last executing test programs: 2.775618843s ago: executing program 4 (id=2629): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000243560e53a000000000001fc0200000000000000000000000000004e210000000000000a00a0", @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000100000004000000000000000000000000000000000000000000000000004000000000000000000000000000000000200000200000000f9"], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) 2.695264925s ago: executing program 3 (id=2630): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "d7469a94423ded252545e7eab12227ff995d971b8b112a9ef3c954eb1b23b4c12e42211aa10b2d223c0b640cd0989c6bcccec7b19d7198f6bb78c7f2a5ac92c9", 0x35}, 0x48, r1) unshare(0x40000000) 2.593025658s ago: executing program 4 (id=2632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x2000000015, 0x80005, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) 2.478365851s ago: executing program 3 (id=2633): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) 1.898384435s ago: executing program 2 (id=2639): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4099}, 0x40080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.848556636s ago: executing program 2 (id=2640): fchdir(0xffffffffffffffff) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000300)="7293746573742f6576656e7431202e2f66696c65303a30", 0x17) syz_genetlink_get_family_id$smc(&(0x7f0000000840), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x2ac00000, @loopback, 0x7}}, 0x4, 0x9}, 0x90) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xfc, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0xa0, 0x21, r3, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x3000000}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@offload={0xc, 0x1c, {r3, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) clock_gettime(0x2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) 1.772053468s ago: executing program 3 (id=2641): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3b, 0x1, @tid=r0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semget(0x1, 0x5, 0x6b4) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.643742821s ago: executing program 2 (id=2643): socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000140)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f0000000600), 0x4, 0x524, &(0x7f0000001900)="$eJzs3e9rI2kdAPDvTJtee9uzORVZD7w7vJPdQzdpr55WkbsTRF8dqOf7tbZpKU2b0qTnthzawz9AEFHBP8A3gi98Kcj+CSIs6HtRUUR39aXuyCRT7Y+kjW3arOnnA9M8T56Z5/t9hmaSmTxMAri2XoyINyNiLCJeiYiZ4vm0WGK/s+TrPXr47lK+JJFlb/81iaR47qCvvD4eETeKzSYj4qtfivhGcjJuc3dvfbFer20X9WprY6va3N27s7axuFpbrW3Oz8/9PCJeW5jNChcaZzkiXv/CH3/w3Z988fVffuKbv7v759vfytP63Ic6eUfE0oUC9NDpu9TeFwfyfbR9GcGGJB9PaWzYWQAA0I/8M/77I+Kj7c//MzHW/jQHAAAAjJLsjen4ZxKRAQAAACMrjYjpSNJKMRdgOtK0UunM4f1gPJ3WG83Wx1caO5vLeVtEOUrpylq9NlvMFS5HKcnrc8Uc24P6q8fq8xHxbER8f2aqXa8sNerLw774AQAAANfEjReOnv//YyZtlwEAAIARU+5ZAQAAAEaFU34AAAAYfc7/AQAAYKR9+a238iU7+B3v5Xd2d9Yb79xZrjXXKxs7S5WlxvZWZbXRWG3fs2/jrP7qjcbWJ2Nz5161VWu2qs3dvbsbjZ3N1t21Iz+BDQAAAFyhZ1+4/9skIvY/O9VeorgPIMARfxh2AsAgjQ07AWBoxoedADA0pTPXcISAUZec0X5y8k7nWmH86nLyAQAABu/Wh09+/z9RtJ19bQD4f2auDwBcP0e/3ZsaWh7A1SuddwbgzUFnAgzL+zoPT/Vq73nzjj6+/+9cY8iycyUGAAAMzHR7SdJKcQ4wHWlaqUQ8E4+zcpSSlbV6bbZo+81M6am8PtfeMjlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcWvm5emjVweO/erXj9/+4b3FVmt7LmIi+dtM/tRERLR+VDz/auYnAQAAAGC4pvI/nfP04nFu2CkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEqejohHD99dOliuMvZfPh8R5W7xx2Oy/TgZpTzHvycxfmi7JCLGBhB//72IuNktfhKPsywrF1l0iz91yfHL7V3TPX4aETcGEB+us/v58efNbq+/NF5sP3Z//Y0Xy0X1Pv6l/zn+jfU4/jxzrN7Lcw9+Vu0Z/72I58a7H38O4ied+EdC5JWX+hzj17+2t9e14VCX3eIfjlVtbWxVm7t7d9Y2Fldrq7XN+fm5Ty18euG1hdnqylq9VvztGuZ7H/nF49PG3/39r3P8PTT+E/v/5b5Gn8W/Htx7+IFOpdQt/u2Xur//3uwRPy3e+z5WlPP2Wwfl/U75sOd/+uvnTxv/co/xT54x/tt9jT8+88pXvvP7ri0n9gYAcBWau3vri/V6bfuUwmQf6/xPhYiL9vPGQPN5Egpx9jqTT0iql1HIvt35f7xYPxfc/EQhu8jm4zGANCZOvE7H4rwdJhH7eV99/kMCAAAj5r8f+k/7BgkAAAAAAAAAAAAAAAAAAAC4TOe8LdlkRPS98vGY+8MZKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqf4dAAD///G60iU=") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x1ccc8, 0x201224, 0x0, 0x6, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='.\x02/file0\x00') r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x21, 0xd0, 0x65, 0x0, 0x4, 0x6, 0x0, @broadcast, @multicast1, {[@noop, @ra={0x94, 0x4, 0x1}]}}, {{0x7fff, 0x4e23, r4, r5, 0x1, 0x0, 0xa, 0x4, 0x1, 0x0, 0x1, {[@eol, @nop, @mss={0x2, 0x4, 0x8}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}]}}, {"a5d0ffdefe4109f0e8c4559b3090a5ec85c938f8b8376f62bb692536bb758b6dd4113d064289e1291d80d59be8c99bfe0bff16a9d31fd9af41bf3b18bec79fd36a1019ec1412b9fe441996b0811944eadfd9400c631c788e1f1643546e2b0f4357dd7e84cbb56badec7eabade01e23b93c3bd3fe1ff82bcfa731ba99eef78abe620b9a89042d6bcd69164390"}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df00100000000000000a71c1daa8b61785983100526c41efcd3a4ce47", 0x3, 0x1, 0x85, 0x8}, 0x3c) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) shutdown(r1, 0x0) 1.617632761s ago: executing program 4 (id=2644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000180)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000240)='7', 0x1) symlink(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)='./file0\x00') 1.581347022s ago: executing program 4 (id=2645): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) lseek(r0, 0x1, 0x2) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x17c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x168, 0x1, [@m_ctinfo={0x134, 0x1e, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x6, 0x4, 0x99, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffd}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3ff}]}, {0xd0, 0x6, "3f0612f5acc1b13373a53102ad9529b8678777eac6887e14a8d2740e7e7d712f5078c13d02ef2700667605f9ee36d1ccf7ca790630fe7039fa3ebe494a12e54429a7bd4b5ae0b1be0dd5ee170c150e5e86a4fb3880ae9ae4acbf3cf2eae634085d889067379064b8abdb4a0b45452af77431a2d37bb517fcedd5d417471d8958f3d996057d0f9092cc96beec08ea5769b45ad3a5dead41508ae90db73ccbd8bcaac66bb49c03c4f85d242bbd2f0549bb52e1bec7ba6735fbdf2054431b850fc87d25b067ed473b6a8f602b55"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x17c}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x507, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd09, &(0x7f00000001c0)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES8=r3, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000a80)="$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") 1.24279708s ago: executing program 0 (id=2646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) 982.078577ms ago: executing program 0 (id=2647): socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$inet(0x2, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f00000000c0)={@local, @random="d92691707f35", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c184620753684186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 981.371057ms ago: executing program 1 (id=2648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f40)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0x19, &(0x7f0000002080)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000002180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000021c0)={r2, r0}, 0xc) 912.602368ms ago: executing program 2 (id=2649): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 909.887738ms ago: executing program 3 (id=2650): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='clear_refs\x00') writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)='2', 0x1}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') readv(r1, 0x0, 0x0) 878.902529ms ago: executing program 1 (id=2651): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4099}, 0x40080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 847.93785ms ago: executing program 2 (id=2652): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 847.56658ms ago: executing program 1 (id=2653): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2804f1e, &(0x7f00000000c0)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000580)="$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") r0 = open(0x0, 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000ac0)=0x20000088) 847.11549ms ago: executing program 0 (id=2654): fchdir(0xffffffffffffffff) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000300)="7293746573742f6576656e7431202e2f66696c65303a30", 0x17) syz_genetlink_get_family_id$smc(&(0x7f0000000840), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x2ac00000, @loopback, 0x7}}, 0x4, 0x9}, 0x90) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xfc, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0xa0, 0x21, r3, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x3000000}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@offload={0xc, 0x1c, {r3, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) clock_gettime(0x2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) 734.889963ms ago: executing program 3 (id=2655): fchdir(0xffffffffffffffff) pivot_root(0x0, &(0x7f0000000180)='.\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000300)="7293746573742f6576656e7431202e2f66696c65303a30", 0x17) syz_genetlink_get_family_id$smc(&(0x7f0000000840), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5e0000}}, 0x376, 0x497, 0x6, 0x4, 0xb, 0xfffffff9, 0x1b}, &(0x7f0000000440)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e23, 0x2ac00000, @loopback, 0x7}}, 0x4, 0x9}, 0x90) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xfc, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0xa0, 0x21, r4, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {0x0, 0x3000000}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@offload={0xc, 0x1c, {r4, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r6, 0xc17a) clock_gettime(0x2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) 734.440593ms ago: executing program 2 (id=2656): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r4, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}, {0x0}], 0x2, 0x162, 0xb) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0}}, 0x30) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x6, 0x23, 0x0, &(0x7f0000000640)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 687.624164ms ago: executing program 1 (id=2657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) 687.312564ms ago: executing program 4 (id=2658): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='blk', 0x3) 645.663705ms ago: executing program 4 (id=2659): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) lseek(r1, 0x1, 0x2) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x17c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x168, 0x1, [@m_ctinfo={0x134, 0x1e, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x6, 0x4, 0x99, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffd}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3ff}]}, {0xd0, 0x6, "3f0612f5acc1b13373a53102ad9529b8678777eac6887e14a8d2740e7e7d712f5078c13d02ef2700667605f9ee36d1ccf7ca790630fe7039fa3ebe494a12e54429a7bd4b5ae0b1be0dd5ee170c150e5e86a4fb3880ae9ae4acbf3cf2eae634085d889067379064b8abdb4a0b45452af77431a2d37bb517fcedd5d417471d8958f3d996057d0f9092cc96beec08ea5769b45ad3a5dead41508ae90db73ccbd8bcaac66bb49c03c4f85d242bbd2f0549bb52e1bec7ba6735fbdf2054431b850fc87d25b067ed473b6a8f602b55"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x17c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x4b72, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x507, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000a80)="$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") 536.522488ms ago: executing program 1 (id=2660): socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000140)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x1ccc8, 0x201224, 0x0, 0x6, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='.\x02/file0\x00') 448.735689ms ago: executing program 0 (id=2661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f40)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0x19, &(0x7f0000002080)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000002180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000021c0)={r2, r0}, 0xc) 334.046812ms ago: executing program 3 (id=2662): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3b, 0x1, @tid=r0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semget(0x1, 0x5, 0x6b4) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.02603ms ago: executing program 0 (id=2663): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 436.11µs ago: executing program 0 (id=2664): socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$inet(0x2, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f00000000c0)={@local, @random="d92691707f35", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c184620753684186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 0s ago: executing program 1 (id=2665): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='clear_refs\x00') writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)='2', 0x1}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') readv(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 378.025521][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 378.025537][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 378.035155][ T8730] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 378.141661][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 378.141682][ T30] audit: type=1400 audit(1791643622.091:883): avc: denied { bind } for pid=8729 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 378.146927][ T30] audit: type=1400 audit(1791643622.101:884): avc: denied { node_bind } for pid=8729 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 378.390927][ T8730] syz_tun: entered promiscuous mode [ 378.429438][ T8730] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 378.469383][ T8703] syz.4.1532 (8703) used greatest stack depth: 9136 bytes left [ 378.566652][ T30] audit: type=1400 audit(1791643622.521:885): avc: denied { listen } for pid=8744 comm="syz.2.1550" lport=42787 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.566938][ T30] audit: type=1400 audit(1791643622.521:886): avc: denied { accept } for pid=8744 comm="syz.2.1550" lport=42787 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.568182][ T30] audit: type=1400 audit(1791643622.521:887): avc: denied { write } for pid=8744 comm="syz.2.1550" lport=42787 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 378.605855][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.607957][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.622900][ T30] audit: type=1400 audit(1791643622.551:888): avc: denied { allowed } for pid=8742 