last executing test programs: 2.403511409s ago: executing program 3 (id=1287): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="ca0e808b93", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 2.310516413s ago: executing program 3 (id=1292): inotify_init1(0x800) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.309642993s ago: executing program 2 (id=1293): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 2.262364666s ago: executing program 2 (id=1294): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, 0x0, 0x0) listen(r0, 0xda8d) accept$inet(r0, 0x0, 0x0) 2.262251695s ago: executing program 3 (id=1295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="2e9b7d0007e03dd65193dfb6c575963f86ddaf62a6de000000000368a60a0165d83d00009d90491ceaebfd26d4eef23248000000f8", 0x35}, {&(0x7f0000000200)="73ec500447db", 0x6}, {&(0x7f0000000940)="1082fdf637f3139d7b39e2d1d9fe45b502541e36843b60d08736795646348926f76577897efa579606be14710e09b20333ca7b4d3a573ac211ed1a1d792c888776a57239dcbbbce68612181ca43e2e7f6fdab10d5d36e84a3b55ff9f3c22a973e062e08cd4778a1b6a7cff027c57517dddbe74ac54fdfb7b836511f3901e745abd613b6bca2e6a2d8c382802098975", 0x8f}], 0x3) 2.189702129s ago: executing program 3 (id=1298): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ppoll(&(0x7f0000000180)=[{r0, 0x8110}], 0x1, 0x0, 0x0, 0x0) 1.759644799s ago: executing program 1 (id=1307): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x2, 0xcd}], 'M6U'}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x5f, 0x2e, 0x61]}}, &(0x7f0000001b00)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28) 1.630721995s ago: executing program 1 (id=1309): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000200)=0xc) 1.505465881s ago: executing program 1 (id=1310): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.420277205s ago: executing program 2 (id=1315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0xca, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "f722e79b271ec7e0d765444ab64fb31f"}]}}}}}}}, 0x0) 1.403965915s ago: executing program 0 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a38"], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2400c014) 1.338372068s ago: executing program 2 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.337987978s ago: executing program 3 (id=1318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a"], 0x64}}, 0x4800) 1.287441751s ago: executing program 0 (id=1320): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000200)="423432440982c7b138a4c0885d1edc86778894db2a", 0x15}, {&(0x7f00000005c0)="cc3dc7c3451cf0f82f5a81d58abd9930e211c4be92a7f50738ffe95b2e712a24d44d8ad367a1ec34c60b85b43456ad4d5c8d71ae85faee977ef72adeed7dda5cc376241607e893ff70213cec84a468fe70c1a35c9df97fa6d7c75826634ee8e3d9f8122c576cb9a46938c43a2f3777048a467173b526218f22436aace6467cf49cf69bc8c9bcd314beb93a9070cb2a7d50736c0df7faf0f2f402bcb97ca3f4042664a4187832ca49c0eda4aeff428306d5b453536e937cd32154d03fc675d8e91b6e40d3f6b7331cc18cc1fb89efe5", 0xcf}, {&(0x7f0000000280)="a0803bd3178d5b534a3aa2dde198c0c9a57dddc379c6f9d571e5396929131ab1d3535b5583074318d07e433a57df9ab8d399fcc1e52f", 0x36}, {&(0x7f0000001ac0)="0d40cdc483405c7c0c1f1b5bd700cc63e4443fda2b8c2ec63923c9f07d37a93ff046fe743ae6df1be1e44fe62ba2edfabb55d171beeb2399e7e84f25ad3a03dc41d9622f3cbc76cdd651ba1feacf784f6ea353563d6c388d45d4b31e9e713e3adc4198723b47c341f84b690fd99d714ad551e292a7e4b758b5bfd49da78d5a7029c73d5f1840e5f26dcb2e406c1eb3f9e54d476cd1bbe34a5a5b88bdb88f3c0d867ce20c34fd2b8857d299a391f23e6f508d8c4eeb68fb1c84886f101e5c80e5939ea9bee5bd9cac4e1346f8ebe9578e07778602ec6effbcfcfa29f07a7652666b371e5ccf5746f4c2e010cfa77793dd13a73eb0a51f1b38e292bbd1d1a4771c4f236bde22ebc12788ad6db920fe2fbaff4c7531b22c426ce0a3ec52c989c21fa4df234778ebb63109f009c186986b05fae1d5c451b2c3f4a2263d652860d531043d1c82aa63acabf706c4d59d35cfde06c17132fb7a833912f241b24f44514eda2c3d84394f31f620edcaba569e5a9a684d6bbd4788d297a99a389dd5e522257f2bff30ee355666ddb0ae6c1b9fb8385da7a29a228f64fcf9555f2eb18e5ba07e89b545dd935e3fe754db2e9580e76370d465c5e62d1058e0c48c3d0ccab7789f880490d932da6fd2aba9fe3261c62ccbd91b9e5adb5864760ae65bb6a523e8fed2a1035360da0db3f6ea1be47d330be30f2b238333fb5f6df4aa598f951c41dc562a44865a736ea6750f8ef32675b6e3c5fc55fa912b941d40e18a7bacbf2b44ee324889e9ccc3a7b3bb7aad1cd4fdc182c0bb074291340fcc69cfbb5c0a503f640be8de0286164ff7a945a9413153753e94fc1c633645a8b8ebf48e93e2dd1ed486f47257f690592e4e19b31ba835931a06681067156a1aeadd47f200dd4be066c2a6a426a3b37cf8806340c2dfde7b519dbe1b11ce3d4f2cd65ca71f7bf912c0d6df56985d3a4db47449fe29dec944d1dff3b21521a4149a727aa0d4bac4a40947a00da96e08a449d465da7e158cca821bac75918a902fa648518b8dd1eff4093833de40cec52fa44b537a6a9e0835463f73be37aa35693bb4a2ab218bb988c61b6020afbc533106983c4cce046dcf68a516ad8176f8f615862dea730b08558d83e112963d7aa76338cd73d33bc7a2caf11eb689a5c9bdd0a335f0ff834034dfde8f124e3653141f9b10474f391ef77d14b108fa3a68a90ac97be9205d8177e01db7e7de8abef216710bf3bd4ee12a94053820b5c3d634468017a2763a4d14b6617e53c7991e5a24ac63e05d06d82cb52b1358671b46dab95ea9c415f4e31b98d44821c7bdc5431302739176fd82bb83f3d259dad26f2d8f66c48e4f77b8f681551942e30c4191de55c918fa6e23120fc78e28e04117a2dce7a94bfda494b8cab209e2cbf76740dd1364f043c62f9697a45ac3433cc81b8fd2fce2d50b1d92eb8c1c071d779289446a4a239385fc8ded8b018d31079c18bd43a5060347a4f6d3f97e", 0x424}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.278413551s ago: executing program 4 (id=1321): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000200)=0xc) 1.154838677s ago: executing program 4 (id=1322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="2e9b7d0007e03dd65193dfb6c575963f86ddaf62a6de000000000368a60a0165d83d00009d90491ceaebfd26d4eef23248000000f8", 0x35}, {&(0x7f0000000200)="73ec500447db", 0x6}, {&(0x7f0000000940)="1082fdf637f3139d7b39e2d1d9fe45b502541e36843b60d08736795646348926f76577897efa579606be14710e09b20333ca7b4d3a573ac211ed1a1d792c888776a57239dcbbbce68612181ca43e2e7f6fdab10d5d36e84a3b55ff9f3c22a973e062e08cd4778a1b6a7cff027c57517dddbe74ac54fdfb7b836511f3901e745abd613b6bca2e6a2d8c382802098975", 0x8f}], 0x3) 1.015087873s ago: executing program 0 (id=1323): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008004) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 884.128929ms ago: executing program 3 (id=1324): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x80) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 644.87061ms ago: executing program 0 (id=1325): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) 531.425665ms ago: executing program 0 (id=1326): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 531.283675ms ago: executing program 4 (id=1327): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c, 0x0}}], 0x1, 0x24040000) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x4db31}], 0x1, 0x40002102, 0x0) 531.113135ms ago: executing program 4 (id=1328): openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 520.583466ms ago: executing program 1 (id=1329): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0xe1, 0x0, 0x0, @tick=0x1, {}, {}, @result={0x2, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 426.38164ms ago: executing program 2 (id=1330): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef0800", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 244.182959ms ago: executing program 1 (id=1331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x2, 0xcd}], 'M6U'}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x5f, 0x2e, 0x61]}}, &(0x7f0000001b00)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28) 244.026089ms ago: executing program 4 (id=1332): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0xc, 0x8d, &(0x7f0000001300)=""/141, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 51.546998ms ago: executing program 0 (id=1333): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500004000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x100002, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000480), 0x1, &(0x7f0000000500)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='res', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='re', 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 32.465789ms ago: executing program 4 (id=1334): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x0, 0xff, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x1, 0x5004) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) 7.09017ms ago: executing program 2 (id=1335): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008004) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 0s ago: executing program 1 (id=1336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) shutdown(r0, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): wip_socket permissive=1 [ 112.817664][ T4765] loop0: detected capacity change from 0 to 512 [ 112.825380][ T29] audit: type=1400 audit(1790117014.963:213): avc: denied { read append } for pid=4768 comm="syz.3.297" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.825408][ T29] audit: type=1400 audit(1790117014.963:214): avc: denied { open } for pid=4768 comm="syz.3.297" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.885362][ T4765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.886785][ T29] audit: type=1400 audit(1790117015.023:215): avc: denied { ioctl } for pid=4768 comm="syz.3.297" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.927558][ T4765] EXT4-fs (loop0): 1 truncate cleaned up [ 112.927934][ T4765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.974775][ T29] audit: type=1400 audit(1790117015.113:216): avc: denied { create } for pid=4768 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.001430][ T29] audit: type=1400 audit(1790117015.143:217): avc: denied { read write } for pid=4768 comm="syz.3.297" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.089185][ T4769] loop3: detected capacity change from 0 to 1024 [ 113.089762][ T4769] ======================================================= [ 113.089762][ T4769] WARNING: The mand mount option has been deprecated and [ 113.089762][ T4769] and is ignored by this kernel. Remove the mand [ 113.089762][ T4769] option from the mount to silence this warning. [ 113.089762][ T4769] ======================================================= [ 113.092521][ T4769] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 113.141934][ T4769] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.297: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.142129][ T4769] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.146788][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 113.146855][ C0] EXT4-fs (loop3): initial error at time 1790117015: ext4_map_blocks:790: inode 3: block 2 [ 113.147014][ C0] EXT4-fs (loop3): last error at time 1790117015: ext4_map_blocks:790: inode 3: block 2 [ 113.157968][ T4769] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.297: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.158151][ T4769] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.159928][ T4769] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.297: Failed to acquire dquot type 0 [ 113.160015][ T4769] loop3: lost filesystem error report for type 5 error -117 [ 113.160518][ T4769] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 113.160584][ T4769] loop3: lost filesystem error report for type 5 error -117 [ 113.160985][ T4769] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.297: mark_inode_dirty error [ 113.161065][ T4769] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.161581][ T4769] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 113.161766][ T4769] EXT4-fs (loop3): 1 orphan inode deleted [ 113.164990][ T4769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.177733][ T702] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.178635][ T702] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 0 [ 113.226911][ T702] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm kworker/u8:7: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.229824][ T702] EXT4-fs error (device loop3): ext4_write_dquot:7049: comm kworker/u8:7: Failed to commit dquot type 0 [ 113.230921][ T702] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.234914][ T702] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 0 [ 113.294773][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.435841][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.437220][ T3297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 113.437310][ T3297] loop3: lost filesystem error report for type 5 error -117 [ 113.437542][ T3297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 113.437688][ T3297] loop3: lost filesystem error report for type 5 error -117 [ 113.437934][ T3297] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 113.438005][ T3297] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.440049][ T3297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 113.440117][ T3297] loop3: lost filesystem error report for type 5 error -117 [ 113.515484][ T4782] loop0: detected capacity change from 0 to 512 [ 113.530387][ T4782] EXT4-fs warning (device loop0): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 113.530461][ T4782] EXT4-fs warning (device loop0): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 113.749112][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 113.749143][ T29] audit: type=1400 audit(1790117015.893:224): avc: denied { mount } for pid=4791 comm="syz.3.303" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 113.806710][ T4787] loop1: detected capacity change from 0 to 4096 [ 113.843454][ T4787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.538835][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 114.617593][ T4801] loop4: detected capacity change from 0 to 1024 [ 114.618447][ T4801] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 114.619038][ T4801] JBD2: no valid journal superblock found [ 114.619120][ T4801] EXT4-fs (loop4): Could not load journal inode [ 114.620251][ T29] audit: type=1400 audit(1790117016.763:225): avc: denied { search } for pid=4791 comm="syz.3.303" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.620281][ T29] audit: type=1400 audit(1790117016.763:226): avc: denied { search } for pid=4791 