last executing test programs: 2m32.399943563s ago: executing program 4 (id=186): ioperm(0x4, 0x8, 0x5) symlink(&(0x7f0000006200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000006280)='.\x02\x00') lstat(&(0x7f00000062c0)='.\x02\x00', &(0x7f0000006300)) 2m32.373855166s ago: executing program 4 (id=188): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000400)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, 0x0) 2m32.339167609s ago: executing program 4 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001680)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000380)=[{&(0x7f00000003c0)=' ', 0x100120}], 0x1}, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) 2m32.223073591s ago: executing program 4 (id=195): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xfe, 0x45e, &(0x7f0000000740)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) creat(&(0x7f0000000c00)='./bus\x00', 0x0) unshare(0x600) r1 = timerfd_create(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000580)=0xa) mount(&(0x7f0000000c40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000c80)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000cc0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x100000001, 0x4, 0x0, 0x0, 0x4, 0x19, "ef359f413bb938e0ddd407ae6dddfbd1ce5d29c2ee5e5ca9030fe8ee56285677df701905b9aafab4afaaf755a3f6a000", "036c47c6780820d1cbf7968259ca171c00a411ef54e424d71e14ef3dc177e9b48b000000000000000000000000000000000000000000000000000800", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x10000010]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x0) 2m31.903640703s ago: executing program 4 (id=198): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000100)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606325594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232317f000000303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670396d1132b27cff2b57d6a317bc44219cf4f674f356aee2925", 0x1d8, r0) 2m31.710378554s ago: executing program 4 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) 2m31.654256889s ago: executing program 32 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) 44.591078976s ago: executing program 0 (id=1742): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}}], 0x1, 0x810) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000780)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f00000007c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000800), 0x800001d, 0x0) 43.781135598s ago: executing program 0 (id=1753): r0 = open(&(0x7f0000000d40)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000795000000000000000000000000000000000000000000000000000000000000ffffffff"]) 43.735674793s ago: executing program 0 (id=1755): r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32, 0x30, 0x33]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key(&(0x7f0000001100)='keyring\x00', &(0x7f0000001140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @desc4}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x31, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @desc1}, &(0x7f0000001400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001480), &(0x7f00000014c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000001500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001580), &(0x7f00000015c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000001600)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001680), &(0x7f00000016c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000001700)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001780), &(0x7f00000017c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000001800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001880), &(0x7f00000018c0)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000001900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001980), &(0x7f00000019c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000001a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001a80), &(0x7f0000001ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000001b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001b80), &(0x7f0000001bc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001c80), &(0x7f0000001cc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "c783eceba5f4825c36812713c66db13a4d6b0d4bd1b02d9d41360c388b87bce5cf7b56969b3adbadbdeca002e5d62d5c9ff2426c66d9cc312051bed0eecf6150", 0x26}, 0x48, r0) add_key$keyring(&(0x7f0000001d80), &(0x7f0000001dc0)={'syz', 0x1}, 0x0, 0x0, r0) 43.730949433s ago: executing program 0 (id=1756): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800714, &(0x7f0000000080)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f00000005c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) open(&(0x7f0000000600)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000640)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f00000006c0)='./bus\x00', 0x8000, 0xa3) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x14, 0x15, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x7]}) 43.229251934s ago: executing program 0 (id=1765): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000040000000400"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000100), 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_UIE_OFF(r0, 0x40187013) 42.808165757s ago: executing program 0 (id=1771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000580)=0x7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000006c0)=[{&(0x7f0000000700)='3', 0x1}], 0x1, 0x800, 0x0) listen(r0, 0x0) 42.807914068s ago: executing program 33 (id=1771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000580)=0x7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000006c0)=[{&(0x7f0000000700)='3', 0x1}], 0x1, 0x800, 0x0) listen(r0, 0x0) 3.116848662s ago: executing program 2 (id=2361): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) read(r0, &(0x7f00000007c0)=""/28, 0x1c) 2.94142518s ago: executing program 2 (id=2362): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000200)={0x1, 0x9}) 2.649651309s ago: executing program 2 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x44}}, 0x2) 2.597366744s ago: executing program 6 (id=2370): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00', 0x5, 0x252, &(0x7f00000011c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd4}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) 2.597096095s ago: executing program 2 (id=2371): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x1}, 0x10, 0x27b5b, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000006c0)=[{0x4, 0x4, 0x4, 0xb}, {0x3, 0x2, 0x1, 0x2}, {0x3, 0x2, 0x10, 0x9}, {0x0, 0x3, 0x7, 0x2}, {0x1, 0x2, 0x1, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x12, 0x0, &(0x7f0000000b00)="62ce5229fe2137ef03a2e6d4c4f8c5615626", &(0x7f0000000b40), 0x6, 0x0, 0x2}, 0x50) sendmsg$inet(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x1, 0x0) socket$kcm(0x28, 0x5, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000900)={0x0, 0xd18c9b25, &(0x7f0000000940)=[{&(0x7f0000000980)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000009c0)={0xffffffffffffffff, 0x5b, 0x0}, 0x10000) 2.496236845s ago: executing program 6 (id=2373): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f00000018c0)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000001900)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001940)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r0, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b00)=[0x0, 0x0], 0x0, 0x1f, 0x0, 0x0, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r1, 0xe0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001d40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0], 0x0, 0x8f, &(0x7f0000001e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x14, 0x0, 0x0, &(0x7f0000001f80)='syzkaller\x00', 0x9, 0xe0, &(0x7f0000001fc0)=""/224, 0x40f00, 0xc, '\x00', r2, @fallback=0x3d, r1, 0x8, &(0x7f00000020c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002100)={0x5, 0x5, 0x5, 0x7}, 0x10, r3, r0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002140), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002200)={0x1, 0xffffffffffffffff}, 0x4) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002240)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000002300), 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x1a, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x51}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x643, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x0, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000002180)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0x7, 0x6, 0xa86b}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002340)=[r5, 0xffffffffffffffff], &(0x7f0000002380)=[{0x3, 0x4, 0xc, 0x2}, {0x1, 0x3, 0x8, 0x1}, {0x1, 0x1, 0x2, 0x2}, {0x0, 0x2, 0xd, 0xa}, {0x3, 0x3, 0x1, 0x1}], 0x10, 0xef}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) recvmsg$kcm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40000000) r9 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) r10 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f0000000500), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x10, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f0000000140)=""/196}, 0x80) sendmsg$kcm(r10, &(0x7f0000000580)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x20000894) 2.436525381s ago: executing program 2 (id=2374): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001b80)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000129"], 0xfce) 2.244197941s ago: executing program 2 (id=2376): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7000097c4cb3"], 0xc) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES16], 0x14) 1.678469198s ago: executing program 5 (id=2380): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x56) sendmsg$nl_route(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$packet(r0, &(0x7f0000000a00)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000a40)={0x11, 0x86dd, r2, 0x1, 0x1, 0x6, @local}, 0x14) 1.621209604s ago: executing program 6 (id=2381): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) 1.573482739s ago: executing program 6 (id=2382): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.573020649s ago: executing program 5 (id=2383): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000bb06c827", 0x2c}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xa7, &(0x7f0000000240), 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB="0000000000000056d5b2b00000000000ca0c4e242bd3796300000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8901, &(0x7f0000000040)) sendmsg$inet(r4, 0x0, 0x24004011) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r6, &(0x7f0000000f80)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x1, @random="61b68a5db7b1", 'ip6gre0\x00'}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x358}, 0x20000000) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r2) 1.56157943s ago: executing program 6 (id=2384): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 1.500474197s ago: executing program 6 (id=2385): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xd18c9b25, &(0x7f0000000940)=[{&(0x7f0000000980)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000009c0)={0xffffffffffffffff, 0x5b, 0x0}, 0x10000) 1.499701617s ago: executing program 5 (id=2387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c40)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x7, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000fc0), 0x56) sendmsg$kcm(r5, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000001140)="442ea407603a16ff", 0x300}], 0x2}, 0x20000085) 1.406376486s ago: executing program 5 (id=2390): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='27', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}, 0x0, 0x0, 0x1e, 0x0, "3f9c4c403fb2292c42675dd3a9fe9379c36b8e76c2fa00005088ebe5facc1a8517e6a5e4128f79dd1a59cca90ce3e1b85253f099e56bc82c2c0e2a62b1a005de77ce420e56a79695134f51a32b379cd2"}, 0xd8) 1.387000319s ago: executing program 5 (id=2393): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00631dda01aef2b0bad477a11d13ec0c19456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d24c60c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e9000001001d0149e6d308cbe315789f4baffe39bbced9b1d4db174c6121d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac10222664bbc980b4e99027c53ae2c6cc05d3be246e5837cbf286225d43e8c1d2e3fda86b86906b79fdedae7f3bbe362e8ad7f2b370442013de1788be93a3d553c2e1f5b559393d964df51bf393f52ecbe6f832b222231fbb9fee9e0343c2d3d567f7cff6d0b25303bcbcc99c879d3bc622b336c622a91291a63f9644964e5a679ea1b5005b9d987d6094ed4e1af157499d5fb2850161224a441240ea52dda516bc06ff3ade3c08c653108720c3e34727b0ae3db5da52511edb4325a2dd02b05f06a9e39764a8fbe0eb4eee5b51895703128cade291bc5c1acfae9ec5d34e71f75d8b5046aafd108b487be169a7bd49de322163858ae595e084074253c72d65f402752618d636a30c7800d77cbe196c326ca4d210f12f442868cba3ea9a0cbca8f59b1054675e2b1e898305a7245aae76525aaf2460152e5647f", @ANYRES64], 0x0, 0x2b2, &(0x7f0000000380)="$eJzs3c9OE1EUx/EfpQKC0CqKgjHe6EY3E6hP0BBIjE00SI1/EpNBptp0aEmnwdQYYefWtY9AXLozMb4AG5/AhTs2LlkYazozhRaGBGtkAL+fzT3M5TRncu40t0lnuvnw3VKp4FkFu6ZEj1FSGtKWlFZCvQr0hGPCj/vUbk03R3Pfrtx/9PhONpebmTNmNjt/K2OMGbn6+eXrD9e+1IYefBz51K+N9NPNH5nvG2Mb45u/5l8UPVP0TLlSM7ZZqFRq9oLrmMWiV7KMuec6tueYYtlzqh3zBbeyvFw3dnlxeHC56niesct1U3LqplYxtWrd2M/tYtlYlmWGB4Wmgf2nEodZB+JSrWbtaUkTe2by67EUBAAAYhWx/1/rZv+fDP9m/3+c5Nfn5uxs3FXg7w23gtTeueb+/0nkxz32/wAAAAAAAAAAAAAAAAAAAAAAHAdbjUaq0WikmmPr/oA+SY3w+GlJg5KGJJ0J7zMYCW8zSEs6K+mcpFFJ5yVdkDQm6aKkS5LG214r5lNFhPb+N8dTYf976f9/Yb/+77r+/YdI0P+T54D95/o/odoe3DMgLb1dya/kgzGYzxZUlCtHk0rpp9/LUBDP3s7NTBpfWpeXVsP81ZV8b2f+lFLNBROVPxXkm878fn/dbednlGousKj8TGT+gG5cb8u3lNLXZ6rI1aK/Jnfy30wZM31X6syf8P9vt77Dbc8/Z5ltkf2zrP3mg/wDrI/GZGR/kppIxnvukLz6q5Ltuk41CJKtwCUgiD8YOxpldB28PxpldBPE/c6Ew7DT9LgrAQAAAAAAAAAAAAAAAAD8iW6+IdgjqfNI65fCorNiPkUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb4HQAA///ZHlHL") socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000800)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r0, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000dc0)='net/if_inet6\x00') pread64(r2, &(0x7f0000002e40)=""/30, 0x1e, 0x800000000040042) 1.319407895s ago: executing program 1 (id=2396): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 1.264222951s ago: executing program 1 (id=2397): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e20, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.264022711s ago: executing program 1 (id=2398): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8001}}, @dstopts={{0x28, 0x29, 0x37, {0x33, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x63, 0x1}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9ed}}, @flowinfo={{0x14}}], 0xa0}}, {{&(0x7f0000001940)={0xa, 0x4e24, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}, 0x1c, &(0x7f0000001b40)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x40009, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000006c0)=0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_misc(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}]}, 0x154}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 632.168216ms ago: executing program 3 (id=2402): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000019580)) 632.091336ms ago: executing program 3 (id=2403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x4000044) 616.587377ms ago: executing program 