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 378.626857][ T30] audit: type=1400 audit(1791643622.581:889): avc: denied { shutdown } for pid=8744 comm="syz.2.1550" lport=42787 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 378.635085][ T30] audit: type=1400 audit(1791643622.591:890): avc: denied { create } for pid=8742 comm="syz.0.1549" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 378.636802][ T30] audit: type=1400 audit(1791643622.591:891): avc: denied { map } for pid=8742 comm="syz.0.1549" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 378.638295][ T30] audit: type=1400 audit(1791643622.591:892): avc: denied { read write } for pid=8742 comm="syz.0.1549" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 378.792976][ T8753] loop2: detected capacity change from 0 to 128 [ 379.567019][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.567259][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.574328][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.574521][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.710786][ T8784] loop1: detected capacity change from 0 to 1024 [ 379.712340][ T8784] ======================================================= [ 379.712340][ T8784] WARNING: The mand mount option has been deprecated and [ 379.712340][ T8784] and is ignored by this kernel. Remove the mand [ 379.712340][ T8784] option from the mount to silence this warning. [ 379.712340][ T8784] ======================================================= [ 379.712592][ T8784] EXT4-fs: Ignoring removed i_version option [ 379.754486][ T8784] EXT4-fs mount: 184 callbacks suppressed [ 379.754523][ T8784] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.781784][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 380.216651][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.218055][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.511532][ T8802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.511762][ T8802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.584335][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 382.651543][ T8844] ip_tables: iptables: counters copy to user failed while replacing table [ 382.672256][ T8846] serial 00:03: in use; can't configure [ 383.704021][ T8850] syzkaller1: entered promiscuous mode [ 383.704043][ T8850] syzkaller1: entered allmulticast mode [ 383.705327][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 383.705342][ T30] audit: type=1400 audit(1791643627.661:903): avc: denied { ioctl } for pid=8849 comm="syz.2.1585" path="socket:[20645]" dev="sockfs" ino=20645 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 383.918466][ T30] audit: type=1400 audit(1791643627.871:904): avc: denied { shutdown } for pid=8855 comm="syz.1.1587" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 383.966956][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1588'. [ 383.968215][ T30] audit: type=1400 audit(1791643627.921:905): avc: denied { write } for pid=8860 comm="syz.4.1588" path="socket:[20655]" dev="sockfs" ino=20655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 384.256547][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.256641][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.303696][ T3449] IPVS: starting estimator thread 0... [ 384.308782][ T30] audit: type=1400 audit(1791643628.261:906): avc: denied { setopt } for pid=8868 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 385.032341][ T8869] IPVS: using max 2736 ests per chain, 136800 per kthread [ 385.033443][ T30] audit: type=1400 audit(1791643628.851:907): avc: denied { sqpoll } for pid=8868 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 386.165578][ T8911] FAULT_INJECTION: forcing a failure. [ 386.165578][ T8911] name failslab, interval 1, probability 0, space 0, times 1 [ 386.165607][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.2.1604 Not tainted syzkaller #0 PREEMPT(lazy) [ 386.165633][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.165692][ T8911] Call Trace: [ 386.165700][ T8911] [ 386.165709][ T8911] __dump_stack+0x1d/0x30 [ 386.165741][ T8911] dump_stack_lvl+0x95/0xd0 [ 386.165762][ T8911] dump_stack+0x15/0x1b [ 386.165859][ T8911] should_fail_ex+0x262/0x280 [ 386.165889][ T8911] should_failslab+0x8c/0xb0 [ 386.165968][ T8911] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 386.166015][ T8911] ? format_decode+0xaf/0x560 [ 386.166055][ T8911] ? debugfs_create_symlink+0x26/0x150 [ 386.166126][ T8911] ? debugfs_create_symlink+0x26/0x150 [ 386.166167][ T8911] kstrdup+0x3e/0xd0 [ 386.166259][ T8911] debugfs_create_symlink+0x26/0x150 [ 386.166313][ T8911] ref_tracker_dir_symlink+0x1ae/0x2d0 [ 386.166402][ T8911] net_ns_net_init+0x8f/0xa0 [ 386.166427][ T8911] ops_init+0x22a/0x2e0 [ 386.166517][ T8911] setup_net+0x9f/0x230 [ 386.166595][ T8911] copy_net_ns+0x333/0x490 [ 386.166627][ T8911] create_new_namespaces+0x1f6/0x420 [ 386.166689][ T8911] unshare_nsproxy_namespaces+0x115/0x150 [ 386.166730][ T8911] ksys_unshare+0x3fd/0x6f0 [ 386.166798][ T8911] __x64_sys_unshare+0x1f/0x30 [ 386.166894][ T8911] x64_sys_call+0x1e33/0x2550 [ 386.166919][ T8911] do_syscall_64+0x112/0x360 [ 386.166953][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.167012][ T8911] RIP: 0033:0x7f1bcc57e1d9 [ 386.167064][ T8911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.167098][ T8911] RSP: 002b:00007f1bcafd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 386.167117][ T8911] RAX: ffffffffffffffda RBX: 00007f1bcc805fa0 RCX: 00007f1bcc57e1d9 [ 386.167164][ T8911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 386.167181][ T8911] RBP: 00007f1bcc615888 R08: 0000000000000000 R09: 0000000000000000 [ 386.167199][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.167213][ T8911] R13: 00007f1bcc806038 R14: 00007f1bcc805fa0 R15: 00007fffed078848 [ 386.167230][ T8911] [ 387.634095][ T30] audit: type=1400 audit(1791643631.581:908): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 387.753174][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 387.757487][ T8925] loop0: detected capacity change from 0 to 512 [ 387.782513][ T8921] loop3: detected capacity change from 0 to 1024 [ 387.783041][ T8921] EXT4-fs: Ignoring removed i_version option [ 387.814265][ T8921] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.827377][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 387.827397][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 387.840310][ T30] audit: type=1400 audit(1791643631.791:909): avc: denied { create } for pid=8930 comm="syz.1.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 387.883912][ T8924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.888076][ T8941] netlink: 'syz.4.1610': attribute type 10 has an invalid length. [ 387.912289][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 387.913189][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.917243][ T8934] bond1: (slave bond0): Enslaving as an active interface with an up link [ 387.948552][ T8941] syz_tun: entered promiscuous mode [ 388.017050][ T8941] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 388.127399][ T8952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 389.125190][ T8970] loop0: detected capacity change from 0 to 1024 [ 389.125454][ T8970] EXT4-fs: Ignoring removed i_version option [ 389.164419][ T8970] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.325640][ T30] audit: type=1400 audit(1791643633.181:910): avc: denied { create } for pid=8974 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 389.374811][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 389.405376][ T30] audit: type=1400 audit(1791643633.361:911): avc: denied { write } for pid=8978 comm="syz.0.1625" name="usb_gadget" dev="configfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.405404][ T30] audit: type=1400 audit(1791643633.361:912): avc: denied { add_name } for pid=8978 comm="syz.0.1625" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.405536][ T30] audit: type=1400 audit(1791643633.361:913): avc: denied { create } for pid=8978 comm="syz.0.1625" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 389.406426][ T30] audit: type=1400 audit(1791643633.361:914): avc: denied { write } for pid=8978 comm="syz.0.1625" name="configs" dev="configfs" ino=20876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.407902][ T30] audit: type=1400 audit(1791643633.361:915): avc: denied { write } for pid=8978 comm="syz.0.1625" name="functions" dev="configfs" ino=20875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.408930][ T30] audit: type=1400 audit(1791643633.361:916): avc: denied { write } for pid=8978 comm="syz.0.1625" name="hs" dev="configfs" ino=21615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.408958][ T30] audit: type=1400 audit(1791643633.361:917): avc: denied { create } for pid=8978 comm="syz.0.1625" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 389.409405][ T30] audit: type=1400 audit(1791643633.361:918): avc: denied { write } for pid=8978 comm="syz.0.1625" name="ss" dev="configfs" ino=21616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.409718][ T30] audit: type=1400 audit(1791643633.361:919): avc: denied { write } for pid=8978 comm="syz.0.1625" name="header" dev="configfs" ino=21594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.651901][ T8981] netlink: 'syz.0.1626': attribute type 10 has an invalid length. [ 389.660426][ T8981] syz_tun: entered promiscuous mode [ 389.713514][ T8981] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 389.743154][ T8984] loop0: detected capacity change from 0 to 512 [ 389.743673][ T8984] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 389.745147][ T8984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1627: bg 0: block 4: invalid block bitmap [ 389.745175][ T8984] fserror_report: 1 callbacks suppressed [ 389.745183][ T8984] loop0: lost filesystem error report for type 5 error -117 [ 389.745358][ T8984] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 389.745380][ T8984] loop0: lost filesystem error report for type 5 error -117 [ 389.745607][ T8984] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1627: invalid indirect mapped block 1 (level 1) [ 389.745638][ T8984] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 389.745812][ T8984] EXT4-fs (loop0): 1 truncate cleaned up [ 389.860426][ T8984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.869499][ T8935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.906800][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.761337][ T9020] netlink: 'syz.4.1638': attribute type 10 has an invalid length. [ 392.826886][ T9031] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1643'. [ 393.495071][ T9066] loop4: detected capacity change from 0 to 1764 [ 393.977416][ T9086] loop2: detected capacity change from 0 to 1024 [ 393.994925][ T9086] EXT4-fs: Ignoring removed i_version option [ 394.024645][ T9086] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.211302][ T9088] ./dev/sda1: Can't lookup blockdev [ 394.245085][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 394.425529][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 394.425543][ T30] audit: type=1400 audit(1791643638.381:942): avc: denied { mounton } for pid=9120 comm="syz.3.1676" path="/316/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 394.536212][ T30] audit: type=1400 audit(1791643638.471:943): avc: denied { read write } for pid=9105 comm="syz.2.1667" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 394.536378][ T30] audit: type=1400 audit(1791643638.471:944): avc: denied { open } for pid=9105 comm="syz.2.1667" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 395.320526][ T30] audit: type=1400 audit(1791643638.911:945): avc: denied { mount } for pid=9129 comm="syz.4.1680" name="/" dev="ramfs" ino=21127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 395.562131][ T30] audit: type=1400 audit(1791643639.481:946): avc: denied { write } for pid=9140 comm="syz.3.1685" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 395.709876][ T9142] device-mapper: table: 252:0: thin-pool: unknown target type [ 395.709940][ T9142] device-mapper: ioctl: error adding target to table [ 395.713091][ T30] audit: type=1400 audit(1791643639.671:947): avc: denied { write } for pid=9159 comm="syz.4.1692" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 395.713350][ T30] audit: type=1400 audit(1791643639.671:948): avc: denied { ioctl } for pid=9159 comm="syz.4.1692" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 395.813540][ T30] audit: type=1400 audit(1791643639.771:949): avc: denied { mount } for pid=9144 comm="syz.1.1686" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 396.469481][ T30] audit: type=1400 audit(1791643640.421:950): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 396.602549][ T9187] ip_tables: iptables: counters copy to user failed while replacing table [ 396.664939][ T30] audit: type=1400 audit(1791643640.561:951): avc: denied { create } for pid=9189 comm="syz.3.