comm="syz.3.303" name="usb_gadget" dev="configfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.620319][ T29] audit: type=1400 audit(1790117016.763:227): avc: denied { search } for pid=4791 comm="syz.3.303" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.620344][ T29] audit: type=1400 audit(1790117016.763:228): avc: denied { search } for pid=4791 comm="syz.3.303" name="usb_gadget" dev="configfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.620391][ T29] audit: type=1400 audit(1790117016.763:229): avc: denied { write search } for pid=4791 comm="syz.3.303" name="usb_gadget" dev="configfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.620425][ T29] audit: type=1400 audit(1790117016.763:230): avc: denied { add_name } for pid=4791 comm="syz.3.303" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.620542][ T29] audit: type=1400 audit(1790117016.763:231): avc: denied { create } for pid=4791 comm="syz.3.303" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 114.747153][ T29] audit: type=1400 audit(1790117016.873:232): avc: denied { write } for pid=4791 comm="syz.3.303" name="configs" dev="configfs" ino=8101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.747249][ T29] audit: type=1400 audit(1790117016.883:233): avc: denied { write } for pid=4791 comm="syz.3.303" name="functions" dev="configfs" ino=8100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.638335][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.710363][ T4820] loop2: detected capacity change from 0 to 1024 [ 115.712253][ T4820] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 115.744681][ T4820] JBD2: no valid journal superblock found [ 115.744696][ T4820] EXT4-fs (loop2): Could not load journal inode [ 115.782619][ T4822] loop0: detected capacity change from 0 to 1024 [ 115.920384][ T4822] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 115.921004][ T4822] JBD2: no valid journal superblock found [ 115.921016][ T4822] EXT4-fs (loop0): Could not load journal inode [ 116.339955][ T4828] loop0: detected capacity change from 0 to 512 [ 116.614673][ T4828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 116.614781][ T4828] System zones: 1-12 [ 116.654653][ T4834] loop1: detected capacity change from 0 to 1024 [ 116.663429][ T4834] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 116.664070][ T4834] JBD2: no valid journal superblock found [ 116.664081][ T4834] EXT4-fs (loop1): Could not load journal inode [ 116.713610][ T4828] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.314: missing EA_INODE flag [ 116.713641][ T4828] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 116.713742][ T4828] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.314: error while reading EA inode 12 err=-117 [ 116.713784][ T4828] loop0: lost filesystem error report for type 5 error -117 [ 116.713886][ T4828] EXT4-fs (loop0): 1 orphan inode deleted [ 116.831338][ T4828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.978904][ T4837] loop3: detected capacity change from 0 to 2048 [ 117.035008][ T4837] Alternate GPT is invalid, using primary GPT. [ 117.035775][ T4837] loop3: p2 p3 p7 [ 117.470630][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.496160][ T4847] loop3: detected capacity change from 0 to 1024 [ 117.497603][ T4847] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 117.499035][ T4847] JBD2: no valid journal superblock found [ 117.499069][ T4847] EXT4-fs (loop3): Could not load journal inode [ 117.546495][ T4852] loop0: detected capacity change from 0 to 512 [ 117.692200][ T4852] EXT4-fs warning (device loop0): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 117.692254][ T4852] EXT4-fs warning (device loop0): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 118.709343][ T4859] Option 'dnserror' to dns_resolver key: bad/missing value [ 119.180510][ T4864] loop4: detected capacity change from 0 to 1024 [ 119.191631][ T4864] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 119.193871][ T4864] JBD2: no valid journal superblock found [ 119.193881][ T4864] EXT4-fs (loop4): Could not load journal inode [ 119.203858][ T4866] Option 'dnserror' to dns_resolver key: bad/missing value [ 119.413553][ T4870] loop2: detected capacity change from 0 to 1024 [ 119.435590][ T4870] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 119.436580][ T4870] JBD2: no valid journal superblock found [ 119.436590][ T4870] EXT4-fs (loop2): Could not load journal inode [ 119.904231][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 119.904252][ T29] audit: type=1400 audit(1790117022.043:241): avc: denied { setopt } for pid=4871 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.575607][ T4872] loop0: detected capacity change from 0 to 1024 [ 120.714515][ T4872] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 120.763921][ T4872] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.323: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.764056][ T4872] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.766219][ T4872] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 120.766363][ T4872] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.323: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.766440][ T4872] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.781174][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 120.781199][ C1] EXT4-fs (loop0): initial error at time 1790117022: ext4_map_blocks:790: inode 3: block 2 [ 120.781244][ C1] EXT4-fs (loop0): last error at time 1790117022: ext4_map_blocks:790: inode 3: block 48 [ 120.781474][ T4872] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 120.781670][ T4872] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.323: Failed to acquire dquot type 0 [ 120.781724][ T4872] loop0: lost filesystem error report for type 5 error -117 [ 120.788687][ T4872] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 120.789084][ T4872] loop0: lost filesystem error report for type 5 error -117 [ 120.789987][ T4872] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.323: mark_inode_dirty error [ 120.790062][ T4872] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.790645][ T4872] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 120.791011][ T4872] EXT4-fs (loop0): 1 orphan inode deleted [ 120.795535][ T4872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.811566][ T51] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.811982][ T51] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 120.812046][ T51] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 120.838412][ T79] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm kworker/u8:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.838969][ T79] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 120.839015][ T79] EXT4-fs error (device loop0): ext4_write_dquot:7049: comm kworker/u8:5: Failed to commit dquot type 0 [ 120.839331][ T79] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 120.839405][ T79] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.839686][ T79] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 120.839736][ T79] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 121.012376][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.013405][ T3298] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.013487][ T3298] loop0: lost filesystem error report for type 5 error -117 [ 121.013687][ T3298] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 121.013740][ T3298] loop0: lost filesystem error report for type 5 error -117 [ 121.013987][ T3298] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 121.014045][ T3298] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.014259][ T3298] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.014369][ T3298] loop0: lost filesystem error report for type 5 error -117 [ 121.150260][ T4890] loop0: detected capacity change from 0 to 1024 [ 121.154346][ T4890] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 121.156436][ T4890] JBD2: no valid journal superblock found [ 121.156463][ T4890] EXT4-fs (loop0): Could not load journal inode [ 121.611368][ T4900] loop4: detected capacity change from 0 to 1024 [ 121.615194][ T4900] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 121.615834][ T4900] JBD2: no valid journal superblock found [ 121.615845][ T4900] EXT4-fs (loop4): Could not load journal inode [ 121.937528][ T4892] loop1: detected capacity change from 0 to 512 [ 122.302808][ T4892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.548977][ T4892] EXT4-fs (loop1): 1 truncate cleaned up [ 122.568744][ T4892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.054274][ T29] audit: type=1400 audit(1790117025.193:242): avc: denied { create } for pid=4917 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.083094][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.108177][ T29] audit: type=1400 audit(1790117025.253:243): avc: denied { mount } for pid=4917 comm="syz.4.331" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 123.180965][ T29] audit: type=1400 audit(1790117025.323:244): avc: denied { mount } for pid=4910 comm="syz.2.330" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.407477][ T4927] Option 'dnserror' to dns_resolver key: bad/missing value [ 123.917076][ T4934] loop0: detected capacity change from 0 to 1024 [ 123.920625][ T4934] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 123.922274][ T4934] JBD2: no valid journal superblock found [ 123.922286][ T4934] EXT4-fs (loop0): Could not load journal inode [ 124.110905][ T4938] loop1: detected capacity change from 0 to 1024 [ 124.129442][ T4938] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 124.130057][ T4938] JBD2: no valid journal superblock found [ 124.130069][ T4938] EXT4-fs (loop1): Could not load journal inode [ 125.194548][ T4950] loop1: detected capacity change from 0 to 1024 [ 125.219418][ T4952] loop3: detected capacity change from 0 to 1024 [ 125.220152][ T4952] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 125.220808][ T4952] JBD2: no valid journal superblock found [ 125.220822][ T4952] EXT4-fs (loop3): Could not load journal inode [ 125.225239][ T4950] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 125.225901][ T4950] JBD2: no valid journal superblock found [ 125.225913][ T4950] EXT4-fs (loop1): Could not load journal inode [ 125.316622][ T4957] loop2: detected capacity change from 0 to 1024 [ 125.441647][ T4957] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 125.445866][ T4957] JBD2: no valid journal superblock found [ 125.445880][ T4957] EXT4-fs (loop2): Could not load journal inode [ 126.471554][ T4969] Option 'dnserror' to dns_resolver key: bad/missing value [ 126.921677][ T4948] loop4: detected capacity change from 0 to 512 [ 126.980184][ T4948] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.100876][ T4982] loop3: detected capacity change from 0 to 512 [ 127.123659][ T4982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 127.123751][ T4982] System zones: 1-12 [ 127.175635][ T4982] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.350: missing EA_INODE flag [ 127.175660][ T4982] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 127.175760][ T4982] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.350: error while reading EA inode 12 err=-117 [ 127.175821][ T4982] loop3: lost filesystem error report for type 5 error -117 [ 127.175927][ T4982] EXT4-fs (loop3): 1 orphan inode deleted [ 127.176292][ T4982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.262513][ T4948] EXT4-fs (loop4): 1 truncate cleaned up [ 127.307322][ T4948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.520771][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 127.520875][ T29] audit: type=1400 audit(1790117029.643:247): avc: denied { write } for pid=4981 comm="syz.3.350" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.589481][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.978262][ T4997] loop4: detected capacity change from 0 to 1024 [ 127.979189][ T4997] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 127.979750][ T4997] JBD2: no valid journal superblock found [ 127.979759][ T4997] EXT4-fs (loop4): Could not load journal inode [ 128.134228][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.134493][ T4990] loop2: detected capacity change from 0 to 2048 [ 128.547281][ T5002] loop0: detected capacity change from 0 to 1024 [ 128.558448][ T5004] loop1: detected capacity change from 0 to 1024 [ 128.561953][ T5002] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 128.564500][ T5002] JBD2: no valid journal superblock found [ 128.564531][ T5002] EXT4-fs (loop0): Could not load journal inode [ 128.569392][ T5004] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 128.571326][ T5004] JBD2: no valid journal superblock found [ 128.571335][ T5004] EXT4-fs (loop1): Could not load journal inode [ 129.093499][ T5013] loop4: detected capacity change from 0 to 1024 [ 129.268306][ T5013] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 129.268873][ T5013] JBD2: no valid journal superblock found [ 129.268886][ T5013] EXT4-fs (loop4): Could not load journal inode [ 129.473639][ T4990] Alternate GPT is invalid, using primary GPT. [ 129.477265][ T4990] loop2: p2 p3 p7 [ 130.113785][ T29] audit: type=1400 audit(1790117032.253:248): avc: denied { read } for pid=5030 comm="syz.3.362" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.113841][ T29] audit: type=1400 audit(1790117032.253:249): avc: denied { open } for pid=5030 comm="syz.3.362" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.182510][ T29] audit: type=1400 audit(1790117032.313:250): avc: denied { mmap_zero } for pid=5030 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 130.697810][ T5040] loop2: detected capacity change from 0 to 512 [ 130.713575][ T5040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 130.713614][ T5040] System zones: 1-12 [ 130.714030][ T5040] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.364: missing EA_INODE flag [ 130.714058][ T5040] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 130.715241][ T5040] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.364: error while reading EA inode 12 err=-117 [ 130.715277][ T5040] loop2: lost