3 (id=2404): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f63"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x23, 0x4, 0x8, 0xbc0, 0x19, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) 601.771379ms ago: executing program 3 (id=2405): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x56) sendmsg$nl_route(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01980400419a04002800128008000100736974001c00028008000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$packet(r0, &(0x7f0000000a00)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000a40)={0x11, 0x86dd, r2, 0x1, 0x1, 0x6, @local}, 0x14) 539.376335ms ago: executing program 3 (id=2406): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='27', 0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, 0xfffffffffffffffd, 0x8d8d0401564194fd) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}, 0x0, 0x0, 0x1e, 0x0, "3f9c4c403fb2292c42675dd3a9fe9379c36b8e76c2fa00005088ebe5facc1a8517e6a5e4128f79dd1a59cca90ce3e1b85253f099e56bc82c2c0e2a62b1a005de77ce420e56a79695134f51a32b379cd2"}, 0xd8) 520.503807ms ago: executing program 3 (id=2407): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) getegid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000500)={0x2080, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 520.134287ms ago: executing program 5 (id=2408): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=ANY=[], 0x14}], 0x1}, 0x4000800) r1 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) waitid(0x0, r2, 0x0, 0x20000008, &(0x7f0000000480)) sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000680), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x1c, &(0x7f0000000800)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0xb0ffffff}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="8f", 0x1}], 0x1, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x6a, 0x1, 0x0, 0x0, {0x1, 0x3, 0x2}}, 0x14}}, 0x0) setresuid(0x0, 0xee00, 0x0) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) 20.162148ms ago: executing program 1 (id=2409): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 19.876868ms ago: executing program 1 (id=2410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b40), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000129"], 0xfce) 0s ago: executing program 1 (id=2411): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4125, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000280)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000300)}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) kernel console output (not intermixed with test programs): d_fail_ex+0x259/0x270 [ 121.841462][ T6735] should_fail+0xb/0x20 [ 121.841497][ T6735] should_fail_usercopy+0x1a/0x20 [ 121.841601][ T6735] _copy_to_user+0x20/0xa0 [ 121.841660][ T6735] keyctl_pkey_e_d_s+0x1b0/0x260 [ 121.841707][ T6735] __se_sys_keyctl+0x5fb/0xb70 [ 121.841742][ T6735] ? __se_sys_futex+0x2f6/0x370 [ 121.841828][ T6735] ? xfd_validate_state+0x45/0xf0 [ 121.841862][ T6735] ? restore_fpregs_from_fpstate+0x61/0x110 [ 121.841967][ T6735] __x64_sys_keyctl+0x67/0x80 [ 121.841999][ T6735] x64_sys_call+0x1fe0/0x2550 [ 121.842077][ T6735] do_syscall_64+0x112/0x360 [ 121.842129][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.842159][ T6735] RIP: 0033:0x7f2df69efb19 [ 121.842254][ T6735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.842273][ T6735] RSP: 002b:00007f2df5447028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 121.842293][ T6735] RAX: ffffffffffffffda RBX: 00007f2df6c75fa0 RCX: 00007f2df69efb19 [ 121.842307][ T6735] RDX: 0000200000000ac0 RSI: 0000200000000a80 RDI: 0000000000000019 [ 121.842324][ T6735] RBP: 00007f2df6a87af8 R08: 0000000000000000 R09: 0000000000000000 [ 121.842341][ T6735] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000 [ 121.842432][ T6735] R13: 00007f2df6c76038 R14: 00007f2df6c75fa0 R15: 00007ffebdc94c18 [ 121.842457][ T6735] [ 122.493720][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.493889][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.541631][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.541805][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.618641][ T29] audit: type=1400 audit(1793624026.196:534): avc: denied { read write } for pid=6795 comm="syz.2.1154" name="set_event" dev="tracefs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 122.618678][ T29] audit: type=1400 audit(1793624026.196:535): avc: denied { open } for pid=6795 comm="syz.2.1154" path="/241/trace/set_event" dev="tracefs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 123.180067][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.184409][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.207705][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.209244][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.752782][ T29] audit: type=1400 audit(1793624027.336:536): avc: denied { bind } for pid=6842 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.937175][ T6862] loop1: detected capacity change from 0 to 736 [ 123.980829][ T6866] ./dev/sda1: Can't lookup blockdev [ 124.181001][ T6882] loop1: detected capacity change from 0 to 4096 [ 124.192135][ T6882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.228232][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.387308][ T29] audit: type=1400 audit(1793624028.966:537): avc: denied { mounton } for pid=6940 comm="syz.5.1212" path="/174/file1" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.421496][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'. [ 126.465049][ T6984] loop5: detected capacity change from 0 to 736 [ 127.302558][ T6890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.510531][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.517982][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.017855][ T7035] loop0: detected capacity change from 0 to 256 [ 128.098694][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.242384][ T7054] loop0: detected capacity change from 0 to 128 [ 128.298195][ T7054] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 128.298220][ T7054] FAT-fs (loop0): data area starts beyond volume (36 > 11) [ 128.298237][ T7054] FAT-fs (loop0): Can't find a valid FAT filesystem [ 129.327906][ T7070] loop2: detected capacity change from 0 to 256 [ 129.375309][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.348732][ T7098] loop2: detected capacity change from 0 to 256 [ 130.381784][ T7100] loop2: detected capacity change from 0 to 512 [ 130.385212][ T7100] EXT4-fs error (device loop2): __ext4_iget:6490: inode #2: block 131072: comm syz.2.1272: invalid block [ 130.385292][ T7100] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 130.386763][ T7100] EXT4-fs (loop2): get root inode failed [ 130.386783][ T7100] EXT4-fs (loop2): mount failed [ 130.641282][ T7029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.948083][ T7127] loop1: detected capacity change from 0 to 4096 [ 130.949759][ T7127] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.949796][ T7127] EXT4-fs: test_dummy_encryption option not supported [ 130.958462][ T29] audit: type=1400 audit(1793624034.536:538): avc: denied { remount } for pid=7126 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.118202][ T7148] loop0: detected capacity change from 0 to 736 [ 131.147580][ T7154] loop5: detected capacity change from 0 to 128 [ 131.156891][ T7154] FAT-fs (loop5): Directory bread(block 1048) failed [ 131.156975][ T7154] FAT-fs (loop5): Directory bread(block 1049) failed [ 131.156993][ T7154] FAT-fs (loop5): Directory bread(block 1050) failed [ 131.157078][ T7154] FAT-fs (loop5): Directory bread(block 1051) failed [ 131.157100][ T7154] FAT-fs (loop5): Directory bread(block 1052) failed [ 131.157193][ T7154] FAT-fs (loop5): Directory bread(block 1053) failed [ 131.157211][ T7154] FAT-fs (loop5): Directory bread(block 1054) failed [ 131.157230][ T7154] FAT-fs (loop5): Directory bread(block 1055) failed [ 131.218648][ T7154] bio_check_eod: 14521 callbacks suppressed [ 131.218668][ T7154] syz.5.1295: attempt to access beyond end of device [ 131.218668][ T7154] loop5: rw=8390659, sector=1112, nr_sectors = 944 limit=128 [ 131.247883][ T7157] xt_hashlimit: size too large, truncated to 1048576 [ 131.509309][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.509418][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.585712][ T7191] loop3: detected capacity change from 0 to 736 [ 131.722702][ T7201] ip_tables: iptables: counters copy to user failed while replacing table [ 131.985185][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.985403][ T7224] netlink: 'syz.2.1323': attribute type 3 has an invalid length. [ 131.986537][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.019889][ T7231] hub 5-0:1.0: USB hub found [ 132.026031][ T7231] hub 5-0:1.0: 8 ports detected [ 132.718578][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.718698][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.790742][ T29] audit: type=1400 audit(1793624036.366:539): avc: denied { create } for pid=7307 comm="syz.5.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.793414][ T29] audit: type=1400 audit(1793624036.376:540): avc: denied { connect } for pid=7307 comm="syz.5.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.869097][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.869433][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.992520][ T7334] loop1: detected capacity change from 0 to 4096 [ 132.997260][ T7334] EXT4-fs: test_dummy_encryption option not supported [ 133.063604][ T29] audit: type=1400 audit(1793624036.646:541): avc: denied { read append } for pid=7335 comm="syz.1.1376" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.063648][ T29] audit: type=1400 audit(1793624036.646:542): avc: denied { open } for pid=7335 comm="syz.1.1376" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.065901][ T29] audit: type=1400 audit(1793624036.646:543): avc: denied { ioctl } for pid=7335 comm="syz.1.1376" path="/dev/usbmon8" dev="devtmpfs" ino=166 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.234301][ T7349] loop3: detected capacity change from 0 to 4096 [ 133.259415][ T7349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.475730][ T7367] loop0: detected capacity change from 0 to 1024 [ 133.492352][ T7367] EXT4-fs: Ignoring removed oldalloc option [ 133.492378][ T7367] EXT4-fs: Ignoring removed orlov option [ 133.516083][ T29] audit: type=1400 audit(1793624037.096:544): avc: denied { setattr } for pid=7348 comm="syz.3.1382" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.559818][ T29] audit: type=1400 audit(1793624037.136:545): avc: denied { write } for pid=7348 comm="syz.3.1382" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.643444][ T7367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.715588][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.998905][ T7388] vhci_hcd vhci_hcd.4: invalid port number 254 [ 134.142620][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.887840][ T7455] set_capacity_and_notify: 2 callbacks suppressed [ 134.887857][ T7455] loop5: detected capacity change from 0 to 512 [ 134.913879][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.913879][ T7455] loop5: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 134.915588][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.915588][ T7455] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 134.915645][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.915645][ T7455] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 134.915787][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.915787][ T7455] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 134.915845][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.915845][ T7455] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 134.915885][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.915885][ T7455] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 134.915935][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.915935][ T7455] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 134.915990][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.915990][ T7455] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 134.916068][ T7455] syz.5.1425: attempt to access beyond end of device [ 134.916068][ T7455] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 135.661006][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.661147][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.910526][ T7484] ./dev/sda1: Can't lookup blockdev [ 136.102384][ T7488] ip_tables: iptables: counters copy to user failed while replacing table [ 136.446408][ T7500] SELinux: DCCP has been removed, pid=7500 comm=syz.3.1443 [ 136.541760][ T7517] ip_tables: iptables: counters copy to user failed while replacing table [ 137.598857][ T7558] ./dev/sda1: Can't lookup blockdev [ 137.728245][ T29] audit: type=1400 audit(1793624041.306:546): avc: denied { mounton } for pid=7574 comm="syz.3.1475" path="/314/proc_mnt/sys/net/ipv4/conf/lo/forwarding" dev="proc" ino=17445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 138.066521][ T7591] loop3: detected capacity change from 0 to 1024 [ 138.068585][ T7591] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.086267][ T7591] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 138.105923][ T7591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.113370][ T29] audit: type=1400 audit(1793624041.696:547): avc: denied { write } for pid=7590 comm="syz.3.1483" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.151254][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.491264][ T7623] loop2: detected capacity change from 0 to 512 [ 138.493603][ T7623] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 138.493621][ T7623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.526828][ T7623] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1495: bad orphan inode 131083 [ 138.526860][ T7623] loop2: lost filesystem error report for type 5 error -117 [ 138.528049][ T7623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.702179][ T7626] loop3: detected capacity change from 0 to 1024 [ 138.702618][ T7626] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.706811][ T7626] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 138.742063][ T7626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.819945][ T29] audit: type=1400 audit(1793624042.396:548): avc: denied { write } for pid=7624 comm="syz.3.1496" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.923288][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.381191][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.632336][ T7659] loop5: detected capacity change from 0 to 1024 [ 139.632710][ T7659] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.741235][ T7659] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 139.763092][ T7659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.795929][ T29] audit: type=1400 audit(1793624043.376:549): avc: denied { write } for pid=7657 comm="syz.5.1508" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.840259][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.233890][ T29] audit: type=1400 audit(1793624043.816:550): avc: denied { setopt } for pid=7675 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.312525][ T7690] loop2: detected capacity change from 0 to 512 [ 140.324820][ T7690] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1519: inode has both inline data