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 397.203739][ T9214] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 397.922729][ T9227] loop0: detected capacity change from 0 to 1024 [ 397.923031][ T9227] EXT4-fs: Ignoring removed i_version option [ 397.949625][ T9227] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.986297][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 398.127725][ T9234] ip_tables: iptables: counters copy to user failed while replacing table [ 398.181900][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 398.224004][ T9240] loop4: detected capacity change from 0 to 128 [ 398.225781][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 398.225801][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 398.402331][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.421502][ T9236] bond1: (slave bond0): Enslaving as an active interface with an up link [ 398.517750][ T9256] FAULT_INJECTION: forcing a failure. [ 398.517750][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 398.517774][ T9256] CPU: 1 UID: 0 PID: 9256 Comm: syz.2.1730 Not tainted syzkaller #0 PREEMPT(lazy) [ 398.517795][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.517853][ T9256] Call Trace: [ 398.517859][ T9256] [ 398.517865][ T9256] __dump_stack+0x1d/0x30 [ 398.517947][ T9256] dump_stack_lvl+0x95/0xd0 [ 398.517966][ T9256] dump_stack+0x15/0x1b [ 398.517984][ T9256] should_fail_ex+0x262/0x280 [ 398.518019][ T9256] ? alloc_vfsmnt+0x2f/0x380 [ 398.518056][ T9256] should_failslab+0x8c/0xb0 [ 398.518103][ T9256] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 398.518197][ T9256] ? alloc_vfsmnt+0x2f/0x380 [ 398.518225][ T9256] alloc_vfsmnt+0x2f/0x380 [ 398.518251][ T9256] vfs_create_mount+0x3b/0x1d0 [ 398.518357][ T9256] do_new_mount+0x2e1/0x730 [ 398.518419][ T9256] ? security_capable+0x7b/0x90 [ 398.518447][ T9256] path_mount+0x4ad/0xb90 [ 398.518467][ T9256] __se_sys_mount+0x28c/0x2e0 [ 398.518602][ T9256] __x64_sys_mount+0x67/0x80 [ 398.518635][ T9256] x64_sys_call+0xc3b/0x2550 [ 398.518717][ T9256] do_syscall_64+0x112/0x360 [ 398.518820][ T9256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.518848][ T9256] RIP: 0033:0x7f1bcc57e1d9 [ 398.518867][ T9256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.518936][ T9256] RSP: 002b:00007f1bcafd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.518954][ T9256] RAX: ffffffffffffffda RBX: 00007f1bcc805fa0 RCX: 00007f1bcc57e1d9 [ 398.518966][ T9256] RDX: 0000200000000240 RSI: 0000200000000080 RDI: 0000000000000000 [ 398.518978][ T9256] RBP: 00007f1bcc615888 R08: 0000000000000000 R09: 0000000000000000 [ 398.518993][ T9256] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 398.519009][ T9256] R13: 00007f1bcc806038 R14: 00007f1bcc805fa0 R15: 00007fffed078848 [ 398.519031][ T9256] [ 399.036577][ T9260] syzkaller1: entered promiscuous mode [ 399.036594][ T9260] syzkaller1: entered allmulticast mode [ 399.303199][ T9269] ip_tables: iptables: counters copy to user failed while replacing table [ 399.500371][ T9272] ip_tables: iptables: counters copy to user failed while replacing table [ 399.544476][ T9280] loop1: detected capacity change from 0 to 128 [ 400.239234][ T9300] loop3: detected capacity change from 0 to 512 [ 400.909395][ T9307] ip_tables: iptables: counters copy to user failed while replacing table [ 401.076532][ T9314] ip_tables: iptables: counters copy to user failed while replacing table [ 402.051488][ T9329] FAULT_INJECTION: forcing a failure. [ 402.051488][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 402.051578][ T9329] CPU: 0 UID: 0 PID: 9329 Comm: syz.3.1755 Not tainted syzkaller #0 PREEMPT(lazy) [ 402.051659][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.051675][ T9329] Call Trace: [ 402.051682][ T9329] [ 402.051689][ T9329] __dump_stack+0x1d/0x30 [ 402.051751][ T9329] dump_stack_lvl+0x95/0xd0 [ 402.051818][ T9329] dump_stack+0x15/0x1b [ 402.051843][ T9329] should_fail_ex+0x262/0x280 [ 402.051883][ T9329] ? __memcg_list_lru_alloc+0x288/0x470 [ 402.051910][ T9329] should_failslab+0x8c/0xb0 [ 402.051975][ T9329] __kmalloc_noprof+0xd0/0x4d0 [ 402.052089][ T9329] ? __memcg_list_lru_alloc+0x288/0x470 [ 402.052118][ T9329] __memcg_list_lru_alloc+0x288/0x470 [ 402.052149][ T9329] memcg_list_lru_alloc+0x88/0xa0 [ 402.052245][ T9329] __memcg_slab_post_alloc_hook+0x23f/0x8d0 [ 402.052277][ T9329] ? should_fail_ex+0xdb/0x280 [ 402.052310][ T9329] kmem_cache_alloc_lru_noprof+0x1f4/0x3f0 [ 402.052370][ T9329] ? alloc_inode+0x9a/0x170 [ 402.052391][ T9329] ? alloc_inode+0x9a/0x170 [ 402.052421][ T9329] alloc_inode+0x9a/0x170 [ 402.052444][ T9329] alloc_anon_inode+0x1e/0x170 [ 402.052473][ T9329] anon_inode_make_secure_inode+0x35/0x110 [ 402.052501][ T9329] __anon_inode_getfile+0xa5/0x180 [ 402.052529][ T9329] anon_inode_create_getfile+0x38/0x50 [ 402.052639][ T9329] io_uring_create+0x3ca/0x4f0 [ 402.052671][ T9329] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 402.052794][ T9329] __x64_sys_io_uring_setup+0x31/0x40 [ 402.052826][ T9329] x64_sys_call+0x1fbf/0x2550 [ 402.052848][ T9329] do_syscall_64+0x112/0x360 [ 402.052895][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.052915][ T9329] RIP: 0033:0x7f9c9460e1d9 [ 402.052928][ T9329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.052947][ T9329] RSP: 002b:00007f9c93066fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 402.053025][ T9329] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f9c9460e1d9 [ 402.053043][ T9329] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 402.053060][ T9329] RBP: 00007f9c946a5888 R08: 0000000000000000 R09: 0000000000000000 [ 402.053076][ T9329] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 402.053091][ T9329] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd1b6e0f8 [ 402.053113][ T9329] [ 402.378644][ T9331] loop1: detected capacity change from 0 to 512 [ 402.380794][ T9331] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 402.380813][ T9331] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 402.419418][ T9331] EXT4-fs (loop1): 1 truncate cleaned up [ 402.419756][ T9331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.453524][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 402.453538][ T30] audit: type=1400 audit(1791643646.391:959): avc: denied { write } for pid=9330 comm="syz.1.1756" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 402.453614][ T30] audit: type=1400 audit(1791643646.391:960): avc: denied { add_name } for pid=9330 comm="syz.1.1756" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 402.453643][ T30] audit: type=1400 audit(1791643646.391:961): avc: denied { read write } for pid=9330 comm="syz.1.1756" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.453695][ T30] audit: type=1400 audit(1791643646.391:962): avc: denied { open } for pid=9330 comm="syz.1.1756" path="/341/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.453725][ T30] audit: type=1400 audit(1791643646.401:963): avc: denied { map } for pid=9330 comm="syz.1.1756" path="/341/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.635347][ T9342] loop3: detected capacity change from 0 to 512 [ 403.128870][ T9349] ip_tables: iptables: counters copy to user failed while replacing table [ 403.216852][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.362804][ T9360] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 403.450257][ T9362] loop1: detected capacity change from 0 to 256 [ 403.460422][ T9362] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 403.607503][ T9364] loop4: detected capacity change from 0 to 512 [ 403.624679][ T30] audit: type=1400 audit(1791643647.581:964): avc: denied { ioctl } for pid=9363 comm="syz.2.1768" path="socket:[22583]" dev="sockfs" ino=22583 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.674554][ T30] audit: type=1400 audit(1791643647.631:965): avc: denied { read } for pid=9365 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 403.749803][ T9369] syzkaller0: entered promiscuous mode [ 403.750437][ T9369] syzkaller0: entered allmulticast mode [ 404.997466][ T9364] loop4: detected capacity change from 0 to 128 [ 404.998430][ T9364] FAT-fs (loop4): bogus logical sector size 5 [ 404.998450][ T9364] FAT-fs (loop4): Can't find a valid FAT filesystem [ 405.028389][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'. [ 405.308559][ T9387] syz_tun (unregistering): left allmulticast mode [ 405.327246][ T9387] bond0: (slave syz_tun): Releasing backup interface [ 405.539854][ T30] audit: type=1326 audit(1791643649.491:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.1.1775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188cd5e1d9 code=0x7ffc0000 [ 405.540199][ T30] audit: type=1326 audit(1791643649.491:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.1.1775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188cd5e1d9 code=0x7ffc0000 [ 405.540242][ T30] audit: type=1326 audit(1791643649.491:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.1.1775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188cd5e1d9 code=0x7ffc0000 [ 406.005066][ T9417] ip_tables: iptables: counters copy to user failed while replacing table [ 407.503769][ T9442] FAULT_INJECTION: forcing a failure. [ 407.503769][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 407.503873][ T9442] CPU: 1 UID: 0 PID: 9442 Comm: syz.2.1798 Not tainted syzkaller #0 PREEMPT(lazy) [ 407.503904][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.503916][ T9442] Call Trace: [ 407.503921][ T9442] [ 407.503928][ T9442] __dump_stack+0x1d/0x30 [ 407.503978][ T9442] dump_stack_lvl+0x95/0xd0 [ 407.504004][ T9442] dump_stack+0x15/0x1b [ 407.504029][ T9442] should_fail_ex+0x262/0x280 [ 407.504064][ T9442] should_failslab+0x8c/0xb0 [ 407.504145][ T9442] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 407.504185][ T9442] ? __list_add_valid_or_report+0x38/0xe0 [ 407.504210][ T9442] ? __d_alloc+0x34/0x320 [ 407.504267][ T9442] ? __d_alloc+0x34/0x320 [ 407.504301][ T9442] __d_alloc+0x34/0x320 [ 407.504334][ T9442] d_alloc_name+0x6b/0x160 [ 407.504436][ T9442] proc_setup_thread_self+0x2a/0x110 [ 407.504466][ T9442] proc_fill_super+0x337/0x3c0 [ 407.504511][ T9442] ? __pfx_proc_fill_super+0x10/0x10 [ 407.504546][ T9442] get_tree_nodev+0x83/0x100 [ 407.504609][ T9442] proc_get_tree+0x1c/0x30 [ 407.504638][ T9442] vfs_get_tree+0x57/0x1d0 [ 407.504695][ T9442] do_new_mount+0x288/0x730 [ 407.504720][ T9442] ? security_capable+0x7b/0x90 [ 407.504749][ T9442] path_mount+0x4ad/0xb90 [ 407.504798][ T9442] __se_sys_mount+0x28c/0x2e0 [ 407.504840][ T9442] __x64_sys_mount+0x67/0x80 [ 407.504863][ T9442] x64_sys_call+0xc3b/0x2550 [ 407.504906][ T9442] do_syscall_64+0x112/0x360 [ 407.504936][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.504959][ T9442] RIP: 0033:0x7f1bcc57e1d9 [ 407.504983][ T9442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.505005][ T9442] RSP: 002b:00007f1bcafd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.505051][ T9442] RAX: ffffffffffffffda RBX: 00007f1bcc805fa0 RCX: 00007f1bcc57e1d9 [ 407.505069][ T9442] RDX: 0000200000000240 RSI: 0000200000000080 RDI: 0000000000000000 [ 407.505086][ T9442] RBP: 00007f1bcc615888 R08: 0000000000000000 R09: 0000000000000000 [ 407.505101][ T9442] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 407.505115][ T9442] R13: 00007f1bcc806038 R14: 00007f1bcc805fa0 R15: 00007fffed078848 [ 407.505136][ T9442] [ 407.509430][ T9442] proc_fill_super: can't allocate /proc/thread-self [ 407.912682][ T9461] clocksource: Switched to clocksource acpi_pm [ 407.913867][ T9461] clocksource: Switched to clocksource tsc [ 407.975077][ T9463] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 408.034149][ T9471] loop1: detected capacity change from 0 to 512 [ 408.120933][ T9473] ip_tables: iptables: counters copy to user failed while replacing table [ 408.197179][ T9483] loop3: detected capacity change from 0 to 128 [ 408.309075][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 408.309114][ T30] audit: type=1400 audit(1791643652.254:1014): avc: denied { bind } for pid=9480 comm="syz.1.1816" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.309216][ T30] audit: type=1400 audit(1791643652.254:1015): avc: denied { node_bind } for pid=9480 comm="syz.1.1816" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 408.309237][ T9481] serio: Serial port ttyS3 [ 408.594516][ T9505] ip_tables: iptables: counters copy to user failed while replacing table [ 409.596941][ T9547] file system registered [ 409.986412][ T30] audit: type=1400 audit(1791643653.544:1016): avc: denied { write } for pid=9536 comm="syz.2.1839" name="functions" dev="configfs" ino=20875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.400944][ T9553] tc_dump_action: action bad kind [ 410.604689][ T9590] loop0: detected capacity change from 0 to 3904 [ 410.675946][ T9590] loop0: [ 411.177728][ T9608] loop2: detected capacity change from 0 to 512 [ 411.179675][ T9608] EXT4-fs: test_dummy_encryption option not supported [ 411.485134][ T9621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1876'. [ 411.823745][ T30] audit: type=1400 audit(1791643655.704:1017): avc: denied { write } for pid=9630 comm="syz.1.1881" name="functions" dev="configfs" ino=20875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.121664][ T9643] loop0: detected capacity change from 0 to 512 [ 412.136887][ T9643] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 412.138366][ T9643] EXT4-fs (loop0): 1 truncate cleaned up [ 412.138846][ T9643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.179024][ T9649] FAULT_INJECTION: forcing a failure. [ 412.179024][ T9649] name failslab, interval 1, probability 0, space 0, times 0 [ 412.179098][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: syz.3.1885 Not tainted syzkaller #0 PREEMPT(lazy) [ 412.179149][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.179161][ T9649] Call Trace: [ 412.179166][ T9649] [ 412.179172][ T9649] __dump_stack+0x1d/0x30 [ 412.179195][ T9649] dump_stack_lvl+0x95/0xd0 [ 412.179222][ T9649] dump_stack+0x15/0x1b [ 412.179291][ T9649] should_fail_ex+0x262/0x280 [ 412.179368][ T9649] ? security_sk_alloc+0x52/0x120 [ 412.179397][ T9649] should_failslab+0x8c/0xb0 [ 412.179492][ T9649] __kmalloc_noprof+0xd0/0x4d0 [ 412.179555][ T9649] ? security_sk_alloc+0x52/0x120 [ 412.179585][ T9649] ? __kmalloc_noprof+0x1f1/0x4d0 [ 412.179619][ T9649] security_sk_alloc+0x52/0x120 [ 412.179685][ T9649] sk_prot_alloc+0xc2/0x180 [ 412.179706][ T9649] sk_alloc+0x34/0x3e0 [ 412.179725][ T9649] __netlink_kernel_create+0xe9/0x550 [ 412.179747][ T9649] uevent_net_init+0x74/0x1c0 [ 412.179805][ T9649] ? __pfx_uevent_net_rcv+0x10/0x10 [ 412.179833][ T9649] ops_init+0x22a/0x2e0 [ 412.179855][ T9649] setup_net+0x9f/0x230 [ 412.179896][ T9649] copy_net_ns+0x333/0x490 [ 412.179935][ T9649] create_new_namespaces+0x1f6/0x420 [ 412.179976][ T9649] unshare_nsproxy_namespaces+0x115/0x150 [ 412.180098][ T9649] ksys_unshare+0x3fd/0x6f0 [ 412.180131][ T9649] __x64_sys_unshare+0x1f/0x30 [ 412.180223][ T9649] x64_sys_call+0x1e33/0x2550 [ 412.180264][ T9649] do_syscall_64+0x112/0x360 [ 412.180295][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.180327][ T9649] RIP: 0033:0x7f9c9460e1d9 [ 412.180419][ T9649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.180446][ T9649] RSP: 002b:00007f9c93067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 412.180486][ T9649] RAX: ffffffffffffffda RBX: 00007f9c94895fa0 RCX: 00007f9c9460e1d9 [ 412.180505][ T9649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 412.180519][ T9649] RBP: 00007f9c946a5888 R08: 0000000000000000 R09: 0000000000000000 [ 412.180533][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.180551][ T9649] R13: 00007f9c94896038 R14: 00007f9c94895fa0 R15: 00007ffdd1b6e0f8 [ 412.180579][ T9649] [ 412.180646][ T9649] kobject_uevent: unable to create netlink socket! [ 412.549749][ T30] audit: type=1400 audit(1791643656.464:1018): avc: denied { write } for pid=9642 comm="syz.0.1883" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.879378][ T9666] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 413.422168][ T30] audit: type=1400 audit(1791643656.824:1019): avc: denied { ioctl } for pid=9659 comm="syz.2.1889" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23585 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 413.469315][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.522717][ T30] audit: type=1400 audit(1791643657.474:1020): avc: denied { setattr } for pid=9672 comm="syz.2.1894" name="NETLINK" dev="sockfs" ino=23168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.693420][ T9677] md: array md0 already initialised! [ 413.998120][ T9684] loop1: detected capacity change from 0 to 8192 [ 414.180719][ T30] audit: type=1400 audit(1791643658.124:1021): avc: denied { read write } for pid=9693 comm="syz.0.1902" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 414.180791][ T30] audit: type=1400 audit(1791643658.124:1022): avc: denied { open } for pid=9693 comm="syz.0.1902" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 414.583052][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1905'. [ 414.798901][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 414.801109][ T9706] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 414.924698][ T9708] md: array md0 already initialised! [ 415.998126][ T9740] loop3: detected capacity change from 0 to 512 [ 416.134411][ T9744] md: array md0 already initialised! [ 416.250819][ T9750] loop3: detected capacity change from 0 to 2048 [ 416.485460][ T9750] Alternate GPT is invalid, using primary GPT. [ 416.485790][ T9750] loop3: p1 p2 p3 [ 416.485808][ T9750] loop3: partition table partially beyond EOD, truncated [ 416.652973][ T9759] loop0: detected capacity change from 0 to 512 [ 416.666298][ T9759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.666432][ T9759] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.708823][ T9759] EXT4-fs (loop0): shut down requested (2) [ 416.708977][ T9759] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 416.709176][ T9759] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 416.710408][ T30] audit: type=1400 audit(1791643660.654:1023): avc: denied { write } for pid=9757 comm="syz.0.1926" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.710441][ T30] audit: type=1400 audit(1791643660.654:1024): avc: denied { link } for pid=9757 comm="syz.0.1926" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 416.728556][ T30] audit: type=1400 audit(1791643660.664:1025): avc: denied { read } for pid=2965 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 416.728645][ T30] audit: type=1400 audit(1791643660.664:1026): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.728725][ T30] audit: type=1400 audit(1791643660.664:1027): avc: denied { write search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.728792][ T30] audit: type=1400 audit(1791643660.664:1028): avc: denied { add_name } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.893672][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.142380][ T9771] md: array md0 already initialised! [ 417.524665][ T9793] loop1: detected capacity change from 0 to 512 [ 418.516751][ T9819] netlink: 'syz.1.1946': attribute type 4 has an invalid length. [ 418.520204][ T9821] FAULT_INJECTION: forcing a failure. [ 418.520204][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 418.520231][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz.0.1951 Not tainted syzkaller #0 PREEMPT(lazy) [ 418.520264][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.520282][ T9821] Call Trace: [ 418.520369][ T9821] [ 418.520376][ T9821] __dump_stack+0x1d/0x30 [ 418.520402][ T9821] dump_stack_lvl+0x95/0xd0 [ 418.520434][ T9821] dump_stack+0x15/0x1b [ 418.520464][ T9821] should_fail_ex+0x262/0x280 [ 418.520504][ T9821] ? __proc_create+0x3f1/0x6b0 [ 418.520603][ T9821] should_failslab+0x8c/0xb0 [ 418.520640][ T9821] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 418.520672][ T9821] ? __proc_create+0x3f1/0x6b0 [ 418.520711][ T9821] __proc_create+0x3f1/0x6b0 [ 418.520802][ T9821] proc_create_reg+0x87/0xe0 [ 418.520847][ T9821] proc_create_net_data+0x59/0x100 [ 418.520915][ T9821] dev_proc_net_init+0xa5/0x110 [ 418.520948][ T9821] ops_init+0x22a/0x2e0 [ 418.520969][ T9821] setup_net+0x9f/0x230 [ 418.521005][ T9821] copy_net_ns+0x333/0x490 [ 418.521111][ T9821] create_new_namespaces+0x1f6/0x420 [ 418.521180][ T9821] unshare_nsproxy_namespaces+0x115/0x150 [ 418.521243][ T9821] ksys_unshare+0x3fd/0x6f0 [ 418.521269][ T9821] __x64_sys_unshare+0x1f/0x30 [ 418.521332][ T9821] x64_sys_call+0x1e33/0x2550 [ 418.521355][ T9821] do_syscall_64+0x112/0x360 [ 418.521380][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.521459][ T9821] RIP: 0033:0x7f09d2b6e1d9 [ 418.521473][ T9821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.521493][ T9821] RSP: 002b:00007f09d15c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 418.521517][ T9821] RAX: ffffffffffffffda RBX: 00007f09d2df5fa0 RCX: 00007f09d2b6e1d9 [ 418.521534][ T9821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 418.521550][ T9821] RBP: 00007f09d2c05888 R08: 0000000000000000 R09: 0000000000000000 [ 418.521565][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.521640][ T9821] R13: 00007f09d2df6038 R14: 00007f09d2df5fa0 R15: 00007fff771bd7e8 [ 418.521712][ T9821] [ 418.522775][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 418.522862][ T30] audit: type=1400 audit(1791643662.464:1035): avc: denied { name_bind } for pid=9818 comm="syz.1.1946" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 418.803779][ T9831] device-mapper: table: 252:0: thin-pool: unknown target type [ 418.803852][ T9831] device-mapper: ioctl: error adding target to table [ 419.062855][ T9840] md: array md0 already initialised! [ 419.219077][ T9846] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1960'. [ 419.219358][ T9846] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1960'. [ 420.365601][ T30] audit: type=1400 audit(1791643664.314:1036): avc: denied { write } for pid=9878 comm="syz.1.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 421.058389][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 422.420661][ T9939] device-mapper: table: 252:0: thin-pool: unknown target type [ 422.420683][ T9939] device-mapper: ioctl: error adding target to table [ 422.497982][ T9953] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2005'. [ 422.578916][ T9961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2008'. [ 422.590490][ T314] IPVS: starting estimator thread 0... [ 422.614301][ T30] audit: type=1400 audit(1791643666.564:1037): avc: denied { read } for pid=9965 comm="syz.1.2010" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 422.614342][ T30] audit: type=1400 audit(1791643666.564:1038): avc: denied { open } for pid=9965 comm="syz.1.2010" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 422.615551][ T30] audit: type=1400 audit(1791643666.564:1039): avc: denied { append } for pid=9965 comm="syz.1.2010" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 422.615590][ T30] audit: type=1400 audit(1791643666.564:1040): avc: denied { ioctl } for pid=9965 comm="syz.1.2010" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 422.777227][ T9962] IPVS: using max 2400 ests per chain, 120000 per kthread [ 423.441317][ T9985] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2017'. [ 423.497596][ T9987] device-mapper: table: 252:0: thin-pool: unknown target type [ 423.497612][ T9987] device-mapper: ioctl: error adding target to table [ 423.570934][ T30] audit: type=1400 audit(1791643667.514:1041): avc: denied { read write } for pid=9992 comm="syz.4.2020" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 423.570968][ T30] audit: type=1400 audit(1791643667.514:1042): avc: denied { open } for pid=9992 comm="syz.4.2020" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 423.625830][ T30] audit: type=1400 audit(1791643667.574:1043): avc: denied { ioctl } for pid=9992 comm="syz.4.2020" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 423.680046][ T9995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2021'. [ 423.693100][ T12] IPVS: starting estimator thread 0... [ 423.731997][ T30] audit: type=1400 audit(1791643667.674:1044): avc: denied { connect } for pid=9997 comm="syz.4.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 423.858712][ T9996] IPVS: using max 2160 ests per chain, 108000 per kthread [ 424.530659][T10006] loop3: detected capacity change from 0 to 512 [ 424.547007][T10006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.547118][T10006] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.584559][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 424.585644][ T29] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 425.091434][ T30] audit: type=1400 audit(1791643669.034:1045): avc: denied { ioctl } for pid=10035 comm="syz.2.2024" path="socket:[25710]" dev="sockfs" ino=25710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.220793][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.332162][ T30] audit: type=1400 audit(1791643669.264:1046): avc: denied { connect } for pid=10035 comm="syz.2.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.677323][T10079] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.677419][T10079] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.782865][T10079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.786300][T10079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.863334][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.863370][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.863424][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.863462][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.077846][T10108] netlink: 'syz.1.2060': attribute type 10 has an invalid length. [ 427.093605][T10108] syz_tun: entered promiscuous mode [ 427.109812][T10108] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 427.215104][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2065'. [ 427.233730][T10111] md: array md0 already initialised! [ 427.277010][T10128] ip_tables: iptables: counters copy to user failed while replacing table [ 427.404893][T10146] netlink: 'syz.0.2076': attribute type 10 has an invalid length. [ 427.444245][T10151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2079'. [ 427.475478][T10154] FAULT_INJECTION: forcing a failure. [ 427.475478][T10154] name fail_futex, interval 1, probability 0, space 0, times 1 [ 427.475510][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.0.2080 Not tainted syzkaller #0 PREEMPT(lazy) [ 427.475543][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.475558][T10154] Call Trace: [ 427.475642][T10154] [ 427.475649][T10154] __dump_stack+0x1d/0x30 [ 427.475736][T10154] dump_stack_lvl+0x95/0xd0 [ 427.475757][T10154] dump_stack+0x15/0x1b [ 427.475776][T10154] should_fail_ex+0x262/0x280 [ 427.475806][T10154] should_fail+0xb/0x20 [ 427.475869][T10154] get_futex_key+0x12d/0xb10 [ 427.475896][T10154] futex_wake+0x89/0x400 [ 427.475947][T10154] do_futex+0x3f8/0x460 [ 427.475986][T10154] __se_sys_futex+0x2f6/0x370 [ 427.476019][T10154] __x64_sys_futex+0x78/0x90 [ 427.476131][T10154] x64_sys_call+0x22e2/0x2550 [ 427.476211][T10154] do_syscall_64+0x112/0x360 [ 427.476235][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.476262][T10154] RIP: 0033:0x7f09d2b6e1d9 [ 427.476281][T10154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.476304][T10154] RSP: 002b:00007f09d15c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 427.476384][T10154] RAX: ffffffffffffffda RBX: 00007f09d2df5fa8 RCX: 00007f09d2b6e1d9 [ 427.476397][T10154] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f09d2df5fac [ 427.476411][T10154] RBP: 00007f09d2df5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 427.476486][T10154] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 427.476502][T10154] R13: 00007f09d2df6038 R14: 00007fff771bd700 R15: 00007fff771bd7e8 [ 427.476522][T10154] [ 427.671896][T10161] FAULT_INJECTION: forcing a failure. [ 427.671896][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 427.671963][T10161] CPU: 0 UID: 0 PID: 10161 Comm: syz.0.2082 Not tainted syzkaller #0 PREEMPT(lazy) [ 427.671992][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.672004][T10161] Call Trace: [ 427.672009][T10161] [ 427.672015][T10161] __dump_stack+0x1d/0x30 [ 427.672119][T10161] dump_stack_lvl+0x95/0xd0 [ 427.672207][T10161] dump_stack+0x15/0x1b [ 427.672274][T10161] should_fail_ex+0x262/0x280 [ 427.672329][T10161] ? proc_thread_self_get_link+0xaf/0x130 [ 427.672359][T10161] should_failslab+0x8c/0xb0 [ 427.672458][T10161] __kmalloc_cache_noprof+0x7a/0x400 [ 427.672497][T10161] ? proc_thread_self_get_link+0xaf/0x130 [ 427.672528][T10161] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 427.672559][T10161] proc_thread_self_get_link+0xaf/0x130 [ 427.672659][T10161] pick_link+0x4b1/0x8e0 [ 427.672689][T10161] step_into_slowpath+0x40c/0x600 [ 427.672803][T10161] ? inode_permission+0x1da/0x3b0 [ 427.672827][T10161] link_path_walk+0x947/0xdd0 [ 427.672921][T10161] path_openat+0xe7/0x10d0 [ 427.672991][T10161] do_file_open+0x16c/0x290 [ 427.673099][T10161] do_sys_openat2+0xa0/0x130 [ 427.673124][T10161] __x64_sys_openat+0xf2/0x120 [ 427.673149][T10161] x64_sys_call+0x1f72/0x2550 [ 427.673216][T10161] do_syscall_64+0x112/0x360 [ 427.673241][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.673295][T10161] RIP: 0033:0x7f09d2b2ea0e [ 427.673310][T10161] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.673327][T10161] RSP: 002b:00007f09d15c6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 427.673347][T10161] RAX: ffffffffffffffda RBX: 00007f09d15c76c0 RCX: 00007f09d2b2ea0e [ 427.673383][T10161] RDX: 0000000000000002 RSI: 00007f09d15c6f90 RDI: ffffffffffffff9c [ 427.673479][T10161] RBP: 00007f09d2c05888 R08: 0000000000000000 R09: 0000000000000000 [ 427.673491][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.673503][T10161] R13: 00007f09d2df6038 R14: 00007f09d2df5fa0 R15: 00007fff771bd7e8 [ 427.673521][T10161] [ 427.861359][ T30] audit: type=1400 audit(1791643671.814:1047): avc: denied { setopt } for pid=10162 comm="syz.4.