filesystem error report for type 5 error -117 [ 130.715767][ T5040] EXT4-fs (loop2): 1 orphan inode deleted [ 130.716238][ T5040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.050320][ T29] audit: type=1400 audit(1790117033.183:251): avc: denied { write } for pid=5039 comm="syz.2.364" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.601592][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.690091][ T5048] tun0: tun_chr_ioctl cmd 1074025681 [ 131.853332][ T5050] netlink: 'syz.0.367': attribute type 6 has an invalid length. [ 131.853353][ T5050] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.367'. [ 132.113266][ T5058] loop2: detected capacity change from 0 to 1024 [ 132.114065][ T5058] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 132.114725][ T5058] JBD2: no valid journal superblock found [ 132.114738][ T5058] EXT4-fs (loop2): Could not load journal inode [ 132.300688][ T5061] loop3: detected capacity change from 0 to 1024 [ 132.317358][ T5061] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 132.319230][ T5061] JBD2: no valid journal superblock found [ 132.319240][ T5061] EXT4-fs (loop3): Could not load journal inode [ 133.380080][ T5078] loop4: detected capacity change from 0 to 512 [ 133.406426][ T5078] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.599609][ T5078] EXT4-fs (loop4): 1 truncate cleaned up [ 133.599963][ T5078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.880200][ T29] audit: type=1400 audit(1790117036.023:252): avc: denied { create } for pid=5087 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.986069][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.026060][ T29] audit: type=1400 audit(1790117036.163:253): avc: denied { write } for pid=5089 comm="syz.4.379" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.048428][ T5090] netlink: 128 bytes leftover after parsing attributes in process `syz.4.379'. [ 134.048473][ T5090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.264099][ T5076] loop2: detected capacity change from 0 to 1024 [ 134.333973][ T5076] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 134.406793][ T29] audit: type=1400 audit(1790117036.493:254): avc: denied { write } for pid=5091 comm="syz.4.381" path="socket:[9330]" dev="sockfs" ino=9330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.533451][ T5076] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.376: lblock 2 mapped to illegal pblock 2 (length 1) [ 134.533853][ T5076] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.534854][ T5076] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 134.534985][ T5076] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.376: lblock 0 mapped to illegal pblock 48 (length 1) [ 134.535089][ T5076] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.535952][ T5076] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 134.536235][ T5076] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.376: Failed to acquire dquot type 0 [ 134.536487][ T5076] loop2: lost filesystem error report for type 5 error -117 [ 134.536729][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 134.536752][ C0] EXT4-fs (loop2): initial error at time 1790117036: ext4_map_blocks:790: inode 3: block 2 [ 134.536800][ C0] EXT4-fs (loop2): last error at time 1790117036: ext4_acquire_dquot:7069 [ 134.655862][ T5076] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 134.671625][ T5076] loop2: lost filesystem error report for type 5 error -117 [ 134.674442][ T5076] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.376: mark_inode_dirty error [ 134.674838][ T5076] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.675768][ T5076] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 134.718097][ T5076] EXT4-fs (loop2): 1 orphan inode deleted [ 134.733796][ T5100] loop1: detected capacity change from 0 to 1024 [ 134.759719][ T51] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.759893][ T51] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.760098][ T51] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 134.760258][ T51] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 134.760294][ T51] loop2: lost filesystem error report for type 5 error -117 [ 134.831709][ T5100] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 134.833561][ T5100] JBD2: no valid journal superblock found [ 134.833637][ T5100] EXT4-fs (loop1): Could not load journal inode [ 134.894775][ T5076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.008576][ T38] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm kworker/u8:2: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.008727][ T38] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 135.008750][ T38] EXT4-fs error (device loop2): ext4_write_dquot:7049: comm kworker/u8:2: Failed to commit dquot type 0 [ 135.008846][ T38] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 135.008918][ T38] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.009057][ T38] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 135.009081][ T38] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 135.058728][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.059434][ T3300] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 135.059507][ T3300] loop2: lost filesystem error report for type 5 error -117 [ 135.059759][ T3300] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 135.059901][ T3300] loop2: lost filesystem error report for type 5 error -117 [ 135.060097][ T3300] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 135.060167][ T3300] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 135.060471][ T3300] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 135.060548][ T3300] loop2: lost filesystem error report for type 5 error -117 [ 135.185347][ T5107] loop2: detected capacity change from 0 to 1024 [ 135.201025][ T5107] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 135.202037][ T5107] JBD2: no valid journal superblock found [ 135.202051][ T5107] EXT4-fs (loop2): Could not load journal inode [ 136.205469][ T5124] tun0: tun_chr_ioctl cmd 1074025681 [ 136.349853][ T29] audit: type=1400 audit(1790117038.493:255): avc: denied { cpu } for pid=5130 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 136.419745][ T5135] loop2: detected capacity change from 0 to 1024 [ 136.429577][ T5135] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 136.433258][ T5135] JBD2: no valid journal superblock found [ 136.433303][ T5135] EXT4-fs (loop2): Could not load journal inode [ 136.664057][ T5145] loop1: detected capacity change from 0 to 1024 [ 136.664686][ T5145] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 136.665353][ T5145] JBD2: no valid journal superblock found [ 136.665365][ T5145] EXT4-fs (loop1): Could not load journal inode [ 139.084424][ T5188] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 139.084463][ T5188] netlink: 'syz.3.406': attribute type 3 has an invalid length. [ 139.084486][ T5188] netlink: 132 bytes leftover after parsing attributes in process `syz.3.406'. [ 139.085334][ T5188] netlink: 'syz.3.406': attribute type 10 has an invalid length. [ 139.085363][ T5188] netlink: 168 bytes leftover after parsing attributes in process `syz.3.406'. [ 139.223392][ T5190] loop3: detected capacity change from 0 to 1024 [ 139.229957][ T5190] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 139.243871][ T5190] JBD2: no valid journal superblock found [ 139.243886][ T5190] EXT4-fs (loop3): Could not load journal inode [ 141.159867][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 141.159883][ T29] audit: type=1400 audit(1790117043.303:257): avc: denied { create } for pid=5207 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.164547][ T29] audit: type=1400 audit(1790117043.303:258): avc: denied { setopt } for pid=5207 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.164583][ T29] audit: type=1400 audit(1790117043.303:259): avc: denied { ioctl } for pid=5207 comm="syz.0.413" path="socket:[8680]" dev="sockfs" ino=8680 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.536174][ T5233] loop0: detected capacity change from 0 to 1024 [ 141.545838][ T5233] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 141.558446][ T5233] JBD2: no valid journal superblock found [ 141.558460][ T5233] EXT4-fs (loop0): Could not load journal inode [ 142.308915][ T5247] loop4: detected capacity change from 0 to 1024 [ 142.309675][ T5247] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 142.310388][ T5247] JBD2: no valid journal superblock found [ 142.310399][ T5247] EXT4-fs (loop4): Could not load journal inode [ 142.540614][ T5250] loop0: detected capacity change from 0 to 1024 [ 142.574385][ T5250] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 142.575831][ T5250] JBD2: no valid journal superblock found [ 142.575842][ T5250] EXT4-fs (loop0): Could not load journal inode [ 142.801573][ T5256] netlink: 'syz.1.427': attribute type 1 has an invalid length. [ 142.801983][ T5256] netlink: 'syz.1.427': attribute type 3 has an invalid length. [ 142.802051][ T5256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.427'. [ 142.806091][ T5256] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 142.806689][ T5256] netlink: 168 bytes leftover after parsing attributes in process `syz.1.427'. [ 145.109131][ T5276] loop1: detected capacity change from 0 to 1024 [ 145.109889][ T5276] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 145.110605][ T5276] JBD2: no valid journal superblock found [ 145.110615][ T5276] EXT4-fs (loop1): Could not load journal inode [ 145.847882][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 146.636621][ T5297] loop2: detected capacity change from 0 to 1024 [ 146.649436][ T5297] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 146.650782][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 146.651603][ T5297] JBD2: no valid journal superblock found [ 146.651650][ T5297] EXT4-fs (loop2): Could not load journal inode [ 147.167051][ T5311] syz.4.443 uses obsolete (PF_INET,SOCK_PACKET) [ 148.133589][ T5333] netlink: 48 bytes leftover after parsing attributes in process `syz.3.448'. [ 148.752032][ T5344] loop3: detected capacity change from 0 to 512 [ 148.817790][ T5344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.886138][ T5344] EXT4-fs (loop3): 1 truncate cleaned up [ 148.917338][ T5344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.396546][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.486552][ T5356] loop2: detected capacity change from 0 to 1024 [ 149.497118][ T5356] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 149.497727][ T5356] JBD2: no valid journal superblock found [ 149.497737][ T5356] EXT4-fs (loop2): Could not load journal inode [ 150.148234][ T5368] loop4: detected capacity change from 0 to 1024 [ 150.148990][ T5368] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 150.149716][ T5368] JBD2: no valid journal superblock found [ 150.149728][ T5368] EXT4-fs (loop4): Could not load journal inode [ 150.214241][ T5371] loop0: detected capacity change from 0 to 1024 [ 150.233265][ T5371] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 150.233987][ T5371] JBD2: no valid journal superblock found [ 150.233996][ T5371] EXT4-fs (loop0): Could not load journal inode [ 150.297622][ T5372] Option 'dnserror' to dns_resolver key: bad/missing value [ 152.037519][ T5417] loop3: detected capacity change from 0 to 1024 [ 152.038993][ T5417] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 152.040553][ T5417] JBD2: no valid journal superblock found [ 152.040563][ T5417] EXT4-fs (loop3): Could not load journal inode [ 152.172172][ T5421] loop4: detected capacity change from 0 to 1024 [ 152.174515][ T5421] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 152.175127][ T5421] JBD2: no valid journal superblock found [ 152.175135][ T5421] EXT4-fs (loop4): Could not load journal inode [ 152.241773][ T5424] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.476'. [ 152.241829][ T5424] netlink: zone id is out of range [ 152.241913][ T5424] netlink: zone id is out of range [ 152.241971][ T5424] netlink: zone id is out of range [ 152.241999][ T5424] netlink: zone id is out of range [ 152.242025][ T5424] netlink: zone id is out of range [ 152.242118][ T5424] netlink: zone id is out of range [ 152.242138][ T5424] netlink: zone id is out of range [ 152.242158][ T5424] netlink: zone id is out of range [ 152.242179][ T5424] netlink: zone id is out of range [ 152.242188][ T5424] netlink: zone id is out of range [ 152.449923][ T29] audit: type=1400 audit(1790117054.593:260): avc: denied { create } for pid=5423 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.456037][ T29] audit: type=1400 audit(1790117054.593:261): avc: denied { read } for pid=5423 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.679984][ T5437] netlink: 'syz.2.478': attribute type 1 has an invalid length. [ 152.680036][ T5437] netlink: 'syz.2.478': attribute type 3 has an invalid length. [ 152.680078][ T5437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.478'. [ 152.683965][ T5437] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 152.684016][ T5437] netlink: 168 bytes leftover after parsing attributes in process `syz.2.478'. [ 152.736615][ T5439] loop0: detected capacity change from 0 to 1024 [ 152.752906][ T5439] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 152.755420][ T5439] JBD2: no valid journal superblock found [ 152.755430][ T5439] EXT4-fs (loop0): Could not load journal inode [ 153.041432][ T5446] Option 'dnserror' to dns_resolver key: bad/missing value [ 153.611145][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 153.647617][ T5453] loop2: detected capacity change from 0 to 1024 [ 153.653693][ T5453] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 153.654379][ T5453] JBD2: no valid journal superblock found [ 153.654459][ T5453] EXT4-fs (loop2): Could not load journal inode [ 155.173365][ T5477] loop1: detected capacity change from 0 to 1024 [ 155.194791][ T5477] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 155.200120][ T5477] JBD2: no valid journal superblock found [ 155.200152][ T5477] EXT4-fs (loop1): Could not load journal inode [ 155.386160][ T5482] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 155.386205][ T5482] netlink: 'syz.4.490': attribute type 3 has an invalid length. [ 155.386227][ T5482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.490'. [ 155.415580][ T5482] netlink: 'syz.4.490': attribute type 10 has an invalid length. [ 155.415626][ T5482] netlink: 168 bytes leftover after parsing attributes in process `syz.4.490'. [ 155.622742][ T5489] loop4: detected capacity change from 0 to 1024 [ 155.624803][ T5489] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 155.625412][ T5489] JBD2: no valid journal superblock found [ 155.625425][ T5489] EXT4-fs (loop4): Could not load journal inode [ 156.638413][ T5494] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.493'. [ 156.954288][ T5509] loop0: detected capacity change from 0 to 1024 [ 156.970986][ T5509] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 156.971648][ T5509] JBD2: no valid journal superblock found [ 156.971660][ T5509] EXT4-fs (loop0): Could not load journal inode [ 156.973145][ T5511] loop2: detected capacity change from 0 to 512 [ 156.998086][ T5511] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 156.998157][ T5511] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 157.141499][ T5507] loop4: detected capacity change from 0 to 512 [ 157.185861][ T5507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.276487][ T5507] EXT4-fs (loop4): 1 truncate cleaned up [ 157.280598][ T5507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.670088][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.832366][ T5527] loop4: detected capacity change from 0 to 1024 [ 157.845068][ T5527] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 157.845701][ T5527] JBD2: no valid journal superblock found [ 157.845714][ T5527] EXT4-fs (loop4): Could not load journal inode [ 159.830221][ T5564] loop3: detected capacity change from 0 to 512 [ 159.835014][ T5564] EXT4-fs warning (device loop3): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 159.835036][ T5564] EXT4-fs warning (device loop3): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 159.990310][ T5565] loop1: detected capacity change from 0 to 512 [ 160.002305][ T5565] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.021080][ T5565] EXT4-fs (loop1): 1 truncate cleaned up [ 160.021486][ T5565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.448605][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.747157][ T5581] loop1: detected capacity change from 0 to 512 [ 160.748371][ T5581] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.749658][ T5581] EXT4-fs (loop1): 1 truncate cleaned up [ 160.750069][ T5581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.870237][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.013304][ T5556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 161.265079][ T5591] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.522'. [ 161.265144][ T5591] net_ratelimit: 12 callbacks suppressed [ 161.265193][ T5591] netlink: zone id is out of range [ 161.265220][ T5591] netlink: zone id is out of range [ 161.265294][ T5591] netlink: zone id is out of range [ 161.265380][ T5591] netlink: zone id is out of range [ 161.265408][ T5591] netlink: zone id is out of range [ 161.265429][ T5591] netlink: zone id is out of range [ 161.265438][ T5591] netlink: zone id is out of range [ 161.265458][ T5591] netlink: zone id is out of range [ 161.265474][ T5591] netlink: zone id is out of range [ 161.265483][ T5591] netlink: zone id is out of range [ 161.766406][ T5609] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 161.766472][ T5609] netlink: 'syz.0.527': attribute type 3 has an invalid length. [ 161.766496][ T5609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.527'. [ 161.811896][ T5609] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 161.811942][ T5609] netlink: 168 bytes leftover after parsing attributes in process `syz.0.527'. [ 161.846536][ T5611] loop3: detected capacity change from 0 to 1024 [ 161.847865][ T5611] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 161.848447][ T5611] JBD2: no valid journal superblock found [ 161.848457][ T5611] EXT4-fs (loop3): Could not load journal inode [ 162.090249][ T5618] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 162.090312][ T5618] netlink: 'syz.0.531': attribute type 3 has an invalid length. [ 162.090333][ T5618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.531'. [ 162.090664][ T5620] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 162.090702][ T5620] netlink: 'syz.4.532': attribute type 3 has an invalid length. [ 162.090729][ T5620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.532'. [ 162.093041][ T5620] netlink: 'syz.4.532': attribute type 10 has an invalid length. [ 162.093594][ T5620] netlink: 168 bytes leftover after parsing attributes in process `syz.4.532'. [ 162.701029][ T5631] loop1: detected capacity change from 0 to 1024 [ 162.701866][ T5631] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 162.704001][ T5631] JBD2: no valid journal superblock found [ 162.704012][ T5631] EXT4-fs (loop1): Could not load journal inode [ 163.126138][ T5642] loop0: detected capacity change from 0 to 512 [ 163.131285][ T5642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.181263][ T5642] EXT4-fs (loop0): 1 truncate cleaned up [ 163.182229][ T5642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.526201][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.742907][ T5634] loop4: detected capacity change from 0 to 512 [ 163.780921][ T5634] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.792001][ T5653] loop2: detected capacity change from 0 to 512 [ 163.947289][ T5653] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 163.947353][ T5653] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 163.993171][ T5658] loop0: detected capacity change from 0 to 1024 [ 163.996562][ T5658] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 164.016121][ T5658] JBD2: no valid journal superblock found [ 164.016165][ T5658] EXT4-fs (loop0): Could not load journal inode [ 164.129780][ T5634] EXT4-fs (loop4): 1 truncate cleaned up [ 164.180317][ T5634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.290531][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.233010][ T5681] loop2: detected capacity change from 0 to 1024 [ 166.247234][ T5681] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 166.250857][ T5681] JBD2: no valid journal superblock found [ 166.250872][ T5681] EXT4-fs (loop2): Could not load journal inode [ 166.251248][ T5683] loop0: detected capacity change from 0 to 1024 [ 166.255593][ T5683] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 166.257609][ T5683] JBD2: no valid journal superblock found [ 166.257649][ T5683] EXT4-fs (loop0): Could not load journal inode [ 166.310216][ T5680] loop1: detected capacity change from 0 to 512 [ 166.314988][ T5680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.338604][ T5680] EXT4-fs (loop1): 1 truncate cleaned up [ 166.339275][ T5680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.368042][ T5687] loop4: detected capacity change from 0 to 1024 [ 166.392261][ T5687] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 166.394158][ T5687] JBD2: no valid journal superblock found [ 166.394171][ T5687] EXT4-fs (loop4): Could not load journal inode [ 166.700440][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.150580][ T5705] loop4: detected capacity change from 0 to 512 [ 168.154421][ T5705] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.180638][ T5705] EXT4-fs (loop4): 1 truncate cleaned up [ 168.181101][ T5705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.405134][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.537567][ T5709] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 168.537612][ T5709] netlink: 'syz.4.551': attribute type 3 has an invalid length. [ 168.537655][ T5709] netlink: 132 bytes leftover after parsing attributes in process `syz.4.551'. [ 168.655349][ T29] audit: type=1400 audit(1790117070.793:262): avc: denied { relabelfrom } for pid=5710 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 168.655461][ T29] audit: type=1400 audit(1790117070.793:263): avc: denied { relabelto } for pid=5710 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 168.731340][ T5714] loop4: detected capacity change from 0 to 1024 [ 168.745987][ T5714] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 168.747071][ T5714] JBD2: no valid journal superblock found [ 168.747105][ T5714] EXT4-fs (loop4): Could not load journal inode [ 168.903217][ T29] audit: type=1400 audit(1790117071.023:264): avc: denied { create } for pid=5716 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.995226][ T29] audit: type=1400 audit(1790117071.133:265): avc: denied { connect } for pid=5723 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.995261][ T29] audit: type=1400 audit(1790117071.133:266): avc: denied { name_connect } for pid=5723 comm="syz.3.559" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 169.173001][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 169.209883][ T5737] loop0: detected capacity change from 0 to 256 [ 169.211662][ T29] audit: type=1400 audit(1790117071.353:267): avc: denied { mount } for pid=5731 comm="syz.0.562" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 169.245083][ T29] audit: type=1400 audit(1790117071.383:268): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 169.263826][ T5735] bridge0: port 3(macsec1) entered blocking state [ 169.263936][ T5735] bridge0: port 3(macsec1) entered disabled state [ 169.264293][ T5735] macsec1: entered allmulticast mode [ 169.264342][ T5735] bridge0: entered allmulticast mode [ 169.264534][ T5735] bridge0: entered promiscuous mode [ 169.299300][ T5735] macsec1: left allmulticast mode [ 169.299318][ T5735] bridge0: left allmulticast mode [ 169.414096][ T5524] bridge0: left promiscuous mode [ 169.774774][ T29] audit: type=1326 audit(1790117071.913:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92378de159 code=0x7ffc0000 [ 169.774874][ T29] audit: type=1326 audit(1790117071.913:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92378de159 code=0x7ffc0000 [ 169.775917][ T29] audit: type=1326 audit(1790117071.913:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f92378de159 code=0x7ffc0000 [ 170.160407][ T5776] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 170.160822][ T5776] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.529772][ T5788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'. [ 170.825039][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 170.899874][ T5811] loop0: detected capacity change from 0 to 512 [ 170.910693][ T5811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.910914][ T5811] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.956433][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.005895][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.005971][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.016587][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.016637][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.153508][ T5827] loop3: detected capacity change from 0 to 128 [ 171.192332][ T5827] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.193643][ T5827] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.588475][ T5855] netlink: 496 bytes leftover after parsing attributes in process `syz.1.612'. [ 171.755192][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.938696][ T5876] loop4: detected capacity change from 0 to 256 [ 171.941636][ T5876] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 172.078656][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 172.078892][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 172.188682][ T702] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 172.247013][ T5883] loop0: detected capacity change from 0 to 2048 [ 173.057787][ T79] IPVS: starting estimator thread 0... [ 173.289026][ T5894] IPVS: using max 2400 ests per chain, 120000 per kthread [ 173.338597][ T5896] loop0: detected capacity change from 0 to 32768 [ 173.380448][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 173.384235][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 173.599264][ T5915] FAULT_INJECTION: forcing a failure. [ 173.599264][ T5915] name failslab, interval 1, probability 0, space 0, times 0 [ 173.599393][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.1.631 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.599471][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.599494][ T5915] Call Trace: [ 173.599503][ T5915] [ 173.599571][ T5915] __dump_stack+0x1d/0x30 [ 173.599614][ T5915] dump_stack_lvl+0x95/0xd0 [ 173.599644][ T5915] dump_stack+0x15/0x1b [ 173.599731][ T5915] should_fail_ex+0x262/0x280 [ 173.599785][ T5915] ? rxrpc_alloc_bundle+0x60/0x3f0 [ 173.599870][ T5915] should_failslab+0x8c/0xb0 [ 173.599970][ T5915] __kmalloc_cache_noprof+0x7a/0x400 [ 173.600003][ T5915] ? rxrpc_alloc_bundle+0x60/0x3f0 [ 173.600040][ T5915] rxrpc_alloc_bundle+0x60/0x3f0 [ 173.600142][ T5915] rxrpc_look_up_bundle+0x249/0x690 [ 173.600182][ T5915] rxrpc_new_client_call+0x7a2/0xe60 [ 173.600216][ T5915] ? rxrpc_lookup_peer+0x48c/0x550 [ 173.600284][ T5915] rxrpc_do_sendmsg+0xb52/0xe40 [ 173.600326][ T5915] ? rxrpc_do_sendmsg+0x5d1/0xe40 [ 173.600397][ T5915] rxrpc_sendmsg+0x46c/0x580 [ 173.600462][ T5915] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 173.600482][ T5915] ____sys_sendmsg+0x532/0x580 [ 173.600506][ T5915] ___sys_sendmsg+0x195/0x1e0 [ 173.600620][ T5915] __x64_sys_sendmsg+0xd4/0x160 [ 173.600645][ T5915] x64_sys_call+0x22ab/0x2550 [ 173.600675][ T5915] do_syscall_64+0x112/0x360 [ 173.600699][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.600784][ T5915] RIP: 0033:0x7f15e1a0e159 [ 173.600810][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.600906][ T5915] RSP: 002b:00007f15e0467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.600927][ T5915] RAX: ffffffffffffffda RBX: 00007f15e1c95fa0 RCX: 00007f15e1a0e159 [ 173.600947][ T5915] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000004 [ 173.600965][ T5915] RBP: 00007f15e1aa506b R08: 0000000000000000 R09: 0000000000000000 [ 173.600980][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.600997][ T5915] R13: 00007f15e1c96038 R14: 00007f15e1c95fa0 R15: 00007fff6507d108 [ 173.601057][ T5915] [ 174.085181][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.630'. [ 174.085224][ T5923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.630'. [ 174.163112][ T5933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.640'. [ 174.181001][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 174.181022][ T29] audit: type=1400 audit(1790117076.323:329): avc: denied { read } for pid=5930 comm="syz.3.638" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.181089][ T29] audit: type=1400 audit(1790117076.323:330): avc: denied { open } for pid=5930 comm="syz.3.638" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.366780][ T29] audit: type=1400 audit(1790117076.483:331): avc: denied { write } for pid=5951 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.546784][ T29] audit: type=1400 audit(1790117076.683:332): avc: denied { create } for pid=5963 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 174.546831][ T29] audit: type=1400 audit(1790117076.683:333): avc: denied { read write } for pid=5949 comm="syz.2.646" name="bin" dev="tracefs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 174.911751][ T5971] atomic_op ffff88811b64d148 conn xmit_atomic 0000000000000000 [ 175.278973][ T29] audit: type=1400 audit(1790117077.053:334): avc: denied { create } for pid=5963 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.279070][ T29] audit: type=1400 audit(1790117077.053:335): avc: denied { bind } for pid=5963 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.279098][ T29] audit: type=1400 audit(1790117077.053:336): avc: denied { write } for pid=5963 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.610138][ T29] audit: type=1400 audit(1790117077.653:337): avc: denied { read } for pid=5968 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.920791][ T6022] io-wq is not configured for unbound workers [ 176.537029][ T29] audit: type=1400 audit(1700006399.410:338): avc: denied { mount } for pid=6060 comm="syz.3.666" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 176.608996][ T6069] < [ 177.424443][ T6098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.506872][ T6098] md: could not open device unknown-block(1,0). [ 177.506896][ T6098] md: error, md_import_device() returned -6 [ 177.537743][ T6101] md: could not open device unknown-block(1,1). [ 177.537767][ T6101] md: error, md_import_device() returned -6 [ 178.043833][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.043980][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.600067][ T6149] FAULT_INJECTION: forcing a failure. [ 178.600067][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.600104][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.2.704 Not tainted syzkaller #0 PREEMPT(lazy) [ 178.600136][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.600216][ T6149] Call Trace: [ 178.600225][ T6149] [ 178.600234][ T6149] __dump_stack+0x1d/0x30 [ 178.600277][ T6149] dump_stack_lvl+0x95/0xd0 [ 178.600316][ T6149] dump_stack+0x15/0x1b [ 178.600354][ T6149] should_fail_ex+0x262/0x280 [ 178.600379][ T6149] should_fail+0xb/0x20 [ 178.600400][ T6149] should_fail_usercopy+0x1a/0x20 [ 178.600428][ T6149] _copy_to_user+0x20/0xa0 [ 178.600535][ T6149] bpf_verifier_vlog+0x36e/0x5a0 [ 178.600566][ T6149] __btf_verifier_log+0x7f/0xb0 [ 178.600598][ T6149] __btf_verifier_log_type+0x302/0x330 [ 178.600677][ T6149] btf_datasec_check_meta+0x2a6/0x640 [ 178.600723][ T6149] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 178.600758][ T6149] ? sort+0x6c/0xa0 [ 178.600805][ T6149] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 178.600856][ T6149] btf_parse_type_sec+0x291/0x1520 [ 178.600891][ T6149] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 178.600978][ T6149] ? btf_parse_hdr+0x43a/0x440 [ 178.601090][ T6149] ? btf_parse_str_sec+0x1ae/0x1b0 [ 178.601214][ T6149] btf_new_fd+0x2ec/0x670 [ 178.601242][ T6149] bpf_btf_load+0x116/0x130 [ 178.601270][ T6149] __sys_bpf+0xbce/0xc30 [ 178.601299][ T6149] ? do_futex+0x300/0x460 [ 178.601391][ T6149] __x64_sys_bpf+0x69/0x80 [ 178.601427][ T6149] x64_sys_call+0xf26/0x2550 [ 178.601518][ T6149] do_syscall_64+0x112/0x360 [ 178.601544][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.601567][ T6149] RIP: 0033:0x7fb1b409e159 [ 178.601595][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.601652][ T6149] RSP: 002b:00007fb1b2af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.601741][ T6149] RAX: ffffffffffffffda RBX: 00007fb1b4325fa0 RCX: 00007fb1b409e159 [ 178.601757][ T6149] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 178.601772][ T6149] RBP: 00007fb1b413506b R08: 0000000000000000 R09: 0000000000000000 [ 178.601833][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.601849][ T6149] R13: 00007fb1b4326038 R14: 00007fb1b4325fa0 R15: 00007ffc2b578b28 [ 178.601905][ T6149] [ 178.855476][ T6155] loop1: detected capacity change from 0 to 256 [ 178.961780][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.996295][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.017384][ T6163] loop2: detected capacity change from 0 to 256 [ 179.022788][ T6163] vfat: Bad value for 'utf8' [ 180.024285][ T6173] FAULT_INJECTION: forcing a failure. [ 180.024285][ T6173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.024319][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.3.713 Not tainted syzkaller #0 PREEMPT(lazy) [ 180.024427][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.024510][ T6173] Call Trace: [ 180.024517][ T6173] [ 180.024526][ T6173] __dump_stack+0x1d/0x30 [ 180.024562][ T6173] dump_stack_lvl+0x95/0xd0 [ 180.024628][ T6173] dump_stack+0x15/0x1b [ 180.024655][ T6173] should_fail_ex+0x262/0x280 [ 180.024688][ T6173] should_fail+0xb/0x20 [ 180.024759][ T6173] should_fail_usercopy+0x1a/0x20 [ 180.024786][ T6173] _copy_to_user+0x20/0xa0 [ 180.024839][ T6173] bpf_verifier_vlog+0x455/0x5a0 [ 180.024863][ T6173] __btf_verifier_log+0x7f/0xb0 [ 180.024892][ T6173] __btf_verifier_log_type+0x302/0x330 [ 180.024932][ T6173] btf_datasec_check_meta+0x2a6/0x640 [ 180.025054][ T6173] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 180.025116][ T6173] ? sort+0x6c/0xa0 [ 180.025151][ T6173] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 180.025309][ T6173] btf_parse_type_sec+0x291/0x1520 [ 180.025359][ T6173] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 180.025480][ T6173] ? btf_parse_hdr+0x43a/0x440 [ 180.025600][ T6173] ? btf_parse_str_sec+0x1ae/0x1b0 [ 180.025648][ T6173] btf_new_fd+0x2ec/0x670 [ 180.025676][ T6173] bpf_btf_load+0x116/0x130 [ 180.025786][ T6173] __sys_bpf+0xbce/0xc30 [ 180.025875][ T6173] ? do_futex+0x300/0x460 [ 180.025953][ T6173] __x64_sys_bpf+0x69/0x80 [ 180.025975][ T6173] x64_sys_call+0xf26/0x2550 [ 180.026069][ T6173] do_syscall_64+0x112/0x360 [ 180.026090][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.026112][ T6173] RIP: 0033:0x7f2944cae159 [ 180.026149][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.026186][ T6173] RSP: 002b:00007f2943707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.026274][ T6173] RAX: ffffffffffffffda RBX: 00007f2944f35fa0 RCX: 00007f2944cae159 [ 180.026303][ T6173] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 180.026316][ T6173] RBP: 00007f2944d4506b R08: 0000000000000000 R09: 0000000000000000 [ 180.026332][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.026349][ T6173] R13: 00007f2944f36038 R14: 00007f2944f35fa0 R15: 00007ffe7d90b558 [ 180.026375][ T6173] [ 180.396378][ T6182] loop2: detected capacity change from 0 to 512 [ 180.421251][ T6187] loop3: detected capacity change from 0 to 512 [ 180.422486][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 180.422504][ T29] audit: type=1400 audit(1700006403.300:346): avc: denied { ioctl } for pid=6183 comm="syz.0.717" path="socket:[12361]" dev="sockfs" ino=12361 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 180.422904][ T6187] EXT4-fs: test_dummy_encryption option not supported [ 180.488791][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.488962][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.568852][ T29] audit: type=1400 audit(1700006403.450:347): avc: denied { bind } for pid=6192 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.569005][ T29] audit: type=1400 audit(1700006403.450:348): avc: denied { setopt } for pid=6192 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.894473][ T29] audit: type=1400 audit(1700006404.770:349): avc: denied { create } for pid=6222 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 181.988490][ T6227] loop1: detected capacity change from 0 to 512 [ 182.516493][ T6245] loop0: detected capacity change from 0 to 256 [ 182.888066][ T6245] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 182.913854][ T6227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.913927][ T6227] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.952607][ T29] audit: type=1400 audit(1700006405.830:350): avc: denied { write } for pid=6226 comm="syz.1.736" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.952639][ T29] audit: type=1400 audit(1700006405.830:351): avc: denied { create } for pid=6226 comm="syz.1.736" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 182.958172][ T29] audit: type=1400 audit(1700006405.830:352): avc: denied { read write } for pid=6226 comm="syz.1.736" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.958263][ T29] audit: type=1400 audit(1700006405.840:353): avc: denied { open } for pid=6226 comm="syz.1.736" path="/144/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.031494][ T29] audit: type=1400 audit(1700006405.910:354): avc: denied { write } for pid=6226 comm="syz.1.736" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.035478][ T29] audit: type=1400 audit(1700006405.910:355): avc: denied { mounton } for pid=6226 comm="syz.1.736" path="/144/file0/proc" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 183.152164][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.267504][ T6253] loop0: detected capacity change from 0 to 512 [ 183.270898][ T6253] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.293286][ T6253] EXT4-fs (loop0): 1 truncate cleaned up [ 183.294117][ T6253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.296921][ T6278] loop3: detected capacity change from 0 to 256 [ 183.338205][ T6253] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #15: comm syz.0.745: bad extra_isize 62 (inode size 256) [ 183.339306][ T6253] EXT4-fs (loop0): Remounting filesystem read-only [ 183.341920][ T6278] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 183.367512][ T6279] loop2: detected capacity change from 0 to 128 [ 183.371117][ T6279] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.373053][ T6279] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.672240][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.760531][ T6294] loop2: detected capacity change from 0 to 512 [ 183.785018][ T6294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.785093][ T6294] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.831688][ T6298] EXT4-fs: Ignoring removed bh option [ 183.832415][ T6298] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 183.835333][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.863460][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.880590][ T6298] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 183.933041][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.072200][ T6312] syzkaller0: entered promiscuous mode [ 184.072225][ T6312] syzkaller0: entered allmulticast mode [ 184.073316][ T6314] set_capacity_and_notify: 1 callbacks suppressed [ 184.073330][ T6314] loop1: detected capacity change from 0 to 256 [ 184.088277][ T6314] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 184.129111][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'. [ 184.129147][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.770'. [ 184.388167][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.470036][ T3399] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.591733][ T6343] fido_id[6343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.721809][ T6349] loop4: detected capacity change from 0 to 128 [ 185.023258][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 185.103780][ T6363] FAULT_INJECTION: forcing a failure. [ 185.103780][ T6363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.103815][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.2.789 Not tainted syzkaller #0 PREEMPT(lazy) [ 185.103914][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.103928][ T6363] Call Trace: [ 185.103935][ T6363] [ 185.103942][ T6363] __dump_stack+0x1d/0x30 [ 185.103971][ T6363] dump_stack_lvl+0x95/0xd0 [ 185.103994][ T6363] dump_stack+0x15/0x1b [ 185.104035][ T6363] should_fail_ex+0x262/0x280 [ 185.104070][ T6363] should_fail+0xb/0x20 [ 185.104098][ T6363] should_fail_usercopy+0x1a/0x20 [ 185.104134][ T6363] _copy_to_user+0x20/0xa0 [ 185.104172][ T6363] bpf_verifier_vlog+0x36e/0x5a0 [ 185.104202][ T6363] __btf_verifier_log+0x7f/0xb0 [ 185.104235][ T6363] btf_verifier_log_vsi+0x173/0x1f0 [ 185.104349][ T6363] btf_datasec_check_meta+0x5ca/0x640 [ 185.104398][ T6363] btf_parse_type_sec+0x291/0x1520 [ 185.104441][ T6363] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 185.104484][ T6363] ? btf_parse_hdr+0x43a/0x440 [ 185.104530][ T6363] ? btf_parse_str_sec+0x1ae/0x1b0 [ 185.104610][ T6363] btf_new_fd+0x2ec/0x670 [ 185.104650][ T6363] bpf_btf_load+0x116/0x130 [ 185.104689][ T6363] __sys_bpf+0xbce/0xc30 [ 185.104743][ T6363] ? do_futex+0x300/0x460 [ 185.104782][ T6363] __x64_sys_bpf+0x69/0x80 [ 185.104853][ T6363] x64_sys_call+0xf26/0x2550 [ 185.104890][ T6363] do_syscall_64+0x112/0x360 [ 185.104923][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.104968][ T6363] RIP: 0033:0x7fb1b409e159 [ 185.104990][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.105012][ T6363] RSP: 002b:00007fb1b2af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.105037][ T6363] RAX: ffffffffffffffda RBX: 00007fb1b4325fa0 RCX: 00007fb1b409e159 [ 185.105056][ T6363] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 185.105073][ T6363] RBP: 00007fb1b413506b R08: 0000000000000000 R09: 0000000000000000 [ 185.105086][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.105104][ T6363] R13: 00007fb1b4326038 R14: 00007fb1b4325fa0 R15: 00007ffc2b578b28 [ 185.105124][ T6363] [ 185.482447][ T6349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.482723][ T6349] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.489898][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 185.489918][ T29] audit: type=1400 audit(1700006408.370:397): avc: denied { write } for pid=6345 comm="syz.4.783" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.490014][ T29] audit: type=1400 audit(1700006408.370:398): avc: denied { add_name } for pid=6345 comm="syz.4.783" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.716765][ T29] audit: type=1400 audit(1700006408.570:399): avc: denied { create } for pid=6352 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 185.716811][ T29] audit: type=1400 audit(1700006408.570:400): avc: denied { sys_admin } for pid=6352 comm="syz.3.785" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 186.473593][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.575233][ T29] audit: type=1400 audit(1700006409.450:401): avc: denied { name_bind } for pid=6380 comm="syz.1.797" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 186.597422][ T29] audit: type=1400 audit(1700006409.460:402): avc: denied { map } for pid=6376 comm="syz.4.791" path="/143/proc/490/task/491/fail-nth" dev="proc" ino=11788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 186.597523][ T29] audit: type=1400 audit(1700006409.460:403): avc: denied { execute } for pid=6376 comm="syz.4.791" path="/143/proc/490/task/491/fail-nth" dev="proc" ino=11788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 186.606127][ T6378] FAULT_INJECTION: forcing a failure. [ 186.606127][ T6378] name failslab, interval 1, probability 0, space 0, times 0 [ 186.606260][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.4.791 Not tainted syzkaller #0 PREEMPT(lazy) [ 186.606343][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.606411][ T6378] Call Trace: [ 186.606433][ T6378] [ 186.606457][ T6378] __dump_stack+0x1d/0x30 [ 186.606547][ T6378] dump_stack_lvl+0x95/0xd0 [ 186.606621][ T6378] dump_stack+0x15/0x1b [ 186.606696][ T6378] should_fail_ex+0x262/0x280 [ 186.606836][ T6378] ? prepare_creds+0x38/0x550 [ 186.606917][ T6378] should_failslab+0x8c/0xb0 [ 186.606994][ T6378] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 186.607087][ T6378] ? prepare_creds+0x38/0x550 [ 186.607224][ T6378] prepare_creds+0x38/0x550 [ 186.607391][ T6378] lookup_user_key+0x136/0xd60 [ 186.607477][ T6378] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 186.607615][ T6378] __se_sys_add_key+0x272/0x360 [ 186.607685][ T6378] __x64_sys_add_key+0x67/0x80 [ 186.607815][ T6378] x64_sys_call+0x1fa9/0x2550 [ 186.607912][ T6378] do_syscall_64+0x112/0x360 [ 186.608019][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.608092][ T6378] RIP: 0033:0x7f92378de159 [ 186.608181][ T6378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.608243][ T6378] RSP: 002b:00007f9236337028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 186.608372][ T6378] RAX: ffffffffffffffda RBX: 00007f9237b65fa0 RCX: 00007f92378de159 [ 186.608408][ T6378] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 186.608449][ T6378] RBP: 00007f923797506b R08: ffffffffffffffff R09: 0000000000000000 [ 186.608491][ T6378] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 186.608532][ T6378] R13: 00007f9237b66038 R14: 00007f9237b65fa0 R15: 00007ffcd9f37208 [ 186.608606][ T6378] [ 186.948036][ T29] audit: type=1400 audit(1700006409.830:404): avc: denied { ioctl } for pid=6392 comm="syz.4.800" path="socket:[12783]" dev="sockfs" ino=12783 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.205173][ T6401] loop4: detected capacity change from 0 to 128 [ 187.209309][ T6401] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.209750][ T6401] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.211721][ T29] audit: type=1400 audit(1700006410.090:405): avc: denied { write } for pid=6395 comm="syz.4.801" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.414635][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.471258][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.471377][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.580371][ T6412] syz.1.806 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 188.574143][ T6412] futex_wake_op: syz.1.806 tries to shift op by -1; fix this program [ 189.935257][ T6432] loop2: detected capacity change from 0 to 7 [ 190.421250][ T6441] loop2: detected capacity change from 0 to 128 [ 190.879435][ T6441] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.879682][ T6441] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.880457][ T29] audit: type=1400 audit(1700006413.760:406): avc: denied { write } for pid=6440 comm="syz.2.815" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.939013][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.231658][ T29] audit: type=1400 audit(1700006414.070:407): avc: denied { name_bind } for pid=6472 comm="syz.1.826" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 191.370720][ T29] audit: type=1400 audit(1700006414.250:408): avc: denied { ioctl } for pid=6476 comm="syz.3.828" path="socket:[11884]" dev="sockfs" ino=11884 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 191.427326][ T6478] netlink: 52 bytes leftover after parsing attributes in process `syz.3.828'. [ 191.575904][ T6482] loop4: detected capacity change from 0 to 128 [ 191.620213][ T6482] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.621917][ T6482] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.011768][ T6505] bridge0: port 3(syz_tun) entered blocking state [ 192.011812][ T6505] bridge0: port 3(syz_tun) entered disabled state [ 192.011928][ T6505] syz_tun: entered allmulticast mode [ 192.012482][ T6505] syz_tun: entered promiscuous mode [ 192.012726][ T6505] bridge0: port 3(syz_tun) entered blocking state [ 192.012816][ T6505] bridge0: port 3(syz_tun) entered forwarding state [ 192.101878][ T6514] loop2: detected capacity change from 0 to 512 [ 192.102259][ T6514] EXT4-fs: test_dummy_encryption option not supported [ 192.106585][ T6514] loop2: detected capacity change from 0 to 512 [ 192.115666][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.139544][ T6514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 192.139615][ T6514] System zones: 1-12 [ 192.141085][ T6514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.840: missing EA_INODE flag [ 192.141114][ T6514] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.143849][ T6514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.840: error while reading EA inode 12 err=-117 [ 192.143879][ T6514] loop2: lost filesystem error report for type 5 error -117 [ 192.145288][ T6514] EXT4-fs (loop2): 1 orphan inode deleted [ 192.172802][ T6514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.179902][ T29] audit: type=1400 audit(1700006415.060:409): avc: denied { write } for pid=6511 comm="syz.2.840" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.192192][ T29] audit: type=1400 audit(1700006415.060:410): avc: denied { write } for pid=6511 comm="syz.2.840" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.192226][ T29] audit: type=1400 audit(1700006415.060:411): avc: denied { read write open } for pid=6511 comm="syz.2.840" path="/194/file0/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 192.219990][ T29] audit: type=1400 audit(1700006415.080:412): avc: denied { ioctl } for pid=6511 comm="syz.2.840" path="/194/file0/file1" dev="loop2" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 192.320496][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.548002][ T29] audit: type=1400 audit(1700006415.430:413): avc: denied { write } for pid=6542 comm="syz.4.854" name="protocols" dev="proc" ino=4026532752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 192.550148][ T6543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.854'. [ 192.711972][ T29] audit: type=1326 audit(1700006415.580:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03de8ee159 code=0x7ffc0000 [ 192.712029][ T29] audit: type=1326 audit(1700006415.590:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.0.856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03de8ee159 code=0x7ffc0000 [ 192.772529][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.857'. [ 192.775993][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.857'. [ 192.909277][ T6557] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.946811][ T6557] md: array md0 already initialised! [ 193.022943][ T6557] md: could not open device unknown-block(1,0). [ 193.022965][ T6557] md: error, md_import_device() returned -6 [ 193.074734][ T6570] md: could not open device unknown-block(1,1). [ 193.074833][ T6570] md: error, md_import_device() returned -6 [ 193.173361][ T6585] net_ratelimit: 1 callbacks suppressed [ 193.173382][ T6585] netdevsim0: mtu less than device minimum [ 193.265871][ T6589] atomic_op ffff888103a0a548 conn xmit_atomic 0000000000000000 [ 193.340923][ T6569] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 193.534483][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.876'. [ 193.685139][ T6604] syz_tun: left allmulticast mode [ 193.685915][ T6604] syz_tun: left promiscuous mode [ 193.686707][ T6604] bridge0: port 3(syz_tun) entered disabled state [ 193.765337][ T6604] bridge_slave_0: left allmulticast mode [ 193.765415][ T6604] bridge_slave_0: left promiscuous mode [ 193.765503][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.766099][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 193.811733][ T6604] bridge_slave_1: left allmulticast mode [ 193.811828][ T6604] bridge_slave_1: left promiscuous mode [ 193.811948][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.847043][ T6604] bond0: (slave bond_slave_0): Releasing backup interface [ 193.852046][ T6604] bond0: (slave bond_slave_1): Releasing backup interface [ 193.879628][ T6604] team0: Port device team_slave_0 removed [ 193.909818][ T6604] team0: Port device team_slave_1 removed [ 193.910899][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.910913][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.914344][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.914359][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.960717][ T6604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.964739][ T6606] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 193.964759][ T6606] netlink: 'syz.2.877': attribute type 2 has an invalid length. [ 194.155601][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 194.481873][ T6650] atomic_op ffff888119e78548 conn xmit_atomic 0000000000000000 [ 195.269973][ T6662] loop3: detected capacity change from 0 to 128 [ 195.483858][ T6662] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.484418][ T6662] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.873761][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.917401][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 195.975330][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 196.089914][ T6698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.908'. [ 196.312643][ T6706] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 196.325552][ T6693] FAULT_INJECTION: forcing a failure. [ 196.325552][ T6693] name fail_futex, interval 1, probability 0, space 0, times 1 [ 196.327527][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.0.913 Not tainted syzkaller #0 PREEMPT(lazy) [ 196.327568][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.327585][ T6693] Call Trace: [ 196.327594][ T6693] [ 196.327605][ T6693] __dump_stack+0x1d/0x30 [ 196.327711][ T6693] dump_stack_lvl+0x95/0xd0 [ 196.327735][ T6693] dump_stack+0x15/0x1b [ 196.327828][ T6693] should_fail_ex+0x262/0x280 [ 196.327853][ T6693] should_fail+0xb/0x20 [ 196.327881][ T6693] get_futex_key+0x594/0xb10 [ 196.327991][ T6693] futex_wake+0x89/0x400 [ 196.328011][ T6693] ? irqentry_exit+0x7d/0x610 [ 196.328149][ T6693] ? perf_lock_task_context+0x24b/0x2c0 [ 196.328209][ T6693] do_futex+0x3f8/0x460 [ 196.328239][ T6693] mm_exit_exec_release+0xab/0x190 [ 196.328266][ T6693] exit_mm+0x37/0x1a0 [ 196.328297][ T6693] do_exit+0x438/0x1510 [ 196.328358][ T6693] do_group_exit+0xfe/0x140 [ 196.328394][ T6693] ? get_signal+0xe00/0xf10 [ 196.328480][ T6693] get_signal+0xe07/0xf10 [ 196.328574][ T6693] arch_do_signal_or_restart+0x96/0x480 [ 196.328620][ T6693] exit_to_user_mode_loop+0x15d/0x8c0 [ 196.328701][ T6693] do_syscall_64+0x212/0x360 [ 196.328729][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.328759][ T6693] RIP: 0033:0x7f03de8ee159 [ 196.328778][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.328843][ T6693] RSP: 002b:00007f03dd3470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.328938][ T6693] RAX: fffffffffffffe00 RBX: 00007f03deb75fa8 RCX: 00007f03de8ee159 [ 196.328952][ T6693] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03deb75fa8 [ 196.328965][ T6693] RBP: 00007f03deb75fa0 R08: 0000000000000000 R09: 0000000000000000 [ 196.329007][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.329021][ T6693] R13: 00007f03deb76038 R14: 00007ffefd12a8c0 R15: 00007ffefd12a9a8 [ 196.329040][ T6693] [ 196.673355][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 196.673387][ T29] audit: type=1400 audit(1700006419.550:442): avc: denied { bind } for pid=6716 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.682666][ T6721] ip_tables: iptables: counters copy to user failed while replacing table [ 196.707171][ T6718] syzkaller1: entered promiscuous mode [ 196.707231][ T6718] syzkaller1: entered allmulticast mode [ 196.768083][ T29] audit: type=1400 audit(1700006419.650:443): avc: denied { bind } for pid=6728 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 196.803342][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 