 PID: 18454 Comm: syz.9.3748 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 321.336753][T18454] Tainted: [W]=WARN [ 321.336788][T18454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 321.336807][T18454] Call Trace: [ 321.336816][T18454] [ 321.336827][T18454] __dump_stack+0x1d/0x30 [ 321.336861][T18454] dump_stack_lvl+0x95/0xd0 [ 321.336888][T18454] dump_stack+0x15/0x1b [ 321.336918][T18454] should_fail_ex+0x259/0x270 [ 321.336980][T18454] ? security_inode_alloc+0x37/0x100 [ 321.337019][T18454] should_failslab+0x8c/0xb0 [ 321.337066][T18454] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 321.337158][T18454] ? security_inode_alloc+0x37/0x100 [ 321.337199][T18454] security_inode_alloc+0x37/0x100 [ 321.337248][T18454] inode_init_always_gfp+0x49b/0x4e0 [ 321.337283][T18454] ? __pfx_sock_alloc_inode+0x10/0x10 [ 321.337397][T18454] alloc_inode+0x58/0x170 [ 321.337428][T18454] __sock_create+0x121/0x580 [ 321.337468][T18454] ? __sock_create+0x4eb/0x580 [ 321.337626][T18454] sock_create_kern+0x38/0x50 [ 321.337743][T18454] inet_ctl_sock_create+0x58/0x130 [ 321.337827][T18454] igmp6_net_init+0x37/0x260 [ 321.337872][T18454] ops_init+0x22a/0x2e0 [ 321.337916][T18454] setup_net+0x9f/0x230 [ 321.337974][T18454] copy_net_ns+0x339/0x490 [ 321.338008][T18454] create_new_namespaces+0x1f6/0x420 [ 321.338108][T18454] unshare_nsproxy_namespaces+0x115/0x150 [ 321.338182][T18454] ksys_unshare+0x3a3/0x690 [ 321.338227][T18454] __x64_sys_unshare+0x1f/0x30 [ 321.338266][T18454] x64_sys_call+0x1e33/0x2550 [ 321.338390][T18454] do_syscall_64+0x112/0x360 [ 321.338437][T18454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.338469][T18454] RIP: 0033:0x7f017d6dfb19 [ 321.338492][T18454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.338577][T18454] RSP: 002b:00007f017c12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 321.338710][T18454] RAX: ffffffffffffffda RBX: 00007f017d965fa0 RCX: 00007f017d6dfb19 [ 321.338731][T18454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 321.338751][T18454] RBP: 00007f017d777b70 R08: 0000000000000000 R09: 0000000000000000 [ 321.338849][T18454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.338868][T18454] R13: 00007f017d966038 R14: 00007f017d965fa0 R15: 00007ffc8e429bb8 [ 321.338944][T18454] [ 321.339056][T18454] socket: no more sockets [ 321.339067][T18454] Failed to initialize the IGMP6 control socket (err -23) [ 321.549405][T18443] loop1: detected capacity change from 0 to 4096 [ 321.764396][T18443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.793915][T11423] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.021591][T18469] serio: Serial port ttyS3 [ 322.259692][T18482] 9p: Could not find request transport: tcp¬port=0x0000000000004e24 [ 322.284573][T18488] FAULT_INJECTION: forcing a failure. [ 322.284573][T18488] name failslab, interval 1, probability 0, space 0, times 0 [ 322.284637][T18488] CPU: 0 UID: 0 PID: 18488 Comm: syz.4.3759 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 322.284679][T18488] Tainted: [W]=WARN [ 322.284691][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 322.284710][T18488] Call Trace: [ 322.284739][T18488] [ 322.284749][T18488] __dump_stack+0x1d/0x30 [ 322.284786][T18488] dump_stack_lvl+0x95/0xd0 [ 322.284819][T18488] dump_stack+0x15/0x1b [ 322.284869][T18488] should_fail_ex+0x259/0x270 [ 322.284910][T18488] ? alloc_vmap_area+0x1a2/0xde0 [ 322.284987][T18488] should_failslab+0x8c/0xb0 [ 322.285033][T18488] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 322.285079][T18488] ? alloc_vmap_area+0x1a2/0xde0 [ 322.285161][T18488] alloc_vmap_area+0x1a2/0xde0 [ 322.285212][T18488] ? should_fail_ex+0xdb/0x270 [ 322.285271][T18488] ? should_failslab+0x8c/0xb0 [ 322.285343][T18488] ? try_charge_memcg+0x284/0xb30 [ 322.285386][T18488] ? __get_vm_area_node+0x125/0x1f0 [ 322.285428][T18488] __get_vm_area_node+0x199/0x1f0 [ 322.285475][T18488] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 322.285528][T18488] ? copy_process+0x5a0/0x2400 [ 322.285566][T18488] ? __account_obj_stock+0x2af/0x2d0 [ 322.285615][T18488] __vmalloc_node_noprof+0x89/0xc0 [ 322.285811][T18488] ? copy_process+0x5a0/0x2400 [ 322.285923][T18488] ? copy_process+0x5a0/0x2400 [ 322.286038][T18488] dup_task_struct+0x22a/0x750 [ 322.286077][T18488] copy_process+0x5a0/0x2400 [ 322.286115][T18488] ? io_check_coalesce_buffer+0x1c9/0x380 [ 322.286196][T18488] ? __pfx_io_sq_thread+0x10/0x10 [ 322.286233][T18488] create_io_thread+0xca/0x100 [ 322.286338][T18488] ? __pfx_io_sq_thread+0x10/0x10 [ 322.286377][T18488] io_sq_offload_create+0x644/0x8e0 [ 322.286430][T18488] io_uring_create+0x30a/0x4f0 [ 322.286504][T18488] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 322.286556][T18488] __x64_sys_io_uring_setup+0x31/0x40 [ 322.286600][T18488] x64_sys_call+0x1fbf/0x2550 [ 322.286639][T18488] do_syscall_64+0x112/0x360 [ 322.286715][T18488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.286740][T18488] RIP: 0033:0x7fb54d37fb19 [ 322.286758][T18488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.286784][T18488] RSP: 002b:00007fb54bdd6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 322.286884][T18488] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007fb54d37fb19 [ 322.286906][T18488] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 00000000000071f4 [ 322.286980][T18488] RBP: 00007fb54d417b70 R08: 0000000000000000 R09: 0000000000000000 [ 322.286999][T18488] R10: 0000200000000100 R11: 0000000000000206 R12: 0000200000000300 [ 322.287129][T18488] R13: 0000200000000100 R14: 00002000000002c0 R15: 00007ffdd4865f08 [ 322.287158][T18488] [ 322.287490][T18488] warn_alloc: 1 callbacks suppressed [ 322.287507][T18488] syz.4.3759: vmalloc error: size 16384, align 0x4000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 322.287614][T18488] CPU: 0 UID: 0 PID: 18488 Comm: syz.4.3759 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 322.287654][T18488] Tainted: [W]=WARN [ 322.287665][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 322.287687][T18488] Call Trace: [ 322.287757][T18488] [ 322.287767][T18488] __dump_stack+0x1d/0x30 [ 322.287800][T18488] dump_stack_lvl+0x95/0xd0 [ 322.287864][T18488] dump_stack+0x15/0x1b [ 322.287889][T18488] warn_alloc+0x146/0x1c0 [ 322.287945][T18488] __vmalloc_node_range_noprof+0x2d2/0x10e0 [ 322.287996][T18488] ? __account_obj_stock+0x2af/0x2d0 [ 322.288088][T18488] __vmalloc_node_noprof+0x89/0xc0 [ 322.288134][T18488] ? copy_process+0x5a0/0x2400 [ 322.288170][T18488] ? copy_process+0x5a0/0x2400 [ 322.288270][T18488] dup_task_struct+0x22a/0x750 [ 322.288341][T18488] copy_process+0x5a0/0x2400 [ 322.288382][T18488] ? io_check_coalesce_buffer+0x1c9/0x380 [ 322.288448][T18488] ? __pfx_io_sq_thread+0x10/0x10 [ 322.288486][T18488] create_io_thread+0xca/0x100 [ 322.288529][T18488] ? __pfx_io_sq_thread+0x10/0x10 [ 322.288569][T18488] io_sq_offload_create+0x644/0x8e0 [ 322.288636][T18488] io_uring_create+0x30a/0x4f0 [ 322.288676][T18488] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 322.288791][T18488] __x64_sys_io_uring_setup+0x31/0x40 [ 322.288834][T18488] x64_sys_call+0x1fbf/0x2550 [ 322.288873][T18488] do_syscall_64+0x112/0x360 [ 322.289018][T18488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.289049][T18488] RIP: 0033:0x7fb54d37fb19 [ 322.289071][T18488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.289098][T18488] RSP: 002b:00007fb54bdd6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 322.289167][T18488] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007fb54d37fb19 [ 322.289195][T18488] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 00000000000071f4 [ 322.289216][T18488] RBP: 00007fb54d417b70 R08: 0000000000000000 R09: 0000000000000000 [ 322.289236][T18488] R10: 0000200000000100 R11: 0000000000000206 R12: 0000200000000300 [ 322.289256][T18488] R13: 0000200000000100 R14: 00002000000002c0 R15: 00007ffdd4865f08 [ 322.289345][T18488] [ 322.289379][T18488] Mem-Info: [ 322.289444][T18488] active_anon:7740 inactive_anon:5 isolated_anon:0 [ 322.289444][T18488] active_file:125 inactive_file:29699 isolated_file:0 [ 322.289444][T18488] unevictable:0 dirty:191 writeback:0 [ 322.289444][T18488] slab_reclaimable:4343 slab_unreclaimable:39434 [ 322.289444][T18488] mapped:29337 shmem:198 pagetables:3232 [ 322.289444][T18488] sec_pagetables:0 bounce:0 [ 322.289444][T18488] kernel_misc_reclaimable:0 [ 322.289444][T18488] free:1836448 free_pcp:2011 free_cma:0 [ 322.289550][T18488] Node 0 active_anon:30960kB inactive_anon:20kB active_file:500kB inactive_file:118796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117348kB dirty:764kB writeback:0kB shmem:792kB kernel_stack:5312kB pagetables:12928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 322.289658][T18488] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.289760][T18488] lowmem_reserve[]: 0 2877 7856 7856 [ 322.289799][T18488] Node 0 DMA32 free:2942956kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946480kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 322.289960][T18488] lowmem_reserve[]: 0 0 4978 4978 [ 322.290063][T18488] Node 0 Normal free:4387476kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30960kB inactive_anon:20kB active_file:500kB inactive_file:118796kB unevictable:0kB writepending:764kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:4520kB local_pcp:1648kB free_cma:0kB [ 322.290156][T18488] lowmem_reserve[]: 0 0 0 0 [ 322.290224][T18488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 322.290547][T18488] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 1*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2942956kB [ 322.290909][T18488] Node 0 Normal: 1831*4kB (ME) 1310*8kB (UME) 1016*16kB (UME) 600*32kB (UME) 280*64kB (UME) 179*128kB (UME) 107*256kB (UME) 50*512kB (UM) 25*1024kB (UM) 20*2048kB (UME) 1019*4096kB (UM) = 4387468kB [ 322.291170][T18488] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 322.291203][T18488] 30027 total pagecache pages [ 322.291254][T18488] 9 pages in swap cache [ 322.291261][T18488] Free swap = 119760kB [ 322.291269][T18488] Total swap = 124996kB [ 322.291279][T18488] 2097051 pages RAM [ 322.291289][T18488] 0 pages HighMem/MovableOnly [ 322.291299][T18488] 82038 pages reserved [ 322.984698][ T8918] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 323.535321][T18519] batman_adv: batadv0: Adding interface: syzkaller0 [ 323.535342][T18519] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.535477][T18519] batman_adv: batadv0: Interface activated: syzkaller0 [ 323.552101][T18507] loop1: detected capacity change from 0 to 128 [ 323.729616][T18507] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.731119][T18518] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 323.732417][T18528] FAULT_INJECTION: forcing a failure. [ 323.732417][T18528] name failslab, interval 1, probability 0, space 0, times 0 [ 323.732549][T18528] CPU: 1 UID: 0 PID: 18528 Comm: syz.9.3773 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 323.732590][T18528] Tainted: [W]=WARN [ 323.732601][T18528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 323.732617][T18528] Call Trace: [ 323.732624][T18528] [ 323.732632][T18528] __dump_stack+0x1d/0x30 [ 323.732695][T18528] dump_stack_lvl+0x95/0xd0 [ 323.732726][T18528] dump_stack+0x15/0x1b [ 323.732754][T18528] should_fail_ex+0x259/0x270 [ 323.732794][T18528] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 323.732855][T18528] should_failslab+0x8c/0xb0 [ 323.732900][T18528] __kmalloc_node_noprof+0xb8/0x4d0 [ 323.732947][T18528] ? __get_vm_area_node+0x1bc/0x1f0 [ 323.733032][T18528] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 323.733109][T18528] __vmalloc_node_range_noprof+0x442/0x10e0 [ 323.733247][T18528] __vmalloc_node_noprof+0x89/0xc0 [ 323.733294][T18528] ? copy_process+0x5a0/0x2400 [ 323.733330][T18528] ? copy_process+0x5a0/0x2400 [ 323.733435][T18528] dup_task_struct+0x22a/0x750 [ 323.733474][T18528] copy_process+0x5a0/0x2400 [ 323.733512][T18528] ? alloc_pages_mpol+0xdf/0x1d0 [ 323.733602][T18528] ? __pfx_io_sq_thread+0x10/0x10 [ 323.733660][T18528] create_io_thread+0xca/0x100 [ 323.733783][T18528] ? __pfx_io_sq_thread+0x10/0x10 [ 323.733821][T18528] io_sq_offload_create+0x644/0x8e0 [ 323.733955][T18528] io_uring_create+0x30a/0x4f0 [ 323.734074][T18507] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.734047][T18528] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 323.734131][T18528] __x64_sys_io_uring_setup+0x31/0x40 [ 323.734200][T18528] x64_sys_call+0x1fbf/0x2550 [ 323.734248][T18528] do_syscall_64+0x112/0x360 [ 323.734298][T18528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.734331][T18528] RIP: 0033:0x7f017d6dfb19 [ 323.734400][T18528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.734428][T18528] RSP: 002b:00007f017c12efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 323.734456][T18528] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007f017d6dfb19 [ 323.734476][T18528] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 00000000000071f4 [ 323.734495][T18528] RBP: 00007f017d777b70 R08: 0000000000000000 R09: 0000000000000000 [ 323.734545][T18528] R10: 0000200000000100 R11: 0000000000000206 R12: 0000200000000300 [ 323.734565][T18528] R13: 0000200000000100 R14: 00002000000002c0 R15: 00007ffc8e429bb8 [ 323.734592][T18528] [ 323.738145][T18518] batman_adv: batadv0: Removing interface: syzkaller0 [ 323.802594][T18527] rxe_eth0 speed is unknown, defaulting to 1000 [ 323.806840][T18529] tmpfs: Too small a size for current use [ 324.048572][T11423] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.190707][T18533] infiniband syz2: set down [ 324.190730][T18533] infiniband syz2: added syzkaller0 [ 324.215183][T18533] RDS/IB: syz2: added [ 324.215203][T18533] smc: adding ib device syz2 with port count 1 [ 324.215220][T18533] smc: ib