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 428.014507][T10176] netlink: 'syz.4.2090': attribute type 10 has an invalid length. [ 428.053616][T10183] FAULT_INJECTION: forcing a failure. [ 428.053616][T10183] name fail_futex, interval 1, probability 0, space 0, times 0 [ 428.053640][T10183] CPU: 0 UID: 0 PID: 10183 Comm: syz.0.2092 Not tainted syzkaller #0 PREEMPT(lazy) [ 428.053739][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.053751][T10183] Call Trace: [ 428.053759][T10183] [ 428.053768][T10183] __dump_stack+0x1d/0x30 [ 428.053820][T10183] dump_stack_lvl+0x95/0xd0 [ 428.053848][T10183] dump_stack+0x15/0x1b [ 428.053874][T10183] should_fail_ex+0x262/0x280 [ 428.053977][T10183] should_fail+0xb/0x20 [ 428.054019][T10183] get_futex_key+0x12d/0xb10 [ 428.054048][T10183] futex_wake+0x89/0x400 [ 428.054074][T10183] do_futex+0x3f8/0x460 [ 428.054106][T10183] __se_sys_futex+0x2f6/0x370 [ 428.054152][T10183] __x64_sys_futex+0x78/0x90 [ 428.054190][T10183] x64_sys_call+0x22e2/0x2550 [ 428.054280][T10183] do_syscall_64+0x112/0x360 [ 428.054313][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.054390][T10183] RIP: 0033:0x7f09d2b6e1d9 [ 428.054453][T10183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.054471][T10183] RSP: 002b:00007f09d15c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 428.054524][T10183] RAX: ffffffffffffffda RBX: 00007f09d2df5fa8 RCX: 00007f09d2b6e1d9 [ 428.054541][T10183] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f09d2df5fac [ 428.054559][T10183] RBP: 00007f09d2df5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 428.054572][T10183] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 428.054659][T10183] R13: 00007f09d2df6038 R14: 00007fff771bd700 R15: 00007fff771bd7e8 [ 428.054743][T10183] [ 428.375406][T10190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2094'. [ 428.378165][T10190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2094'. [ 428.382178][ T30] audit: type=1400 audit(1791643672.324:1048): avc: denied { create } for pid=10191 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 428.383541][ T30] audit: type=1400 audit(1791643672.334:1049): avc: denied { setopt } for pid=10191 comm="syz.1.2095" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 428.726443][ T30] audit: type=1400 audit(1791643672.674:1050): avc: denied { watch watch_reads } for pid=10169 comm="syz.3.2087" path="/proc/1056/task" dev="proc" ino=26054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 428.968514][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 428.969253][T10212] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 429.063259][ T30] audit: type=1400 audit(1791643672.984:1051): avc: denied { write } for pid=10217 comm="syz.3.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.070542][T10222] FAULT_INJECTION: forcing a failure. [ 429.070542][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 429.070578][T10222] CPU: 0 UID: 0 PID: 10222 Comm: syz.3.2108 Not tainted syzkaller #0 PREEMPT(lazy) [ 429.070614][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.070673][T10222] Call Trace: [ 429.070681][T10222] [ 429.070691][T10222] __dump_stack+0x1d/0x30 [ 429.070727][T10222] dump_stack_lvl+0x95/0xd0 [ 429.070765][T10222] dump_stack+0x15/0x1b [ 429.070795][T10222] should_fail_ex+0x262/0x280 [ 429.070902][T10222] ? __register_sysctl_table+0x52/0xbe0 [ 429.070938][T10222] should_failslab+0x8c/0xb0 [ 429.070985][T10222] __kmalloc_noprof+0xd0/0x4d0 [ 429.071081][T10222] ? __register_sysctl_table+0x52/0xbe0 [ 429.071117][T10222] ? vsnprintf+0x857/0x8c0 [ 429.071195][T10222] __register_sysctl_table+0x52/0xbe0 [ 429.071235][T10222] register_net_sysctl_sz+0x118/0x190 [ 429.071314][T10222] __devinet_sysctl_register+0x1c6/0x250 [ 429.071364][T10222] devinet_init_net+0x272/0x550 [ 429.071398][T10222] ops_init+0x22a/0x2e0 [ 429.071500][T10222] setup_net+0x9f/0x230 [ 429.071613][T10222] copy_net_ns+0x333/0x490 [ 429.071691][T10222] create_new_namespaces+0x1f6/0x420 [ 429.071732][T10222] unshare_nsproxy_namespaces+0x115/0x150 [ 429.071774][T10222] ksys_unshare+0x3fd/0x6f0 [ 429.071809][T10222] __x64_sys_unshare+0x1f/0x30 [ 429.071847][T10222] x64_sys_call+0x1e33/0x2550 [ 429.071879][T10222] do_syscall_64+0x112/0x360 [ 429.071916][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.071943][T10222] RIP: 0033:0x7f9c9460e1d9 [ 429.071962][T10222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.071984][T10222] RSP: 002b:00007f9c93067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 429.072027][T10222] RAX: ffffffffffffffda RBX: 00007f9c94895fa0 RCX: 00007f9c9460e1d9 [ 429.072044][T10222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 429.072060][T10222] RBP: 00007f9c946a5888 R08: 0000000000000000 R09: 0000000000000000 [ 429.072075][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.072124][T10222] R13: 00007f9c94896038 R14: 00007f9c94895fa0 R15: 00007ffdd1b6e0f8 [ 429.072163][T10222] [ 429.417416][T10230] FAULT_INJECTION: forcing a failure. [ 429.417416][T10230] name failslab, interval 1, probability 0, space 0, times 0 [ 429.417484][T10230] CPU: 0 UID: 0 PID: 10230 Comm: syz.3.2112 Not tainted syzkaller #0 PREEMPT(lazy) [ 429.417506][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.417518][T10230] Call Trace: [ 429.417524][T10230] [ 429.417533][T10230] __dump_stack+0x1d/0x30 [ 429.417566][T10230] dump_stack_lvl+0x95/0xd0 [ 429.417658][T10230] dump_stack+0x15/0x1b [ 429.417683][T10230] should_fail_ex+0x262/0x280 [ 429.417772][T10230] ? do_getname+0x2e/0x1c0 [ 429.417798][T10230] should_failslab+0x8c/0xb0 [ 429.417835][T10230] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 429.417897][T10230] ? do_getname+0x2e/0x1c0 [ 429.417925][T10230] do_getname+0x2e/0x1c0 [ 429.418018][T10230] __se_sys_mkdirat+0x21/0xf0 [ 429.418035][T10230] __x64_sys_mkdirat+0x43/0x50 [ 429.418055][T10230] x64_sys_call+0x368/0x2550 [ 429.418085][T10230] do_syscall_64+0x112/0x360 [ 429.418118][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.418138][T10230] RIP: 0033:0x7f9c9460e1d9 [ 429.418152][T10230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.418172][T10230] RSP: 002b:00007f9c93067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 429.418193][T10230] RAX: ffffffffffffffda RBX: 00007f9c94895fa0 RCX: 00007f9c9460e1d9 [ 429.418226][T10230] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 429.418238][T10230] RBP: 00007f9c946a5888 R08: 0000000000000000 R09: 0000000000000000 [ 429.418253][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.418266][T10230] R13: 00007f9c94896038 R14: 00007f9c94895fa0 R15: 00007ffdd1b6e0f8 [ 429.418417][T10230] [ 429.490387][T10227] md: array md0 already initialised! [ 430.218698][ T30] audit: type=1400 audit(1791643673.734:1052): avc: denied { ioctl } for pid=10233 comm="syz.3.2113" path="socket:[25181]" dev="sockfs" ino=25181 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.702901][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 430.710200][ T30] audit: type=1400 audit(1791643674.644:1053): avc: denied { mount } for pid=10264 comm="syz.2.2127" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 430.758243][T10270] netlink: 'syz.0.2128': attribute type 4 has an invalid length. [ 430.834942][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2130'. [ 430.886707][ T30] audit: type=1400 audit(1791643674.834:1054): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 431.795164][T10302] loop3: detected capacity change from 0 to 128 [ 431.866477][T10309] loop2: detected capacity change from 0 to 512 [ 431.920654][T10309] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 431.939368][T10309] EXT4-fs (loop2): 1 truncate cleaned up [ 431.939683][T10309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.374612][ T30] audit: type=1400 audit(1791643676.244:1055): avc: denied { write } for pid=10305 comm="syz.2.2142" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 432.397532][ T30] audit: type=1400 audit(1791643676.344:1056): avc: denied { read write } for pid=10313 comm="syz.4.2144" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 432.397742][ T30] audit: type=1400 audit(1791643676.344:1057): avc: denied { open } for pid=10313 comm="syz.4.2144" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 432.755810][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.821080][ T30] audit: type=1400 audit(1791643676.744:1058): avc: denied { setopt } for pid=10335 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.821202][ T30] audit: type=1400 audit(1791643676.744:1059): avc: denied { write } for pid=10335 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.893041][T10345] loop2: detected capacity change from 0 to 512 [ 433.081102][T10345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.081184][T10345] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.107051][T10345] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.2151: corrupted xattr block 33: invalid ea_ino [ 433.107203][T10345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 433.107288][T10345] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.2151: corrupted xattr block 33: invalid ea_ino [ 433.107417][T10345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 433.109160][T10345] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.2151: corrupted xattr block 33: invalid ea_ino [ 433.109409][T10345] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 433.347099][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.393651][T10359] loop3: detected capacity change from 0 to 512 [ 433.626578][T10363] loop1: detected capacity change from 0 to 512 [ 433.643757][T10363] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 433.663393][T10363] EXT4-fs (loop1): 1 truncate cleaned up [ 433.663818][T10363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.697082][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2164'. [ 433.884175][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 433.884242][ T30] audit: type=1400 audit(1791643677.834:1061): avc: denied { write } for pid=10362 comm="syz.1.2162" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.107938][ T30] audit: type=1400 audit(1791643678.054:1062): avc: denied { ioctl } for pid=10382 comm="syz.0.2168" path="socket:[25405]" dev="sockfs" ino=25405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.109437][ T30] audit: type=1400 audit(1791643678.054:1063): avc: denied { bind } for pid=10382 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.158512][ T30] audit: type=1400 audit(1791643678.114:1064): avc: denied { setopt } for pid=10382 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.160852][ T30] audit: type=1400 audit(1791643678.114:1065): avc: denied { write } for pid=10382 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.206080][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 434.336749][T10385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2169'. [ 434.919358][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.037052][ T30] audit: type=1400 audit(1791643678.984:1066): avc: denied { name_bind } for pid=10396 comm="syz.1.2173" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 435.039267][ T30] audit: type=1400 audit(1791643678.984:1067): avc: denied { name_connect } for pid=10396 comm="syz.1.2173" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 435.221569][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 435.266184][T10401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.270244][T10401] netlink: 'syz.2.2174': attribute type 10 has an invalid length. [ 435.340202][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2181'. [ 435.341021][T10411] FAULT_INJECTION: forcing a failure. [ 435.341021][T10411] name failslab, interval 1, probability 0, space 0, times 0 [ 435.341191][T10411] CPU: 0 UID: 0 PID: 10411 Comm: syz.3.2177 Not tainted syzkaller #0 PREEMPT(lazy) [ 435.341273][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.341315][T10411] Call Trace: [ 435.341336][T10411] [ 435.341371][T10411] __dump_stack+0x1d/0x30 [ 435.341523][T10411] dump_stack_lvl+0x95/0xd0 [ 435.341604][T10411] dump_stack+0x15/0x1b [ 435.341683][T10411] should_fail_ex+0x262/0x280 [ 435.341796][T10411] ? resize+0x1d4/0x1420 [ 435.341877][T10411] should_failslab+0x8c/0xb0 [ 435.341985][T10411] __kmalloc_noprof+0xd0/0x4d0 [ 435.342137][T10411] ? resize+0x1d4/0x1420 [ 435.342205][T10411] resize+0x1d4/0x1420 [ 435.342297][T10411] ? fib_insert_alias+0x2a7/0x7b0 [ 435.342351][T10411] ? should_failslab+0x8c/0xb0 [ 435.342495][T10411] ? fib_insert_alias+0x2a7/0x7b0 [ 435.342556][T10411] ? put_child+0x2af/0x2d0 [ 435.342618][T10411] fib_insert_alias+0x720/0x7b0 [ 435.342680][T10411] fib_trie_unmerge+0x456/0xa80 [ 435.342819][T10411] fib_unmerge+0x7d/0x200 [ 435.342898][T10411] fib4_rule_configure+0x21f/0x520 [ 435.342992][T10411] ? fib_nl2rule_locked+0x239/0x260 [ 435.343055][T10411] fib_newrule+0x4b8/0xa00 [ 435.343134][T10411] ? avc_has_perm_noaudit+0xac/0x160 [ 435.343329][T10411] fib_nl_newrule+0x46/0x60 [ 435.343380][T10411] ? __pfx_fib_nl_newrule+0x10/0x10 [ 435.343439][T10411] rtnetlink_rcv_msg+0x64b/0x720 [ 435.343542][T10411] netlink_rcv_skb+0x11e/0x220 [ 435.343687][T10411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 435.343900][T10411] rtnetlink_rcv+0x1c/0x30 [ 435.343989][T10411] netlink_unicast+0x5a9/0x680 [ 435.344093][T10411] netlink_sendmsg+0x5be/0x6f0 [ 435.344157][T10411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.344267][T10411] ____sys_sendmsg+0x532/0x580 [ 435.344349][T10411] ___sys_sendmsg+0x195/0x1e0 [ 435.344473][T10411] __x64_sys_sendmsg+0xd4/0x160 [ 435.344548][T10411] x64_sys_call+0x22ab/0x2550 [ 435.344619][T10411] do_syscall_64+0x112/0x360 [ 435.344733][T10411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.344864][T10411] RIP: 0033:0x7f9c9460e1d9 [ 435.344922][T10411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.344999][T10411] RSP: 002b:00007f9c93067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.345112][T10411] RAX: ffffffffffffffda RBX: 00007f9c94895fa0 RCX: 00007f9c9460e1d9 [ 435.345162][T10411] RDX: 8c755b2713612558 RSI: 00002000000001c0 RDI: 0000000000000005 [ 435.345212][T10411] RBP: 00007f9c946a5888 R08: 0000000000000000 R09: 0000000000000000 [ 435.345330][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.345367][T10411] R13: 00007f9c94896038 R14: 00007f9c94895fa0 R15: 00007ffdd1b6e0f8 [ 435.345409][T10411] [ 435.370592][T10414] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 435.387894][T10414] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 435.704131][T10427] md: array md0 already initialised! [ 435.748648][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'. [ 435.751288][T10432] netlink: 'syz.2.2189': attribute type 10 has an invalid length. [ 436.513879][ T30] audit: type=1400 audit(1791643680.464:1068): avc: denied { write } for pid=10444 comm="syz.4.2193" name="sched" dev="tracefs" ino=26901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 436.514344][ T30] audit: type=1400 audit(1791643680.464:1069): avc: denied { add_name } for pid=10444 comm="syz.4.2193" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 436.514810][ T30] audit: type=1400 audit(1791643680.464:1070): avc: denied { create } for pid=10444 comm="syz.4.2193" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 436.609933][T10447] ./dev/sda1: Can't lookup blockdev [ 436.722435][T10453] md: array md0 already initialised! [ 437.339089][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'. [ 437.353258][T10468] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 437.418438][T10470] loop4: detected capacity change from 0 to 512 [ 437.431977][T10470] EXT4-fs: Ignoring removed orlov option [ 437.493993][T10470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.494203][T10470] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.495269][T10470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.746525][T10490] ./dev/sda1: Can't lookup blockdev [ 439.338934][T10527] ip_tables: iptables: counters copy to user failed while replacing table [ 439.420583][T10535] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 439.551617][T10546] loop1: detected capacity change from 0 to 164 [ 439.567305][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 439.567320][ T30] audit: type=1400 audit(1791643683.514:1073): avc: denied { write } for pid=10549 comm="syz.3.2233" name="/" dev="configfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.567498][ T30] audit: type=1400 audit(1791643683.514:1074): avc: denied { create } for pid=10549 comm="syz.3.2233" name="file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 439.791978][T10574] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 440.464037][T10614] loop1: detected capacity change from 0 to 512 [ 440.912803][T10625] loop1: detected capacity change from 0 to 2048 [ 441.004926][T10625] Alternate GPT is invalid, using primary GPT. [ 441.005071][T10625] loop1: p1 p2 p3 [ 441.005080][T10625] loop1: partition table partially beyond EOD, truncated [ 441.033026][T10629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2266'. [ 441.040275][ T51] IPVS: starting estimator thread 0... [ 441.122370][T10630] IPVS: using max 2736 ests per chain, 136800 per kthread [ 441.125974][T10633] ip_tables: iptables: counters copy to user failed while replacing table [ 441.170907][T10635] loop2: detected capacity change from 0 to 2048 [ 441.194182][T10635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.226873][ T30] audit: type=1400 audit(1791643685.174:1075): avc: denied { write } for pid=10634 comm="syz.2.2268" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.258478][T10644] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 441.277642][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.368169][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.368365][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.486298][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.491491][T10650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.002902][ T3433] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.003215][ T3433] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.003935][ T3433] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.003977][ T3433] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.091960][T10678] FAULT_INJECTION: forcing a failure. [ 442.091960][T10678] name failslab, interval 1, probability 0, space 0, times 0 [ 442.091996][T10678] CPU: 1 UID: 0 PID: 10678 Comm: syz.3.2278 Not tainted syzkaller #0 PREEMPT(lazy) [ 442.092028][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.092044][T10678] Call Trace: [ 442.092052][T10678] [ 442.092062][T10678] __dump_stack+0x1d/0x30 [ 442.092097][T10678] dump_stack_lvl+0x95/0xd0 [ 442.092152][T10678] dump_stack+0x15/0x1b [ 442.092192][T10678] should_fail_ex+0x262/0x280 [ 442.092227][T10678] should_failslab+0x8c/0xb0 [ 442.092341][T10678] ? __alloc_empty_sheaf+0x28/0x40 [ 442.092379][T10678] __kmalloc_flags_noprof+0x105/0x500 [ 442.092439][T10678] ? __alloc_empty_sheaf+0x28/0x40 [ 442.092480][T10678] __alloc_empty_sheaf+0x28/0x40 [ 442.092593][T10678] __pcs_replace_empty_main+0x251/0x330 [ 442.092625][T10678] ? __d_alloc+0x8c/0x320 [ 442.092656][T10678] __kmalloc_noprof+0x308/0x4d0 [ 442.092809][T10678] ? __d_alloc+0x34/0x320 [ 442.092840][T10678] ? __d_alloc+0x8c/0x320 [ 442.092875][T10678] __d_alloc+0x8c/0x320 [ 442.092956][T10678] d_alloc+0x2e/0x100 [ 442.092989][T10678] lookup_one_qstr_excl+0x95/0x240 [ 442.093027][T10678] filename_rmdir+0x161/0x360 [ 442.093054][T10678] __se_sys_unlinkat+0x6e/0x140 [ 442.093102][T10678] __x64_sys_unlinkat+0x43/0x50 [ 442.093127][T10678] x64_sys_call+0x21a3/0x2550 [ 442.093185][T10678] do_syscall_64+0x112/0x360 [ 442.093219][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.093246][T10678] RIP: 0033:0x7f9c9460e1d9 [ 442.093266][T10678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.093339][T10678] RSP: 002b:00007f9c93067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 442.093365][T10678] RAX: ffffffffffffffda RBX: 00007f9c94895fa0 RCX: 00007f9c9460e1d9 [ 442.093384][T10678] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 442.093402][T10678] RBP: 00007f9c946a5888 R08: 0000000000000000 R09: 0000000000000000 [ 442.093419][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.093435][T10678] R13: 00007f9c94896038 R14: 00007f9c94895fa0 R15: 00007ffdd1b6e0f8 [ 442.093462][T10678] [ 442.279421][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2280'. [ 442.304139][ T30] audit: type=1400 audit(1791643686.254:1076): avc: denied { watch } for pid=10681 comm="syz.3.2279" path="/427" dev="tmpfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 442.306528][ T30] audit: type=1400 audit(1791643686.254:1077): avc: denied { watch_reads } for pid=10681 comm="syz.3.2279" path="/427" dev="tmpfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 442.348992][T10686] FAULT_INJECTION: forcing a failure. [ 442.348992][T10686] name failslab, interval 1, probability 0, space 0, times 0 [ 442.349064][T10686] CPU: 1 UID: 0 PID: 10686 Comm: syz.2.2282 Not tainted syzkaller #0 PREEMPT(lazy) [ 442.349323][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.349359][T10686] Call Trace: [ 442.349376][T10686] [ 442.349395][T10686] __dump_stack+0x1d/0x30 [ 442.349465][T10686] dump_stack_lvl+0x95/0xd0 [ 442.349568][T10686] dump_stack+0x15/0x1b [ 442.349628][T10686] should_fail_ex+0x262/0x280 [ 442.349767][T10686] should_failslab+0x8c/0xb0 [ 442.349856][T10686] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 442.349990][T10686] ? __d_alloc+0x34/0x320 [ 442.350114][T10686] ? __d_alloc+0x34/0x320 [ 442.350215][T10686] __d_alloc+0x34/0x320 [ 442.350387][T10686] d_alloc+0x2e/0x100 [ 442.350478][T10686] lookup_one_qstr_excl+0x95/0x240 [ 442.350660][T10686] filename_create+0x155/0x220 [ 442.350780][T10686] filename_symlinkat+0x94/0x2b0 [ 442.350862][T10686] __se_sys_symlink+0x42/0x1b0 [ 442.350943][T10686] __x64_sys_symlink+0x31/0x40 [ 442.351017][T10686] x64_sys_call+0x211f/0x2550 [ 442.351186][T10686] do_syscall_64+0x112/0x360 [ 442.351271][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.351340][T10686] RIP: 0033:0x7f1bcc57e1d9 [ 442.351379][T10686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.351430][T10686] RSP: 002b:00007f1bcafd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 442.351550][T10686] RAX: ffffffffffffffda RBX: 00007f1bcc805fa0 RCX: 00007f1bcc57e1d9 [ 442.351600][T10686] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000380 [ 442.351632][T10686] RBP: 00007f1bcc615888 R08: 0000000000000000 R09: 0000000000000000 [ 442.351672][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.351701][T10686] R13: 00007f1bcc806038 R14: 00007f1bcc805fa0 R15: 00007fffed078848 [ 442.351754][T10686] [ 442.508986][T10690] loop3: detected capacity change from 0 to 512 [ 442.509780][T10690] EXT4-fs: test_dummy_encryption option not supported [ 442.678930][T10701] loop2: detected capacity change from 0 to 512 [ 443.093035][T10718] loop1: detected capacity change from 0 to 512 [ 443.098371][T10718] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 443.143339][T10718] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 443.143703][T10718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2297: bg 0: block 248: padding at end of block bitmap is not set [ 443.143789][T10718] loop1: lost filesystem error report for type 5 error -117 [ 443.144308][T10718] Quota error (device loop1): write_blk: dquota write failed [ 443.144322][T10718] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 443.144382][T10718] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.2297: Failed to acquire dquot type 1 [ 443.144415][T10718] loop1: lost filesystem error report for type 5 error -28 [ 443.145497][T10718] EXT4-fs (loop1): 1 truncate cleaned up [ 443.146374][T10718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 443.156729][ T30] audit: type=1400 audit(1791643687.104:1078): avc: denied { write } for pid=10717 comm="syz.1.2297" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.159342][ T30] audit: type=1400 audit(1791643687.104:1079): avc: denied { ioctl } for pid=10717 comm="syz.1.2297" path="/458/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 443.435674][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 443.601877][T10725] loop3: detected capacity change from 0 to 512 [ 443.617454][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 443.624356][T10725] EXT4-fs: Ignoring removed orlov option [ 443.633293][ T12] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 443.633434][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:0: Failed to release dquot type 1 [ 443.633493][ T12] loop1: lost filesystem error report for type 5 error -117 [ 443.647521][T10725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.647671][T10725] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.805735][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.908726][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 443.931888][T10741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.957651][T10741] netlink: 'syz.3.2302': attribute type 10 has an invalid length. [ 443.957675][T10741] syz_tun: entered promiscuous mode [ 443.958985][T10741] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 444.023701][T10754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2308'. [ 444.033402][T10753] loop4: detected capacity change from 0 to 512 [ 444.045223][T10753] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 444.045235][T10753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 444.050173][T10753] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.2309: invalid indirect mapped block 32768 (level 2) [ 444.050252][T10753] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 444.050725][T10753] EXT4-fs (loop4): 1 orphan inode deleted [ 444.050745][T10753] EXT4-fs (loop4): 1 truncate cleaned up [ 444.051142][T10753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.064077][T10753] EXT4-fs (loop4): shut down requested (1) [ 444.140574][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.922409][T10792] loop1: detected capacity change from 0 to 512 [ 444.922837][T10792] EXT4-fs: Ignoring removed bh option [ 444.935925][T10792] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 444.935997][T10792] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 444.936042][T10792] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2326: Corrupt directory, running e2fsck is recommended [ 444.938687][T10792] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 444.940819][T10792] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2326: corrupted in-inode xattr: e_name out of bounds [ 444.940917][T10792] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 444.941355][T10792] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2326: couldn't read orphan inode 15 (err -117) [ 444.941605][T10792] loop1: lost filesystem error report for type 5 error -117 [ 444.947145][T10792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.950051][T10795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2327'. [ 444.957069][ T30] audit: type=1400 audit(1791643688.904:1080): avc: denied { remount } for pid=10791 comm="syz.1.2326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 444.961016][T10792] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 445.083207][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.123876][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 445.126430][T10802] netlink: 'syz.1.2330': attribute type 10 has an invalid length. [ 445.243960][T10813] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2335'. [ 445.246382][T10811] No source specified [ 445.295098][ T30] audit: type=1400 audit(1791643689.244:1081): avc: denied { read } for pid=10819 comm="syz.3.2340" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 445.295211][ T30] audit: type=1400 audit(1791643689.244:1082): avc: denied { open } for pid=10819 comm="syz.3.2340" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 445.295314][T10820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2339'. [ 445.298103][ T30] audit: type=1400 audit(1791643689.244:1083): avc: denied { ioctl } for pid=10819 comm="syz.3.2340" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 445.407978][T10827] loop3: detected capacity change from 0 to 512 [ 445.557371][T10835] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 445.920597][T10838] loop3: detected capacity change from 0 to 2048 [ 445.955415][T10838] Alternate GPT is invalid, using primary GPT. [ 445.955524][T10838] loop3: p1 p2 p3 [ 445.955532][T10838] loop3: partition table partially beyond EOD, truncated [ 446.051483][T10844] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2348'. [ 446.087994][T10849] No source specified [ 446.109107][T10851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2351'. [ 446.327454][T10865] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 446.390651][T10874] No source specified [ 446.460501][T10882] loop3: detected capacity change from 0 to 512 [ 446.482953][T10882] EXT4-fs: Ignoring removed orlov option [ 446.598767][T10882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.598859][T10882] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.599320][T10882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.603362][T10894] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 446.659376][T10895] loop4: detected capacity change from 0 to 8192 [ 446.729918][T10895] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.899143][T10900] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 447.253056][T10916] syzkaller1: entered promiscuous mode [ 447.253079][T10916] syzkaller1: entered allmulticast mode [ 447.728476][T10933] set_capacity_and_notify: 1 callbacks suppressed [ 447.728748][T10933] loop3: detected capacity change from 0 to 512 [ 447.778247][T10933] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 447.778496][T10933] EXT4-fs (loop3): orphan cleanup on readonly fs [ 447.778609][T10933] EXT4-fs warning (device loop3): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 447.778831][T10933] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 447.778927][T10933] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #16: comm