and extents flags [ 140.324902][ T7690] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.325041][ T7690] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1519: couldn't read orphan inode 15 (err -117) [ 140.325134][ T7690] loop2: lost filesystem error report for type 5 error -117 [ 140.325588][ T7690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.328986][ T29] audit: type=1400 audit(1793624043.906:551): avc: denied { write } for pid=7689 comm="syz.2.1519" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.329514][ T7690] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters [ 140.357105][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.445264][ T29] audit: type=1400 audit(1793624044.026:552): avc: denied { append } for pid=7697 comm="syz.0.1522" name="trace_pipe_raw" dev="tracefs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 140.501516][ T7705] FAULT_INJECTION: forcing a failure. [ 140.501516][ T7705] name failslab, interval 1, probability 0, space 0, times 0 [ 140.501547][ T7705] CPU: 0 UID: 0 PID: 7705 Comm: syz.2.1525 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 140.501580][ T7705] Tainted: [W]=WARN [ 140.501591][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 140.501614][ T7705] Call Trace: [ 140.501621][ T7705] [ 140.501629][ T7705] __dump_stack+0x1d/0x30 [ 140.501715][ T7705] dump_stack_lvl+0x95/0xd0 [ 140.501740][ T7705] dump_stack+0x15/0x1b [ 140.501761][ T7705] should_fail_ex+0x259/0x270 [ 140.501867][ T7705] ? assoc_array_insert+0x75/0x19a0 [ 140.501914][ T7705] should_failslab+0x8c/0xb0 [ 140.502013][ T7705] __kmalloc_cache_noprof+0x5d/0x3e0 [ 140.502055][ T7705] ? assoc_array_insert+0x75/0x19a0 [ 140.502102][ T7705] ? crng_make_state+0xbc/0x200 [ 140.502189][ T7705] assoc_array_insert+0x75/0x19a0 [ 140.502311][ T7705] ? _get_random_bytes+0x182/0x1b0 [ 140.502340][ T7705] ? _raw_write_lock+0x53/0xa0 [ 140.502361][ T7705] ? __list_add_valid_or_report+0x38/0xe0 [ 140.502389][ T7705] ? mutex_unlock+0x4e/0x90 [ 140.502435][ T7705] __key_link_begin+0x84/0x130 [ 140.502506][ T7705] key_link+0xb9/0x400 [ 140.502547][ T7705] ? keyring_alloc+0x83/0xb0 [ 140.502626][ T7705] call_sbin_request_key+0x2af/0x740 [ 140.502677][ T7705] request_key_and_link+0x975/0xe40 [ 140.502717][ T7705] ? __pfx_key_default_cmp+0x10/0x10 [ 140.502827][ T7705] ? __pfx_keyring_search_iterator+0x10/0x10 [ 140.502870][ T7705] __se_sys_request_key+0x1e9/0x2a0 [ 140.502926][ T7705] __x64_sys_request_key+0x55/0x70 [ 140.502955][ T7705] x64_sys_call+0x1741/0x2550 [ 140.502987][ T7705] do_syscall_64+0x112/0x360 [ 140.503023][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.503045][ T7705] RIP: 0033:0x7efcde8cfb19 [ 140.503063][ T7705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.503138][ T7705] RSP: 002b:00007efcdd31f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 140.503166][ T7705] RAX: ffffffffffffffda RBX: 00007efcdeb55fa0 RCX: 00007efcde8cfb19 [ 140.503186][ T7705] RDX: 0000200000003a40 RSI: 0000200000003a00 RDI: 00002000000039c0 [ 140.503203][ T7705] RBP: 00007efcde967af8 R08: 0000000000000000 R09: 0000000000000000 [ 140.503217][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.503230][ T7705] R13: 00007efcdeb56038 R14: 00007efcdeb55fa0 R15: 00007ffd7ce40698 [ 140.503313][ T7705] [ 140.927480][ T7712] loop2: detected capacity change from 0 to 164 [ 141.307083][ T7761] loop1: detected capacity change from 0 to 128 [ 141.307434][ T7761] EXT4-fs: dax option not supported [ 141.947660][ T7791] loop0: detected capacity change from 0 to 1024 [ 141.948989][ T7791] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.963164][ T7791] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 141.982880][ T7791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.985667][ T29] audit: type=1400 audit(1793624045.566:553): avc: denied { write } for pid=7790 comm="syz.0.1561" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.026756][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.507727][ T28] wacom 0003:056A:0043.0001: Unknown device_type for 'syz0'. Assuming pen. [ 142.508247][ T28] wacom 0003:056A:0043.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 142.508858][ T28] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0001/input/input5 [ 142.509429][ T29] audit: type=1400 audit(1793624046.086:554): avc: denied { read } for pid=2962 comm="acpid" name="event4" dev="devtmpfs" ino=750 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.509505][ T29] audit: type=1400 audit(1793624046.086:555): avc: denied { open } for pid=2962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=750 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.597770][ T7819] fido_id[7819]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.621973][ T7821] loop1: detected capacity change from 0 to 1024 [ 142.622429][ T7821] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.622873][ T7821] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 142.639354][ T7821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.676334][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.710788][ T7828] loop1: detected capacity change from 0 to 736 [ 143.026633][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 143.026732][ T29] audit: type=1400 audit(1793624046.606:558): avc: denied { mounton } for pid=7838 comm="syz.0.1580" path="/proc/785/task/786/fd" dev="proc" ino=17873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 143.062534][ T29] audit: type=1400 audit(1793624046.646:559): avc: denied { mount } for pid=7838 comm="syz.0.1580" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 143.299619][ T7683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.346535][ T7846] FAULT_INJECTION: forcing a failure. [ 143.346535][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 143.346577][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.3.1582 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 143.346637][ T7846] Tainted: [W]=WARN [ 143.346646][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 143.346664][ T7846] Call Trace: [ 143.346673][ T7846] [ 143.346683][ T7846] __dump_stack+0x1d/0x30 [ 143.346713][ T7846] dump_stack_lvl+0x95/0xd0 [ 143.346744][ T7846] dump_stack+0x15/0x1b [ 143.346765][ T7846] should_fail_ex+0x259/0x270 [ 143.346799][ T7846] ? reuseport_alloc+0x9c/0x200 [ 143.346840][ T7846] should_failslab+0x8c/0xb0 [ 143.346923][ T7846] __kmalloc_cache_noprof+0x5d/0x3e0 [ 143.347027][ T7846] ? reuseport_alloc+0x9c/0x200 [ 143.347067][ T7846] reuseport_alloc+0x9c/0x200 [ 143.347129][ T7846] inet_hash+0x51c/0x7f0 [ 143.347161][ T7846] inet_csk_listen_start+0x1ad/0x1f0 [ 143.347263][ T7846] inet_listen+0x1ab/0x1f0 [ 143.347298][ T7846] __x64_sys_listen+0x110/0x170 [ 143.347392][ T7846] x64_sys_call+0x232f/0x2550 [ 143.347421][ T7846] do_syscall_64+0x112/0x360 [ 143.347473][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.347502][ T7846] RIP: 0033:0x7ff43418fb19 [ 143.347518][ T7846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.347537][ T7846] RSP: 002b:00007ff432bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 143.347557][ T7846] RAX: ffffffffffffffda RBX: 00007ff434415fa0 RCX: 00007ff43418fb19 [ 143.347605][ T7846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 143.347649][ T7846] RBP: 00007ff434227af8 R08: 0000000000000000 R09: 0000000000000000 [ 143.347662][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.347674][ T7846] R13: 00007ff434416038 R14: 00007ff434415fa0 R15: 00007ffd8cfe2078 [ 143.347694][ T7846] [ 143.475216][ T7852] loop3: detected capacity change from 0 to 736 [ 143.567109][ T7856] No source specified [ 143.607367][ T7860] ip_tables: iptables: counters copy to user failed while replacing table [ 143.793687][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.794802][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.105922][ T7879] loop0: detected capacity change from 0 to 128 [ 144.124051][ T7879] FAT-fs (loop0): Directory bread(block 1048) failed [ 144.124462][ T7879] FAT-fs (loop0): Directory bread(block 1049) failed [ 144.124965][ T7879] FAT-fs (loop0): Directory bread(block 1050) failed [ 144.124985][ T7879] FAT-fs (loop0): Directory bread(block 1051) failed [ 144.125292][ T7879] FAT-fs (loop0): Directory bread(block 1052) failed [ 144.125311][ T7879] FAT-fs (loop0): Directory bread(block 1053) failed [ 144.125758][ T7879] FAT-fs (loop0): Directory bread(block 1054) failed [ 144.125930][ T7879] FAT-fs (loop0): Directory bread(block 1055) failed [ 144.213097][ T7879] FAT-fs (loop0): FAT read failed (blocknr 128) [ 144.243277][ T7883] loop0: detected capacity change from 0 to 736 [ 144.336023][ T7892] ip_tables: iptables: counters copy to user failed while replacing table [ 144.933942][ T7901] loop5: detected capacity change from 0 to 1024 [ 144.934298][ T7901] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.940077][ T7901] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.969590][ T7901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.994088][ T29] audit: type=1400 audit(1793624048.576:560): avc: denied { write } for pid=7900 comm="syz.5.1603" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.998007][ T29] audit: type=1400 audit(1793624048.576:561): avc: denied { write } for pid=7900 comm="syz.5.1603" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.078157][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.266917][ T7931] ip_tables: iptables: counters copy to user failed while replacing table [ 145.291642][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.294365][ T3401] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.296052][ T7936] No source specified [ 145.324980][ T7934] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.328430][ T7934] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 145.350735][ T7934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.363855][ T29] audit: type=1400 audit(1793624048.936:562): avc: denied { write } for pid=7933 comm="syz.2.1616" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.365345][ T29] audit: type=1400 audit(1793624048.946:563): avc: denied { write } for pid=7933 comm="syz.2.1616" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.409762][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.442030][ T7943] set_capacity_and_notify: 1 callbacks suppressed [ 145.442048][ T7943] loop2: detected capacity change from 0 to 512 [ 145.460042][ T7943] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1617: inode has both inline data and extents flags [ 145.460106][ T7943] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.460348][ T7943] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1617: couldn't read orphan inode 15 (err -117) [ 145.460372][ T7943] loop2: lost filesystem error report for type 5 error -117 [ 145.460908][ T7943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.465784][ T29] audit: type=1400 audit(1793624049.046:564): avc: denied { write } for pid=7942 comm="syz.2.1617" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.506895][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.173192][ T7964] loop1: detected capacity change from 0 to 128 [ 146.390859][ T7970] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 146.390909][ T7970] FAT-fs (loop1): Filesystem has been set read-only [ 146.854496][ T7976] ip_tables: iptables: counters copy to user failed while replacing table [ 147.046058][ T7990] No source specified [ 147.085221][ T29] audit: type=1400 audit(1793624050.666:565): avc: denied { bind } for pid=7991 comm="syz.1.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.085521][ T29] audit: type=1400 audit(1793624050.666:566): avc: denied { read } for pid=7991 comm="syz.1.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.147481][ T8031] hub 5-0:1.0: USB hub found [ 148.149046][ T8031] hub 5-0:1.0: 8 ports detected [ 148.806095][ T8049] loop2: detected capacity change from 0 to 512 [ 148.820235][ T8049] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1656: inode has both inline data and extents flags [ 148.820270][ T8049] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.820596][ T8049] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1656: couldn't read orphan inode 15 (err -117) [ 148.820638][ T8049] loop2: lost filesystem error report for type 5 error -117 [ 148.834761][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 148.834791][ C0] EXT4-fs (loop2): initial error at time 1793624052: ext4_orphan_get:1404: inode 15 [ 148.834830][ C0] EXT4-fs (loop2): last error at time 1793624052: ext4_orphan_get:1409 [ 148.835416][ T8049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.910491][ T29] audit: type=1400 audit(1793624052.486:567): avc: denied { write } for pid=8048 comm="syz.2.1656" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.948817][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.011584][ T8061] loop0: detected capacity change from 0 to 736 [ 149.160751][ T8063] loop2: detected capacity change from 0 to 128 [ 149.476003][ T8069] loop3: detected capacity change from 0 to 1024 [ 149.477528][ T8069] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.506790][ T8069] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 149.595053][ T8069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.623709][ T29] audit: type=1400 audit(1793624053.176:568): avc: denied { write } for pid=8068 comm="syz.3.1663" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.624990][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.709458][ T29] audit: type=1400 audit(1793624053.286:569): avc: denied { setopt } for pid=8073 comm="syz.1.