device syz2 port 1 has no pnetid [ 324.480672][T18552] loop4: detected capacity change from 0 to 128 [ 324.690852][T18552] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.727401][T18552] EXT4-fs: Ignoring removed oldalloc option [ 324.791957][T18552] EXT4-fs error (device loop4): __ext4_fill_super:5664: inode #2: comm syz.4.3781: iget: bad extended attribute block 2048 [ 324.810444][T18552] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 324.814517][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 324.814547][ C1] EXT4-fs (loop4): initial error at time 1793915665: __ext4_fill_super:5664: inode 2 [ 324.815337][ C1] EXT4-fs (loop4): last error at time 1793915665: __ext4_fill_super:5664: inode 2 [ 324.859258][T18552] EXT4-fs (loop4): get root inode failed [ 324.859307][T18552] EXT4-fs (loop4): mount failed [ 324.860059][ T3423] infiniband syz2: ib_query_port failed (-19) [ 324.906245][ T9219] smc: removing ib device syz2 [ 325.149129][T18533] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 325.230293][T18571] serio: Serial port ttyS3 [ 325.538868][T18554] loop0: detected capacity change from 0 to 4096 [ 325.668681][T18554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.736294][T17536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.829811][T18576] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3791'. [ 325.832238][T18582] net_ratelimit: 2 callbacks suppressed [ 325.832339][T18582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.845217][T18582] team0: Unable to change to the same mode the team is in [ 325.964850][T18584] rxe_eth0 speed is unknown, defaulting to 1000 [ 325.974352][T18586] tmpfs: Too small a size for current use [ 326.296367][ T29] audit: type=1400 audit(1793915666.722:2384): avc: denied { read } for pid=3416 comm="kworker/0:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54565 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.437829][T18599] loop0: detected capacity change from 0 to 128 [ 326.445824][T18603] FAULT_INJECTION: forcing a failure. [ 326.445824][T18603] name failslab, interval 1, probability 0, space 0, times 0 [ 326.445971][T18603] CPU: 1 UID: 0 PID: 18603 Comm: syz.9.3801 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 326.446065][T18603] Tainted: [W]=WARN [ 326.446126][T18603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 326.446183][T18603] Call Trace: [ 326.446213][T18603] [ 326.446251][T18603] __dump_stack+0x1d/0x30 [ 326.446357][T18603] dump_stack_lvl+0x95/0xd0 [ 326.446448][T18603] dump_stack+0x15/0x1b [ 326.446553][T18603] should_fail_ex+0x259/0x270 [ 326.446664][T18603] should_failslab+0x8c/0xb0 [ 326.446810][T18603] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 326.446926][T18603] ? lookup_one_qstr_excl+0x160/0x240 [ 326.447080][T18603] ? debugfs_alloc_inode+0x34/0x40 [ 326.447216][T18603] ? debugfs_alloc_inode+0x34/0x40 [ 326.447330][T18603] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 326.447500][T18603] debugfs_alloc_inode+0x34/0x40 [ 326.447616][T18603] alloc_inode+0x40/0x170 [ 326.447688][T18603] new_inode+0x1d/0xe0 [ 326.447776][T18603] debugfs_create_symlink+0x7c/0x150 [ 326.447910][T18603] ref_tracker_dir_symlink+0x1ae/0x290 [ 326.448087][T18603] net_ns_net_init+0x8f/0xa0 [ 326.448201][T18603] ops_init+0x22a/0x2e0 [ 326.448297][T18603] setup_net+0x9f/0x230 [ 326.448409][T18603] copy_net_ns+0x339/0x490 [ 326.448559][T18603] create_new_namespaces+0x1f6/0x420 [ 326.448650][T18603] unshare_nsproxy_namespaces+0x115/0x150 [ 326.448756][T18603] ksys_unshare+0x3a3/0x690 [ 326.448900][T18603] __x64_sys_unshare+0x1f/0x30 [ 326.449002][T18603] x64_sys_call+0x1e33/0x2550 [ 326.449113][T18603] do_syscall_64+0x112/0x360 [ 326.449228][T18603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.449361][T18603] RIP: 0033:0x7f017d6dfb19 [ 326.449429][T18603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.449492][T18603] RSP: 002b:00007f017c12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 326.449634][T18603] RAX: ffffffffffffffda RBX: 00007f017d965fa0 RCX: 00007f017d6dfb19 [ 326.449684][T18603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 326.449726][T18603] RBP: 00007f017d777b70 R08: 0000000000000000 R09: 0000000000000000 [ 326.449767][T18603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.449808][T18603] R13: 00007f017d966038 R14: 00007f017d965fa0 R15: 00007ffc8e429bb8 [ 326.449877][T18603] [ 326.456624][T18603] debugfs: out of free dentries, can not create symlink 'netns-245-4026536348-notrefcnt' [ 326.511522][T18599] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.511613][T18599] EXT4-fs: Ignoring removed oldalloc option [ 326.531975][T18599] EXT4-fs error (device loop0): __ext4_fill_super:5664: inode #2: comm syz.0.3796: iget: bad extended attribute block 2048 [ 326.532113][T18599] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 326.532655][T18599] EXT4-fs (loop0): get root inode failed [ 326.532703][T18599] EXT4-fs (loop0): mount failed [ 326.534873][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 326.534970][ C1] EXT4-fs (loop0): initial error at time 1793915666: __ext4_fill_super:5664: inode 2 [ 326.535194][ C1] EXT4-fs (loop0): last error at time 1793915666: __ext4_fill_super:5664: inode 2 [ 326.575938][T18599] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3796'. [ 326.576021][T18599] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3796'. [ 326.803544][T18603] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.909527][T18612] FAULT_INJECTION: forcing a failure. [ 326.909527][T18612] name failslab, interval 1, probability 0, space 0, times 0 [ 326.909631][T18612] CPU: 1 UID: 0 PID: 18612 Comm: syz.8.3803 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 326.909666][T18612] Tainted: [W]=WARN [ 326.909680][T18612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 326.909699][T18612] Call Trace: [ 326.909706][T18612] [ 326.909715][T18612] __dump_stack+0x1d/0x30 [ 326.909823][T18612] dump_stack_lvl+0x95/0xd0 [ 326.909856][T18612] dump_stack+0x15/0x1b [ 326.909884][T18612] should_fail_ex+0x259/0x270 [ 326.909993][T18612] ? __get_vm_area_node+0x125/0x1f0 [ 326.910035][T18612] should_failslab+0x8c/0xb0 [ 326.910124][T18612] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 326.910175][T18612] ? try_charge_memcg+0x284/0xb30 [ 326.910222][T18612] ? __get_vm_area_node+0x125/0x1f0 [ 326.910293][T18612] __get_vm_area_node+0x125/0x1f0 [ 326.910341][T18612] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 326.910393][T18612] ? copy_process+0x5a0/0x2400 [ 326.910429][T18612] ? __account_obj_stock+0x27f/0x2d0 [ 326.910558][T18612] __vmalloc_node_noprof+0x89/0xc0 [ 326.910606][T18612] ? copy_process+0x5a0/0x2400 [ 326.910674][T18612] ? copy_process+0x5a0/0x2400 [ 326.910711][T18612] dup_task_struct+0x22a/0x750 [ 326.910784][T18612] copy_process+0x5a0/0x2400 [ 326.910827][T18612] ? alloc_pages_mpol+0xdf/0x1d0 [ 326.910865][T18612] ? __pfx_io_sq_thread+0x10/0x10 [ 326.911082][T18612] create_io_thread+0xca/0x100 [ 326.911127][T18612] ? __pfx_io_sq_thread+0x10/0x10 [ 326.911161][T18612] io_sq_offload_create+0x644/0x8e0 [ 326.911212][T18612] io_uring_create+0x30a/0x4f0 [ 326.911390][T18612] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 326.911440][T18612] __x64_sys_io_uring_setup+0x31/0x40 [ 326.911479][T18612] x64_sys_call+0x1fbf/0x2550 [ 326.911583][T18612] do_syscall_64+0x112/0x360 [ 326.911630][T18612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.911675][T18612] RIP: 0033:0x7fa8ee6efb19 [ 326.911694][T18612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.911721][T18612] RSP: 002b:00007fa8ed13efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 326.911751][T18612] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007fa8ee6efb19 [ 326.911782][T18612] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 00000000000071f4 [ 326.911802][T18612] RBP: 00007fa8ee787b70 R08: 0000000000000000 R09: 0000000000000000 [ 326.911822][T18612] R10: 0000200000000100 R11: 0000000000000206 R12: 0000200000000300 [ 326.911850][T18612] R13: 0000200000000100 R14: 00002000000002c0 R15: 00007ffc66c700b8 [ 326.911879][T18612] [ 326.973838][T18616] loop4: detected capacity change from 0 to 512 [ 326.989051][T18616] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 326.989101][T18616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 327.016967][T18616] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #16: comm syz.4.3806: invalid indirect mapped block 32768 (level 2) [ 327.017088][T18616] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 327.018159][T18616] EXT4-fs (loop4): 1 orphan inode deleted [ 327.018250][T18616] EXT4-fs (loop4): 1 truncate cleaned up [ 327.051487][ T29] audit: type=1400 audit(1793915667.472:2385): avc: denied { write } for pid=18614 comm="syz.4.3806" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.052778][T18616] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 327.313770][T18623] loop4: detected capacity change from 0 to 512 [ 327.322459][T18621] ip_tables: iptables: counters copy to user failed while replacing table [ 327.342216][T18615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.349224][T18618] team0: Unable to change to the same mode the team is in [ 327.380026][T18623] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.396299][ T29] audit: type=1400 audit(1793915667.812:2386): avc: denied { write } for pid=18622 comm="syz.4.3807" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.418186][ T29] audit: type=1400 audit(1793915667.822:2387): avc: denied { write } for pid=18622 comm="syz.4.3807" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.418284][ T29] audit: type=1400 audit(1793915667.822:2388): avc: denied { write } for pid=18622 comm="syz.4.3807" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.552215][T18629] FAULT_INJECTION: forcing a failure. [ 327.552215][T18629] name failslab, interval 1, probability 0, space 0, times 0 [ 327.552265][T18629] CPU: 1 UID: 0 PID: 18629 Comm: syz.1.3808 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 327.552370][T18629] Tainted: [W]=WARN [ 327.552381][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 327.552401][T18629] Call Trace: [ 327.552410][T18629] [ 327.552418][T18629] __dump_stack+0x1d/0x30 [ 327.552525][T18629] dump_stack_lvl+0x95/0xd0 [ 327.552623][T18629] dump_stack+0x15/0x1b [ 327.552689][T18629] should_fail_ex+0x259/0x270 [ 327.552803][T18629] ? security_sk_alloc+0x52/0x120 [ 327.552838][T18629] should_failslab+0x8c/0xb0 [ 327.552899][T18629] __kmalloc_noprof+0xb6/0x4b0 [ 327.552947][T18629] ? security_sk_alloc+0x52/0x120 [ 327.552993][T18629] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 327.553040][T18629] security_sk_alloc+0x52/0x120 [ 327.553082][T18629] sk_prot_alloc+0xc2/0x180 [ 327.553115][T18629] sk_alloc+0x34/0x3e0 [ 327.553141][T18629] inet_create+0x3cb/0x790 [ 327.553277][T18629] __sock_create+0x2e5/0x580 [ 327.553310][T18629] sock_create_kern+0x38/0x50 [ 327.553352][T18629] udp_sock_create4+0x68/0x2e0 [ 327.553438][T18629] rxe_net_init+0xee/0x460 [ 327.553482][T18629] rxe_newlink+0xbc/0x1a0 [ 327.553508][T18629] nldev_newlink+0x3a8/0x430 [ 327.553588][T18629] ? __pfx_nldev_newlink+0x10/0x10 [ 327.553680][T18629] rdma_nl_rcv+0x439/0x570 [ 327.553718][T18629] ? selinux_nlmsg_lookup+0x9b/0x870 [ 327.553772][T18629] netlink_unicast+0x665/0x740 [ 327.553874][T18629] netlink_sendmsg+0x5ef/0x740 [ 327.553908][T18629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.553939][T18629] ____sys_sendmsg+0x54a/0x590 [ 327.553969][T18629] ___sys_sendmsg+0x195/0x1e0 [ 327.554002][T18629] __x64_sys_sendmsg+0xd4/0x160 [ 327.554113][T18629] x64_sys_call+0x22ab/0x2550 [ 327.554146][T18629] do_syscall_64+0x112/0x360 [ 327.554187][T18629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.554247][T18629] RIP: 0033:0x7fb721ebfb19 [ 327.554275][T18629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.554342][T18629] RSP: 002b:00007fb720917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.554442][T18629] RAX: ffffffffffffffda RBX: 00007fb722145fa0 RCX: 00007fb721ebfb19 [ 327.554463][T18629] RDX: 0000000000000010 RSI: 0000200000000980 RDI: 0000000000000004 [ 327.554483][T18629] RBP: 00007fb721f57b70 R08: 0000000000000000 R09: 0000000000000000 [ 327.554502][T18629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.554521][T18629] R13: 00007fb722146038 R14: 00007fb722145fa0 R15: 00007fffb6969e38 [ 327.554595][T18629] [ 327.566049][T18629] rdma_rxe: Failed to create IPv4 UDP tunnel [ 327.956545][T18639] FAULT_INJECTION: forcing a failure. [ 327.956545][T18639] name failslab, interval 1, probability 0, space 0, times 0 [ 327.956578][T18639] CPU: 1 UID: 0 PID: 18639 Comm: syz.0.3813 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 327.956609][T18639] Tainted: [W]=WARN [ 327.956617][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 327.956635][T18639] Call Trace: [ 327.956672][T18639] [ 327.956682][T18639] __dump_stack+0x1d/0x30 [ 327.956715][T18639] dump_stack_lvl+0x95/0xd0 [ 327.956740][T18639] dump_stack+0x15/0x1b [ 327.956769][T18639] should_fail_ex+0x259/0x270 [ 327.956835][T18639] should_failslab+0x8c/0xb0 [ 327.956879][T18639] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 327.956916][T18639] ? __d_alloc+0x34/0x320 [ 327.956943][T18639] ? __d_alloc+0x34/0x320 [ 327.956975][T18639] __d_alloc+0x34/0x320 [ 327.957003][T18639] ? d_alloc_pseudo+0x13/0x80 [ 327.957095][T18639] d_alloc_pseudo+0x1e/0x80 [ 327.957198][T18639] alloc_path_pseudo+0xa4/0x140 [ 327.957227][T18639] alloc_file_pseudo+0x55/0x120 [ 327.957320][T18639] sock_alloc_file+0x9c/0x1e0 [ 327.957435][T18639] __sys_socket+0x118/0x180 [ 327.957476][T18639] __x64_sys_socket+0x3f/0x50 [ 327.957552][T18639] x64_sys_call+0x246e/0x2550 [ 327.957603][T18639] do_syscall_64+0x112/0x360 [ 327.957695][T18639] ? 