syz.3.2387: casefold flag without casefold feature [ 447.778979][T10933] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 447.779369][T10933] EXT4-fs (loop3): Remounting filesystem read-only [ 447.781182][T10933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 447.916756][T10936] loop2: detected capacity change from 0 to 512 [ 447.930896][T10936] EXT4-fs: Ignoring removed mblk_io_submit option [ 447.947828][T10936] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 447.977827][T10936] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2388: corrupted in-inode xattr: e_value size too large [ 447.977876][T10936] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 447.978516][T10936] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2388: couldn't read orphan inode 15 (err -117) [ 447.978539][T10936] loop2: lost filesystem error report for type 5 error -117 [ 447.999324][T10936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.077400][ T30] audit: type=1400 audit(1791643692.024:1084): avc: denied { write } for pid=10935 comm="syz.2.2388" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.078420][ T30] audit: type=1400 audit(1791643692.024:1085): avc: denied { write } for pid=10935 comm="syz.2.2388" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.078694][ T30] audit: type=1400 audit(1791643692.024:1086): avc: denied { write } for pid=10935 comm="syz.2.2388" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.079254][ T30] audit: type=1400 audit(1791643692.024:1087): avc: denied { write } for pid=10935 comm="syz.2.2388" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.080927][ T30] audit: type=1400 audit(1791643692.024:1088): avc: denied { write } for pid=10935 comm="syz.2.2388" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.081149][T10936] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 12: comm syz.2.2388: lblock 3 mapped to illegal pblock 12 (length 1) [ 448.225134][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.271207][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.436168][T10957] syzkaller1: entered promiscuous mode [ 448.436194][T10957] syzkaller1: entered allmulticast mode [ 448.739303][ T30] audit: type=1400 audit(1791643692.684:1089): avc: denied { read } for pid=10969 comm="syz.1.2400" name="/" dev="configfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 449.378247][T10986] loop3: detected capacity change from 0 to 512 [ 449.394601][T10986] FAT-fs (loop3): bogus logical sector size 212 [ 449.394639][T10986] FAT-fs (loop3): Can't find a valid FAT filesystem [ 449.797675][T10998] syzkaller1: entered promiscuous mode [ 449.797693][T10998] syzkaller1: entered allmulticast mode [ 450.359813][T11014] loop1: detected capacity change from 0 to 1024 [ 450.362075][T11014] EXT4-fs: Ignoring removed orlov option [ 450.381591][T11016] loop3: detected capacity change from 0 to 512 [ 450.389084][T11016] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 450.390039][T11014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.400443][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 450.400483][ T30] audit: type=1400 audit(1791643694.344:1093): avc: denied { write } for pid=11012 comm="syz.1.2417" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.404363][ T30] audit: type=1400 audit(1791643694.354:1094): avc: denied { read } for pid=11012 comm="syz.1.2417" path="/476/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 450.408627][T11016] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.2418: bg 0: block 104: invalid block bitmap [ 450.408711][T11016] loop3: lost filesystem error report for type 5 error -117 [ 450.409111][T11016] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 450.409162][T11016] loop3: lost filesystem error report for type 5 error -117 [ 450.409636][T11016] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2418: invalid indirect mapped block 1 (level 1) [ 450.409721][T11016] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.410295][T11016] EXT4-fs (loop3): 1 truncate cleaned up [ 450.887369][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.889204][T11016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.940746][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.968018][T11027] loop3: detected capacity change from 0 to 512 [ 451.089386][T11036] syzkaller1: entered promiscuous mode [ 451.089481][T11036] syzkaller1: entered allmulticast mode [ 451.277976][ T30] audit: type=1400 audit(1791643695.224:1095): avc: denied { block_suspend } for pid=11058 comm="syz.3.2436" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 451.361058][T11065] syzkaller1: entered promiscuous mode [ 451.361124][T11065] syzkaller1: entered allmulticast mode [ 451.419110][T11077] loop2: detected capacity change from 0 to 128 [ 451.440268][T11077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 451.440328][T11077] System zones: 1-3, 19-19, 35-36 [ 451.455903][T11079] ip_tables: iptables: counters copy to user failed while replacing table [ 451.455916][T11077] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 451.456181][T11077] ext4 filesystem being mounted at /496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 451.457527][ T30] audit: type=1400 audit(1791643695.414:1096): avc: denied { write } for pid=11076 comm="syz.2.2445" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.543994][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.634998][T11096] loop3: detected capacity change from 0 to 1024 [ 451.637786][T11096] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 451.665645][T11096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.670405][ T30] audit: type=1400 audit(1791643695.614:1097): avc: denied { setattr } for pid=11095 comm="syz.3.2453" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.708472][ T30] audit: type=1400 audit(1791643695.644:1098): avc: denied { write } for pid=11095 comm="syz.3.2453" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.708560][ T30] audit: type=1400 audit(1791643695.644:1099): avc: denied { write } for pid=11095 comm="syz.3.2453" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.708587][ T30] audit: type=1400 audit(1791643695.644:1100): avc: denied { remove_name } for pid=11095 comm="syz.3.2453" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.708678][ T30] audit: type=1400 audit(1791643695.644:1101): avc: denied { rename } for pid=11095 comm="syz.3.2453" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 451.708706][ T30] audit: type=1400 audit(1791643695.644:1102): avc: denied { unlink } for pid=11095 comm="syz.3.2453" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 451.812542][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.855679][T11109] ip_tables: iptables: counters copy to user failed while replacing table [ 451.856191][T11111] loop3: detected capacity change from 0 to 512 [ 451.899658][T11111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.899725][T11111] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.907060][T11111] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 2 (only 1 groups) [ 451.937087][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.526282][T11141] ip_tables: iptables: counters copy to user failed while replacing table [ 452.826936][T11157] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 452.854060][T11161] loop2: detected capacity change from 0 to 512 [ 452.872331][T11161] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 452.872458][T11161] EXT4-fs (loop2): orphan cleanup on readonly fs [ 452.873605][T11161] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 452.873699][T11161] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 452.873901][T11161] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #16: comm syz.2.2479: casefold flag without casefold feature [ 452.873930][T11161] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 452.874141][T11161] EXT4-fs (loop2): Remounting filesystem read-only [ 452.874561][T11161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 452.878253][T11165] loop4: detected capacity change from 0 to 512 [ 452.923554][T11165] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 452.923589][T11165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 452.941164][T11165] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.2480: invalid indirect mapped block 32768 (level 2) [ 452.941281][T11165] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 452.942144][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 452.942182][ C1] EXT4-fs (loop4): initial error at time 1791643696: ext4_free_branches:1023: inode 16 [ 452.942254][ C1] EXT4-fs (loop4): last error at time 1791643696: ext4_free_branches:1023: inode 16 [ 452.942882][T11165] EXT4-fs (loop4): 1 orphan inode deleted [ 452.942978][T11165] EXT4-fs (loop4): 1 truncate cleaned up [ 452.943766][T11165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.981376][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.981653][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.067766][T11169] ip_tables: iptables: counters copy to user failed while replacing table [ 453.190055][T11194] loop1: detected capacity change from 0 to 512 [ 453.190453][T11194] EXT4-fs: Ignoring removed orlov option [ 453.288609][T11194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.288843][T11194] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.414398][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.478718][T11201] loop3: detected capacity change from 0 to 256 [ 453.587711][T11201] FAT-fs (loop3): codepage cp949 not found [ 453.761601][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.761759][T11206] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.775607][T11212] loop1: detected capacity change from 0 to 256 [ 453.821798][T11212] FAT-fs (loop1): codepage cp863 not found [ 453.847822][T11206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.859808][T11206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.901618][T11220] loop3: detected capacity change from 0 to 512 [ 453.915258][T11220] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.2503: iget: bad extended attribute block 134217728 [ 453.915295][T11220] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 453.917890][T11220] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2503: couldn't read orphan inode 15 (err -117) [ 453.917997][T11220] loop3: lost filesystem error report for type 5 error -117 [ 453.920761][T11220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.980395][T11224] FAULT_INJECTION: forcing a failure. [ 453.980395][T11224] name failslab, interval 1, probability 0, space 0, times 0 [ 453.980498][T11224] CPU: 0 UID: 0 PID: 11224 Comm: syz.1.2504 Not tainted syzkaller #0 PREEMPT(lazy) [ 453.980585][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.980619][T11224] Call Trace: [ 453.980694][T11224] [ 453.980704][T11224] __dump_stack+0x1d/0x30 [ 453.980740][T11224] dump_stack_lvl+0x95/0xd0 [ 453.980772][T11224] dump_stack+0x15/0x1b [ 453.980843][T11224] should_fail_ex+0x262/0x280 [ 453.980879][T11224] ? __d_alloc+0x8c/0x320 [ 453.980947][T11224] should_failslab+0x8c/0xb0 [ 453.980995][T11224] __kmalloc_noprof+0xd0/0x4d0 [ 453.981045][T11224] ? __d_alloc+0x34/0x320 [ 453.981104][T11224] ? __d_alloc+0x8c/0x320 [ 453.981146][T11224] __d_alloc+0x8c/0x320 [ 453.981185][T11224] d_alloc+0x2e/0x100 [ 453.981224][T11224] lookup_one_qstr_excl+0x95/0x240 [ 453.981347][T11224] filename_rmdir+0x161/0x360 [ 453.981373][T11224] __se_sys_unlinkat+0x6e/0x140 [ 453.981431][T11224] __x64_sys_unlinkat+0x43/0x50 [ 453.981454][T11224] x64_sys_call+0x21a3/0x2550 [ 453.981484][T11224] do_syscall_64+0x112/0x360 [ 453.981515][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.981596][T11224] RIP: 0033:0x7f188cd5e1d9 [ 453.981650][T11224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.981671][T11224] RSP: 002b:00007f188b7b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 453.981692][T11224] RAX: ffffffffffffffda RBX: 00007f188cfe5fa0 RCX: 00007f188cd5e1d9 [ 453.981708][T11224] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 453.981724][T11224] RBP: 00007f188cdf5888 R08: 0000000000000000 R09: 0000000000000000 [ 453.981805][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.981819][T11224] R13: 00007f188cfe6038 R14: 00007f188cfe5fa0 R15: 00007ffe41ff8738 [ 453.981841][T11224] [ 454.063605][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.122638][ T314] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.124031][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.124209][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.124316][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.200216][T11232] netlink: 'syz.3.2508': attribute type 10 has an invalid length. [ 454.442325][T11255] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 454.486768][T11249] loop3: detected capacity change from 0 to 8192 [ 454.489058][T11249] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.667632][T11265] loop1: detected capacity change from 0 to 512 [ 454.838497][T11273] loop4: detected capacity change from 0 to 8192 [ 454.839252][T11273] vfat: Unknown parameter '0x0000000000000004' [ 455.130789][T11280] loop3: detected capacity change from 0 to 512 [ 455.197271][T11282] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 455.281150][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 455.359106][T11298] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 455.397730][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.397880][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.537773][ T30] audit: type=1400 audit(1791643699.484:1103): avc: denied { mounton } for pid=11303 comm="syz.4.2540" path="/536/proc/1418/net/rxrpc/calls" dev="proc" ino=4026533023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 455.572023][T11290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.617468][T11290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.774265][T11312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.828493][T11312] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 455.829201][T11312] EXT4-fs (loop4): Remounting filesystem read-only [ 455.863620][ T30] audit: type=1400 audit(1791643699.754:1104): avc: denied { write } for pid=11311 comm="syz.4.2541" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.923301][ T314] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.923920][ T314] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.923949][ T314] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.923986][ T314] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.986855][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.130999][T11323] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2545'. [ 