196.918349][ T29] audit: type=1400 audit(1700006419.710:444): avc: denied { bind } for pid=6735 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.933035][ T29] audit: type=1400 audit(1700006419.810:445): avc: denied { setopt } for pid=6735 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.933464][ T29] audit: type=1400 audit(1700006419.810:446): avc: denied { listen } for pid=6735 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.072300][ T6757] loop2: detected capacity change from 0 to 128 [ 198.085638][ T6757] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.099588][ T6757] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.316154][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.940'. [ 198.577054][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.719606][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 198.758588][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 198.758613][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 198.758642][ T6807] netlink: 'syz.2.956': attribute type 18 has an invalid length. [ 198.797109][ T6006] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.797148][ T6006] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.797248][ T6006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.797383][ T6006] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.921669][ T6813] loop1: detected capacity change from 0 to 128 [ 199.026464][ T6816] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 199.043318][ T6816] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 199.067958][ T6816] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 199.068282][ T6816] netlink: 'syz.0.960': attribute type 3 has an invalid length. [ 199.073432][ T6816] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 199.073449][ T6816] netlink: 'syz.0.960': attribute type 3 has an invalid length. [ 199.191590][ T6813] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.195689][ T6813] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.484395][ T6834] netlink: 168 bytes leftover after parsing attributes in process `syz.2.965'. [ 199.516763][ T29] audit: type=1400 audit(1700006422.360:447): avc: denied { setopt } for pid=6824 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.772583][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.969'. [ 200.027676][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.082099][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 200.082673][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 200.634576][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.981'. [ 200.924767][ T6905] loop3: detected capacity change from 0 to 1024 [ 200.927298][ T6905] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 201.549529][ T6905] loop3: detected capacity change from 0 to 512 [ 201.566550][ T6905] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.994: corrupted in-inode xattr: invalid ea_ino [ 201.566584][ T6905] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.566701][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 201.566743][ C0] EXT4-fs (loop3): initial error at time 1700006424: ext4_iget_extra_inode:5210: inode 15 [ 201.566783][ C0] EXT4-fs (loop3): last error at time 1700006424: ext4_iget_extra_inode:5210: inode 15 [ 201.618428][ T6905] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.994: couldn't read orphan inode 15 (err -117) [ 201.618495][ T6905] loop3: lost filesystem error report for type 5 error -117 [ 201.619108][ T6905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.621917][ T29] audit: type=1400 audit(1700006424.500:448): avc: denied { write } for pid=6904 comm="syz.3.994" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.880217][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.977604][ T29] audit: type=1400 audit(1700006424.850:449): avc: denied { ioctl } for pid=6931 comm="syz.3.1004" path="socket:[13695]" dev="sockfs" ino=13695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.986175][ T6936] __nla_validate_parse: 1 callbacks suppressed [ 201.986196][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1005'. [ 202.039148][ T6940] Cannot find del_set index 17 as target [ 202.068249][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1007'. [ 202.296055][ T6956] UDC core: g1: couldn't find an available UDC or it's busy [ 202.350478][ T29] audit: type=1400 audit(1700006425.170:450): avc: denied { write } for pid=6953 comm="syz.2.1012" name="c.1" dev="configfs" ino=6933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 202.350565][ T29] audit: type=1400 audit(1700006425.170:451): avc: denied { create } for pid=6953 comm="syz.2.1012" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 202.412681][ T29] audit: type=1400 audit(1700006425.290:452): avc: denied { write } for pid=6957 comm="syz.0.1013" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 203.065069][ T29] audit: type=1400 audit(1700006425.940:453): avc: denied { bind } for pid=6967 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 203.066665][ T29] audit: type=1400 audit(1700006425.940:454): avc: denied { ioctl } for pid=6967 comm="syz.2.1017" path="socket:[13737]" dev="sockfs" ino=13737 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.115365][ T29] audit: type=1400 audit(1700006425.990:455): avc: denied { getattr } for pid=6970 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.153571][ T29] audit: type=1400 audit(1700006426.030:456): avc: denied { read } for pid=6972 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.153680][ T29] audit: type=1400 audit(1700006426.030:457): avc: denied { open } for pid=6972 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.297203][ T29] audit: type=1400 audit(1700006426.170:458): avc: denied { write } for pid=6969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.302395][ T6979] loop2: detected capacity change from 0 to 128 [ 203.342996][ T6979] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.345716][ T6979] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.433862][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'. [ 203.532163][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'. [ 203.562990][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.721832][ T6883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.723079][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 203.820589][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1030'. [ 203.866165][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1034'. [ 203.971820][ T7052] loop1: detected capacity change from 0 to 128 [ 203.985651][ T7052] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.986175][ T7052] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.270080][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 204.297228][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 204.516026][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.555285][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 204.622708][ T7092] printk: console [ttyS0] disabled [ 204.674912][ T7092] printk: console [ttyS0] enabled [ 204.738884][ T7109] loop2: detected capacity change from 0 to 7 [ 204.949405][ T7137] random: crng reseeded on system resumption [ 204.976551][ T7140] loop2: detected capacity change from 0 to 7 [ 205.318676][ T7173] atomic_op ffff88811bab6548 conn xmit_atomic 0000000000000000 [ 205.728370][ T7177] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 205.945604][ T7202] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 206.229265][ T7241] printk: console [ttyS0] disabled [ 206.276410][ T7241] printk: console [ttyS0] enabled [ 206.304679][ T7241] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 208.166999][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 208.167018][ T29] audit: type=1400 audit(1700006431.040:493): avc: denied { setopt } for pid=7326 comm="syz.0.1152" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.167050][ T29] audit: type=1400 audit(1700006431.040:494): avc: denied { connect } for pid=7326 comm="syz.0.1152" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.167083][ T29] audit: type=1400 audit(1700006431.040:495): avc: denied { write } for pid=7326 comm="syz.0.1152" path="socket:[15110]" dev="sockfs" ino=15110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.443249][ T7336] loop2: detected capacity change from 0 to 7 [ 208.551146][ T7342] __nla_validate_parse: 22 callbacks suppressed [ 208.551169][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 208.552574][ T7340] FAULT_INJECTION: forcing a failure. [ 208.552574][ T7340] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.552609][ T7340] CPU: 0 UID: 0 PID: 7340 Comm: syz.0.1158 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.552633][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.552704][ T7340] Call Trace: [ 208.552720][ T7340] [ 208.552728][ T7340] __dump_stack+0x1d/0x30 [ 208.552755][ T7340] dump_stack_lvl+0x95/0xd0 [ 208.552787][ T7340] dump_stack+0x15/0x1b [ 208.552816][ T7340] should_fail_ex+0x262/0x280 [ 208.552914][ T7340] should_fail+0xb/0x20 [ 208.552944][ T7340] get_futex_key+0x12d/0xb10 [ 208.552982][ T7340] futex_wake+0x89/0x400 [ 208.553087][ T7340] do_futex+0x3f8/0x460 [ 208.553156][ T7340] ? __rcu_read_unlock+0x4e/0x70 [ 208.553205][ T7340] __se_sys_futex+0x2f6/0x370 [ 208.553270][ T7340] ? fput+0x91/0xc0 [ 208.553352][ T7340] __x64_sys_futex+0x78/0x90 [ 208.553448][ T7340] x64_sys_call+0x22e2/0x2550 [ 208.553480][ T7340] do_syscall_64+0x112/0x360 [ 208.553501][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.553526][ T7340] RIP: 0033:0x7f03de8ee159 [ 208.553542][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.553633][ T7340] RSP: 002b:00007f03dd3470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.553662][ T7340] RAX: ffffffffffffffda RBX: 00007f03deb75fa8 RCX: 00007f03de8ee159 [ 208.553682][ T7340] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03deb75fac [ 208.553702][ T7340] RBP: 00007f03deb75fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 208.553728][ T7340] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 208.553748][ T7340] R13: 00007f03deb76038 R14: 00007ffefd12a8c0 R15: 00007ffefd12a9a8 [ 208.553769][ T7340] [ 209.142952][ T7366] loop3: detected capacity change from 0 to 128 [ 209.176586][ T7366] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.191502][ T7366] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.302055][ T29] audit: type=1400 audit(1700006432.080:496): avc: denied { watch watch_reads } for pid=7349 comm="syz.2.1162" path="/266" dev="tmpfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.302088][ T29] audit: type=1400 audit(1700006432.080:497): avc: denied { write } for pid=7362 comm="syz.3.1157" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.188647][ T7366] syz.3.1157 (7366) used greatest stack depth: 9760 bytes left [ 210.212556][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.264386][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1170'. [ 210.284028][ T7380] FAULT_INJECTION: forcing a failure. [ 210.284028][ T7380] name fail_futex, interval 1, probability 0, space 0, times 0 [ 210.284070][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: syz.0.1171 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.284105][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.284123][ T7380] Call Trace: [ 210.284133][ T7380] [ 210.284144][ T7380] __dump_stack+0x1d/0x30 [ 210.284249][ T7380] dump_stack_lvl+0x95/0xd0 [ 210.284276][ T7380] dump_stack+0x15/0x1b [ 210.284308][ T7380] should_fail_ex+0x262/0x280 [ 210.284334][ T7380] should_fail+0xb/0x20 [ 210.284365][ T7380] get_futex_key+0x12d/0xb10 [ 210.284402][ T7380] futex_wake+0x89/0x400 [ 210.284427][ T7380] do_futex+0x3f8/0x460 [ 210.284465][ T7380] ? __rcu_read_unlock+0x4e/0x70 [ 210.284518][ T7380] __se_sys_futex+0x2f6/0x370 [ 210.284596][ T7380] ? fput+0x91/0xc0 [ 210.284635][ T7380] __x64_sys_futex+0x78/0x90 [ 210.284676][ T7380] x64_sys_call+0x22e2/0x2550 [ 210.284772][ T7380] do_syscall_64+0x112/0x360 [ 210.284851][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.284876][ T7380] RIP: 0033:0x7f03de8ee159 [ 210.284892][ T7380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.284911][ T7380] RSP: 002b:00007f03dd3470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.284934][ T7380] RAX: ffffffffffffffda RBX: 00007f03deb75fa8 RCX: 00007f03de8ee159 [ 210.284954][ T7380] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03deb75fac [ 210.285037][ T7380] RBP: 00007f03deb75fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 210.285083][ T7380] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 210.285101][ T7380] R13: 00007f03deb76038 R14: 00007ffefd12a8c0 R15: 00007ffefd12a9a8 [ 210.285198][ T7380] [ 210.655643][ T7421] FAULT_INJECTION: forcing a failure. [ 210.655643][ T7421] name fail_futex, interval 1, probability 0, space 0, times 0 [ 210.655724][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.2.1185 Not tainted syzkaller #0 PREEMPT(lazy) [ 210.655799][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.655812][ T7421] Call Trace: [ 210.655819][ T7421] [ 210.655827][ T7421] __dump_stack+0x1d/0x30 [ 210.655891][ T7421] dump_stack_lvl+0x95/0xd0 [ 210.655927][ T7421] dump_stack+0x15/0x1b [ 210.655956][ T7421] should_fail_ex+0x262/0x280 [ 210.655981][ T7421] should_fail+0xb/0x20 [ 210.656024][ T7421] get_futex_key+0x12d/0xb10 [ 210.656065][ T7421] futex_wake+0x89/0x400 [ 210.656094][ T7421] do_futex+0x3f8/0x460 [ 210.656133][ T7421] ? __rcu_read_unlock+0x4e/0x70 [ 210.656229][ T7421] __se_sys_futex+0x2f6/0x370 [ 210.656263][ T7421] ? fput+0x91/0xc0 [ 210.656293][ T7421] __x64_sys_futex+0x78/0x90 [ 210.656374][ T7421] x64_sys_call+0x22e2/0x2550 [ 210.656411][ T7421] do_syscall_64+0x112/0x360 [ 210.656440][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.656509][ T7421] RIP: 0033:0x7fb1b409e159 [ 210.656529][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.656548][ T7421] RSP: 002b:00007fb1b2af70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.656569][ T7421] RAX: ffffffffffffffda RBX: 00007fb1b4325fa8 RCX: 00007fb1b409e159 [ 210.656588][ T7421] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb1b4325fac [ 210.656627][ T7421] RBP: 00007fb1b4325fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 210.656646][ T7421] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 210.656662][ T7421] R13: 00007fb1b4326038 R14: 00007ffc2b578a40 R15: 00007ffc2b578b28 [ 210.656682][ T7421] [ 211.230534][ T7427] ip_tables: iptables: counters copy to user failed while replacing table [ 211.530815][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1197'. [ 211.737891][ T29] audit: type=1400 audit(1700006434.570:498): avc: denied { ioctl } for pid=7470 comm="syz.3.1205" path="socket:[15282]" dev="sockfs" ino=15282 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.986029][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 212.089834][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1209'. [ 212.257902][ T7494] capability: warning: `syz.2.1212' uses deprecated v2 capabilities in a way that may be insecure [ 212.258075][ T7494] kernel profiling enabled (shift: 16) [ 212.314110][ T7499] loop2: detected capacity change from 0 to 256 [ 212.824494][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 212.875195][ T7526] bridge0: port 1(syz_tun) entered blocking state [ 212.875238][ T7526] bridge0: port 1(syz_tun) entered disabled state [ 212.875441][ T7526] syz_tun: entered allmulticast mode [ 212.876032][ T7526] syz_tun: entered promiscuous mode [ 212.876262][ T7526] bridge0: port 1(syz_tun) entered blocking state [ 212.876366][ T7526] bridge0: port 1(syz_tun) entered forwarding state [ 213.107304][ T7547] loop3: detected capacity change from 0 to 512 [ 213.110395][ T7547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.114511][ T7547] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0082] [ 213.116464][ T7547] EXT4-fs (loop3): 1 truncate cleaned up [ 213.117093][ T7547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.164320][ T29] audit: type=1400 audit(1700006436.050:499): avc: denied { write } for pid=7546 comm="syz.3.1234" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.164361][ T29] audit: type=1400 audit(1700006436.050:500): avc: denied { write } for pid=7546 comm="syz.3.1234" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.164395][ T29] audit: type=1400 audit(1700006436.050:501): avc: denied { remove_name } for pid=7546 comm="syz.3.1234" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.164429][ T29] audit: type=1400 audit(1700006436.050:502): avc: denied { rename } for pid=7546 comm="syz.3.1234" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 213.262048][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.386594][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 213.386613][ T29] audit: type=1400 audit(1700006436.260:504): avc: denied { read } for pid=7574 comm="syz.1.1247" path="socket:[15795]" dev="sockfs" ino=15795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.728455][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 213.752629][ T29] audit: type=1400 audit(1700006436.630:505): avc: denied { read } for pid=7596 comm="syz.4.1257" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.752675][ T29] audit: type=1400 audit(1700006436.630:506): avc: denied { open } for pid=7596 comm="syz.4.1257" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 213.813715][ T29] audit: type=1400 audit(1700006436.690:507): avc: denied { ioctl } for pid=7596 comm="syz.4.1257" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.461086][ T29] audit: type=1400 audit(1700006437.340:508): avc: denied { create } for pid=7606 comm="syz.3.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 214.491710][ T29] audit: type=1400 audit(1700006437.370:509): avc: denied { getopt } for pid=7606 comm="syz.3.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 214.734580][ T7624] printk: console [ttyS0] disabled [ 214.853050][ T7624] printk: console [ttyS0] enabled [ 214.912592][ T7639] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 214.929742][ T7639] bond1: entered promiscuous mode [ 214.931504][ T7639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.733216][ T7664] loop4: detected capacity change from 0 to 128 [ 215.775643][ T7664] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.776219][ T7664] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.800040][ T29] audit: type=1400 audit(1700006438.670:510): avc: denied { write } for pid=7660 comm="syz.4.1282" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.995023][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.085071][ T7677] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 216.103431][ T7685] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 216.310907][ T7703] loop4: detected capacity change from 0 to 128 [ 216.316597][ T7703] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.323588][ T7703] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.346864][ T29] audit: type=1400 audit(1700006439.210:511): avc: denied { write } for pid=7701 comm="syz.4.1299" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.530366][ T7712] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 216.582181][ T29] audit: type=1400 audit(1700006439.460:512): avc: denied { execute } for pid=7715 comm="syz.1.1305" name="file0" dev="tmpfs" ino=1421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.582353][ T7716] process 'syz.1.1305' launched './file0' with NULL argv: empty string added [ 216.582464][ T29] audit: type=1400 audit(1700006439.460:513): avc: denied { execute_no_trans } for pid=7715 comm="syz.1.1305" path="/261/file0" dev="tmpfs" ino=1421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.664797][ T7720] FAULT_INJECTION: forcing a failure. [ 216.664797][ T7720] name fail_futex, interval 1, probability 0, space 0, times 0 [ 216.664901][ T7720] CPU: 1 UID: 0 PID: 7720 Comm: syz.1.1307 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.664987][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.664999][ T7720] Call Trace: [ 216.665005][ T7720] [ 216.665012][ T7720] __dump_stack+0x1d/0x30 [ 216.665035][ T7720] dump_stack_lvl+0x95/0xd0 [ 216.665056][ T7720] dump_stack+0x15/0x1b [ 216.665114][ T7720] should_fail_ex+0x262/0x280 [ 216.665138][ T7720] should_fail+0xb/0x20 [ 216.665201][ T7720] get_futex_key+0x12d/0xb10 [ 216.665229][ T7720] futex_wake+0x89/0x400 [ 216.665249][ T7720] do_futex+0x3f8/0x460 [ 216.665276][ T7720] ? __rcu_read_unlock+0x4e/0x70 [ 216.665356][ T7720] __se_sys_futex+0x2f6/0x370 [ 216.665440][ T7720] ? fput+0x91/0xc0 [ 216.665461][ T7720] __x64_sys_futex+0x78/0x90 [ 216.665544][ T7720] x64_sys_call+0x22e2/0x2550 [ 216.665583][ T7720] do_syscall_64+0x112/0x360 [ 216.665672][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.665719][ T7720] RIP: 0033:0x7f15e1a0e159 [ 216.665734][ T7720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.665815][ T7720] RSP: 002b:00007f15e04670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.665834][ T7720] RAX: ffffffffffffffda RBX: 00007f15e1c95fa8 RCX: 00007f15e1a0e159 [ 216.665847][ T7720] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f15e1c95fac [ 216.665860][ T7720] RBP: 00007f15e1c95fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 216.665878][ T7720] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 216.665890][ T7720] R13: 00007f15e1c96038 R14: 00007fff6507d020 R15: 00007fff6507d108 [ 216.665908][ T7720] [ 216.691657][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.943001][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 216.943593][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 217.120163][ T7748] FAULT_INJECTION: forcing a failure. [ 217.120163][ T7748] name fail_futex, interval 1, probability 0, space 0, times 0 [ 217.120200][ T7748] CPU: 0 UID: 0 PID: 7748 Comm: syz.4.1319 Not tainted syzkaller #0 PREEMPT(lazy) [ 217.120230][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.120243][ T7748] Call Trace: [ 217.120321][ T7748] [ 217.120330][ T7748] __dump_stack+0x1d/0x30 [ 217.120359][ T7748] dump_stack_lvl+0x95/0xd0 [ 217.120460][ T7748] dump_stack+0x15/0x1b [ 217.120488][ T7748] should_fail_ex+0x262/0x280 [ 217.120586][ T7748] should_fail+0xb/0x20 [ 217.120619][ T7748] get_futex_key+0x12d/0xb10 [ 217.120658][ T7748] ? lapic_next_event+0x11/0x20 [ 217.120685][ T7748] futex_wake+0x89/0x400 [ 217.120702][ T7748] ? tick_program_event+0x79/0xc0 [ 217.120740][ T7748] do_futex+0x3f8/0x460 [ 217.120824][ T7748] ? __rcu_read_unlock+0x4e/0x70 [ 217.120870][ T7748] __se_sys_futex+0x2f6/0x370 [ 217.120940][ T7748] ? fput+0x91/0xc0 [ 217.120962][ T7748] __x64_sys_futex+0x78/0x90 [ 217.121058][ T7748] x64_sys_call+0x22e2/0x2550 [ 217.121095][ T7748] do_syscall_64+0x112/0x360 [ 217.121124][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.121202][ T7748] RIP: 0033:0x7f92378de159 [ 217.121218][ T7748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.121242][ T7748] RSP: 002b:00007f92363370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.121264][ T7748] RAX: ffffffffffffffda RBX: 00007f9237b65fa8 RCX: 00007f92378de159 [ 217.121285][ T7748] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9237b65fac [ 217.121309][ T7748] RBP: 00007f9237b65fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 217.121329][ T7748] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 217.121348][ T7748] R13: 00007f9237b66038 R14: 00007ffcd9f37120 R15: 00007ffcd9f37208 [ 217.121375][ T7748] [ 217.448723][ T7760] loop2: detected capacity change from 0 to 7 [ 218.145825][ T7785] FAULT_INJECTION: forcing a failure. [ 218.145825][ T7785] name fail_futex, interval 1, probability 0, space 0, times 0 [ 218.145859][ T7785] CPU: 0 UID: 0 PID: 7785 Comm: syz.1.1331 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.145893][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.145981][ T7785] Call Trace: [ 218.145988][ T7785] [ 218.146061][ T7785] __dump_stack+0x1d/0x30 [ 218.146134][ T7785] dump_stack_lvl+0x95/0xd0 [ 218.146160][ T7785] dump_stack+0x15/0x1b [ 218.146182][ T7785] should_fail_ex+0x262/0x280 [ 218.146254][ T7785] should_fail+0xb/0x20 [ 218.146283][ T7785] get_futex_key+0x12d/0xb10 [ 218.146312][ T7785] futex_wake+0x89/0x400 [ 218.146365][ T7785] do_futex+0x3f8/0x460 [ 218.146404][ T7785] ? __rcu_read_unlock+0x4e/0x70 [ 218.146521][ T7785] __se_sys_futex+0x2f6/0x370 [ 218.146560][ T7785] ? fput+0x91/0xc0 [ 218.146586][ T7785] __x64_sys_futex+0x78/0x90 [ 218.146635][ T7785] x64_sys_call+0x22e2/0x2550 [ 218.146666][ T7785] do_syscall_64+0x112/0x360 [ 218.146711][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.146750][ T7785] RIP: 0033:0x7f15e1a0e159 [ 218.146765][ T7785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.146790][ T7785] RSP: 002b:00007f15e04670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.146816][ T7785] RAX: ffffffffffffffda RBX: 00007f15e1c95fa8 RCX: 00007f15e1a0e159 [ 218.146882][ T7785] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f15e1c95fac [ 218.146900][ T7785] RBP: 00007f15e1c95fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 218.146916][ T7785] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 218.146930][ T7785] R13: 00007f15e1c96038 R14: 00007fff6507d020 R15: 00007fff6507d108 [ 218.146955][ T7785] [ 218.332324][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 218.572234][ T7797] loop4: detected capacity change from 0 to 128 [ 218.579317][ T7797] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.579947][ T7797] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.909606][ T7787] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 219.028834][ T7797] ================================================================== [ 219.028877][ T7797] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 219.028923][ T7797] [ 219.028929][ T7797] write to 0xffffea0004762d98 of 8 bytes by task 7780 on cpu 0: [ 219.028948][ T7797] __filemap_remove_folio+0x201/0x2e0 [ 219.028984][ T7797] filemap_remove_folio+0x6d/0x1d0 [ 219.029019][ T7797] truncate_inode_folio+0x42/0x50 [ 219.029050][ T7797] shmem_undo_range+0x27f/0xb60 [ 219.029080][ T7797] shmem_evict_inode+0x12d/0x580 [ 219.029115][ T7797] evict+0x2a5/0x510 [ 219.029143][ T7797] iput+0x430/0x5a0 [ 219.029164][ T7797] dentry_unlink_inode+0x24a/0x260 [ 219.029195][ T7797] dentry_kill+0x184/0x500 [ 219.029226][ T7797] finish_dput+0x16/0x1d0 [ 219.029248][ T7797] dput+0x48/0x50 [ 219.029266][ T7797] __fput+0x43e/0x630 [ 219.029286][ T7797] ____fput+0x1c/0x30 [ 219.029305][ T7797] task_work_run+0x130/0x1a0 [ 219.029329][ T7797] do_exit+0x4a4/0x1510 [ 219.029358][ T7797] do_group_exit+0xfe/0x140 [ 219.029389][ T7797] get_signal+0xe07/0xf10 [ 219.029423][ T7797] arch_do_signal_or_restart+0x96/0x480 [ 219.029455][ T7797] irqentry_exit+0x14d/0x610 [ 219.029483][ T7797] asm_exc_page_fault+0x26/0x30 [ 219.029505][ T7797] [ 219.029510][ T7797] read to 0xffffea0004762d98 of 8 bytes by task 7797 on cpu 1: [ 219.029527][ T7797] folio_mapping+0xa1/0xe0 [ 219.029558][ T7797] evict_folios+0xd80/0x2830 [ 219.029581][ T7797] try_to_shrink_lruvec+0x8fd/0xb30 [ 219.029607][ T7797] shrink_lruvec+0x252/0x1d40 [ 219.029640][ T7797] shrink_node+0x67c/0x2000 [ 219.029663][ T7797] do_try_to_free_pages+0x408/0xca0 [ 219.029697][ T7797] try_to_free_mem_cgroup_pages+0x201/0x420 [ 219.029731][ T7797] mem_cgroup_resize_max+0x13d/0x290 [ 219.029761][ T7797] mem_cgroup_write+0x132/0x1c0 [ 219.029786][ T7797] cgroup_file_write+0x197/0x350 [ 219.029818][ T7797] kernfs_fop_write_iter+0x1d2/0x2e0 [ 219.029843][ T7797] vfs_write+0x57f/0x9a0 [ 219.029872][ T7797] ksys_write+0xdc/0x1a0 [ 219.029901][ T7797] __x64_sys_write+0x40/0x50 [ 219.029931][ T7797] x64_sys_call+0x154e/0x2550 [ 219.029959][ T7797] do_syscall_64+0x112/0x360 [ 219.029975][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.029996][ T7797] [ 219.029999][ T7797] value changed: 0xffff88811f0fda60 -> 0x0000000000000000 [ 219.030011][ T7797] [ 219.030015][ T7797] Reported by Kernel Concurrency Sanitizer on: [ 219.030025][ T7797] CPU: 1 UID: 0 PID: 7797 Comm: syz.4.1334 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.030053][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.030068][ T7797] ================================================================== [ 219.445943][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.