0xffffffffff600000 [ 327.957714][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.957739][T18639] RIP: 0033:0x7fd2d33dfb19 [ 327.957764][T18639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.957802][T18639] RSP: 002b:00007fd2d1e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 327.957825][T18639] RAX: ffffffffffffffda RBX: 00007fd2d3665fa0 RCX: 00007fd2d33dfb19 [ 327.957905][T18639] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 327.957919][T18639] RBP: 00007fd2d3477b70 R08: 0000000000000000 R09: 0000000000000000 [ 327.957934][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.957949][T18639] R13: 00007fd2d3666038 R14: 00007fd2d3665fa0 R15: 00007fff76a78508 [ 327.957971][T18639] [ 328.411749][T18647] loop8: detected capacity change from 0 to 128 [ 328.569781][T18647] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.748443][T18664] loop1: detected capacity change from 0 to 128 [ 328.766290][T18664] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.766316][T18664] EXT4-fs: Ignoring removed oldalloc option [ 328.769386][T18664] EXT4-fs error (device loop1): __ext4_fill_super:5664: inode #2: comm syz.1.3830: iget: bad extended attribute block 2048 [ 328.769416][T18664] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 328.769614][T18664] EXT4-fs (loop1): get root inode failed [ 328.769633][T18664] EXT4-fs (loop1): mount failed [ 328.782732][T18658] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3830'. [ 328.782818][T18658] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3830'. [ 329.032547][T18671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.050911][T18671] team0: Unable to change to the same mode the team is in [ 329.930981][T18685] FAULT_INJECTION: forcing a failure. [ 329.930981][T18685] name failslab, interval 1, probability 0, space 0, times 0 [ 329.931020][T18685] CPU: 0 UID: 0 PID: 18685 Comm: syz.0.3822 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 329.931123][T18685] Tainted: [W]=WARN [ 329.931135][T18685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 329.931232][T18685] Call Trace: [ 329.931238][T18685] [ 329.931246][T18685] __dump_stack+0x1d/0x30 [ 329.931330][T18685] dump_stack_lvl+0x95/0xd0 [ 329.931352][T18685] dump_stack+0x15/0x1b [ 329.931372][T18685] should_fail_ex+0x259/0x270 [ 329.931399][T18685] ? security_inode_alloc+0x37/0x100 [ 329.931428][T18685] should_failslab+0x8c/0xb0 [ 329.931458][T18685] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 329.931518][T18685] ? security_inode_alloc+0x37/0x100 [ 329.931565][T18685] security_inode_alloc+0x37/0x100 [ 329.931591][T18685] inode_init_always_gfp+0x49b/0x4e0 [ 329.931614][T18685] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 329.931640][T18685] alloc_inode+0x58/0x170 [ 329.931726][T18685] new_inode+0x1d/0xe0 [ 329.931822][T18685] debugfs_create_symlink+0x7c/0x150 [ 329.931914][T18685] ref_tracker_dir_symlink+0x1ae/0x290 [ 329.931960][T18685] net_ns_net_init+0x8f/0xa0 [ 329.931989][T18685] ops_init+0x22a/0x2e0 [ 329.932018][T18685] setup_net+0x9f/0x230 [ 329.932085][T18685] copy_net_ns+0x339/0x490 [ 329.932111][T18685] create_new_namespaces+0x1f6/0x420 [ 329.932198][T18685] unshare_nsproxy_namespaces+0x115/0x150 [ 329.932222][T18685] ksys_unshare+0x3a3/0x690 [ 329.932314][T18685] __x64_sys_unshare+0x1f/0x30 [ 329.932342][T18685] x64_sys_call+0x1e33/0x2550 [ 329.932367][T18685] do_syscall_64+0x112/0x360 [ 329.932448][T18685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.932473][T18685] RIP: 0033:0x7fd2d33dfb19 [ 329.932567][T18685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.932585][T18685] RSP: 002b:00007fd2d1e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 329.932604][T18685] RAX: ffffffffffffffda RBX: 00007fd2d3665fa0 RCX: 00007fd2d33dfb19 [ 329.932667][T18685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 329.932679][T18685] RBP: 00007fd2d3477b70 R08: 0000000000000000 R09: 0000000000000000 [ 329.932739][T18685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.932750][T18685] R13: 00007fd2d3666038 R14: 00007fd2d3665fa0 R15: 00007fff76a78508 [ 329.932768][T18685] [ 329.932821][T18685] debugfs: out of free dentries, can not create symlink 'netns-246-4026536876-notrefcnt' [ 329.978818][T18685] rxe_eth0 speed is unknown, defaulting to 1000 [ 330.316310][T18698] FAULT_INJECTION: forcing a failure. [ 330.316310][T18698] name failslab, interval 1, probability 0, space 0, times 0 [ 330.316408][T18698] CPU: 1 UID: 0 PID: 18698 Comm: syz.9.3842 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 330.316474][T18698] Tainted: [W]=WARN [ 330.316484][T18698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 330.316504][T18698] Call Trace: [ 330.316514][T18698] [ 330.316525][T18698] __dump_stack+0x1d/0x30 [ 330.316556][T18698] dump_stack_lvl+0x95/0xd0 [ 330.316581][T18698] dump_stack+0x15/0x1b [ 330.316674][T18698] should_fail_ex+0x259/0x270 [ 330.316726][T18698] should_failslab+0x8c/0xb0 [ 330.316834][T18698] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 330.316898][T18698] ? debugfs_alloc_inode+0x34/0x40 [ 330.316928][T18698] ? debugfs_alloc_inode+0x34/0x40 [ 330.316956][T18698] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 330.317044][T18698] debugfs_alloc_inode+0x34/0x40 [ 330.317083][T18698] alloc_inode+0x40/0x170 [ 330.317125][T18698] new_inode+0x1d/0xe0 [ 330.317159][T18698] debugfs_create_symlink+0x7c/0x150 [ 330.317243][T18698] ref_tracker_dir_symlink+0x1ae/0x290 [ 330.317432][T18698] net_ns_net_init+0x8f/0xa0 [ 330.317490][T18698] ops_init+0x22a/0x2e0 [ 330.317582][T18698] setup_net+0x9f/0x230 [ 330.317618][T18698] copy_net_ns+0x339/0x490 [ 330.317657][T18698] create_new_namespaces+0x1f6/0x420 [ 330.317709][T18698] unshare_nsproxy_namespaces+0x115/0x150 [ 330.317744][T18698] ksys_unshare+0x3a3/0x690 [ 330.317880][T18698] __x64_sys_unshare+0x1f/0x30 [ 330.317922][T18698] x64_sys_call+0x1e33/0x2550 [ 330.317960][T18698] do_syscall_64+0x112/0x360 [ 330.318016][T18698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.318041][T18698] RIP: 0033:0x7f017d6dfb19 [ 330.318060][T18698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.318141][T18698] RSP: 002b:00007f017c12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 330.318206][T18698] RAX: ffffffffffffffda RBX: 00007f017d965fa0 RCX: 00007f017d6dfb19 [ 330.318229][T18698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 330.318247][T18698] RBP: 00007f017d777b70 R08: 0000000000000000 R09: 0000000000000000 [ 330.318262][T18698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.318276][T18698] R13: 00007f017d966038 R14: 00007f017d965fa0 R15: 00007ffc8e429bb8 [ 330.318323][T18698] [ 330.321677][T18698] debugfs: out of free dentries, can not create symlink 'netns-247-4026537022-notrefcnt' [ 330.652611][T18698] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.241079][T18712] FAULT_INJECTION: forcing a failure. [ 331.241079][T18712] name failslab, interval 1, probability 0, space 0, times 0 [ 331.241119][T18712] CPU: 1 UID: 0 PID: 18712 Comm: syz.0.3827 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 331.241200][T18712] Tainted: [W]=WARN [ 331.241213][T18712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 331.241229][T18712] Call Trace: [ 331.241235][T18712] [ 331.241245][T18712] __dump_stack+0x1d/0x30 [ 331.241282][T18712] dump_stack_lvl+0x95/0xd0 [ 331.241378][T18712] dump_stack+0x15/0x1b [ 331.241408][T18712] should_fail_ex+0x259/0x270 [ 331.241449][T18712] ? io_uring_alloc_task_context+0x4c/0x370 [ 331.241616][T18712] should_failslab+0x8c/0xb0 [ 331.241661][T18712] __kmalloc_cache_noprof+0x5d/0x3e0 [ 331.241707][T18712] ? create_io_thread+0xca/0x100 [ 331.241901][T18712] ? io_uring_alloc_task_context+0x4c/0x370 [ 331.241946][T18712] io_uring_alloc_task_context+0x4c/0x370 [ 331.241994][T18712] io_sq_offload_create+0x789/0x8e0 [ 331.242069][T18712] io_uring_create+0x30a/0x4f0 [ 331.242113][T18712] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 331.242164][T18712] __x64_sys_io_uring_setup+0x31/0x40 [ 331.242256][T18712] x64_sys_call+0x1fbf/0x2550 [ 331.242400][T18712] do_syscall_64+0x112/0x360 [ 331.242523][T18712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.242553][T18712] RIP: 0033:0x7fd2d33dfb19 [ 331.242572][T18712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.242602][T18712] RSP: 002b:00007fd2d1e2efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 331.242664][T18712] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007fd2d33dfb19 [ 331.242685][T18712] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 00000000000071f4 [ 331.242704][T18712] RBP: 00007fd2d3477b70 R08: 0000000000000000 R09: 0000000000000000 [ 331.242723][T18712] R10: 0000200000000100 R11: 0000000000000206 R12: 0000200000000300 [ 331.242741][T18712] R13: 0000200000000100 R14: 00002000000002c0 R15: 00007fff76a78508 [ 331.242786][T18712] [ 331.243047][T18708] FAULT_INJECTION: forcing a failure. [ 331.243047][T18708] name failslab, interval 1, probability 0, space 0, times 0 [ 331.243165][T18708] CPU: 1 UID: 0 PID: 18708 Comm: syz.8.3847 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 331.243205][T18708] Tainted: [W]=WARN [ 331.243212][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 331.243225][T18708] Call Trace: [ 331.243231][T18708] [ 331.243238][T18708] __dump_stack+0x1d/0x30 [ 331.243269][T18708] dump_stack_lvl+0x95/0xd0 [ 331.243319][T18708] dump_stack+0x15/0x1b [ 331.243348][T18708] should_fail_ex+0x259/0x270 [ 331.243387][T18708] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 331.243436][T18708] should_failslab+0x8c/0xb0 [ 331.243569][T18708] __kmalloc_node_noprof+0xb8/0x4d0 [ 331.243617][T18708] ? __get_vm_area_node+0x1bc/0x1f0 [ 331.243699][T18708] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 331.243783][T18708] __vmalloc_node_range_noprof+0x442/0x10e0 [ 331.243830][T18708] ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0 [ 331.243886][T18708] ? rb_insert_color+0x6e/0x2a0 [ 331.244001][T18708] ? do_replace+0x1b4/0x360 [ 331.244035][T18708] __vmalloc_noprof+0xa4/0xf0 [ 331.244080][T18708] ? do_replace+0x1b4/0x360 [ 331.244119][T18708] do_replace+0x1b4/0x360 [ 331.244220][T18708] do_ebt_set_ctl+0x1a8/0xdc0 [ 331.244313][T18708] ? __rcu_read_unlock+0x4e/0x70 [ 331.244349][T18708] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 331.244391][T18708] ? ip4_datagram_release_cb+0x3ee/0x420 [ 331.244457][T18708] ? _raw_spin_unlock_bh+0x17/0x20 [ 331.244522][T18708] ? release_sock+0x10c/0x180 [ 331.244565][T18708] ? sockopt_release_sock+0x41/0x50 [ 331.244636][T18708] ? do_ip_setsockopt+0x1b39/0x22f0 [ 331.244678][T18708] nf_setsockopt+0x199/0x1b0 [ 331.244723][T18708] ip_setsockopt+0x102/0x110 [ 331.244790][T18708] raw_setsockopt+0xbb/0x140 [ 331.244833][T18708] sock_common_setsockopt+0x69/0x80 [ 331.244902][T18708] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 331.244946][T18708] __sys_setsockopt+0x184/0x200 [ 331.244992][T18708] __x64_sys_setsockopt+0x64/0x80 [ 331.245017][T18708] x64_sys_call+0x248f/0x2550 [ 331.245051][T18708] do_syscall_64+0x112/0x360 [ 331.245101][T18708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.245184][T18708] RIP: 0033:0x7fa8ee6efb19 [ 331.245204][T18708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.245241][T18708] RSP: 002b:00007fa8ed13f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.245271][T18708] RAX: ffffffffffffffda RBX: 00007fa8ee975fa0 RCX: 00007fa8ee6efb19 [ 331.245314][T18708] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 331.245331][T18708] RBP: 00007fa8ee787b70 R08: 0000000000000108 R09: 0000000000000000 [ 331.245351][T18708] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 331.245370][T18708] R13: 00007fa8ee976038 R14: 00007fa8ee975fa0 R15: 00007ffc66c700b8 [ 331.245411][T18708] [ 331.561501][T18716] loop4: detected capacity change from 0 to 128 [ 331.650183][T18716] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.089086][T18742] ref_ctr going negative. vaddr: 0x2000001f8002, curr val: -4051, delta: 1 [ 332.089106][T18742] ref_ctr increment failed for inode: 0x8f2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811aed21c0 [ 332.193535][ T29] audit: type=1400 audit(1793915672.612:2389): avc: denied { read } for pid=18751 comm="syz.8.3853" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 332.193750][ T29] audit: type=1400 audit(1793915672.612:2390): avc: denied { open } for pid=18751 comm="syz.8.3853" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 332.193835][ T29] audit: type=1400 audit(1793915672.612:2391): avc: denied { ioctl } for pid=18751 comm="syz.8.3853" path="" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 332.607961][T18769] FAULT_INJECTION: forcing a failure. [ 332.607961][T18769] name failslab, interval 1, probability 0, space 0, times 0 [ 332.608079][T18769] CPU: 1 UID: 0 PID: 18769 Comm: syz.1.3858 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 332.608118][T18769] Tainted: [W]=WARN [ 332.608192][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 332.608210][T18769] Call Trace: [ 332.608219][T18769] [ 332.608229][T18769] __dump_stack+0x1d/0x30 [ 332.608304][T18769] dump_stack_lvl+0x95/0xd0 [ 332.608331][T18769] dump_stack+0x15/0x1b [ 332.608392][T18769] should_fail_ex+0x259/0x270 [ 332.608432][T18769] ? mpi_alloc+0x56/0xd0 [ 332.608459][T18769] should_failslab+0x8c/0xb0 [ 332.608541][T18769] __kmalloc_noprof+0xb6/0x4b0 [ 332.608590][T18769] ? mpi_alloc+0x56/0xd0 [ 332.608626][T18769] mpi_alloc+0x56/0xd0 [ 332.608660][T18769] mpi_read_raw_data+0xf0/0x470 [ 332.608731][T18769] rsa_set_pub_key+0x1ce/0x340 [ 332.608769][T18769] rsassa_pkcs1_set_pub_key+0x6b/0xf0 [ 332.608864][T18769] public_key_verify_signature+0x32e/0x4e0 [ 332.608925][T18769] x509_check_for_self_signed+0x1c4/0x250 [ 332.609020][T18769] x509_cert_parse+0x3bf/0x450 [ 332.609043][T18769] x509_key_preparse+0x3c/0x420 [ 332.609073][T18769] ? selinux_key_permission+0x161/0x190 [ 332.609148][T18769] asymmetric_key_preparse+0x68/0xb0 [ 332.609191][T18769] __key_create_or_update+0x29e/0x820 [ 332.609230][T18769] ? key_task_permission+0x2ac/0x2c0 [ 332.609330][T18769] key_create_or_update+0x42/0x60 [ 332.609491][T18769] __se_sys_add_key+0x2a5/0x360 [ 332.609523][T18769] __x64_sys_add_key+0x67/0x80 [ 332.609552][T18769] x64_sys_call+0x1fa9/0x2550 [ 332.609589][T18769] do_syscall_64+0x112/0x360 [ 332.609693][T18769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.609724][T18769] RIP: 0033:0x7fb721ebfb19 [ 332.609744][T18769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.609811][T18769] RSP: 002b:00007fb720917028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 332.609857][T18769] RAX: ffffffffffffffda RBX: 00007fb722145fa0 RCX: 00007fb721ebfb19 [ 332.609877][T18769] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 332.609908][T18769] RBP: 00007fb721f57b70 R08: 0000000019385e14 R09: 0000000000000000 [ 332.609926][T18769] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 332.609943][T18769] R13: 00007fb722146038 R14: 00007fb722145fa0 R15: 00007fffb6969e38 [ 332.609970][T18769] [ 332.772596][T18771] loop1: detected capacity change from 0 to 164 [ 332.773516][T18771] iso9660: Bad value for 'map' [ 332.936223][T18780] ip_tables: iptables: counters copy to user failed while replacing table [ 332.936825][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3863'. [ 332.979782][T18782] FAULT_INJECTION: forcing a failure. [ 332.979782][T18782] name failslab, interval 1, probability 0, space 0, times 0 [ 332.979822][T18782] CPU: 1 UID: 0 PID: 18782 Comm: syz.4.3866 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 332.979864][T18782] Tainted: [W]=WARN [ 332.979874][T18782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 332.979892][T18782] Call Trace: [ 332.979981][T18782] [ 332.979991][T18782] __dump_stack+0x1d/0x30 [ 332.980037][T18782] dump_stack_lvl+0x95/0xd0 [ 332.980068][T18782] dump_stack+0x15/0x1b [ 332.980097][T18782] should_fail_ex+0x259/0x270 [ 332.980211][T18782] should_failslab+0x8c/0xb0 [ 332.980337][T18782] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 332.980451][T18782] ? __d_alloc+0x34/0x320 [ 332.980499][T18782] ? __d_alloc+0x34/0x320 [ 332.980537][T18782] __d_alloc+0x34/0x320 [ 332.980645][T18782] ? d_alloc_pseudo+0x13/0x80 [ 332.980747][T18782] d_alloc_pseudo+0x1e/0x80 [ 332.980869][T18782] alloc_path_pseudo+0xa4/0x140 [ 332.980904][T18782] alloc_file_pseudo+0x55/0x120 [ 332.980942][T18782] anon_inode_getfile_fmode+0xa5/0x140 [ 332.980979][T18782] do_eventfd+0xf3/0x1d0 [ 332.981029][T18782] __x64_sys_eventfd2+0x2d/0x40 [ 332.981159][T18782] x64_sys_call+0x17ed/0x2550 [ 332.981199][T18782] do_syscall_64+0x112/0x360 [ 332.981242][T18782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.981275][T18782] RIP: 0033:0x7fb54d37fb19 [ 332.981297][T18782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.981356][T18782] RSP: 002b:00007fb54bdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 332.981383][T18782] RAX: ffffffffffffffda RBX: 00007fb54d605fa0 RCX: 00007fb54d37fb19 [ 332.981400][T18782] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 332.981413][T18782] RBP: 00007fb54d417b70 R08: 0000000000000000 R09: 0000000000000000 [ 332.981427][T18782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.981517][T18782] R13: 00007fb54d606038 R14: 00007fb54d605fa0 R15: 00007ffdd4865f08 [ 332.981536][T18782] [ 333.279139][T18797] FAULT_INJECTION: forcing a failure. [ 333.279139][T18797] name failslab, interval 1, probability 0, space 0, times 0 [ 333.279183][T18797] CPU: 0 UID: 0 PID: 18797 Comm: syz.1.3873 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 333.279267][T18797] Tainted: [W]=WARN [ 333.279278][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 333.279297][T18797] Call Trace: [ 333.279305][T18797] [ 333.279316][T18797] __dump_stack+0x1d/0x30 [ 333.279361][T18797] dump_stack_lvl+0x95/0xd0 [ 333.279394][T18797] dump_stack+0x15/0x1b [ 333.279424][T18797] should_fail_ex+0x259/0x270 [ 333.279465][T18797] ? security_inode_alloc+0x37/0x100 [ 333.279535][T18797] should_failslab+0x8c/0xb0 [ 333.279581][T18797] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 333.279625][T18797] ? security_inode_alloc+0x37/0x100 [ 333.279667][T18797] security_inode_alloc+0x37/0x100 [ 333.279704][T18797] inode_init_always_gfp+0x49b/0x4e0 [ 333.279783][T18797] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 333.279881][T18797] alloc_inode+0x58/0x170 [ 333.279912][T18797] new_inode+0x1d/0xe0 [ 333.279945][T18797] bdev_alloc+0x2e/0x1f0 [ 333.279988][T18797] __alloc_disk_node+0xbb/0x2f0 [ 333.280099][T18797] __blk_alloc_disk+0x68/0xd0 [ 333.280213][T18797] dm_create+0x36d/0x850 [ 333.280253][T18797] dev_create+0x141/0x290 [ 333.280311][T18797] dm_ctl_ioctl+0x80b/0xad0 [ 333.280418][T18797] ? __pfx_dev_create+0x10/0x10 [ 333.280472][T18797] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 333.280513][T18797] __se_sys_ioctl+0xce/0x140 [ 333.280561][T18797] __x64_sys_ioctl+0x43/0x50 [ 333.280650][T18797] x64_sys_call+0x239d/0x2550 [ 333.280697][T18797] do_syscall_64+0x112/0x360 [ 333.280764][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.280822][T18797] RIP: 0033:0x7fb721ebfb19 [ 333.280845][T18797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.280873][T18797] RSP: 002b:00007fb720917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.280903][T18797] RAX: ffffffffffffffda RBX: 00007fb722145fa0 RCX: 00007fb721ebfb19 [ 333.280924][T18797] RDX: 0000200000000580 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 333.280944][T18797] RBP: 00007fb721f57b70 R08: 0000000000000000 R09: 0000000000000000 [ 333.280986][T18797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.281000][T18797] R13: 00007fb722146038 R14: 00007fb722145fa0 R15: 00007fffb6969e38 [ 333.281022][T18797] [ 333.540956][T18810] loop9: detected capacity change from 0 to 512 [ 333.679396][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3882'. [ 333.791521][T18810] bio_check_eod: 15 callbacks suppressed [ 333.791543][T18810] syz.9.3876: attempt to access beyond end of device [ 333.791543][T18810] loop9: rw=2049, sector=560, nr_sectors = 32 limit=512 [ 333.791684][T18810] syz.9.3876: attempt to access beyond end of device [ 333.791684][T18810] loop9: rw=2049, sector=624, nr_sectors = 32 limit=512 [ 333.791808][T18810] syz.9.3876: attempt to access beyond end of device [ 333.791808][T18810] loop9: rw=2049, sector=688, nr_sectors = 32 limit=512 [ 333.791918][T18810] syz.9.3876: attempt to access beyond end of device [ 333.791918][T18810] loop9: rw=2049, sector=752, nr_sectors = 32 limit=512 [ 333.791986][T18810] syz.9.3876: attempt to access beyond end of device [ 333.791986][T18810] loop9: rw=2049, sector=816, nr_sectors = 32 limit=512 [ 333.792141][T18810] syz.9.3876: attempt to access beyond end of device [ 333.792141][T18810] loop9: rw=2049, sector=880, nr_sectors = 32 limit=512 [ 333.792275][T18810] syz.9.3876: attempt to access beyond end of device [ 333.792275][T18810] loop9: rw=2049, sector=944, nr_sectors = 32 limit=512 [ 333.792344][T18810] syz.9.3876: attempt to access beyond end of device [ 333.792344][T18810] loop9: rw=2049, sector=1008, nr_sectors = 32 limit=512 [ 333.792798][T18810] syz.9.3876: attempt to access beyond end of device [ 333.792798][T18810] loop9: rw=2049, sector=1072, nr_sectors = 32 limit=512 [ 333.792961][T18810] syz.9.3876: attempt to access beyond end of device [ 333.792961][T18810] loop9: rw=2049, sector=1136, nr_sectors = 32 limit=512 [ 333.993845][T18841] netlink: 'syz.9.3890': attribute type 1 has an invalid length. [ 334.007366][T18841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.026626][T18841] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 334.067742][T18845] FAULT_INJECTION: forcing a failure. [ 334.067742][T18845] name failslab, interval 1, probability 0, space 0, times 0 [ 334.068004][T18845] CPU: 1 UID: 0 PID: 18845 Comm: syz.9.3891 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 334.068043][T18845] Tainted: [W]=WARN [ 334.068051][T18845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 334.068065][T18845] Call Trace: [ 334.068074][T18845] [ 334.068148][T18845] __dump_stack+0x1d/0x30 [ 334.068251][T18845] dump_stack_lvl+0x95/0xd0 [ 334.068285][T18845] dump_stack+0x15/0x1b [ 334.068315][T18845] should_fail_ex+0x259/0x270 [ 334.068373][T18845] ? debugfs_create_symlink+0x26/0x150 [ 334.068409][T18845] should_failslab+0x8c/0xb0 [ 334.068452][T18845] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 334.068538][T18845] ? format_decode+0xaf/0x560 [ 334.068571][T18845] ? debugfs_create_symlink+0x26/0x150 [ 334.068610][T18845] kstrdup+0x3e/0xd0 [ 334.068682][T18845] debugfs_create_symlink+0x26/0x150 [ 334.068726][T18845] ref_tracker_dir_symlink+0x1ae/0x290 [ 334.068831][T18845] ? ktime_get+0x212/0x240 [ 334.068877][T18845] net_ns_net_init+0x8f/0xa0 [ 334.068911][T18845] ops_init+0x22a/0x2e0 [ 334.068964][T18845] ? setup_net+0x3c/0x230 [ 334.069002][T18845] setup_net+0x9f/0x230 [ 334.069031][T18845] copy_net_ns+0x339/0x490 [ 334.069098][T18845] create_new_namespaces+0x1f6/0x420 [ 334.069127][T18845] unshare_nsproxy_namespaces+0x115/0x150 [ 334.069153][T18845] ksys_unshare+0x3a3/0x690 [ 334.069239][T18845] __x64_sys_unshare+0x1f/0x30 [ 334.069281][T18845] x64_sys_call+0x1e33/0x2550 [ 334.069325][T18845] do_syscall_64+0x112/0x360 [ 334.069396][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.069422][T18845] RIP: 0033:0x7f017d6dfb19 [ 334.069442][T18845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.069463][T18845] RSP: 002b:00007f017c12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 334.069488][T18845] RAX: ffffffffffffffda RBX: 00007f017d965fa0 RCX: 00007f017d6dfb19 [ 334.069554][T18845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 334.069572][T18845] RBP: 00007f017d777b70 R08: 0000000000000000 R09: 0000000000000000 [ 334.069591][T18845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.069627][T18845] R13: 00007f017d966038 R14: 00007f017d965fa0 R15: 00007ffc8e429bb8 [ 334.069737][T18845] [ 334.226887][T18845] rxe_eth0 speed is unknown, defaulting to 1000 [ 335.024025][T18857] rxe_eth0 speed is unknown, defaulting to 1000 [ 335.254978][T18857] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.255019][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.255116][T18857] bridge_slave_0: entered allmulticast mode [ 335.255657][T18857] bridge_slave_0: entered promiscuous mode [ 335.280990][T18857] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.281045][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.281267][T18857] bridge_slave_1: entered allmulticast mode [ 335.288828][T18857] bridge_slave_1: entered promiscuous mode [ 335.321590][T18857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.322735][T18857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.353338][T18857] team0: Port device team_slave_0 added [ 335.360439][T18857] team0: Port device team_slave_1 added [ 335.388979][T18857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.389000][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.389052][T18857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.389657][T18857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.389674][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.389723][T18857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.447808][T18878] FAULT_INJECTION: forcing a failure. [ 335.447808][T18878] name failslab, interval 1, probability 0, space 0, times 0 [ 335.448006][T18878] CPU: 1 UID: 0 PID: 18878 Comm: syz.4.3900 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 335.448116][T18878] Tainted: [W]=WARN [ 335.448132][T18878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 335.448146][T18878] Call Trace: [ 335.448153][T18878] [ 335.448232][T18878] __dump_stack+0x1d/0x30 [ 335.448333][T18878] dump_stack_lvl+0x95/0xd0 [ 335.448482][T18878] dump_stack+0x15/0x1b [ 335.448557][T18878] should_fail_ex+0x259/0x270 [ 335.448725][T18878] ? io_uring_alloc_task_context+0xdd/0x370 [ 335.448840][T18878] should_failslab+0x8c/0xb0 [ 335.449031][T18878] __kmalloc_cache_noprof+0x5d/0x3e0 [ 335.449153][T18878] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 335.449306][T18878] ? io_uring_alloc_task_context+0xdd/0x370 [ 335.449437][T18878] io_uring_alloc_task_context+0xdd/0x370 [ 335.449654][T18878] __io_uring_add_tctx_node+0x2c8/0x3c0 [ 335.449776][T18878] io_uring_create+0x3e1/0x4f0 [ 335.449891][T18878] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 335.450171][T18878] __x64_sys_io_uring_setup+0x31/0x40 [ 335.450284][T18878] x64_sys_call+0x1fbf/0x2550 [ 335.450393][T18878] do_syscall_64+0x112/0x360 [ 335.450516][T18878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.450665][T18878] RIP: 0033:0x7fb54d37fb19 [ 335.450728][T18878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.450862][T18878] RSP: 002b:00007fb54bdd6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 335.450928][T18878] RAX: ffffffffffffffda RBX: 0000200000000280 RCX: 00007fb54d37fb19 [ 335.450990][T18878] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000007b6d [ 335.451033][T18878] RBP: 00007fb54d417b70 R08: 0000000000000000 R09: 0000000000000000 [ 335.451071][T18878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.451116][T18878] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd4865f08 [ 335.451187][T18878] [ 335.554813][T18857] hsr_slave_0: entered promiscuous mode [ 335.563920][T18857] hsr_slave_1: entered promiscuous mode [ 335.569914][T18857] debugfs: 'hsr0' already exists in 'hsr' [ 335.569965][T18857] Cannot create hsr debugfs directory [ 335.804849][T18857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.808561][T18889] nr0: port 1(veth1_virt_wifi) entered blocking state [ 335.808598][T18889] nr0: port 1(veth1_virt_wifi) entered disabled state [ 335.808807][T18889] veth1_virt_wifi: entered allmulticast mode [ 335.809514][T18889] veth1_virt_wifi: entered promiscuous mode [ 335.863846][T18857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.933267][T18857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.989295][T18899] FAULT_INJECTION: forcing a failure. [ 335.989295][T18899] name failslab, interval 1, probability 0, space 0, times 0 [ 335.989339][T18899] CPU: 1 UID: 0 PID: 18899 Comm: syz.4.3913 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 335.989423][T18899] Tainted: [W]=WARN [ 335.989432][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 335.989451][T18899] Call Trace: [ 335.989460][T18899] [ 335.989538][T18899] __dump_stack+0x1d/0x30 [ 335.989581][T18899] dump_stack_lvl+0x95/0xd0 [ 335.989614][T18899] dump_stack+0x15/0x1b [ 335.989646][T18899] should_fail_ex+0x259/0x270 [ 335.989724][T18899] ? nfc_genl_rcv_nl_event+0x6f/0x130 [ 335.989839][T18899] should_failslab+0x8c/0xb0 [ 335.989883][T18899] __kmalloc_cache_noprof+0x5d/0x3e0 [ 335.989948][T18899] ? nfc_genl_rcv_nl_event+0x6f/0x130 [ 335.989999][T18899] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 335.990121][T18899] nfc_genl_rcv_nl_event+0x6f/0x130 [ 335.990171][T18899] blocking_notifier_call_chain+0x9b/0x1e0 [ 335.990219][T18899] netlink_release+0xa9f/0xf00 [ 335.990313][T18899] ? __pfx_sock_close+0x10/0x10 [ 335.990345][T18899] __sock_release+0x65/0x150 [ 335.990460][T18899] sock_close+0x19/0x30 [ 335.990496][T18899] __fput+0x286/0x610 [ 335.990595][T18899] fput_close_sync+0xad/0x190 [ 335.990635][T18899] filp_close_sync+0x27/0x40 [ 335.990673][T18899] __se_sys_close_range+0x915/0xa00 [ 335.990767][T18899] __x64_sys_close_range+0x43/0x50 [ 335.990803][T18899] x64_sys_call+0x2198/0x2550 [ 335.990838][T18899] do_syscall_64+0x112/0x360 [ 335.990931][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.990965][T18899] RIP: 0033:0x7fb54d37fb19 [ 335.990985][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.991027][T18899] RSP: 002b:00007fb54bdd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 335.991168][T18899] RAX: ffffffffffffffda RBX: 00007fb54d605fa0 RCX: 00007fb54d37fb19 [ 335.991211][T18899] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 335.991231][T18899] RBP: 00007fb54d417b70 R08: 0000000000000000 R09: 0000000000000000 [ 335.991250][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.991265][T18899] R13: 00007fb54d606038 R14: 00007fb54d605fa0 R15: 00007ffdd4865f08 [ 335.991291][T18899] [ 336.044039][T18901] loop8: detected capacity change from 0 to 512 [ 336.087086][T18901] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 336.087102][T18901] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 336.096216][T18901] EXT4-fs (loop8): 1 truncate cleaned up [ 336.147845][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3915'. [ 336.170629][ T29] audit: type=1400 audit(1793915676.592:2392): avc: denied { write } for pid=18900 comm="syz.8.3914" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.170732][ T29] audit: type=1400 audit(1793915676.592:2393): avc: denied { write } for pid=18900 comm="syz.8.3914" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.190563][ T29] audit: type=1400 audit(1793915676.602:2394): avc: denied { write } for pid=18900 comm="syz.8.3914" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.199434][T18857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.207287][ T29] audit: type=1400 audit(1793915676.622:2395): avc: denied { write } for pid=18900 comm="syz.8.3914" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.231671][ T29] audit: type=1400 audit(1793915676.642:2396): avc: denied { write } for pid=18900 comm="syz.8.3914" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.259921][ T29] audit: type=1400 audit(1793915676.682:2397): avc: denied { write } for pid=18900 comm="syz.8.3914" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.430357][T18911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3917'. [ 336.431098][T18911] FAULT_INJECTION: forcing a failure. [ 336.431098][T18911] name failslab, interval 1, probability 0, space 0, times 0 [ 336.431136][T18911] CPU: 0 UID: 0 PID: 18911 Comm: syz.4.3917 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 336.431178][T18911] Tainted: [W]=WARN [ 336.431188][T18911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 336.431206][T18911] Call Trace: [ 336.431213][T18911] [ 336.431221][T18911] __dump_stack+0x1d/0x30 [ 336.431361][T18911] dump_stack_lvl+0x95/0xd0 [ 336.431395][T18911] dump_stack+0x15/0x1b [ 336.431438][T18911] should_fail_ex+0x259/0x270 [ 336.431480][T18911] ? __kernfs_new_node+0x70/0x440 [ 336.431554][T18911] should_failslab+0x8c/0xb0 [ 336.431601][T18911] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 336.431648][T18911] ? __kernfs_new_node+0x70/0x440 [ 336.431734][T18911] __kernfs_new_node+0x70/0x440 [ 336.431811][T18911] ? __rcu_read_unlock+0x4e/0x70 [ 336.431847][T18911] ? up_write+0x19/0x60 [ 336.431877][T18911] ? kernfs_link_sibling+0x2f5/0x320 [ 336.431912][T18911] ? __rcu_read_unlock+0x4e/0x70 [ 336.431996][T18911] kernfs_new_node+0x107/0x140 [ 336.432168][T18911] __kernfs_create_file+0x4b/0x180 [ 336.432212][T18911] ? __pfx_dev_attr_show+0x10/0x10 [ 336.432265][T18911] ? __pfx_dev_attr_store+0x10/0x10 [ 336.432295][T18911] sysfs_add_file_mode_ns+0x132/0x1b0 [ 336.432381][T18911] internal_create_group+0x43e/0x9e0 [ 336.432415][T18911] ? kernfs_put+0x25e/0x2c0 [ 336.432488][T18911] sysfs_create_groups+0x3f/0xf0 [ 336.432521][T18911] device_add_attrs+0xf2/0x3f0 [ 336.432553][T18911] device_add+0x37a/0x790 [ 336.432584][T18911] netdev_register_kobject+0x127/0x240 [ 336.432615][T18911] register_netdevice+0xc68/0x13f0 [ 336.432672][T18911] ? _raw_spin_unlock_bh+0x17/0x20 [ 336.432698][T18911] hsr_dev_finalize+0x4b7/0x6a0 [ 336.432815][T18911] hsr_newlink+0x5dc/0x630 [ 336.432861][T18911] ? __pfx_hsr_newlink+0x10/0x10 [ 336.432976][T18911] rtnl_newlink_create+0x1e4/0x4a0 [ 336.433017][T18911] ? security_capable+0x7b/0x90 [ 336.433052][T18911] ? netlink_ns_capable+0x86/0xa0 [ 336.433199][T18911] rtnl_newlink+0x1255/0x1510 [ 336.433252][T18911] ? __css_rstat_updated+0xbb/0x280 [ 336.433328][T18911] ? __memcg_slab_free_hook+0x154/0x340 [ 336.433364][T18911] ? __rcu_read_unlock+0x4e/0x70 [ 336.433399][T18911] ? avc_has_perm_noaudit+0xac/0x160 [ 336.433445][T18911] ? cred_has_capability+0x224/0x2a0 [ 336.433533][T18911] ? selinux_capable+0x31/0x40 [ 336.433575][T18911] ? security_capable+0x7b/0x90 [ 336.433608][T18911] ? ns_capable+0x80/0xb0 [ 336.433641][T18911] ? __pfx_rtnl_newlink+0x10/0x10 [ 336.433757][T18911] rtnetlink_rcv_msg+0x64b/0x720 [ 336.433804][T18911] netlink_rcv_skb+0x11e/0x220 [ 336.433830][T18911] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.433878][T18911] rtnetlink_rcv+0x1c/0x30 [ 336.434009][T18911] netlink_unicast+0x665/0x740 [ 336.434123][T18911] netlink_sendmsg+0x5ef/0x740 [ 336.434182][T18911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.434211][T18911] ____sys_sendmsg+0x54a/0x590 [ 336.434243][T18911] ___sys_sendmsg+0x195/0x1e0 [ 336.434289][T18911] __x64_sys_sendmsg+0xd4/0x160 [ 336.434325][T18911] x64_sys_call+0x22ab/0x2550 [ 336.434362][T18911] do_syscall_64+0x112/0x360 [ 336.434452][T18911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.434481][T18911] RIP: 0033:0x7fb54d37fb19 [ 336.434499][T18911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.434519][T18911] RSP: 002b:00007fb54bdd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.434541][T18911] RAX: ffffffffffffffda RBX: 00007fb54d605fa0 RCX: 00007fb54d37fb19 [ 336.434560][T18911] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 336.434578][T18911] RBP: 00007fb54d417b70 R08: 0000000000000000 R09: 0000000000000000 [ 336.434594][T18911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.434641][T18911] R13: 00007fb54d606038 R14: 00007fb54d605fa0 R15: 00007ffdd4865f08 [ 336.434668][T18911] [ 336.509808][T18913] loop9: detected capacity change from 0 to 512 [ 336.530747][T18913] EXT4-fs (loop9): 1 truncate cleaned up [ 336.616754][T18913] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz.9.3916: invalid fast symlink length 39 [ 336.618171][ T29] audit: type=1400 audit(1793915677.042:2398): avc: denied { write } for pid=18912 comm="syz.9.3916" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.642463][T18857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.667782][T18857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.675526][T18857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.705452][T18857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.717035][T18857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.746688][T18857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.758064][T18857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.791836][T18857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.005138][T18857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.021997][T18857] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.037390][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.037439][ T9217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.067682][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.067724][ T9217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.122990][T18857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.166713][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3923'. [ 337.204655][T18857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.247000][T18857] veth0_vlan: entered promiscuous mode [ 337.250074][T18857] veth1_vlan: entered promiscuous mode [ 337.253280][T18941] FAULT_INJECTION: forcing a failure. [ 337.253280][T18941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.253314][T18941] CPU: 1 UID: 0 PID: 18941 Comm: syz.8.3927 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 337.253384][T18941] Tainted: [W]=WARN [ 337.253393][T18941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 337.253463][T18941] Call Trace: [ 337.253471][T18941] [ 337.253532][T18941] __dump_stack+0x1d/0x30 [ 337.253561][T18941] dump_stack_lvl+0x95/0xd0 [ 337.253594][T18941] dump_stack+0x15/0x1b [ 337.253659][T18941] should_fail_ex+0x259/0x270 [ 337.253725][T18941] should_fail+0xb/0x20 [ 337.253755][T18941] should_fail_usercopy+0x1a/0x20 [ 337.253800][T18941] _copy_from_user+0x1c/0xb0 [ 337.253881][T18941] snd_seq_write+0x1cc/0x590 [ 337.253956][T18941] ? __pfx_snd_seq_write+0x10/0x10 [ 337.253985][T18941] vfs_write+0x24f/0x990 [ 337.254031][T18941] ? __fget_files+0x184/0x1c0 [ 337.254070][T18941] ksys_write+0xdc/0x1a0 [ 337.254132][T18941] __x64_sys_write+0x40/0x50 [ 337.254179][T18941] x64_sys_call+0x154e/0x2550 [ 337.254217][T18941] do_syscall_64+0x112/0x360 [ 337.254294][T18941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.254318][T18941] RIP: 0033:0x7fa8ee6efb19 [ 337.254340][T18941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.254367][T18941] RSP: 002b:00007fa8ed13f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 337.254451][T18941] RAX: ffffffffffffffda RBX: 00007fa8ee975fa0 RCX: 00007fa8ee6efb19 [ 337.254471][T18941] RDX: 000000000001001a RSI: 0000200000001040 RDI: 0000000000000004 [ 337.254490][T18941] RBP: 00007fa8ee787b70 R08: 0000000000000000 R09: 0000000000000000 [ 337.254509][T18941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.254533][T18941] R13: 00007fa8ee976038 R14: 00007fa8ee975fa0 R15: 00007ffc66c700b8 [ 337.254583][T18941] [ 337.304591][T18947] futex_wake_op: syz.0.3928 tries to shift op by 144; fix this program [ 337.455529][T18857] veth0_macvtap: entered promiscuous mode [ 337.481781][T18857] veth1_macvtap: entered promiscuous mode [ 337.493216][T18951] loop9: detected capacity change from 0 to 1024 [ 337.499678][T18951] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.511556][T18950] FAULT_INJECTION: forcing a failure. [ 337.511556][T18950] name failslab, interval 1, probability 0, space 0, times 0 [ 337.511592][T18950] CPU: 1 UID: 0 PID: 18950 Comm: syz.8.3930 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 337.511633][T18950] Tainted: [W]=WARN [ 337.511643][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 337.511658][T18950] Call Trace: [ 337.511703][T18950] [ 337.511713][T18950] __dump_stack+0x1d/0x30 [ 337.511749][T18950] dump_stack_lvl+0x95/0xd0 [ 337.511782][T18950] dump_stack+0x15/0x1b [ 337.511810][T18950] should_fail_ex+0x259/0x270 [ 337.511886][T18950] ? ep_insert+0x13b/0xd70 [ 337.511965][T18950] should_failslab+0x8c/0xb0 [ 337.512006][T18950] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 337.512051][T18950] ? __pfx_futex_wake_mark+0x10/0x10 [ 337.512106][T18950] ? ep_insert+0x13b/0xd70 [ 337.512153][T18950] ? percpu_counter_add_batch+0xb5/0x120 [ 337.512195][T18950] ep_insert+0x13b/0xd70 [ 337.512236][T18950] ? futex_wait+0x18f/0x1c0 [ 337.512341][T18950] do_epoll_ctl_file+0x640/0x700 [ 337.512392][T18950] __se_sys_epoll_ctl+0xf1/0x190 [ 337.512485][T18950] __x64_sys_epoll_ctl+0x55/0x70 [ 337.512514][T18950] x64_sys_call+0x6a5/0x2550 [ 337.512553][T18950] do_syscall_64+0x112/0x360 [ 337.512672][T18950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.512705][T18950] RIP: 0033:0x7fa8ee6efb19 [ 337.512728][T18950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.512804][T18950] RSP: 002b:00007fa8ed13f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 337.512833][T18950] RAX: ffffffffffffffda RBX: 00007fa8ee975fa0 RCX: 00007fa8ee6efb19 [ 337.512855][T18950] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 337.512875][T18950] RBP: 00007fa8ee787b70 R08: 0000000000000000 R09: 0000000000000000 [ 337.512893][T18950] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 