456.294389][T11327] ip_tables: iptables: counters copy to user failed while replacing table [ 456.373558][T11339] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.2551: iget: bad extended attribute block 134217728 [ 456.373590][T11339] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 456.373757][T11339] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.2551: couldn't read orphan inode 15 (err -117) [ 456.373796][T11339] loop3: lost filesystem error report for type 5 error -117 [ 456.374355][T11339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.420149][T11323] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 456.420186][T11323] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 456.453639][T11323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 456.453735][T11323] System zones: 1-12 [ 456.463580][T11323] EXT4-fs (loop4): 1 truncate cleaned up [ 456.467382][T11323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.500015][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.500146][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.735737][T11363] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2559'. [ 456.735753][T11363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2559'. [ 457.420131][T11371] netlink: 'syz.3.2561': attribute type 10 has an invalid length. [ 457.510826][T11379] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2565'. [ 457.551838][T11381] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2566: iget: bad extended attribute block 134217728 [ 457.551968][T11381] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 457.552143][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 457.552193][ C1] EXT4-fs (loop4): initial error at time 1791643701: ext4_orphan_get:1403: inode 15 [ 457.552273][ C1] EXT4-fs (loop4): last error at time 1791643701: ext4_orphan_get:1403: inode 15 [ 457.553568][T11381] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2566: couldn't read orphan inode 15 (err -117) [ 457.553633][T11381] loop4: lost filesystem error report for type 5 error -117 [ 457.554741][T11381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.720368][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2567'. [ 458.031488][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.099829][T11401] set_capacity_and_notify: 5 callbacks suppressed [ 458.099910][T11401] loop4: detected capacity change from 0 to 512 [ 458.152236][T11405] loop1: detected capacity change from 0 to 1024 [ 458.153135][T11405] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 458.231149][T11405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.339426][T11413] loop4: detected capacity change from 0 to 2048 [ 458.849343][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.877745][T11413] Alternate GPT is invalid, using primary GPT. [ 458.877910][T11413] loop4: p1 p2 p3 [ 458.877919][T11413] loop4: partition table partially beyond EOD, truncated [ 459.065037][T10304] udevd[10304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 459.066814][T10631] udevd[10631]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 459.068319][T10869] udevd[10869]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 459.186207][T11422] loop2: detected capacity change from 0 to 8192 [ 459.192760][T11422] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.209398][T11416] syzkaller1: entered promiscuous mode [ 459.209436][T11416] syzkaller1: entered allmulticast mode [ 459.371253][T11429] loop4: detected capacity change from 0 to 512 [ 459.425119][T11429] EXT4-fs (loop4): invalid inodes per group: 462880 [ 459.514885][T11429] loop4: detected capacity change from 0 to 512 [ 459.848974][T11441] loop3: detected capacity change from 0 to 512 [ 459.876218][T11441] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 460.042357][T11441] EXT4-fs (loop3): 1 orphan inode deleted [ 460.061071][T11441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.066597][T11441] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.155828][ T30] audit: type=1400 audit(1791643704.034:1105): avc: denied { write } for pid=11440 comm="syz.3.2586" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.465793][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.542932][T11470] syzkaller1: entered promiscuous mode [ 460.542949][T11470] syzkaller1: entered allmulticast mode [ 460.588857][T11472] loop3: detected capacity change from 0 to 512 [ 460.607818][T11472] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 460.622863][T11474] loop4: detected capacity change from 0 to 512 [ 460.652726][T11472] EXT4-fs (loop3): 1 orphan inode deleted [ 460.658930][T11472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.659558][T11472] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.748851][ T9304] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 460.748886][ T9304] EXT4-fs error (device loop3): ext4_release_dquot:7106: comm kworker/u8:6: Failed to release dquot type 1 [ 460.781536][ T30] audit: type=1400 audit(1791643704.734:1106): avc: denied { write } for pid=11471 comm="syz.3.2597" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.833969][T11481] FAULT_INJECTION: forcing a failure. [ 460.833969][T11481] name failslab, interval 1, probability 0, space 0, times 0 [ 460.834033][T11481] CPU: 0 UID: 0 PID: 11481 Comm: syz.2.2600 Not tainted syzkaller #0 PREEMPT(lazy) [ 460.834067][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.834086][T11481] Call Trace: [ 460.834112][T11481] [ 460.834123][T11481] __dump_stack+0x1d/0x30 [ 460.834167][T11481] dump_stack_lvl+0x95/0xd0 [ 460.834194][T11481] dump_stack+0x15/0x1b [ 460.834321][T11481] should_fail_ex+0x262/0x280 [ 460.834377][T11481] ? proc_thread_self_get_link+0xaf/0x130 [ 460.834412][T11481] should_failslab+0x8c/0xb0 [ 460.834605][T11481] __kmalloc_cache_noprof+0x7a/0x400 [ 460.834705][T11481] ? proc_thread_self_get_link+0xaf/0x130 [ 460.834733][T11481] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 460.834767][T11481] proc_thread_self_get_link+0xaf/0x130 [ 460.834800][T11481] pick_link+0x514/0x8e0 [ 460.834859][T11481] step_into_slowpath+0x40c/0x600 [ 460.834899][T11481] ? inode_permission+0x1da/0x3b0 [ 460.834934][T11481] link_path_walk+0x947/0xdd0 [ 460.835056][T11481] path_openat+0xe7/0x10d0 [ 460.835170][T11481] do_file_open+0x16c/0x290 [ 460.835224][T11481] do_sys_openat2+0xa0/0x130 [ 460.835270][T11481] __x64_sys_openat+0xf2/0x120 [ 460.835306][T11481] x64_sys_call+0x1f72/0x2550 [ 460.835408][T11481] do_syscall_64+0x112/0x360 [ 460.835445][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.835558][T11481] RIP: 0033:0x7f1bcc53ea0e [ 460.835579][T11481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.835602][T11481] RSP: 002b:00007f1bcafd6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.835644][T11481] RAX: ffffffffffffffda RBX: 00007f1bcafd76c0 RCX: 00007f1bcc53ea0e [ 460.835726][T11481] RDX: 0000000000000002 RSI: 00007f1bcafd6f90 RDI: ffffffffffffff9c [ 460.835744][T11481] RBP: 00007f1bcc615888 R08: 0000000000000000 R09: 0000000000000000 [ 460.835762][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.835777][T11481] R13: 00007f1bcc806038 R14: 00007f1bcc805fa0 R15: 00007fffed078848 [ 460.835877][T11481] [ 460.848097][ T30] audit: type=1400 audit(1791643704.774:1107): avc: denied { write } for pid=11471 comm="syz.3.2597" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.189289][T11494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2606'. [ 461.226105][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.397937][T11500] syzkaller1: entered promiscuous mode [ 461.397953][T11500] syzkaller1: entered allmulticast mode [ 461.757025][T11516] loop1: detected capacity change from 0 to 512 [ 461.811648][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'. [ 461.970706][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2618'. [ 462.008497][T11522] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 462.054863][T11522] EXT4-fs (loop1): 1 orphan inode deleted [ 462.057986][T11522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.058492][T11522] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.083761][ T32] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 462.083824][ T32] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:1: Failed to release dquot type 1 [ 462.319612][T11556] syzkaller1: entered promiscuous mode [ 462.319634][T11556] syzkaller1: entered allmulticast mode [ 462.475042][ T30] audit: type=1400 audit(1791643706.424:1108): avc: denied { write } for pid=11521 comm="syz.1.2614" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.643736][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.113678][T11582] set_capacity_and_notify: 2 callbacks suppressed [ 463.113693][T11582] loop1: detected capacity change from 0 to 512 [ 463.148338][T11582] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.2636: iget: bad extended attribute block 134217728 [ 463.148771][T11582] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.149788][T11582] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2636: couldn't read orphan inode 15 (err -117) [ 463.149921][T11582] loop1: lost filesystem error report for type 5 error -117 [ 463.253905][T11582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.504514][T11593] loop3: detected capacity change from 0 to 512 [ 463.507165][T11593] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 463.511374][T11593] EXT4-fs (loop3): 1 truncate cleaned up [ 463.512468][T11593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.572435][T11595] loop2: detected capacity change from 0 to 512 [ 463.580400][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.875583][T11602] loop1: detected capacity change from 0 to 512 [ 464.033548][ T30] audit: type=1400 audit(1791643707.954:1109): avc: denied { write } for pid=11592 comm="syz.3.2641" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.080085][T11602] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 464.126921][T11605] loop4: detected capacity change from 0 to 512 [ 464.136498][T11598] loop2: detected capacity change from 0 to 512 [ 464.138966][T11598] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 464.148277][T11598] EXT4-fs (loop2): 1 orphan inode deleted [ 464.149155][T11598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.149931][T11598] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.159146][ T30] audit: type=1400 audit(1791643708.104:1110): avc: denied { write } for pid=11597 comm="syz.2.2643" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.159184][ T30] audit: type=1400 audit(1791643708.104:1111): avc: denied { write } for pid=11597 comm="syz.2.2643" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.162430][T11602] EXT4-fs (loop1): 1 orphan inode deleted [ 464.181737][T11602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.182130][ T3433] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 464.182319][ T3433] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:7: Failed to release dquot type 1 [ 464.182373][ T3433] loop1: lost filesystem error report for type 5 error -117 [ 464.186380][T11602] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.212765][ T30] audit: type=1400 audit(1791643708.144:1112): avc: denied { write } for pid=11600 comm="syz.1.2642" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.215859][T11598] lo: entered allmulticast mode [ 464.251043][T11597] lo: left allmulticast mode [ 464.283545][T11605] EXT4-fs (loop4): invalid inodes per group: 462880 [ 464.321567][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.382306][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.409643][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.459079][T11624] loop1: detected capacity change from 0 to 512 [ 464.472205][T11624] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.2653: iget: bad extended attribute block 134217728 [ 464.472232][T11624] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.473210][T11605] loop4: detected capacity change from 0 to 512 [ 464.474431][T11624] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2653: couldn't read orphan inode 15 (err -117) [ 464.474484][T11624] loop1: lost filesystem error report for type 5 error -117 [ 464.475159][T11605] vfat: Unknown parameter 'ÿÿ01777777777777777777777' [ 464.476623][T11624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.573014][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.636012][T11631] loop3: detected capacity change from 0 to 512 [ 465.008764][T11650] loop3: detected capacity change from 0 to 512 [ 465.038663][T11650] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 465.042495][T11650] EXT4-fs (loop3): 1 truncate cleaned up [ 465.042898][T11650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.281406][T11642] EXT4-fs (loop4): invalid inodes per group: 462880 [ 465.294623][ T2983] ================================================================== [ 465.294655][ T2983] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 465.294696][ T2983] [ 465.294701][ T2983] write to 0xffff888100540ab0 of 8 bytes by task 10869 on cpu 1: [ 465.294715][ T2983] dentry_unlink_inode+0x65/0x260 [ 465.294741][ T2983] d_delete+0x164/0x180 [ 465.294769][ T2983] d_delete_notify+0x32/0x100 [ 465.294789][ T2983] vfs_unlink+0x287/0x490 [ 465.294810][ T2983] filename_unlinkat+0x1dc/0x410 [ 465.294831][ T2983] __se_sys_unlink+0x2b/0xe0 [ 465.294851][ T2983] __x64_sys_unlink+0x1f/0x30 [ 465.294867][ T2983] x64_sys_call+0x18ee/0x2550 [ 465.294889][ T2983] do_syscall_64+0x112/0x360 [ 465.294909][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.294932][ T2983] [ 465.294938][ T2983] read to 0xffff888100540ab0 of 8 bytes by task 2983 on cpu 0: [ 465.294957][ T2983] step_into_slowpath+0x127/0x600 [ 465.294987][ T2983] path_lookupat+0x2eb/0x4c0 [ 465.295015][ T2983] filename_lookup+0x18f/0x390 [ 465.295038][ T2983] do_readlinkat+0x74/0x2f0 [ 465.295064][ T2983] __x64_sys_readlink+0x47/0x60 [ 465.295085][ T2983] x64_sys_call+0x1d41/0x2550 [ 465.295114][ T2983] do_syscall_64+0x112/0x360 [ 465.295141][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.295165][ T2983] [ 465.295169][ T2983] value changed: 0xffff88811e8ae3d8 -> 0x0000000000000000 [ 465.295183][ T2983] [ 465.295187][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 465.295200][ T2983] CPU: 0 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 465.295223][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.295234][ T2983] ================================================================== [ 465.337348][T11642] vfat: Unknown parameter 'ÿ 01777777777777777777777' [ 465.874200][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.