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.895748][ T8082] loop5: detected capacity change from 0 to 512 [ 149.903643][ T8082] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.1668: inode has both inline data and extents flags [ 149.903755][ T8082] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.903979][ T8082] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1668: couldn't read orphan inode 15 (err -117) [ 149.904013][ T8082] loop5: lost filesystem error report for type 5 error -117 [ 149.904536][ T8082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.908119][ T29] audit: type=1400 audit(1793624053.486:570): avc: denied { write } for pid=8080 comm="syz.5.1668" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.911379][ T8082] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters [ 149.972974][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.110071][ T8096] loop3: detected capacity change from 0 to 512 [ 150.112495][ T8096] EXT4-fs: test_dummy_encryption option not supported [ 150.949849][ T29] audit: type=1400 audit(1793624054.526:571): avc: denied { associate } for pid=8136 comm="syz.1.1689" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.934735][ T8158] syzkaller1: entered promiscuous mode [ 151.934755][ T8158] syzkaller1: entered allmulticast mode [ 153.608226][ T8195] ip_tables: iptables: counters copy to user failed while replacing table [ 153.870907][ T8204] loop3: detected capacity change from 0 to 512 [ 153.880157][ T8204] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1713: inode has both inline data and extents flags [ 153.880194][ T8204] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.880495][ T8204] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1713: couldn't read orphan inode 15 (err -117) [ 153.880559][ T8204] loop3: lost filesystem error report for type 5 error -117 [ 153.881199][ T8204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.887021][ T8204] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1713: bg 0: block 13: invalid block bitmap [ 153.945006][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.999459][ T29] audit: type=1400 audit(1793624057.576:572): avc: denied { write } for pid=8211 comm="syz.3.1716" name="functions" dev="configfs" ino=7105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.000158][ T29] audit: type=1400 audit(1793624057.576:573): avc: denied { write } for pid=8211 comm="syz.3.1716" name="configs" dev="configfs" ino=7106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.000439][ T29] audit: type=1400 audit(1793624057.576:574): avc: denied { write } for pid=8211 comm="syz.3.1716" name="c.1" dev="configfs" ino=19230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.032871][ T29] audit: type=1400 audit(1793624057.576:575): avc: denied { create } for pid=8211 comm="syz.3.1716" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 154.032921][ T29] audit: type=1400 audit(1793624057.576:576): avc: denied { write } for pid=8211 comm="syz.3.1716" name="c.1" dev="configfs" ino=19230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.087882][ T8140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.201139][ T8227] loop2: detected capacity change from 0 to 512 [ 154.205703][ T8227] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1724: inode has both inline data and extents flags [ 154.205741][ T8227] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.206267][ T8227] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1724: couldn't read orphan inode 15 (err -117) [ 154.206303][ T8227] loop2: lost filesystem error report for type 5 error -117 [ 154.207152][ T8227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.294077][ T8227] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1724: bg 0: block 13: invalid block bitmap [ 154.314356][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.182998][ T8272] FAULT_INJECTION: forcing a failure. [ 155.182998][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 155.183126][ T8272] CPU: 0 UID: 0 PID: 8272 Comm: syz.3.1741 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 155.183176][ T8272] Tainted: [W]=WARN [ 155.183183][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 155.183197][ T8272] Call Trace: [ 155.183205][ T8272] [ 155.183215][ T8272] __dump_stack+0x1d/0x30 [ 155.183251][ T8272] dump_stack_lvl+0x95/0xd0 [ 155.183282][ T8272] dump_stack+0x15/0x1b [ 155.183322][ T8272] should_fail_ex+0x259/0x270 [ 155.183358][ T8272] ? __get_vm_area_node+0x125/0x1f0 [ 155.183446][ T8272] should_failslab+0x8c/0xb0 [ 155.183489][ T8272] __kmalloc_cache_node_noprof+0x5f/0x3f0 [ 155.183589][ T8272] ? __get_vm_area_node+0x125/0x1f0 [ 155.183626][ T8272] __get_vm_area_node+0x125/0x1f0 [ 155.183678][ T8272] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 155.183749][ T8272] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 155.183798][ T8272] ? bpf_prog_update_insn_ptrs+0x283/0x2a0 [ 155.183836][ T8272] ? bpf_int_jit_compile+0xd85/0xf20 [ 155.183930][ T8272] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 155.184090][ T8272] __vmalloc_noprof+0xa4/0xf0 [ 155.184194][ T8272] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 155.184253][ T8272] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 155.184299][ T8272] bpf_jit_subprogs+0x635/0x23a0 [ 155.184344][ T8272] bpf_fixup_call_args+0x245/0x530 [ 155.184433][ T8272] bpf_check+0x1784/0x20e0 [ 155.184471][ T8272] bpf_prog_load+0xf52/0x10b0 [ 155.184509][ T8272] __sys_bpf+0xbce/0xc50 [ 155.184540][ T8272] ? do_futex+0x340/0x460 [ 155.184684][ T8272] __x64_sys_bpf+0x69/0x80 [ 155.184710][ T8272] x64_sys_call+0xf26/0x2550 [ 155.184746][ T8272] do_syscall_64+0x112/0x360 [ 155.184782][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.184866][ T8272] RIP: 0033:0x7ff43418fb19 [ 155.184897][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.184924][ T8272] RSP: 002b:00007ff432bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.184953][ T8272] RAX: ffffffffffffffda RBX: 00007ff434415fa0 RCX: 00007ff43418fb19 [ 155.184973][ T8272] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 155.184991][ T8272] RBP: 00007ff434227af8 R08: 0000000000000000 R09: 0000000000000000 [ 155.185009][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.185032][ T8272] R13: 00007ff434416038 R14: 00007ff434415fa0 R15: 00007ffd8cfe2078 [ 155.185052][ T8272] [ 155.185124][ T8272] syz.3.1741: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 155.185284][ T8272] CPU: 0 UID: 0 PID: 8272 Comm: syz.3.1741 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 155.185325][ T8272] Tainted: [W]=WARN [ 155.185335][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 155.185353][ T8272] Call Trace: [ 155.185361][ T8272] [ 155.185370][ T8272] __dump_stack+0x1d/0x30 [ 155.185401][ T8272] dump_stack_lvl+0x95/0xd0 [ 155.185491][ T8272] dump_stack+0x15/0x1b [ 155.185571][ T8272] warn_alloc+0x146/0x1c0 [ 155.185642][ T8272] __vmalloc_node_range_noprof+0x2d2/0x10e0 [ 155.185767][ T8272] ? bpf_prog_update_insn_ptrs+0x283/0x2a0 [ 155.185805][ T8272] ? bpf_int_jit_compile+0xd85/0xf20 [ 155.185851][ T8272] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 155.185977][ T8272] __vmalloc_noprof+0xa4/0xf0 [ 155.186019][ T8272] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 155.186148][ T8272] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 155.186197][ T8272] bpf_jit_subprogs+0x635/0x23a0 [ 155.186244][ T8272] bpf_fixup_call_args+0x245/0x530 [ 155.186283][ T8272] bpf_check+0x1784/0x20e0 [ 155.186389][ T8272] bpf_prog_load+0xf52/0x10b0 [ 155.186430][ T8272] __sys_bpf+0xbce/0xc50 [ 155.186530][ T8272] ? do_futex+0x340/0x460 [ 155.186570][ T8272] __x64_sys_bpf+0x69/0x80 [ 155.186596][ T8272] x64_sys_call+0xf26/0x2550 [ 155.186633][ T8272] do_syscall_64+0x112/0x360 [ 155.186704][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.186734][ T8272] RIP: 0033:0x7ff43418fb19 [ 155.186755][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.186831][ T8272] RSP: 002b:00007ff432bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.186859][ T8272] RAX: ffffffffffffffda RBX: 00007ff434415fa0 RCX: 00007ff43418fb19 [ 155.186929][ T8272] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 155.187010][ T8272] RBP: 00007ff434227af8 R08: 0000000000000000 R09: 0000000000000000 [ 155.187028][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.187046][ T8272] R13: 00007ff434416038 R14: 00007ff434415fa0 R15: 00007ffd8cfe2078 [ 155.187110][ T8272] [ 155.187148][ T8272] Mem-Info: [ 155.187157][ T8272] active_anon:5598 inactive_anon:7192 isolated_anon:0 [ 155.187157][ T8272] active_file:3521 inactive_file:24807 isolated_file:0 [ 155.187157][ T8272] unevictable:0 dirty:1108 writeback:0 [ 155.187157][ T8272] slab_reclaimable:2597 slab_unreclaimable:19771 [ 155.187157][ T8272] mapped:31794 shmem:5967 pagetables:1440 [ 155.187157][ T8272] sec_pagetables:0 bounce:0 [ 155.187157][ T8272] kernel_misc_reclaimable:0 [ 155.187157][ T8272] free:629914 free_pcp:14327 free_cma:0 [ 155.187383][ T8272] Node 0 active_anon:22392kB inactive_anon:28768kB active_file:14084kB inactive_file:99228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127176kB dirty:4432kB writeback:0kB shmem:23868kB kernel_stack:3744kB pagetables:5760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 155.187458][ T8272] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.187570][ T8272] lowmem_reserve[]: 0 2877 7856 7856 [ 155.187661][ T8272] Node 0 DMA32 free:2360772kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946500kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.187749][ T8272] lowmem_reserve[]: 0 0 4978 4978 [ 155.187822][ T8272] Node 0 Normal free:143524kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22392kB inactive_anon:28768kB active_file:14084kB inactive_file:99228kB unevictable:0kB writepending:4432kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:57288kB local_pcp:25164kB free_cma:0kB [ 155.187912][ T8272] lowmem_reserve[]: 0 0 0 0 [ 155.187946][ T8272] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.188302][ T8272] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 5*256kB (M) 3*512kB (M) 4*1024kB (M) 1*2048kB (M) 574*4096kB (U) = 2360772kB [ 155.188510][ T8272] Node 0 Normal: 173*4kB (UME) 115*8kB (UME) 60*16kB (UME) 103*32kB (UME) 238*64kB (UME) 169*128kB (UM) 144*256kB (UM) 53*512kB (UM) 36*1024kB (UM) 0*2048kB 0*4096kB = 143596kB [ 155.192958][ T8272] Node 0 hugepages_total=2397 hugepages_free=2397 hugepages_surp=0 hugepages_size=2048kB [ 155.193088][ T8272] 34291 total pagecache pages [ 155.193110][ T8272] 0 pages in swap cache [ 155.193130][ T8272] Free swap = 124996kB [ 155.193159][ T8272] Total swap = 124996kB [ 155.193181][ T8272] 2097051 pages RAM [ 155.193201][ T8272] 0 pages HighMem/MovableOnly [ 155.193222][ T8272] 82033 pages reserved [ 156.073893][ T8303] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.099017][ T8307] loop0: detected capacity change from 0 to 512 [ 156.122168][ T8307] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1756: inode has both inline data and extents flags [ 156.122206][ T8307] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.122303][ T8307] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1756: couldn't read orphan inode 15 (err -117) [ 156.122338][ T8307] loop0: lost filesystem error report for type 5 error -117 [ 156.122835][ T8307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.149824][ T29] audit: type=1400 audit(1793624059.726:577): avc: denied { write } for pid=8306 comm="syz.0.1756" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.208998][ T29] audit: type=1400 audit(1793624059.786:578): avc: denied { write } for pid=8306 comm="syz.0.1756" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.261365][ T8313] loop0: detected capacity change from 512 to 64 [ 156.262735][ T8307] bio_check_eod: 6157 callbacks suppressed [ 156.262753][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.262753][ T8307] loop0: rw=8402945, sector=88, nr_sectors = 2 limit=64 [ 156.262783][ T8307] Buffer I/O error on dev loop0, logical block 44, lost sync page write [ 156.262827][ T8307] EXT4-fs error (device loop0): ext4_splice_branch:472: inode #18: block 44: comm syz.0.1756: IO error syncing itable block [ 156.262944][ T8307] EXT4-fs error (device loop0): ext4_check_bdev_write_error:239: comm syz.0.1756: Error while async write back metadata [ 156.263041][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.263041][ T8307] loop0: rw=8390659, sector=460, nr_sectors = 2 limit=64 [ 156.263072][ T8307] EXT4-fs (loop0): discard request in group:0 block:229 count:1 failed with -5 [ 156.263179][ T8307] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6678: IO failure [ 156.263466][ T8307] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 18: block 230:freeing already freed block (bit 229); block bitmap corrupt. [ 156.263520][ T8307] EXT4-fs (loop0): pa ffff8881004f0ee0: logic 48, phys. 215, len 16 [ 156.263552][ T8307] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5458: group 0, free 12, pa_free 11 [ 156.263612][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.263612][ T8307] loop0: rw=8402945, sector=88, nr_sectors = 2 limit=64 [ 156.263732][ T8307] Buffer I/O error on dev loop0, logical block 44, lost sync page write [ 156.263752][ T8307] EXT4-fs error (device loop0): ext4_free_data:995: inode #18: block 44: comm syz.0.1756: IO error syncing itable block [ 156.265478][ T8307] EXT4-fs error (device loop0): ext4_check_bdev_write_error:239: comm syz.0.1756: Error while async write back metadata [ 156.268248][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.268248][ T8307] loop0: rw=2049, sector=82, nr_sectors = 6 limit=64 [ 156.268348][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 41) [ 156.268381][ T8307] Buffer I/O error on device loop0, logical block 41 [ 156.268443][ T8307] Buffer I/O error on device loop0, logical block 42 [ 156.268456][ T8307] Buffer I/O error on device loop0, logical block 43 [ 156.268486][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.268486][ T8307] loop0: rw=2049, sector=90, nr_sectors = 2 limit=64 [ 156.268513][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 45) [ 156.268537][ T8307] Buffer I/O error on device loop0, logical block 45 [ 156.268567][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.268567][ T8307] loop0: rw=2049, sector=100, nr_sectors = 6 limit=64 [ 156.268624][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 50) [ 156.268654][ T8307] Buffer I/O error on device loop0, logical block 50 [ 156.268687][ T8307] Buffer I/O error on device loop0, logical block 51 [ 156.268719][ T8307] Buffer I/O error on device loop0, logical block 52 [ 156.268747][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.268747][ T8307] loop0: rw=2049, sector=108, nr_sectors = 2 limit=64 [ 156.268767][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 54) [ 156.268789][ T8307] Buffer I/O error on device loop0, logical block 54 [ 156.268807][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.268807][ T8307] loop0: rw=2049, sector=118, nr_sectors = 6 limit=64 [ 156.268845][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 59) [ 156.268909][ T8307] Buffer I/O error on device loop0, logical block 59 [ 156.268924][ T8307] Buffer I/O error on device loop0, logical block 60 [ 156.268952][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.268952][ T8307] loop0: rw=2049, sector=126, nr_sectors = 2 limit=64 [ 156.268980][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 63) [ 156.269093][ T8307] syz.0.1756: attempt to access beyond end of device [ 156.269093][ T8307] loop0: rw=2049, sector=136, nr_sectors = 6 limit=64 [ 156.269114][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 68) [ 156.269149][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 72) [ 156.269194][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 37) [ 156.269245][ T8307] EXT4-fs warning (device loop0): ext4_end_bio:367: I/O error 10 writing to inode 18 starting block 46) [ 156.319246][ T8320] FAULT_INJECTION: forcing a failure. [ 156.319246][ T8320] name fail_futex, interval 1, probability 0, space 0, times 0 [ 156.319351][ T8320] CPU: 0 UID: 0 PID: 8320 Comm: syz.2.1761 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 156.319543][ T8320] Tainted: [W]=WARN [ 156.319559][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 156.319664][ T8320] Call Trace: [ 156.319694][ T8320] [ 156.319716][ T8320] __dump_stack+0x1d/0x30 [ 156.319811][ T8320] dump_stack_lvl+0x95/0xd0 [ 156.319892][ T8320] dump_stack+0x15/0x1b [ 156.319960][ T8320] should_fail_ex+0x259/0x270 [ 156.320144][ T8320] should_fail+0xb/0x20 [ 156.320317][ T8320] get_futex_key+0x12c/0xc40 [ 156.320421][ T8320] ? should_failslab+0x8c/0xb0 [ 156.320455][ T8320] ? __css_rstat_updated+0xbb/0x280 [ 156.320498][ T8320] futex_wait_setup+0x49/0x3e0 [ 156.320579][ T8320] ? __rb_insert_augmented+0x2ae/0x2c0 [ 156.320714][ T8320] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 156.320843][ T8320] ? hrtimer_active+0xe7/0x110 [ 156.320941][ T8320] __futex_wait+0xb2/0x2a0 [ 156.321048][ T8320] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.321209][ T8320] futex_wait+0x98/0x1c0 [ 156.321336][ T8320] do_futex+0x391/0x460 [ 156.321433][ T8320] __se_sys_futex+0x2f6/0x370 [ 156.321527][ T8320] __x64_sys_futex+0x78/0x90 [ 