337.512985][T18950] R13: 00007fa8ee976038 R14: 00007fa8ee975fa0 R15: 00007ffc66c700b8 [ 337.513014][T18950] [ 337.516839][T18857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.535848][T18951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.536306][T18951] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 337.550554][T18951] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #11: comm syz.9.3929: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 337.550603][T18951] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 337.550975][T18951] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.3929: couldn't read orphan inode 11 (err -117) [ 337.551065][T18951] loop9: lost filesystem error report for type 5 error -117 [ 337.567152][T18857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.625945][ T9219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.627068][ T9219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.627183][ T9219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.634015][ T9219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.637392][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 337.637406][ T29] audit: type=1400 audit(1793915678.052:2400): avc: denied { write } for pid=18948 comm="syz.9.3929" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.643606][T18951] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.3929: Invalid block bitmap block 0 in block_group 0 [ 337.645939][T18951] Quota error (device loop9): write_blk: dquota write failed [ 337.646070][T18951] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 337.646275][T18951] EXT4-fs error (device loop9): ext4_acquire_dquot:7120: comm syz.9.3929: Failed to acquire dquot type 0 [ 337.705023][ T29] audit: type=1400 audit(1793915678.122:2401): avc: denied { write } for pid=18948 comm="syz.9.3929" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.710418][T18951] Quota error (device loop9): write_blk: dquota write failed [ 337.710708][T18951] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 337.710848][T18951] EXT4-fs error (device loop9): ext4_acquire_dquot:7120: comm syz.9.3929: Failed to acquire dquot type 0 [ 337.964577][ T2156] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-9 [ 337.964608][ T2156] EXT4-fs error (device loop9): ext4_release_dquot:7156: comm kworker/u8:9: Failed to release dquot type 0 [ 337.964634][ T2156] loop9: lost filesystem error report for type 5 error -117 [ 338.033073][T18965] FAULT_INJECTION: forcing a failure. [ 338.033073][T18965] name failslab, interval 1, probability 0, space 0, times 0 [ 338.033136][T18965] CPU: 0 UID: 0 PID: 18965 Comm: syz.9.3935 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 338.033220][T18965] Tainted: [W]=WARN [ 338.033232][T18965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 338.033253][T18965] Call Trace: [ 338.033264][T18965] [ 338.033274][T18965] __dump_stack+0x1d/0x30 [ 338.033347][T18965] dump_stack_lvl+0x95/0xd0 [ 338.033418][T18965] dump_stack+0x15/0x1b [ 338.033450][T18965] should_fail_ex+0x259/0x270 [ 338.033492][T18965] ? request_threaded_irq+0x1ad/0x2c0 [ 338.033538][T18965] should_failslab+0x8c/0xb0 [ 338.033657][T18965] __kmalloc_cache_noprof+0x5d/0x3e0 [ 338.033704][T18965] ? request_threaded_irq+0x1ad/0x2c0 [ 338.033748][T18965] ? __pfx_serial8250_interrupt+0x10/0x10 [ 338.033862][T18965] request_threaded_irq+0x1ad/0x2c0 [ 338.033976][T18965] ? __pfx_serial8250_interrupt+0x10/0x10 [ 338.034010][T18965] univ8250_setup_irq+0x2ab/0x300 [ 338.034041][T18965] serial8250_do_startup+0xa5b/0x19a0 [ 338.034082][T18965] serial8250_startup+0x41/0x50 [ 338.034190][T18965] uart_startup+0x46b/0xba0 [ 338.034298][T18965] uart_port_activate+0x67/0xc0 [ 338.034421][T18965] tty_port_open+0x14c/0x1f0 [ 338.034543][T18965] uart_open+0x30/0x40 [ 338.034576][T18965] tty_open+0x3db/0xb70 [ 338.034616][T18965] chrdev_open+0x2eb/0x3a0 [ 338.034658][T18965] do_dentry_open+0x496/0xa40 [ 338.034692][T18965] ? __pfx_chrdev_open+0x10/0x10 [ 338.034720][T18965] ? may_open+0x1f4/0x350 [ 338.034767][T18965] vfs_open_consume+0x46/0x1f0 [ 338.034794][T18965] path_openat+0xc16/0x11c0 [ 338.034845][T18965] do_file_open+0x16c/0x290 [ 338.034942][T18965] do_sys_openat2+0xa1/0x140 [ 338.034979][T18965] __x64_sys_openat+0xf2/0x120 [ 338.035010][T18965] x64_sys_call+0x1f72/0x2550 [ 338.035092][T18965] do_syscall_64+0x112/0x360 [ 338.035138][T18965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.035192][T18965] RIP: 0033:0x7f017d6dfb19 [ 338.035210][T18965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.035238][T18965] RSP: 002b:00007f017c12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.035344][T18965] RAX: ffffffffffffffda RBX: 00007f017d965fa0 RCX: 00007f017d6dfb19 [ 338.035388][T18965] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 338.035406][T18965] RBP: 00007f017d777b70 R08: 0000000000000000 R09: 0000000000000000 [ 338.035425][T18965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.035476][T18965] R13: 00007f017d966038 R14: 00007f017d965fa0 R15: 00007ffc8e429bb8 [ 338.035506][T18965] [ 338.337010][T18974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.337128][T18974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.361617][T18976] loop9: detected capacity change from 0 to 512 [ 338.414503][T18976] loop9: detected capacity change from 512 to 0 [ 338.424125][T18976] FAT-fs (loop9): Directory bread(block 34) failed [ 338.424154][T18976] FAT-fs (loop9): Directory bread(block 35) failed [ 338.424234][T18976] FAT-fs (loop9): Directory bread(block 36) failed [ 338.425683][T18976] FAT-fs (loop9): Directory bread(block 37) failed [ 338.425763][T18976] FAT-fs (loop9): Directory bread(block 38) failed [ 338.425828][T18976] FAT-fs (loop9): Directory bread(block 39) failed [ 338.425927][T18976] FAT-fs (loop9): Directory bread(block 40) failed [ 338.426060][T18976] FAT-fs (loop9): Directory bread(block 41) failed [ 338.426183][T18976] FAT-fs (loop9): Directory bread(block 42) failed [ 338.426247][T18976] FAT-fs (loop9): Directory bread(block 43) failed [ 338.462678][T18981] xt_hashlimit: size too large, truncated to 1048576 [ 338.507567][ T29] audit: type=1326 audit(1793915678.932:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2d33dfb19 code=0x0 [ 338.579709][T17461] syz_tun (unregistering): left allmulticast mode [ 338.616520][ T9217] FAT-fs (loop9): bread failed in fat_clusters_flush [ 338.625086][T17461] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 338.708837][T18991] rxe_eth0 speed is unknown, defaulting to 1000 [ 338.727250][T18994] loop8: detected capacity change from 0 to 512 [ 338.728005][T18994] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 338.728024][T18994] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 338.760475][T18994] EXT4-fs (loop8): 1 truncate cleaned up [ 338.878584][T18991] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.878620][T18991] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.878771][T18991] bridge_slave_0: entered allmulticast mode [ 338.879266][T18991] bridge_slave_0: entered promiscuous mode [ 338.907219][T18991] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.907262][T18991] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.907447][T18991] bridge_slave_1: entered allmulticast mode [ 338.908048][T18991] bridge_slave_1: entered promiscuous mode [ 338.947971][T18991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.949209][T18991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.983186][T18991] team0: Port device team_slave_0 added [ 338.990040][T18991] team0: Port device team_slave_1 added [ 339.007045][T18991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.007065][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.007151][T18991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.007822][T18991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.007838][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.007983][T18991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.038867][T18991] hsr_slave_0: entered promiscuous mode [ 339.039731][T18991] hsr_slave_1: entered promiscuous mode [ 339.040487][T18991] debugfs: 'hsr0' already exists in 'hsr' [ 339.040528][T18991] Cannot create hsr debugfs directory [ 339.164985][T18991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.218351][T18991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.269956][T18991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.323538][T18991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.398279][T18991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.400603][T18991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.401330][T18991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.403736][T18991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.430323][T18991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.442801][T18991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.444036][T18991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.447353][T18991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.500405][T18991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.512588][T18991] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.523836][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.523880][T11881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.542728][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.542766][ T9217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.544188][T14716] EXT4-fs unmount: 15 callbacks suppressed [ 339.544453][T14716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.615373][T18991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.651844][T18991] veth0_vlan: entered promiscuous mode [ 339.661226][T18991] veth1_vlan: entered promiscuous mode [ 339.684184][T18991] veth0_macvtap: entered promiscuous mode [ 339.692930][T18991] veth1_macvtap: entered promiscuous mode [ 339.708556][T18991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.710873][T18991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.924442][ T32] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.927321][ T32] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.927446][ T32] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.927503][ T32] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.107344][ T29] audit: type=1400 audit(1793915680.532:2403): avc: denied { write } for pid=19039 comm="syz.1.3958" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 340.267035][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 340.272188][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 340.556361][ T29] audit: type=1326 audit(1793915680.982:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19070 comm="syz.3.3974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb862b1fb19 code=0x7ffc0000 [ 340.603384][T19073] syz.8.3975 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 340.603435][T19073] CPU: 1 UID: 0 PID: 19073 Comm: syz.8.3975 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 340.603467][T19073] Tainted: [W]=WARN [ 340.603475][T19073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 340.603489][T19073] Call Trace: [ 340.603512][T19073] [ 340.603521][T19073] __dump_stack+0x1d/0x30 [ 340.603548][T19073] dump_stack_lvl+0x95/0xd0 [ 340.603577][T19073] dump_stack+0x15/0x1b [ 340.603599][T19073] dump_header+0x80/0x240 [ 340.603623][T19073] oom_kill_process+0x294/0x420 [ 340.603755][T19073] out_of_memory+0x94d/0xb60 [ 340.603785][T19073] try_charge_memcg+0x6d0/0xb30 [ 340.603887][T19073] __obj_cgroup_charge+0xe3/0x210 [ 340.603991][T19073] __memcg_slab_post_alloc_hook+0x4bb/0x8c0 [ 340.604027][T19073] ? __register_sysctl_table+0x52/0xbe0 [ 340.604101][T19073] __kmalloc_noprof+0x23b/0x4b0 [ 340.604145][T19073] ? __register_sysctl_table+0x52/0xbe0 [ 340.604186][T19073] __register_sysctl_table+0x52/0xbe0 [ 340.604279][T19073] ? __kmalloc_node_track_caller_noprof+0x2bc/0x4d0 [ 340.604333][T19073] ? sctp_sysctl_net_register+0x29/0x4f0 [ 340.604417][T19073] register_net_sysctl_sz+0x118/0x190 [ 340.604456][T19073] sctp_sysctl_net_register+0x499/0x4f0 [ 340.604503][T19073] sctp_ctrlsock_init+0xa6/0x140 [ 340.604549][T19073] ops_init+0x22a/0x2e0 [ 340.604595][T19073] setup_net+0x9f/0x230 [ 340.604634][T19073] copy_net_ns+0x339/0x490 [ 340.604674][T19073] create_new_namespaces+0x1f6/0x420 [ 340.604711][T19073] unshare_nsproxy_namespaces+0x115/0x150 [ 340.604749][T19073] ksys_unshare+0x3a3/0x690 [ 340.604789][T19073] __x64_sys_unshare+0x1f/0x30 [ 340.604891][T19073] x64_sys_call+0x1e33/0x2550 [ 340.604978][T19073] do_syscall_64+0x112/0x360 [ 340.605031][T19073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.605102][T19073] RIP: 0033:0x7fa8ee6efb19 [ 340.605161][T19073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.605185][T19073] RSP: 002b:00007fa8ed13f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 340.605230][T19073] RAX: ffffffffffffffda RBX: 00007fa8ee975fa0 RCX: 00007fa8ee6efb19 [ 340.605252][T19073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 340.605303][T19073] RBP: 00007fa8ee787b70 R08: 0000000000000000 R09: 0000000000000000 [ 340.605323][T19073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.605342][T19073] R13: 00007fa8ee976038 R14: 00007fa8ee975fa0 R15: 00007ffc66c700b8 [ 340.605370][T19073] [ 340.607569][T19073] memory: usage 96kB, limit 96kB, failcnt 35 [ 340.607685][T19073] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 340.607780][T19073] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 340.607822][T19073] Memory cgroup stats for /syz8/test: [ 340.608266][T19073] cache 0 [ 340.608290][T19073] rss 0 [ 340.608319][T19073] shmem 0 [ 340.608341][T19073] mapped_file 0 [ 340.608363][T19073] dirty 0 [ 340.608395][T19073] writeback 0 [ 340.608424][T19073] workingset_refault_anon 0 [ 