156.321650][ T8320] x64_sys_call+0x22e2/0x2550 [ 156.321737][ T8320] do_syscall_64+0x112/0x360 [ 156.321844][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.321912][ T8320] RIP: 0033:0x7efcde8cfb19 [ 156.321966][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.322116][ T8320] RSP: 002b:00007efcdd31f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.322184][ T8320] RAX: ffffffffffffffda RBX: 00007efcdeb55fa8 RCX: 00007efcde8cfb19 [ 156.322229][ T8320] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efcdeb55fa8 [ 156.322274][ T8320] RBP: 00007efcdeb55fa0 R08: 0000000000000000 R09: 0000000000000000 [ 156.322325][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.322370][ T8320] R13: 00007efcdeb56038 R14: 00007ffd7ce405b0 R15: 00007ffd7ce40698 [ 156.322459][ T8320] [ 156.951359][ T4561] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.989879][ T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.029650][ T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.601025][ T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.747769][ T38] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.878181][ T38] bridge_slave_1: left allmulticast mode [ 157.878203][ T38] bridge_slave_1: left promiscuous mode [ 157.878328][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.878977][ T38] bridge_slave_0: left allmulticast mode [ 157.878992][ T38] bridge_slave_0: left promiscuous mode [ 157.879100][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.997843][ T8248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.244727][ T8369] ip_tables: iptables: counters copy to user failed while replacing table [ 158.455983][ T8374] ip_tables: iptables: counters copy to user failed while replacing table [ 158.504308][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.508796][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.512701][ T38] bond0 (unregistering): Released all slaves [ 158.651728][ T8351] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.720260][ T38] hsr_slave_0: left promiscuous mode [ 158.723159][ T38] hsr_slave_1: left promiscuous mode [ 158.729448][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.729585][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.750238][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.750260][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.314549][ T38] veth1_macvtap: left promiscuous mode [ 159.314595][ T38] veth0_macvtap: left promiscuous mode [ 159.314669][ T38] veth1_vlan: left promiscuous mode [ 159.314801][ T38] veth0_vlan: left promiscuous mode [ 159.471353][ T29] audit: type=1400 audit(1793624063.036:579): avc: denied { write } for pid=8387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.617062][ T29] audit: type=1400 audit(1793624063.196:580): avc: denied { write } for pid=8414 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.779007][ T38] team0 (unregistering): Port device team_slave_1 removed [ 159.789274][ T38] team0 (unregistering): Port device team_slave_0 removed [ 159.861018][ T3016] 8021q: adding VLAN 0 to HW filter on device eth5 [ 159.922166][ T8422] netlink: 'syz.2.1791': attribute type 4 has an invalid length. [ 159.922191][ T8422] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1791'. [ 159.993006][ T8432] loop5: detected capacity change from 0 to 128 [ 159.995095][ T8432] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 159.995137][ T8432] FAT-fs (loop5): data area starts beyond volume (36 > 11) [ 159.995174][ T8432] FAT-fs (loop5): Can't find a valid FAT filesystem [ 160.481584][ T8441] ip_tables: iptables: counters copy to user failed while replacing table [ 160.623618][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.623679][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.623732][ T8351] bridge_slave_0: entered allmulticast mode [ 160.624228][ T8351] bridge_slave_0: entered promiscuous mode [ 160.625153][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.625187][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.625413][ T8351] bridge_slave_1: entered allmulticast mode [ 160.625854][ T8351] bridge_slave_1: entered promiscuous mode [ 160.669339][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.675706][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.699356][ T8351] team0: Port device team_slave_0 added [ 160.701956][ T8351] team0: Port device team_slave_1 added [ 160.721393][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.721412][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.721491][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.722107][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.722124][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.722162][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.754865][ T8351] hsr_slave_0: entered promiscuous mode [ 160.756102][ T8351] hsr_slave_1: entered promiscuous mode [ 160.916059][ T8454] xt_hashlimit: size too large, truncated to 1048576 [ 161.527433][ T8471] FAULT_INJECTION: forcing a failure. [ 161.527433][ T8471] name failslab, interval 1, probability 0, space 0, times 0 [ 161.527481][ T8471] CPU: 1 UID: 0 PID: 8471 Comm: syz.5.1806 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 161.527609][ T8471] Tainted: [W]=WARN [ 161.527619][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 161.527637][ T8471] Call Trace: [ 161.527646][ T8471] [ 161.527656][ T8471] __dump_stack+0x1d/0x30 [ 161.527691][ T8471] dump_stack_lvl+0x95/0xd0 [ 161.527782][ T8471] dump_stack+0x15/0x1b [ 161.527812][ T8471] should_fail_ex+0x259/0x270 [ 161.527849][ T8471] ? ioctx_alloc+0xe1/0x480 [ 161.527895][ T8471] should_failslab+0x8c/0xb0 [ 161.527947][ T8471] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 161.527988][ T8471] ? ioctx_alloc+0xe1/0x480 [ 161.528034][ T8471] ioctx_alloc+0xe1/0x480 [ 161.528121][ T8471] __se_sys_io_setup+0x6b/0x1b0 [ 161.528209][ T8471] __x64_sys_io_setup+0x31/0x40 [ 161.528266][ T8471] x64_sys_call+0x1a9f/0x2550 [ 161.528304][ T8471] do_syscall_64+0x112/0x360 [ 161.528368][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.528399][ T8471] RIP: 0033:0x7f55c434fb19 [ 161.528420][ T8471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.528447][ T8471] RSP: 002b:00007f55c2da7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 161.528484][ T8471] RAX: ffffffffffffffda RBX: 00007f55c45d5fa0 RCX: 00007f55c434fb19 [ 161.528504][ T8471] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 0000000000000801 [ 161.528523][ T8471] RBP: 00007f55c43e7af8 R08: 0000000000000000 R09: 0000000000000000 [ 161.528540][ T8471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.528571][ T8471] R13: 00007f55c45d6038 R14: 00007f55c45d5fa0 R15: 00007ffca1ade948 [ 161.528597][ T8471] [ 161.616718][ T8477] ip_tables: iptables: counters copy to user failed while replacing table [ 161.737662][ T8396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.739397][ T8351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.762050][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.764007][ T8351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.767546][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.768054][ T8351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.800481][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.813558][ T8351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.818326][ T8351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.923842][ T29] audit: type=1400 audit(1793624065.506:581): avc: denied { write } for pid=8482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.993133][ T29] audit: type=1400 audit(1793624065.576:582): avc: denied { write } for pid=8505 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.998854][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.052373][ T8351] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.102118][ T8351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.102142][ T8351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.162467][ T3016] 8021q: adding VLAN 0 to HW filter on device eth6 [ 162.181359][ T29] audit: type=1400 audit(1793624065.646:583): avc: denied { setopt } for pid=8481 comm="syz.5.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.223731][ T4565] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.223790][ T4565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.254555][ T4565] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.254592][ T4565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.328113][ T8513] xt_hashlimit: size too large, truncated to 1048576 [ 162.778343][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.872455][ T8552] ip_tables: iptables: counters copy to user failed while replacing table [ 162.951318][ T29] audit: type=1400 audit(1793624066.516:584): avc: denied { write } for pid=8524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.079697][ T29] audit: type=1400 audit(1793624066.656:585): avc: denied { write } for pid=8557 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.195240][ T3016] 8021q: adding VLAN 0 to HW filter on device eth7 [ 163.546249][ T29] audit: type=1400 audit(1793624067.126:586): avc: denied { write } for pid=8561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.610697][ T29] audit: type=1400 audit(1793624067.186:587): avc: denied { read write } for pid=8586 comm="syz.5.1825" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.610740][ T29] audit: type=1400 audit(1793624067.186:588): avc: denied { open } for pid=8586 comm="syz.5.1825" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.726313][ T3016] 8021q: adding VLAN 0 to HW filter on device eth8 [ 163.933328][ T8611] hub 5-0:1.0: USB hub found [ 163.933496][ T8611] hub 5-0:1.0: 8 ports detected [ 165.023088][ T8626] ip_tables: iptables: counters copy to user failed while replacing table [ 165.055999][ T8351] veth0_vlan: entered promiscuous mode [ 165.067521][ T8351] veth1_vlan: entered promiscuous mode [ 165.099017][ T8351] veth0_macvtap: entered promiscuous mode [ 165.106450][ T8351] veth1_macvtap: entered promiscuous mode [ 165.141625][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.146463][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.161345][ T72] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.161505][ T72] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.161710][ T72] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.161835][ T72] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.786750][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 165.804133][ T8650] IPv6: sit1: Disabled Multicast RS [ 165.813211][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 165.813401][ T29] audit: type=1400 audit(1793624069.386:590): avc: denied { mounton } for pid=8351 comm="syz-executor" path="/root/syzkaller.wcdGLt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 165.887679][ T29] audit: type=1400 audit(1793624069.466:591): avc: denied { mount } for pid=8351 comm="syz-executor" name="/" dev="gadgetfs" ino=3550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 166.066855][ T8666] ip_tables: iptables: counters copy to user failed while replacing table [ 166.137132][ T29] audit: type=1400 audit(1793624069.716:592): avc: denied { create } for pid=8670 comm="syz.3.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 166.974477][ T29] audit: type=1400 audit(1793624070.556:593): avc: denied { read } for pid=8724 comm="syz.2.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.026723][ T29] audit: type=1400 audit(1793624070.606:594): avc: denied { tracepoint } for pid=8724 comm="syz.2.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 167.052726][ T8725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1869'. [ 167.576350][ T29] audit: type=1400 audit(1793624071.156:595): avc: denied { create } for pid=8758 comm="syz.5.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.579748][ T29] audit: type=1400 audit(1793624071.156:596): avc: denied { create } for pid=8758 comm="syz.5.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.610460][ T29] audit: type=1400 audit(1793624071.186:597): avc: denied { ioctl } for pid=8758 comm="syz.5.1882" path="socket:[21624]" dev="sockfs" ino=21624 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.696968][ T8768] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1885'. [ 167.733130][ T29] audit: type=1400 audit(1793624071.316:598): avc: denied { write } for pid=8770 comm="syz.1.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.408250][ T29] audit: type=1400 audit(1793624071.986:599): avc: denied { create } for pid=8797 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 168.729630][ T8805] syzkaller0: entered promiscuous mode [ 168.729650][ T8805] syzkaller0: entered allmulticast mode [ 169.252972][ T8828] ./dev/sda1: Can't lookup blockdev [ 169.316412][ T8832] xt_hashlimit: size too large, truncated to 1048576 [ 169.320571][ T8834] ip_tables: iptables: counters copy to user failed while replacing table [ 169.390468][ T8837] loop6: detected capacity change from 0 to 1024 [ 169.398815][ T8837] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.404507][ T8837] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 169.415704][ T8837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.473789][ T8351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.625643][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 169.642454][ T8861] loop2: detected capacity change from 0 to 512 [ 169.666497][ T8861] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1917: inode has both inline data and extents flags [ 169.666530][ T8861] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.666645][ T8861] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1917: couldn't read orphan inode 15 (err -117) [ 169.666801][ T8861] loop2: lost filesystem error report for type 5 error -117 [ 169.667453][ T8861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.670713][ T8863] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.1918'. [ 169.765644][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.787680][ T8870] syzkaller0: entered promiscuous mode [ 169.787757][ T8870] syzkaller0: entered allmulticast mode [ 169.808481][ T8873] loop6: detected capacity change from 0 to 1024 [ 169.808935][ T8873] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.810720][ T8873] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 169.846126][ T8873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.893564][ T8351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.960274][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1925'. [ 170.007906][ T8900] loop2: detected capacity change from 0 to 512 [ 170.025191][ T8900] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1933: inode has both inline data and extents flags [ 170.025224][ T8900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 170.025510][ T8900] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1933: couldn't read orphan inode 15 (err -117) [ 170.025541][ T8900] loop2: lost filesystem error report for type 5 error -117 [ 170.026008][ T8900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.120746][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.146267][ T8907] loop3: detected capacity change from 0 to 1024 [ 170.147009][ T8907] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.148787][ T8907] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 170.177555][ T8907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.196673][ T8909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.215428][ T8914] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1937'. [ 170.243438][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.263387][ T8909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.329459][ T8909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.388586][ T8909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.442223][ T8940] ./dev/sda1: Can't lookup blockdev [ 170.491417][ T72] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.491793][ T72] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.502310][ T72] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.502403][ T72] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.652935][ T8946] device-mapper: table: 252:7: crypt: unknown target type [ 170.652953][ T8946] device-mapper: ioctl: error adding target to table [ 170.749451][ T8951] batman_adv: batadv0: Adding interface: ipvlan2 [ 170.749466][ T8951] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.749526][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.749625][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.749656][ T8951] batman_adv: batadv0: Interface activated: ipvlan2 [ 170.878566][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 170.878655][ T29] audit: type=1326 audit(1793624074.456:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.1.1950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2df69efb19 code=0x0 [ 171.159935][ T8956] loop3: detected capacity change from 0 to 1024 [ 171.160335][ T8956] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.161247][ T8956] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 171.185100][ T8956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.188414][ T29] audit: type=1400 audit(1793624074.766:612): avc: denied { write } for pid=8955 comm="syz.3.1951" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.228063][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.261298][ T8960] netlink: 'syz.5.1953': attribute type 1 has an invalid length. [ 171.261329][ T8960] netlink: 'syz.5.1953': attribute type 2 has an invalid length. [ 171.317212][ T8963] device-mapper: table: 252:8: integrity: unknown target type [ 171.317234][ T8963] device-mapper: ioctl: error adding target to table [ 171.350959][ T8977] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1957'. [ 171.707176][ T8994] ./dev/sda1: Can't lookup blockdev [ 171.736139][ T8996] loop1: detected capacity change from 0 to 1024 [ 171.737337][ T8996] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.737889][ T8996] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 171.760792][ T8996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.778416][ T29] audit: type=1400 audit(1793624075.366:613): avc: denied { write } for pid=8995 comm="syz.1.1964" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.803982][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.952319][ T29] audit: type=1400 audit(1793624075.536:614): avc: denied { write } for pid=9002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.995122][ T29] audit: type=1400 audit(1793624075.576:615): avc: denied { write } for pid=9013 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.274236][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1967'. [ 174.291413][ T8965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.345958][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.346116][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.397056][ T9042] loop5: detected capacity change from 0 to 1024 [ 174.491637][ T9042] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.502886][ T9042] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 174.552576][ T9042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.648319][ T29] audit: type=1400 audit(1793624078.226:616): avc: denied { write } for pid=9039 comm="syz.5.1975" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.683686][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.713493][ T9061] xt_hashlimit: size too large, truncated to 1048576 [ 174.810416][ T9066] loop5: detected capacity change from 0 to 512 [ 174.822566][ T9066] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.1984: inode has both inline data and extents flags [ 174.822607][ T9066] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.822824][ T9066] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1984: couldn't read orphan inode 15 (err -117) [ 174.822861][ T9066] loop5: lost filesystem error report for type 5 error -117 [ 174.823365][ T9066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.826969][ T29] audit: type=1400 audit(1793624078.406:617): avc: denied { write } for pid=9065 comm="syz.5.1984" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.904357][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.956881][ T9073] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1986'. [ 174.959315][ T29] audit: type=1400 audit(1793624078.536:618): avc: denied { bind } for pid=9072 comm="syz.5.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.992727][ T29] audit: type=1400 audit(1793624078.566:619): avc: denied { listen } for pid=9072 comm="syz.5.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.992820][ T29] audit: type=1400 audit(1793624078.566:620): avc: denied { read } for pid=9072 comm="syz.5.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 175.019789][ T9078] FAULT_INJECTION: forcing a failure. [ 175.019789][ T9078] name failslab, interval 1, probability 0, space 0, times 0 [ 175.019904][ T9078] CPU: 1 UID: 0 PID: 9078 Comm: syz.6.1989 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 175.020008][ T9078] Tainted: [W]=WARN [ 175.020030][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 175.020082][ T9078] Call Trace: [ 175.020105][ T9078] [ 175.020135][ T9078] __dump_stack+0x1d/0x30 [ 175.020207][ T9078] dump_stack_lvl+0x95/0xd0 [ 175.020291][ T9078] dump_stack+0x15/0x1b [ 175.020365][ T9078] should_fail_ex+0x259/0x270 [ 175.020538][ T9078] ? alloc_workqueue_va+0xfa/0x15d0 [ 175.020646][ T9078] should_failslab+0x8c/0xb0 [ 175.020798][ T9078] __kmalloc_noprof+0xb6/0x4b0 [ 175.020901][ T9078] ? alloc_workqueue_va+0xfa/0x15d0 [ 175.021017][ T9078] alloc_workqueue_va+0xfa/0x15d0 [ 175.021146][ T9078] ? vsnprintf+0x857/0x8c0 [ 175.021228][ T9078] alloc_workqueue_noprof+0x84/0xb0 [ 175.021399][ T9078] dm_create+0x6d3/0x850 [ 175.021477][ T9078] dev_create+0x141/0x290 [ 175.021600][ T9078] dm_ctl_ioctl+0x80b/0xad0 [ 175.021695][ T9078] ? __pfx_dev_create+0x10/0x10 [ 175.021819][ T9078] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 175.021983][ T9078] __se_sys_ioctl+0xce/0x140 [ 175.022152][ T9078] __x64_sys_ioctl+0x43/0x50 [ 175.022242][ T9078] x64_sys_call+0x239d/0x2550 [ 175.022338][ T9078] do_syscall_64+0x112/0x360 [ 175.022453][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.022603][ T9078] RIP: 0033:0x7f59e5e7fb19 [ 175.022716][ T9078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.022787][ T9078] RSP: 002b:00007f59e48d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.022860][ T9078] RAX: ffffffffffffffda RBX: 00007f59e6105fa0 RCX: 00007f59e5e7fb19 [ 175.022910][ T9078] RDX: 0000200000000700 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 175.022954][ T9078] RBP: 00007f59e5f17af8 R08: 0000000000000000 R09: 0000000000000000 [ 175.023035][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.023079][ T9078] R13: 00007f59e6106038 R14: 00007f59e6105fa0 R15: 00007ffec34b6058 [ 175.023145][ T9078] [ 175.032485][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.032791][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.164061][ T9083] FAULT_INJECTION: forcing a failure. [ 175.164061][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 175.164190][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: syz.6.1990 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 175.164290][ T9083] Tainted: [W]=WARN [ 175.164312][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 175.164356][ T9083] Call Trace: [ 175.164379][ T9083] [ 175.164410][ T9083] __dump_stack+0x1d/0x30 [ 175.164501][ T9083] dump_stack_lvl+0x95/0xd0 [ 175.164655][ T9083] dump_stack+0x15/0x1b [ 175.164730][ T9083] should_fail_ex+0x259/0x270 [ 175.164859][ T9083] ? push_stack+0x49/0x1f0 [ 175.164914][ T9083] should_failslab+0x8c/0xb0 [ 175.165024][ T9083] __kmalloc_cache_noprof+0x5d/0x3e0 [ 175.165251][ T9083] ? push_stack+0x49/0x1f0 [ 175.165315][ T9083] push_stack+0x49/0x1f0 [ 175.165373][ T9083] do_check_insn+0x53cb/0x6790 [ 175.165544][ T9083] do_check_common+0x3668/0x3fc0 [ 175.165696][ T9083] do_check_main+0x49/0xb0 [ 175.165829][ T9083] bpf_check+0x1f9a/0x20e0 [ 175.165917][ T9083] bpf_prog_load+0xf52/0x10b0 [ 175.166034][ T9083] __sys_bpf+0xbce/0xc50 [ 175.166111][ T9083] ? do_futex+0x340/0x460 [ 175.166276][ T9083] __x64_sys_bpf+0x69/0x80 [ 175.166340][ T9083] x64_sys_call+0xf26/0x2550 [ 175.166428][ T9083] do_syscall_64+0x112/0x360 [ 175.166547][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.166617][ T9083] RIP: 0033:0x7f59e5e7fb19 [ 175.166673][ T9083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.166753][ T9083] RSP: 002b:00007f59e48d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.166829][ T9083] RAX: ffffffffffffffda RBX: 00007f59e6105fa0 RCX: 00007f59e5e7fb19 [ 175.166882][ T9083] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000005 [ 175.166927][ T9083] RBP: 00007f59e5f17af8 R08: 0000000000000000 R09: 0000000000000000 [ 175.167003][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.167048][ T9083] R13: 00007f59e6106038 R14: 00007f59e6105fa0 R15: 00007ffec34b6058 [ 175.167235][ T9083] [ 175.496139][ T9093] loop3: detected capacity change from 0 to 1024 [ 175.496492][ T9093] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.501737][ T9093] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 175.526333][ T9093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.616216][ T9107] loop2: detected capacity change from 0 to 512 [ 175.635874][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.645638][ T9107] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1995: inode has both inline data and extents flags [ 175.645680][ T9107] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.645816][ T9107] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1995: couldn't read orphan inode 15 (err -117) [ 175.645952][ T9107] loop2: lost filesystem error report for type 5 error -117 [ 175.646695][ T9107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.732749][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.732875][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.793471][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.829213][ T9132] xt_hashlimit: size too large, truncated to 1048576 [ 175.897029][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 175.897046][ T29] audit: type=1400 audit(1793624079.476:626): avc: denied { write } for pid=9141 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.044103][ T29] audit: type=1400 audit(1793624079.626:627): avc: denied { write } for pid=9147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.106523][ T29] audit: type=1400 audit(1793624079.686:628): avc: denied { write } for pid=9165 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.151257][ T9173] loop2: detected capacity change from 0 to 512 [ 176.157009][ T9173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.157111][ T9173] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.207799][ T9176] loop1: detected capacity change from 0 to 512 [ 176.229038][ T9176] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2010: inode has both inline data and extents flags [ 176.229092][ T9176] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.230155][ T9176] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2010: couldn't read orphan inode 15 (err -117) [ 176.230205][ T9176] loop1: lost filesystem error report for type 5 error -117 [ 176.232335][ T9176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.371238][ T29] audit: type=1400 audit(1793624079.916:629): avc: denied { write } for pid=9175 comm="syz.1.2010" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.562492][ T29] audit: type=1400 audit(1793624080.146:630): avc: denied { read } for pid=9182 comm="syz.5.2012" path="socket:[22377]" dev="sockfs" ino=22377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.839211][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.917938][ T9204] netlink: 'syz.5.2019': attribute type 4 has an invalid length. [ 176.918037][ T9204] netlink: 'syz.5.2019': attribute type 10 has an invalid length. [ 176.918050][ T9204] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2019'. [ 176.934160][ T9204] bond_slave_0: mtu greater than device maximum [ 176.980493][ T9208] FAULT_INJECTION: forcing a failure. [ 176.980493][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 176.980580][ T9208] CPU: 0 UID: 0 PID: 9208 Comm: syz.6.2023 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 176.980620][ T9208] Tainted: [W]=WARN [ 176.980630][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 176.980648][ T9208] Call Trace: [ 176.980656][ T9208] [ 176.980666][ T9208] __dump_stack+0x1d/0x30 [ 176.980749][ T9208] dump_stack_lvl+0x95/0xd0 [ 176.980821][ T9208] dump_stack+0x15/0x1b [ 176.980899][ T9208] should_fail_ex+0x259/0x270 [ 176.980937][ T9208] ? get_mountpoint+0x17e/0x380 [ 176.980983][ T9208] should_failslab+0x8c/0xb0 [ 176.981074][ T9208] __kmalloc_cache_noprof+0x5d/0x3e0 [ 176.981116][ T9208] ? get_mountpoint+0x17e/0x380 [ 176.981201][ T9208] get_mountpoint+0x17e/0x380 [ 176.981262][ T9208] attach_recursive_mnt+0x1ea/0x17c0 [ 176.981303][ T9208] ? _raw_spin_unlock+0x9/0x30 [ 176.981346][ T9208] ? get_mountpoint+0x36d/0x380 [ 176.981428][ T9208] do_new_mount+0x650/0x730 [ 176.981499][ T9208] path_mount+0x4ad/0xba0 [ 176.981558][ T9208] __se_sys_mount+0x28c/0x2e0 [ 176.981591][ T9208] __x64_sys_mount+0x67/0x80 [ 176.981621][ T9208] x64_sys_call+0xc3b/0x2550 [ 176.981657][ T9208] do_syscall_64+0x112/0x360 [ 176.981705][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.981736][ T9208] RIP: 0033:0x7f59e5e7fb19 [ 176.981757][ T9208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.981811][ T9208] RSP: 002b:00007f59e48d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.981838][ T9208] RAX: ffffffffffffffda RBX: 00007f59e6105fa0 RCX: 00007f59e5e7fb19 [ 176.981858][ T9208] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 176.981876][ T9208] RBP: 00007f59e5f17af8 R08: 0000000000000000 R09: 0000000000000000 [ 176.981941][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.981988][ T9208] R13: 00007f59e6106038 R14: 00007f59e6105fa0 R15: 00007ffec34b6058 [ 176.982014][ T9208] [ 177.029135][ T9213] ./dev/sda1: Can't lookup blockdev [ 177.070118][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.456989][ T9218] device-mapper: table: 252:9: raid: unknown target type [ 177.457252][ T9218] device-mapper: ioctl: error adding target to table [ 177.587775][ T9222] loop2: detected capacity change from 0 to 512 [ 177.603013][ T9222] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2027: inode has both inline data and extents flags [ 177.603210][ T9222] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.603629][ T9222] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2027: couldn't read orphan inode 15 (err -117) [ 177.603754][ T9222] loop2: lost filesystem error report for type 5 error -117 [ 177.606661][ T9222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.678359][ T29] audit: type=1400 audit(1793624081.256:631): avc: denied { write } for pid=9221 comm="syz.2.2027" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.753936][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.945291][ T9245] 9pnet_virtio: no channels available for device syz [ 177.945509][ T9245] 9pnet_virtio: no channels available for device syz [ 178.009418][ T9248] loop5: detected capacity change from 0 to 512 [ 178.036116][ T9248] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2039: inode has both inline data and extents flags [ 178.036145][ T9248] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.036250][ T9248] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2039: couldn't read orphan inode 15 (err -117) [ 178.036342][ T9248] loop5: lost filesystem error report for type 5 error -117 [ 178.037636][ T9248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.266817][ T29] audit: type=1400 audit(1793624081.846:632): avc: denied { write } for pid=9247 comm="syz.5.2039" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.357033][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.477065][ T9261] ./dev/sda1: Can't lookup blockdev [ 178.725918][ T9266] loop5: detected capacity change from 0 to 128 [ 179.196781][ T9283] netlink: 7164 bytes leftover after parsing attributes in process `syz.6.2050'. [ 179.196820][ T9283] netlink: 7164 bytes leftover after parsing attributes in process `syz.6.2050'. [ 179.196837][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2050'. [ 179.301095][ T9287] loop3: detected capacity change from 0 to 512 [ 179.310797][ T9287] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.2052: inode has both inline data and extents flags [ 179.310835][ T9287] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.310975][ T9287] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2052: couldn't read orphan inode 15 (err -117) [ 179.311079][ T9287] loop3: lost filesystem error report for type 5 error -117 [ 179.311378][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 179.311440][ C0] EXT4-fs (loop3): initial error at time 1793624082: ext4_orphan_get:1404: inode 15 [ 179.311537][ C0] EXT4-fs (loop3): last error at time 1793624082: ext4_orphan_get:1409 [ 179.314746][ T9287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.351778][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.371320][ T29] audit: type=1400 audit(1793624082.896:633): avc: denied { write } for pid=9286 comm="syz.3.2052" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.111915][ T29] audit: type=1400 audit(1793624083.696:634): avc: denied { setopt } for pid=9304 comm="syz.6.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.218038][ T9320] loop6: detected capacity change from 0 to 512 [ 180.247313][ T9320] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2064: inode has both inline data and extents flags [ 180.247346][ T9320] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.248786][ T9320] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2064: couldn't read orphan inode 15 (err -117) [ 180.248899][ T9320] loop6: lost filesystem error report for type 5 error -117 [ 180.290364][ T9320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.311544][ T29] audit: type=1400 audit(1793624083.896:635): avc: denied { write } for pid=9319 comm="syz.6.2064" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.343845][ T9331] ./dev/sda1: Can't lookup blockdev [ 180.354325][ T8351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.436087][ T9346] netlink: 'syz.1.2073': attribute type 1 has an invalid length. [ 180.437691][ T9348] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 180.445254][ T9346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.466197][ T9346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.469389][ T9346] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 180.470539][ T9346] bond1: (slave gre1): Error -95 calling set_mac_address [ 180.566771][ T9358] loop1: detected capacity change from 0 to 512 [ 180.570477][ T9358] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2078: inode has both inline data and extents flags [ 180.570590][ T9358] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.570853][ T9358] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2078: couldn't read orphan inode 15 (err -117) [ 180.570940][ T9358] loop1: lost filesystem error report for type 5 error -117 [ 180.572426][ T9358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.815480][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.199796][ T9367] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 181.199821][ T9367] netlink: 'syz.1.2079': attribute type 2 has an invalid length. [ 181.226565][ T9369] xt_hashlimit: size too large, truncated to 1048576 [ 181.306197][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 181.307803][ T9378] IPv6: sit1: Disabled Multicast RS [ 181.343769][ T9380] FAULT_INJECTION: forcing a failure. [ 181.343769][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 181.343827][ T9380] CPU: 1 UID: 0 PID: 9380 Comm: syz.1.2086 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 181.343905][ T9380] Tainted: [W]=WARN [ 181.343914][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 181.343943][ T9380] Call Trace: [ 181.343952][ T9380] [ 181.343963][ T9380] __dump_stack+0x1d/0x30 [ 181.343999][ T9380] dump_stack_lvl+0x95/0xd0 [ 181.344030][ T9380] dump_stack+0x15/0x1b [ 181.344113][ T9380] should_fail_ex+0x259/0x270 [ 181.344208][ T9380] ? security_sb_alloc+0x48/0x100 [ 181.344232][ T9380] should_failslab+0x8c/0xb0 [ 181.344351][ T9380] __kmalloc_noprof+0xb6/0x4b0 [ 181.344387][ T9380] ? should_failslab+0x8c/0xb0 [ 181.344469][ T9380] ? security_sb_alloc+0x48/0x100 [ 181.344501][ T9380] security_sb_alloc+0x48/0x100 [ 181.344593][ T9380] sget_fc+0x5bf/0x1030 [ 181.344628][ T9380] ? __pfx_set_anon_super_fc+0x10/0x10 [ 181.344741][ T9380] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 181.344784][ T9380] ? mqueue_init_fs_context+0x38/0x2c0 [ 181.344879][ T9380] ? __pfx_mqueue_fill_super+0x10/0x10 [ 181.344913][ T9380] get_tree_nodev+0x2a/0x100 [ 181.344954][ T9380] mqueue_get_tree+0x5d/0x80 [ 181.344992][ T9380] vfs_get_tree+0x57/0x1d0 [ 181.345094][ T9380] fc_mount_longterm+0x18/0xb0 [ 181.345127][ T9380] mq_init_ns+0x2db/0x370 [ 181.345164][ T9380] copy_ipcs+0x26d/0x460 [ 181.345197][ T9380] create_new_namespaces+0x121/0x420 [ 181.345230][ T9380] unshare_nsproxy_namespaces+0x115/0x150 [ 181.345260][ T9380] ksys_unshare+0x3a3/0x690 [ 181.345327][ T9380] __x64_sys_unshare+0x1f/0x30 [ 181.345448][ T9380] x64_sys_call+0x1e33/0x2550 [ 181.345483][ T9380] do_syscall_64+0x112/0x360 [ 181.345517][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.345566][ T9380] RIP: 0033:0x7f2df69efb19 [ 181.345644][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.345668][ T9380] RSP: 002b:00007f2df5447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 181.345688][ T9380] RAX: ffffffffffffffda RBX: 00007f2df6c75fa0 RCX: 00007f2df69efb19 [ 181.345762][ T9380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 181.345775][ T9380] RBP: 00007f2df6a87af8 R08: 0000000000000000 R09: 0000000000000000 [ 181.345792][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.345810][ T9380] R13: 00007f2df6c76038 R14: 00007f2df6c75fa0 R15: 00007ffebdc94c18 [ 181.345859][ T9380] [ 181.561460][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 181.581874][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 181.581927][ T29] audit: type=1400 audit(1793624085.126:638): avc: denied { create } for pid=9383 comm="syz.3.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 181.582009][ T29] audit: type=1400 audit(1793624085.126:639): avc: denied { write } for pid=9383 comm="syz.3.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 181.864434][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 181.870589][ T9403] IPv6: sit3: Disabled Multicast RS [ 181.943071][ T9409] Cannot find add_set index 0 as target [ 182.603297][ T9429] loop6: detected capacity change from 0 to 512 [ 182.607214][ T9429] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2104: inode has both inline data and extents flags [ 182.607249][ T9429] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.607363][ T9429] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2104: couldn't read orphan inode 15 (err -117) [ 182.607397][ T9429] loop6: lost filesystem error report for type 5 error -117 [ 182.608467][ T9429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.626365][ T29] audit: type=1400 audit(1793624086.196:640): avc: denied { write } for pid=9428 comm="syz.6.2104" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.704853][ T8351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.872003][ T9454] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 182.898872][ T9456] loop1: detected capacity change from 0 to 512 [ 182.906952][ T9456] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2115: inode has both inline data and extents flags [ 182.907039][ T9456] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.907823][ T9456] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2115: couldn't read orphan inode 15 (err -117) [ 182.907860][ T9456] loop1: lost filesystem error report for type 5 error -117 [ 182.908226][ T9456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.916005][ T29] audit: type=1400 audit(1793624086.496:641): avc: denied { write } for pid=9455 comm="syz.1.2115" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.948867][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.898445][ T9498] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 184.898445][ T9498] program syz.1.2129 not setting count and/or reply_len properly [ 184.927621][ T29] audit: type=1400 audit(1793624088.506:642): avc: denied { setopt } for pid=9499 comm="syz.3.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.325441][ T9423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.790423][ T9525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 185.818083][ T9529] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 185.818083][ T9529] program syz.3.2143 not setting count and/or reply_len properly [ 185.896724][ T9543] loop1: detected capacity change from 0 to 512 [ 185.904671][ T9543] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2148: inode has both inline data and extents flags [ 185.904804][ T9543] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.904917][ T9543] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2148: couldn't read orphan inode 15 (err -117) [ 185.904953][ T9543] loop1: lost filesystem error report for type 5 error -117 [ 185.905529][ T9543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.907441][ T29] audit: type=1400 audit(1793624089.486:643): avc: denied { write } for pid=9542 comm="syz.1.2148" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.990515][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.081028][ T9560] ip_tables: iptables: counters copy to user failed while replacing table [ 186.198690][ T9567] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 186.198690][ T9567] program syz.3.2157 not setting count and/or reply_len properly [ 186.231606][ T29] audit: type=1400 audit(1793624089.806:644): avc: denied { name_bind } for pid=9568 comm="syz.3.2158" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 186.262648][ T9571] loop5: detected capacity change from 0 to 512 [ 186.275653][ T9571] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2159: inode has both inline data and extents flags [ 186.276781][ T9571] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.276901][ T9571] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2159: couldn't read orphan inode 15 (err -117) [ 186.276929][ T9571] loop5: lost filesystem error report for type 5 error -117 [ 186.277465][ T9571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.280505][ T29] audit: type=1400 audit(1793624089.856:645): avc: denied { write } for pid=9570 comm="syz.5.2159" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.325198][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.406081][ T29] audit: type=1400 audit(1793624089.986:646): avc: denied { append } for pid=9581 comm="syz.5.2164" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.406797][ T9582] program syz.5.2164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.450840][ T29] audit: type=1400 audit(1793624090.026:647): avc: denied { write } for pid=9583 comm="syz.5.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.484041][ T9589] ip_tables: iptables: counters copy to user failed while replacing table [ 186.609429][ T9594] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 186.609429][ T9594] program syz.6.2169 not setting count and/or reply_len properly [ 187.009444][ T9606] xt_hashlimit: size too large, truncated to 1048576 [ 187.496765][ T9626] FAULT_INJECTION: forcing a failure. [ 187.496765][ T9626] name failslab, interval 1, probability 0, space 0, times 0 [ 187.496849][ T9626] CPU: 1 UID: 0 PID: 9626 Comm: syz.6.2183 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 187.496895][ T9626] Tainted: [W]=WARN [ 187.496902][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 187.496915][ T9626] Call Trace: [ 187.496979][ T9626] [ 187.496987][ T9626] __dump_stack+0x1d/0x30 [ 187.497012][ T9626] dump_stack_lvl+0x95/0xd0 [ 187.497033][ T9626] dump_stack+0x15/0x1b [ 187.497061][ T9626] should_fail_ex+0x259/0x270 [ 187.497088][ T9626] ? ioctx_alloc+0xe1/0x480 [ 187.497119][ T9626] should_failslab+0x8c/0xb0 [ 187.497214][ T9626] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 187.497290][ T9626] ? ioctx_alloc+0xe1/0x480 [ 187.497322][ T9626] ioctx_alloc+0xe1/0x480 [ 187.497414][ T9626] __se_sys_io_setup+0x6b/0x1b0 [ 187.497444][ T9626] __x64_sys_io_setup+0x31/0x40 [ 187.497475][ T9626] x64_sys_call+0x1a9f/0x2550 [ 187.497559][ T9626] do_syscall_64+0x112/0x360 [ 187.497735][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.497756][ T9626] RIP: 0033:0x7f59e5e7fb19 [ 187.497770][ T9626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.497788][ T9626] RSP: 002b:00007f59e48d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 187.497807][ T9626] RAX: ffffffffffffffda RBX: 00007f59e6105fa0 RCX: 00007f59e5e7fb19 [ 187.497840][ T9626] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 0000000000000801 [ 187.497852][ T9626] RBP: 00007f59e5f17af8 R08: 0000000000000000 R09: 0000000000000000 [ 187.497864][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.497875][ T9626] R13: 00007f59e6106038 R14: 00007f59e6105fa0 R15: 00007ffec34b6058 [ 187.497925][ T9626] [ 187.711012][ T9638] FAULT_INJECTION: forcing a failure. [ 187.711012][ T9638] name failslab, interval 1, probability 0, space 0, times 0 [ 187.711051][ T9638] CPU: 1 UID: 0 PID: 9638 Comm: syz.6.2189 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 187.711092][ T9638] Tainted: [W]=WARN [ 187.711098][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 187.711249][ T9638] Call Trace: [ 187.711257][ T9638] [ 187.711266][ T9638] __dump_stack+0x1d/0x30 [ 187.711300][ T9638] dump_stack_lvl+0x95/0xd0 [ 187.711374][ T9638] dump_stack+0x15/0x1b [ 187.711400][ T9638] should_fail_ex+0x259/0x270 [ 187.711436][ T9638] ? sock_kmalloc+0x85/0xc0 [ 187.711499][ T9638] should_failslab+0x8c/0xb0 [ 187.711529][ T9638] __kmalloc_noprof+0xb6/0x4b0 [ 187.711601][ T9638] ? mutex_unlock+0x4e/0x90 [ 187.711623][ T9638] ? sock_kmalloc+0x85/0xc0 [ 187.711644][ T9638] sock_kmalloc+0x85/0xc0 [ 187.711665][ T9638] __tcp_md5_do_add+0xef/0x270 [ 187.711759][ T9638] tcp_md5_do_add+0x73/0x1a0 [ 187.711818][ T9638] tcp_v6_parse_md5_keys+0x4a3/0x4c0 [ 187.711848][ T9638] do_tcp_setsockopt+0x1049/0x16c0 [ 187.711879][ T9638] ? selinux_socket_setsockopt+0x1ea/0x220 [ 187.711911][ T9638] tcp_setsockopt+0x51/0xb0 [ 187.711951][ T9638] sock_common_setsockopt+0x69/0x80 [ 187.711979][ T9638] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 187.712011][ T9638] __sys_setsockopt+0x184/0x200 [ 187.712044][ T9638] __x64_sys_setsockopt+0x64/0x80 [ 187.712077][ T9638] x64_sys_call+0x248f/0x2550 [ 187.712151][ T9638] do_syscall_64+0x112/0x360 [ 187.712188][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.712209][ T9638] RIP: 0033:0x7f59e5e7fb19 [ 187.712227][ T9638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.712244][ T9638] RSP: 002b:00007f59e48d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.712263][ T9638] RAX: ffffffffffffffda RBX: 00007f59e6105fa0 RCX: 00007f59e5e7fb19 [ 187.712277][ T9638] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 187.712288][ T9638] RBP: 00007f59e5f17af8 R08: 00000000000000d8 R09: 0000000000000000 [ 187.712301][ T9638] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 187.712367][ T9638] R13: 00007f59e6106038 R14: 00007f59e6105fa0 R15: 00007ffec34b6058 [ 187.712386][ T9638] [ 188.882881][ T9537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.884613][ T9624] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 189.192595][ T9683] loop6: detected capacity change from 0 to 128 [ 189.206725][ T9683] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 189.206761][ T9683] FAT-fs (loop6): data area starts beyond volume (36 > 11) [ 189.206797][ T9683] FAT-fs (loop6): Can't find a valid FAT filesystem [ 189.465085][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2214'. [ 189.690726][ T9717] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 189.690726][ T9717] program syz.2.2221 not setting count and/or reply_len properly [ 189.845141][ T9727] FAULT_INJECTION: forcing a failure. [ 189.845141][ T9727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.845180][ T9727] CPU: 1 UID: 0 PID: 9727 Comm: syz.2.2225 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 189.845222][ T9727] Tainted: [W]=WARN [ 189.845232][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 189.845249][ T9727] Call Trace: [ 189.845329][ T9727] [ 189.845340][ T9727] __dump_stack+0x1d/0x30 [ 189.845373][ T9727] dump_stack_lvl+0x95/0xd0 [ 189.845444][ T9727] dump_stack+0x15/0x1b [ 189.845473][ T9727] should_fail_ex+0x259/0x270 [ 189.845520][ T9727] should_fail+0xb/0x20 [ 189.845570][ T9727] should_fail_usercopy+0x1a/0x20 [ 189.845608][ T9727] _copy_from_user+0x1c/0xb0 [ 189.845699][ T9727] copy_from_bpfptr+0x5c/0x90 [ 189.845823][ T9727] bpf_prog_load+0x8a0/0x10b0 [ 189.845858][ T9727] __sys_bpf+0xbce/0xc50 [ 189.845880][ T9727] ? do_futex+0x340/0x460 [ 189.845912][ T9727] __x64_sys_bpf+0x69/0x80 [ 189.846026][ T9727] x64_sys_call+0xf26/0x2550 [ 189.846062][ T9727] do_syscall_64+0x112/0x360 [ 189.846108][ T9727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.846145][ T9727] RIP: 0033:0x7efcde8cfb19 [ 189.846167][ T9727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.846204][ T9727] RSP: 002b:00007efcdd31f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.846227][ T9727] RAX: ffffffffffffffda RBX: 00007efcdeb55fa0 RCX: 00007efcde8cfb19 [ 189.846242][ T9727] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 189.846290][ T9727] RBP: 00007efcde967af8 R08: 0000000000000000 R09: 0000000000000000 [ 189.846307][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.846324][ T9727] R13: 00007efcdeb56038 R14: 00007efcdeb55fa0 R15: 00007ffd7ce40698 [ 189.846416][ T9727] [ 189.913479][ T9731] loop3: detected capacity change from 0 to 512 [ 189.964809][ T9731] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.2229: inode has both inline data and extents flags [ 189.964858][ T9731] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.974479][ T9731] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2229: couldn't read orphan inode 15 (err -117) [ 189.974518][ T9731] loop3: lost filesystem error report for type 5 error -117 [ 189.981003][ T9731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.015233][ T29] audit: type=1400 audit(1793624093.566:648): avc: denied { write } for pid=9730 comm="syz.3.2229" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.246876][ T9744] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 190.246876][ T9744] program syz.2.2234 not setting count and/or reply_len properly [ 190.388171][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.448606][ T9763] loop1: detected capacity change from 0 to 128 [ 190.451320][ T9763] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 190.451353][ T9763] FAT-fs (loop1): data area starts beyond volume (36 > 11) [ 190.451408][ T9763] FAT-fs (loop1): Can't find a valid FAT filesystem [ 190.593515][ T9772] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 190.593515][ T9772] program syz.3.2246 not setting count and/or reply_len properly [ 190.633000][ T9767] loop5: detected capacity change from 0 to 4096 [ 190.664020][ T9767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.862011][ T9781] loop1: detected capacity change from 0 to 512 [ 190.892702][ T9781] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2250: inode has both inline data and extents flags [ 190.892827][ T9781] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.893099][ T9781] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2250: couldn't read orphan inode 15 (err -117) [ 190.893229][ T9781] loop1: lost filesystem error report for type 5 error -117 [ 190.894358][ T9781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.523598][ T29] audit: type=1400 audit(1793624095.046:649): avc: denied { write } for pid=9766 comm="syz.5.2245" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.535453][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.744382][ T29] audit: type=1400 audit(1793624095.316:650): avc: denied { write } for pid=9780 comm="syz.1.2250" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.901227][ T29] audit: type=1400 audit(1793624095.426:651): avc: denied { write } for pid=9790 comm="syz.6.2253" name="functions" dev="configfs" ino=7105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.901281][ T29] audit: type=1400 audit(1793624095.426:652): avc: denied { write } for pid=9790 comm="syz.6.2253" name="functions" dev="configfs" ino=7105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.901391][ T29] audit: type=1400 audit(1793624095.426:653): avc: denied { remove_name } for pid=9790 comm="syz.6.2253" name="uvc.0" dev="configfs" ino=24931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.901420][ T29] audit: type=1400 audit(1793624095.426:654): avc: denied { rmdir } for pid=9790 comm="syz.6.2253" name="uvc.0" dev="configfs" ino=24931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.142932][ T9801] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 192.142932][ T9801] program syz.3.2257 not setting count and/or reply_len properly [ 192.207212][ T9805] loop3: detected capacity change from 0 to 128 [ 192.230253][ T9805] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 192.230306][ T9805] FAT-fs (loop3): data area starts beyond volume (36 > 11) [ 192.230322][ T9805] FAT-fs (loop3): Can't find a valid FAT filesystem [ 192.462284][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.594340][ T29] audit: type=1400 audit(1793624096.146:655): avc: denied { getopt } for pid=9811 comm="syz.3.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.740557][ T9837] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 192.740557][ T9837] program syz.6.2268 not setting count and/or reply_len properly [ 192.900553][ T9842] loop6: detected capacity change from 0 to 128 [ 192.909955][ T9842] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 192.910028][ T9842] FAT-fs (loop6): data area starts beyond volume (36 > 11) [ 192.910082][ T9842] FAT-fs (loop6): Can't find a valid FAT filesystem [ 192.967531][ T9845] loop5: detected capacity change from 0 to 512 [ 193.014523][ T9845] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2269: inode has both inline data and extents flags [ 193.014558][ T9845] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.014664][ T9845] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2269: couldn't read orphan inode 15 (err -117) [ 193.014689][ T9845] loop5: lost filesystem error report for type 5 error -117 [ 193.015540][ T9845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.045383][ T29] audit: type=1400 audit(1793624096.596:656): avc: denied { write } for pid=9843 comm="syz.5.2269" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.146949][ T29] audit: type=1400 audit(1793624096.726:657): avc: denied { write } for pid=9843 comm="syz.5.2269" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.929896][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.959975][ T9874] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 193.959975][ T9874] program syz.6.2282 not setting count and/or reply_len properly [ 194.008790][ T9878] loop6: detected capacity change from 0 to 128 [ 194.011744][ T9878] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 194.011845][ T9878] FAT-fs (loop6): data area starts beyond volume (36 > 11) [ 194.011865][ T9878] FAT-fs (loop6): Can't find a valid FAT filesystem [ 194.667846][ T9898] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.713246][ T9904] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 194.713246][ T9904] program syz.3.2294 not setting count and/or reply_len properly [ 194.922101][ T9923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.072151][ T9949] loop2: detected capacity change from 0 to 128 [ 195.079339][ T9949] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 195.079368][ T9949] FAT-fs (loop2): data area starts beyond volume (36 > 11) [ 195.079383][ T9949] FAT-fs (loop2): Can't find a valid FAT filesystem [ 195.159141][ T9954] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.618638][ T9978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.902992][T10010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 196.159256][T10042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.041840][T10073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.096944][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 197.096963][ T29] audit: type=1400 audit(1793624100.676:662): avc: denied { open } for pid=10070 comm="syz.1.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 197.096997][ T29] audit: type=1400 audit(1793624100.676:663): avc: denied { kernel } for pid=10070 comm="syz.1.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 197.200323][ T29] audit: type=1400 audit(1793624100.776:664): avc: denied { write } for pid=10083 comm="syz.6.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 197.222868][T10086] loop3: detected capacity change from 0 to 128 [ 197.238023][T10086] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 197.238099][T10086] FAT-fs (loop3): data area starts beyond volume (36 > 11) [ 197.238121][T10086] FAT-fs (loop3): Can't find a valid FAT filesystem [ 197.332708][ T29] audit: type=1400 audit(1793624100.916:665): avc: denied { cpu } for pid=10089 comm="syz.1.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 197.826790][T10114] loop5: detected capacity change from 0 to 512 [ 197.829018][T10114] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2379: inode has both inline data and extents flags [ 197.829056][T10114] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.829173][T10114] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2379: couldn't read orphan inode 15 (err -117) [ 197.829200][T10114] loop5: lost filesystem error report for type 5 error -117 [ 197.829682][T10114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.894343][ T29] audit: type=1400 audit(1793624101.476:666): avc: denied { write } for pid=10113 comm="syz.5.2379" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.947076][ T29] audit: type=1400 audit(1793624101.526:667): avc: denied { write } for pid=10113 comm="syz.5.2379" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.139537][ T29] audit: type=1400 audit(1793624101.716:668): avc: denied { write } for pid=4046 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.139973][ T29] audit: type=1400 audit(1793624101.716:669): avc: denied { write } for pid=4046 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.192374][ T4046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.329918][ T29] audit: type=1400 audit(1793624101.906:670): avc: denied { ioctl } for pid=10136 comm="syz.5.2387" path="socket:[25798]" dev="sockfs" ino=25798 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.330029][T10137] syzkaller0: entered promiscuous mode [ 198.330052][T10137] syzkaller0: entered allmulticast mode [ 198.440453][T10152] loop5: detected capacity change from 0 to 128 [ 198.441091][T10152] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 198.441121][T10152] FAT-fs (loop5): data area starts beyond volume (36 > 11) [ 198.441476][T10152] FAT-fs (loop5): Can't find a valid FAT filesystem [ 199.223597][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2405'. [ 199.827133][T10185] ================================================================== [ 199.827164][T10185] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 199.827190][T10185] [ 199.827196][T10185] read-write to 0xffff88811c2d7a64 of 4 bytes by task 10188 on cpu 0: [ 199.827216][T10185] fifo_open+0x89/0x5b0 [ 199.827234][T10185] do_dentry_open+0x496/0xa40 [ 199.827259][T10185] vfs_open_consume+0x46/0x1f0 [ 199.827284][T10185] path_openat+0xc16/0x11c0 [ 199.827316][T10185] do_file_open+0x16c/0x290 [ 199.827346][T10185] do_sys_openat2+0xa1/0x140 [ 199.827372][T10185] __x64_sys_openat+0xf2/0x120 [ 199.827424][T10185] x64_sys_call+0x1f72/0x2550 [ 199.827457][T10185] do_syscall_64+0x112/0x360 [ 199.827500][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.827521][T10185] [ 199.827526][T10185] read to 0xffff88811c2d7a64 of 4 bytes by task 10185 on cpu 1: [ 199.827542][T10185] wait_for_partner+0xd9/0x210 [ 199.827560][T10185] fifo_open+0x443/0x5b0 [ 199.827578][T10185] do_dentry_open+0x496/0xa40 [ 199.827603][T10185] vfs_open_consume+0x46/0x1f0 [ 199.827634][T10185] path_openat+0xc16/0x11c0 [ 199.827674][T10185] do_file_open+0x16c/0x290 [ 199.827705][T10185] do_sys_openat2+0xa1/0x140 [ 199.827737][T10185] __se_sys_openat2+0x193/0x1f0 [ 199.827771][T10185] __x64_sys_openat2+0x55/0x70 [ 199.827811][T10185] x64_sys_call+0x196c/0x2550 [ 199.827836][T10185] do_syscall_64+0x112/0x360 [ 199.827864][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.827889][T10185] [ 199.827895][T10185] value changed: 0x00000001 -> 0x00000002 [ 199.827910][T10185] [ 199.827915][T10185] Reported by Kernel Concurrency Sanitizer on: [ 199.827936][T10185] CPU: 1 UID: 0 PID: 10185 Comm: syz.3.2407 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 199.827978][T10185] Tainted: [W]=WARN [ 199.827987][T10185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 199.828006][T10185] ================================================================== [ 200.555559][T10104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512