340.608465][T19073] workingset_refault_file 0 [ 340.608502][T19073] swap 0 [ 340.608584][T19073] swapcached 0 [ 340.608613][T19073] pgpgin 0 [ 340.608636][T19073] pgpgout 0 [ 340.608657][T19073] pgfault 0 [ 340.608679][T19073] pgmajfault 0 [ 340.608708][T19073] inactive_anon 0 [ 340.608752][T19073] active_anon 0 [ 340.608774][T19073] inactive_file 0 [ 340.608803][T19073] active_file 0 [ 340.608824][T19073] unevictable 0 [ 340.608864][T19073] hierarchical_memory_limit 98304 [ 340.608894][T19073] hierarchical_memsw_limit 9223372036854771712 [ 340.608924][T19073] total_cache 0 [ 340.608946][T19073] total_rss 0 [ 340.608967][T19073] total_shmem 0 [ 340.609013][T19073] total_mapped_file 0 [ 340.609036][T19073] total_dirty 0 [ 340.609058][T19073] total_writeback 0 [ 340.609081][T19073] total_workingset_refault_anon 0 [ 340.609098][T19073] total_workingset_refault_file 0 [ 340.609137][T19073] total_swap 0 [ 340.609160][T19073] total_swapcached 0 [ 340.609183][T19073] total_pgpgin 0 [ 340.609212][T19073] total_pgpgout 0 [ 340.609235][T19073] total_pgfault 0 [ 340.609258][T19073] total_pgmajfault 0 [ 340.609286][T19073] total_inactive_anon 0 [ 340.609310][T19073] total_active_anon 0 [ 340.609340][T19073] total_inactive_file 0 [ 340.609363][T19073] total_active_file 0 [ 340.609411][T19073] total_unevictable 0 [ 340.609435][T19073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.3975,pid=19071,uid=0 [ 340.609800][T19073] Memory cgroup out of memory: Killed process 19071 (syz.8.3975) total-vm:96136kB, anon-rss:1444kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 340.781968][T19081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3978'. [ 340.800984][T19074] FAULT_INJECTION: forcing a failure. [ 340.800984][T19074] name failslab, interval 1, probability 0, space 0, times 0 [ 340.801083][T19074] CPU: 0 UID: 0 PID: 19074 Comm: syz.3.3974 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 340.801229][T19074] Tainted: [W]=WARN [ 340.801258][T19074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 340.801303][T19074] Call Trace: [ 340.801324][T19074] [ 340.801356][T19074] __dump_stack+0x1d/0x30 [ 340.801501][T19074] dump_stack_lvl+0x95/0xd0 [ 340.801578][T19074] dump_stack+0x15/0x1b [ 340.801657][T19074] should_fail_ex+0x259/0x270 [ 340.801811][T19074] ? __alloc_skb+0x2e0/0x6f0 [ 340.801933][T19074] should_failslab+0x8c/0xb0 [ 340.802049][T19074] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 340.802244][T19074] ? should_fail_ex+0xdb/0x270 [ 340.802339][T19074] ? __alloc_skb+0x2e0/0x6f0 [ 340.802523][T19074] __alloc_skb+0x2e0/0x6f0 [ 340.802635][T19074] ? __alloc_skb+0x209/0x6f0 [ 340.802676][T19074] audit_log_start+0x3aa/0x730 [ 340.802807][T19074] ? get_sigframe+0x358/0x470 [ 340.802903][T19074] ? _raw_spin_unlock_irq+0x9/0x30 [ 340.802988][T19074] audit_seccomp+0x49/0x110 [ 340.803092][T19074] ? _raw_spin_unlock_irq+0x9/0x30 [ 340.803196][T19074] __seccomp_filter+0x8f8/0x13d0 [ 340.803360][T19074] __seccomp_permit_syscall+0x7d/0x150 [ 340.803553][T19074] do_syscall_64+0xca/0x360 [ 340.803795][T19074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.803951][T19074] RIP: 0033:0x7fb862ac0e99 [ 340.804012][T19074] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 340.804077][T19074] RSP: 002b:00007fb86156ea80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 340.804150][T19074] RAX: ffffffffffffffda RBX: 00007fb862da5fa0 RCX: 00007fb862ac0e99 [ 340.804173][T19074] RDX: 00007fb86156ea80 RSI: 00007fb86156ebb0 RDI: 0000000000000011 [ 340.804188][T19074] RBP: 00007fb862bb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 340.804284][T19074] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 340.804405][T19074] R13: 00007fb862da6038 R14: 00007fb862da5fa0 R15: 00007ffda9c5db18 [ 340.804470][T19074] [ 341.237592][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 341.382868][T19103] loop3: detected capacity change from 0 to 128 [ 341.469426][T19105] loop1: detected capacity change from 0 to 512 [ 341.565006][T19105] loop1: detected capacity change from 512 to 0 [ 341.574932][T19105] FAT-fs (loop1): Directory bread(block 34) failed [ 341.574971][T19105] FAT-fs (loop1): Directory bread(block 35) failed [ 341.574999][T19105] FAT-fs (loop1): Directory bread(block 36) failed [ 341.575042][T19105] FAT-fs (loop1): Directory bread(block 37) failed [ 341.575120][T19105] FAT-fs (loop1): Directory bread(block 38) failed [ 341.575148][T19105] FAT-fs (loop1): Directory bread(block 39) failed [ 341.575176][T19105] FAT-fs (loop1): Directory bread(block 40) failed [ 341.575205][T19105] FAT-fs (loop1): Directory bread(block 41) failed [ 341.575246][T19105] FAT-fs (loop1): Directory bread(block 42) failed [ 341.575275][T19105] FAT-fs (loop1): Directory bread(block 43) failed [ 341.578106][T19110] loop4: detected capacity change from 0 to 1024 [ 341.580373][T19110] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.583181][T19107] FAULT_INJECTION: forcing a failure. [ 341.583181][T19107] name failslab, interval 1, probability 0, space 0, times 0 [ 341.583275][T19107] CPU: 0 UID: 0 PID: 19107 Comm: syz.3.3989 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 341.583380][T19107] Tainted: [W]=WARN [ 341.583412][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 341.583456][T19107] Call Trace: [ 341.583487][T19107] [ 341.583510][T19107] __dump_stack+0x1d/0x30 [ 341.583603][T19107] dump_stack_lvl+0x95/0xd0 [ 341.583698][T19107] dump_stack+0x15/0x1b [ 341.583788][T19107] should_fail_ex+0x259/0x270 [ 341.583903][T19107] should_failslab+0x8c/0xb0 [ 341.584021][T19107] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 341.584214][T19107] ? xas_create+0xb9c/0xbf0 [ 341.584326][T19107] ? __d_alloc+0x34/0x320 [ 341.584413][T19107] ? __d_alloc+0x34/0x320 [ 341.584537][T19107] __d_alloc+0x34/0x320 [ 341.584649][T19107] d_alloc+0x2e/0x100 [ 341.584750][T19107] lookup_one_qstr_excl+0x95/0x240 [ 341.584913][T19107] start_dirop+0x3e/0x70 [ 341.585006][T19107] simple_start_creating+0xa2/0xd0 [ 341.585118][T19107] debugfs_start_creating+0xcd/0x160 [ 341.585239][T19107] debugfs_create_symlink+0x39/0x150 [ 341.585363][T19107] ref_tracker_dir_symlink+0x1ae/0x290 [ 341.585510][T19107] net_ns_net_init+0x8f/0xa0 [ 341.585669][T19107] ops_init+0x22a/0x2e0 [ 341.585788][T19107] setup_net+0x9f/0x230 [ 341.585884][T19107] copy_net_ns+0x339/0x490 [ 341.586033][T19107] create_new_namespaces+0x1f6/0x420 [ 341.586172][T19107] unshare_nsproxy_namespaces+0x115/0x150 [ 341.586295][T19107] ksys_unshare+0x3a3/0x690 [ 341.586403][T19107] __x64_sys_unshare+0x1f/0x30 [ 341.586533][T19107] x64_sys_call+0x1e33/0x2550 [ 341.586628][T19107] do_syscall_64+0x112/0x360 [ 341.586763][T19107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.586837][T19107] RIP: 0033:0x7fb862b1fb19 [ 341.586899][T19107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.587018][T19107] RSP: 002b:00007fb86156f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 341.587087][T19107] RAX: ffffffffffffffda RBX: 00007fb862da5fa0 RCX: 00007fb862b1fb19 [ 341.587147][T19107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 341.587267][T19107] RBP: 00007fb862bb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 341.587337][T19107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.587351][T19107] R13: 00007fb862da6038 R14: 00007fb862da5fa0 R15: 00007ffda9c5db18 [ 341.587376][T19107] [ 341.646405][T19110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.650695][T19110] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 341.712065][T19110] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.3990: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 341.712247][T19110] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 341.718488][T19110] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.3990: couldn't read orphan inode 11 (err -117) [ 341.718602][T19110] loop4: lost filesystem error report for type 5 error -117 [ 341.723584][T19110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.787396][T19110] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.3990: Invalid block bitmap block 0 in block_group 0 [ 341.789982][T19110] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.3990: Failed to acquire dquot type 0 [ 341.832623][T19110] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.3990: Failed to acquire dquot type 0 [ 342.047663][T10106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.103011][ T9219] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:12: Failed to release dquot type 0 [ 342.103040][ T9219] loop4: lost filesystem error report for type 5 error -117 [ 342.237341][ T2156] FAT-fs (loop1): bread failed in fat_clusters_flush [ 342.237446][T18857] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 342.241297][T19107] rxe_eth0 speed is unknown, defaulting to 1000 [ 342.565451][T19123] rxe_eth0 speed is unknown, defaulting to 1000 [ 342.711389][T19123] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.711427][T19123] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.711634][T19123] bridge_slave_0: entered allmulticast mode [ 342.712205][T19123] bridge_slave_0: entered promiscuous mode [ 342.748304][T19123] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.748350][T19123] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.748451][T19123] bridge_slave_1: entered allmulticast mode [ 342.749018][T19123] bridge_slave_1: entered promiscuous mode [ 342.813682][T19123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.825673][T19123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.871581][T19123] team0: Port device team_slave_0 added [ 342.874010][T19123] team0: Port device team_slave_1 added [ 342.904463][T19123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.904582][T19123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.904696][T19123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.905281][T19123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.905298][T19123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.905335][T19123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.976329][T19123] hsr_slave_0: entered promiscuous mode [ 342.978850][T19123] hsr_slave_1: entered promiscuous mode [ 342.981458][T19123] debugfs: 'hsr0' already exists in 'hsr' [ 342.981509][T19123] Cannot create hsr debugfs directory [ 343.089564][T19138] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.103887][T19123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.143351][T19123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.226853][T19123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.260281][T19123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.361587][T19123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.364088][T19123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.379261][T19123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.381838][T19123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.382506][T19123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.405740][T19123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.406336][T19123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.409020][T19123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.489530][T19123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.502014][T19123] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.510684][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.510726][ T9217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.519224][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.519330][ T9219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.582976][T19123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.616700][T19123] veth0_vlan: entered promiscuous mode [ 343.620338][T19123] veth1_vlan: entered promiscuous mode [ 343.639823][T19123] veth0_macvtap: entered promiscuous mode [ 343.641673][T19123] veth1_macvtap: entered promiscuous mode [ 343.650769][T19123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.663608][T19123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.714579][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.714754][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.714874][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.714918][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.903404][T19166] FAULT_INJECTION: forcing a failure. [ 344.903404][T19166] name failslab, interval 1, probability 0, space 0, times 0 [ 344.903493][T19166] CPU: 1 UID: 0 PID: 19166 Comm: syz.4.4019 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 344.903531][T19166] Tainted: [W]=WARN [ 344.903539][T19166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 344.903553][T19166] Call Trace: [ 344.903560][T19166] [ 344.903610][T19166] __dump_stack+0x1d/0x30 [ 344.903645][T19166] dump_stack_lvl+0x95/0xd0 [ 344.903678][T19166] dump_stack+0x15/0x1b [ 344.903704][T19166] should_fail_ex+0x259/0x270 [ 344.903737][T19166] ? bdi_alloc+0x31/0xb0 [ 344.903827][T19166] should_failslab+0x8c/0xb0 [ 344.903867][T19166] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 344.904009][T19166] ? bdi_alloc+0x31/0xb0 [ 344.904035][T19166] bdi_alloc+0x31/0xb0 [ 344.904063][T19166] __alloc_disk_node+0x85/0x2f0 [ 344.904175][T19166] __blk_alloc_disk+0x68/0xd0 [ 344.904213][T19166] dm_create+0x36d/0x850 [ 344.904243][T19166] dev_create+0x141/0x290 [ 344.904345][T19166] dm_ctl_ioctl+0x80b/0xad0 [ 344.904408][T19166] ? __pfx_dev_create+0x10/0x10 [ 344.904462][T19166] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 344.904501][T19166] __se_sys_ioctl+0xce/0x140 [ 344.904559][T19166] __x64_sys_ioctl+0x43/0x50 [ 344.904603][T19166] x64_sys_call+0x239d/0x2550 [ 344.904641][T19166] do_syscall_64+0x112/0x360 [ 344.904725][T19166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.904758][T19166] RIP: 0033:0x7fb54d37fb19 [ 344.904782][T19166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.904812][T19166] RSP: 002b:00007fb54bdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.904834][T19166] RAX: ffffffffffffffda RBX: 00007fb54d605fa0 RCX: 00007fb54d37fb19 [ 344.904918][T19166] RDX: 0000200000000580 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 344.904939][T19166] RBP: 00007fb54d417b70 R08: 0000000000000000 R09: 0000000000000000 [ 344.904959][T19166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.905070][T19166] R13: 00007fb54d606038 R14: 00007fb54d605fa0 R15: 00007ffdd4865f08 [ 344.905099][T19166] [ 344.909965][T19168] FAULT_INJECTION: forcing a failure. [ 344.909965][T19168] name failslab, interval 1, probability 0, space 0, times 0 [ 344.910128][T19168] CPU: 1 UID: 0 PID: 19168 Comm: syz.1.4006 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 344.910224][T19168] Tainted: [W]=WARN [ 344.910283][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 344.910395][T19168] Call Trace: [ 344.910424][T19168] [ 344.910448][T19168] __dump_stack+0x1d/0x30 [ 344.910543][T19168] dump_stack_lvl+0x95/0xd0 [ 344.910626][T19168] dump_stack+0x15/0x1b [ 344.910698][T19168] should_fail_ex+0x259/0x270 [ 344.910847][T19168] ? security_inode_alloc+0x37/0x100 [ 344.910958][T19168] should_failslab+0x8c/0xb0 [ 344.911116][T19168] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 344.911237][T19168] ? security_inode_alloc+0x37/0x100 [ 344.911307][T19168] security_inode_alloc+0x37/0x100 [ 344.911397][T19168] inode_init_always_gfp+0x49b/0x4e0 [ 344.911534][T19168] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 344.911636][T19168] alloc_inode+0x58/0x170 [ 344.911710][T19168] new_inode+0x1d/0xe0 [ 344.911794][T19168] debugfs_create_symlink+0x7c/0x150 [ 344.911940][T19168] ref_tracker_dir_symlink+0x1ae/0x290 [ 344.912085][T19168] net_ns_net_init+0x8f/0xa0 [ 344.912191][T19168] ops_init+0x22a/0x2e0 [ 344.912340][T19168] setup_net+0x9f/0x230 [ 344.912460][T19168] copy_net_ns+0x339/0x490 [ 344.912555][T19168] create_new_namespaces+0x1f6/0x420 [ 344.912648][T19168] unshare_nsproxy_namespaces+0x115/0x150 [ 344.912772][T19168] ksys_unshare+0x3a3/0x690 [ 344.912946][T19168] __x64_sys_unshare+0x1f/0x30 [ 344.913101][T19168] x64_sys_call+0x1e33/0x2550 [ 344.913205][T19168] do_syscall_64+0x112/0x360 [ 344.913322][T19168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.913453][T19168] RIP: 0033:0x7fb4bc89fb19 [ 344.913507][T19168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.913571][T19168] RSP: 002b:00007fb4bb2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 344.913683][T19168] RAX: ffffffffffffffda RBX: 00007fb4bcb25fa0 RCX: 00007fb4bc89fb19 [ 344.913752][T19168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 344.913804][T19168] RBP: 00007fb4bc937b70 R08: 0000000000000000 R09: 0000000000000000 [ 344.913848][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.913887][T19168] R13: 00007fb4bcb26038 R14: 00007fb4bcb25fa0 R15: 00007ffe34b4c268 [ 344.913959][T19168] [ 344.920298][T19168] debugfs: out of free dentries, can not create symlink 'netns-26f-4026537735-notrefcnt' [ 345.170149][T19168] rxe_eth0 speed is unknown, defaulting to 1000 [ 345.772361][T19185] loop8: detected capacity change from 0 to 1024 [ 345.797400][T19185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 345.797833][T19185] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 345.802510][T19185] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 345.802704][T19185] EXT4-fs (loop8): orphan cleanup on readonly fs [ 345.803157][T19185] EXT4-fs error (device loop8): ext4_free_blocks:6717: comm syz.8.4011: Freeing blocks not in datazone - block = 0, count = 4096 [ 345.803243][T19185] loop8: lost filesystem error report for type 5 error -117 [ 345.804309][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 345.804333][ C1] EXT4-fs (loop8): initial error at time 1793915686: ext4_free_blocks:6717 [ 345.804383][ C1] EXT4-fs (loop8): last error at time 1793915686: ext4_free_blocks:6717 [ 345.804787][T19185] EXT4-fs (loop8): 1 orphan inode deleted [ 345.805784][T19185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.809579][T19185] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 345.809579][T19185] program syz.8.4011 not setting count and/or reply_len properly [ 345.981762][T14716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.140271][T19190] FAULT_INJECTION: forcing a failure. [ 346.140271][T19190] name failslab, interval 1, probability 0, space 0, times 0 [ 346.140362][T19190] CPU: 0 UID: 0 PID: 19190 Comm: syz.1.4012 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 346.140482][T19190] Tainted: [W]=WARN [ 346.140493][T19190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 346.140513][T19190] Call Trace: [ 346.140556][T19190] [ 346.140566][T19190] __dump_stack+0x1d/0x30 [ 346.140604][T19190] dump_stack_lvl+0x95/0xd0 [ 346.140639][T19190] dump_stack+0x15/0x1b [ 346.140671][T19190] should_fail_ex+0x259/0x270 [ 346.140758][T19190] ? nci_hci_allocate+0x33/0x180 [ 346.140782][T19190] should_failslab+0x8c/0xb0 [ 346.140831][T19190] __kmalloc_cache_noprof+0x5d/0x3e0 [ 346.140943][T19190] ? nci_hci_allocate+0x33/0x180 [ 346.141049][T19190] ? mutex_init_generic+0x3e/0x50 [ 346.141086][T19190] nci_hci_allocate+0x33/0x180 [ 346.141226][T19190] nci_allocate_device+0x156/0x200 [ 346.141270][T19190] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 346.141370][T19190] virtual_ncidev_open+0x55/0x130 [ 346.141416][T19190] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 346.141464][T19190] misc_open+0x1df/0x220 [ 346.141586][T19190] chrdev_open+0x2eb/0x3a0 [ 346.141618][T19190] do_dentry_open+0x496/0xa40 [ 346.141651][T19190] ? __pfx_chrdev_open+0x10/0x10 [ 346.141673][T19190] vfs_open_consume+0x46/0x1f0 [ 346.141700][T19190] path_openat+0xc16/0x11c0 [ 346.141830][T19190] do_file_open+0x16c/0x290 [ 346.141970][T19190] do_sys_openat2+0xa1/0x140 [ 346.142004][T19190] __x64_sys_openat+0xf2/0x120 [ 346.142067][T19190] x64_sys_call+0x1f72/0x2550 [ 346.142108][T19190] do_syscall_64+0x112/0x360 [ 346.142167][T19190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.142193][T19190] RIP: 0033:0x7fb4bc89fb19 [ 346.142210][T19190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.142237][T19190] RSP: 002b:00007fb4bb2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 346.142267][T19190] RAX: ffffffffffffffda RBX: 00007fb4bcb25fa0 RCX: 00007fb4bc89fb19 [ 346.142350][T19190] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 346.142370][T19190] RBP: 00007fb4bc937b70 R08: 0000000000000000 R09: 0000000000000000 [ 346.142389][T19190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.142402][T19190] R13: 00007fb4bcb26038 R14: 00007fb4bcb25fa0 R15: 00007ffe34b4c268 [ 346.142429][T19190] [ 346.649622][T19196] rxe_eth0 speed is unknown, defaulting to 1000 [ 347.088790][T19203] loop0: detected capacity change from 0 to 512 [ 347.114060][T19203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.114146][T19203] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.234992][T17536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.311688][T19212] loop8: detected capacity change from 0 to 512 [ 347.335492][T19212] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.4026: bg 0: block 5: invalid block bitmap [ 347.335541][T19212] loop8: lost filesystem error report for type 5 error -117 [ 347.337032][T19212] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 347.337058][T19212] loop8: lost filesystem error report for type 5 error -117 [ 347.339350][T19212] EXT4-fs error (device loop8): ext4_free_branches:1040: inode #11: comm syz.8.4026: invalid indirect mapped block 3 (level 2) [ 347.339390][T19212] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 347.340929][T19212] EXT4-fs (loop8): 1 orphan inode deleted [ 347.340954][T19212] EXT4-fs (loop8): 1 truncate cleaned up [ 347.341444][T19212] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.557632][T14716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.674054][T19228] netlink: 'syz.8.4034': attribute type 1 has an invalid length. [ 347.699937][T19228] bond4: entered promiscuous mode [ 347.701930][T19228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 347.750194][T19228] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4034'. [ 347.750236][T19228] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4034'. [ 347.813347][T19226] SELinux: failed to load policy [ 347.814228][T19228] bond4: (slave bridge2): making interface the new active one [ 347.817551][T19228] bridge2: entered promiscuous mode [ 347.834669][T19228] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 347.892535][T19236] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4036'. [ 348.057752][T19247] batman_adv: batadv0: Adding interface: dummy0 [ 348.057773][T19247] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.057802][T19247] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 348.063898][T19247] netlink: 'syz.8.4041': attribute type 10 has an invalid length. [ 348.070990][T19247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.073050][T19247] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 348.146502][T19250] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 348.689745][T19255] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4053'. [ 348.692582][T19256] ip_tables: iptables: counters copy to user failed while replacing table [ 348.732679][T19258] loop3: detected capacity change from 0 to 512 [ 348.737769][T19258] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.4045: iget: bad i_size value: 38620345925642 [ 348.737864][T19258] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.738096][T19258] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4045: couldn't read orphan inode 15 (err -117) [ 348.738162][T19258] loop3: lost filesystem error report for type 5 error -117 [ 348.738751][T19258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.848532][T18991] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.912665][T19263] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 348.912685][T19263] netlink: 'syz.3.4047': attribute type 4 has an invalid length. [ 348.912698][T19263] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4047'. [ 349.090334][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 349.090353][ T29] audit: type=1400 audit(1793915689.512:2423): avc: denied { watch } for pid=19274 comm="syz.8.4052" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 349.172751][T19277] ip_tables: iptables: counters copy to user failed while replacing table [ 349.566415][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4060'. [ 349.566444][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4060'. [ 349.736126][T19285] loop0: detected capacity change from 0 to 512 [ 349.740974][ T2981] ================================================================== [ 349.741011][ T2981] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 349.741053][ T2981] [ 349.741059][ T2981] write to 0xffff88813156cc00 of 4 bytes by task 18005 on cpu 1: [ 349.741076][ T2981] d_make_discardable+0x4f/0x90 [ 349.741109][ T2981] simple_unlink+0x68/0x80 [ 349.741134][ T2981] shmem_unlink+0x12d/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 349.741157][ T2981] vfs_unlink+0x1c3/0x4a0 [ 349.741181][ T2981] filename_unlinkat+0x1db/0x400 [ 349.741205][ T2981] __se_sys_unlink+0x2b/0xe0 [ 349.741224][ T2981] __x64_sys_unlink+0x1f/0x30 [ 349.741244][ T2981] x64_sys_call+0x18ee/0x2550 [ 349.741280][ T2981] do_syscall_64+0x112/0x360 [ 349.741321][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.741351][ T2981] [ 349.741358][ T2981] read to 0xffff88813156cc00 of 4 bytes by task 2981 on cpu 0: [ 349.741380][ T2981] path_lookupat+0x19b/0x4c0 [ 349.741413][ T2981] filename_lookup+0x18f/0x390 [ 349.741445][ T2981] do_readlinkat+0x74/0x2f0 [ 349.741480][ T2981] __x64_sys_readlink+0x47/0x60 [ 349.741507][ T2981] x64_sys_call+0x1d41/0x2550 [ 349.741533][ T2981] do_syscall_64+0x112/0x360 [ 349.741565][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.741592][ T2981] [ 349.741598][ T2981] value changed: 0x08300080 -> 0x00004080 [ 349.741613][ T2981] [ 349.741618][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 349.741636][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 349.741672][ T2981] Tainted: [W]=WARN [ 349.741682][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 349.741698][ T2981] ================================================================== [ 349.804435][ T29] audit: type=1400 audit(1793915690.222:2424): avc: denied { write } for pid=3284 comm="syz-executor" path="pipe:[2606]" dev="pipefs" ino=2606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 349.911923][T19285] EXT4-fs: Ignoring removed mblk_io_submit option [ 350.042976][T19285] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 350.047453][T19285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c118, mo2=0002] [ 350.047941][T19285] System zones: 1-12 [ 350.056267][T19285] EXT4-fs error (device loop0): ext4_iget_extra_inode:6027: inode #15: comm syz.0.4058: corrupted in-inode xattr: e_value size too large [ 350.056337][T19285] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 350.064423][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 350.064445][ C1] EXT4-fs (loop0): initial error at time 1793915690: ext4_iget_extra_inode:6027: inode 15 [ 350.064478][ C1] EXT4-fs (loop0): last error at time 1793915690: ext4_iget_extra_inode:6027: inode 15 [ 350.065102][T19285] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.4058: couldn't read orphan inode 15 (err -117) [ 350.065332][T19285] loop0: lost filesystem error report for type 5 error -117 [ 350.068774][T19285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.317047][T19285] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.