last executing test programs: 49.430786027s ago: executing program 1 (id=535): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04004100000010"]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 49.274708272s ago: executing program 1 (id=538): bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfc) fallocate(r0, 0x0, 0xbf5, 0x2000402) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x1) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000380)={&(0x7f00000008c0)=[{0x2, 0x1, 0x0, {0x0, 0x3f, 0x2}}, {0x872000000, 0x0, 0x0, {0xbd, 0xfffff4be, 0x1}}, {0x9, 0x2, 0x0, {0xffffffffffffffff, 0x1000}}, {0x2, 0x0, 0x0, {0x3, 0x3}}, {0x8, 0x1, 0x0, {0x100005, 0x4, 0x2}}, {0xfffffffffffffff7, 0x1, 0x0, {0xf, 0x5, 0x2}}, {0x6, 0x1, 0x0, {0x11, 0x8}}, {0x9, 0x1, 0x0, {0x6, 0x9, 0x1}}, {0x9, 0x0, 0x0, {0x0, 0x3, 0x2}}, {0x5, 0x1, 0x0, {0xc0, 0x1000, 0x1}}], 0xa, 0x20, 0xfe00}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x800}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 49.130030454s ago: executing program 1 (id=540): r0 = socket$inet(0x2, 0xa, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@resuid={'resuid', 0x3d, r1}}, {@usrquota}]}, 0x41, 0x51f, &(0x7f0000001200)="$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") 48.589330944s ago: executing program 1 (id=544): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) capset(0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"}) 47.896901788s ago: executing program 1 (id=551): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000140)='.\x00', 0x8400, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 47.88738357s ago: executing program 1 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 32.846664245s ago: executing program 32 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 28.318388782s ago: executing program 3 (id=1113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x24}}, 0x0) 28.19491356s ago: executing program 3 (id=1115): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x1a}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0xa) 28.049992182s ago: executing program 3 (id=1118): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, 0xfffffffffffffffe) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000540)={0x40, 0x0, 0xf, "48d68f9027f8c3eb34a9ff09d95020"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.010404438s ago: executing program 3 (id=1145): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x511, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 24.452667762s ago: executing program 3 (id=1155): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 24.218664624s ago: executing program 3 (id=1156): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x1a}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0xa) 24.218505264s ago: executing program 33 (id=1156): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x1a}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0xa) 2.24674029s ago: executing program 2 (id=1480): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000280)=""/17) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) 2.232924543s ago: executing program 6 (id=1481): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='gid=$\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f\xa2a\xe8P\xfc\x80\x81X\xbb\a\x00\x00\x00x\x10\xa3\xc8n\xa4\'\x1fpuM\xb7\xe6:\xa0\x04\xb2\xeft\xc8\x82t\x96\xf8\xcc\xc5\xa8k\xaa\xad.$\xba\xef\"\x8c\xef\t?\x8by\b\xc0%\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) socket$igmp6(0xa, 0x3, 0x2) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) r5 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 1.825921474s ago: executing program 5 (id=1488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x0, 0x7, 0x301}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x110000) close(r4) 1.270489287s ago: executing program 2 (id=1489): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000440)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x4, 0x101}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x40}, 0x300, 0x0, 0x2, 0x8, 0xfffe, 0x400}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setreuid(0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4080) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r3, &(0x7f0000001640)="8b", 0x1) 1.206239081s ago: executing program 0 (id=1491): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 1.146589605s ago: executing program 0 (id=1492): socket$inet6_tcp(0xa, 0x1, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) gettid() mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.146448805s ago: executing program 0 (id=1493): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x8000) 1.021246863s ago: executing program 4 (id=1494): setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000080)={[{@nodioread_nolock}, {@dioread_lock}, {@sb={'sb', 0x3d, 0x1}}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000000b00)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.008434746s ago: executing program 4 (id=1495): sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/245, 0xfffffffffffffe4e, 0x30c64a8c5dc2dff0, 0x0, 0x0) 958.372177ms ago: executing program 4 (id=1496): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7, 0x10c4404, 0x2, 0x6, 0x7, 0x6, 0x0, 0x0, 0x4}}, 0xff18) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000f80)=""/64, 0x40}, {&(0x7f0000002340)=""/4101, 0x1005}], 0x2}, 0x63}], 0x1, 0x40000142, 0x0) 957.145007ms ago: executing program 6 (id=1497): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xb93c000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) 894.608961ms ago: executing program 6 (id=1498): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 894.275111ms ago: executing program 5 (id=1499): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0x2a12, 0x2, 0x1}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r0}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) setpriority(0x2, 0x0, 0x7) 894.035951ms ago: executing program 4 (id=1500): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c0000001000010010000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="595b00002a89000058001a8054000aa01400070020010000000000000000000000000002050008000200000005000800f9000000050008007d004efe6ab2cdf1e5a40000140007000000000000000000000000000000000000140035006772653000"/109], 0x8c}}, 0x8800) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000280)=""/226, 0x0, 0xe2, 0x0, 0x6a, 0x10000}, 0x28) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 660.382913ms ago: executing program 6 (id=1501): bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfc) fallocate(r0, 0x0, 0xbf5, 0x2000402) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x1) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x800}) 466.136236ms ago: executing program 2 (id=1502): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8", 0x2}], 0x1}}], 0x1, 0x2081) sendmsg$inet(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f00000000c0)="6f2bd6f0df16ecf9970ba374625a1dba247098cf6baf0f5efc515c00698252b2f3e1af572dddb41fc58b5576d9700e9b76a329f058aa2c195d3332c3a54f527be9cf227c743318dfd25c9e30e792699c3f336d5217413bde516a3f5258b950131607a04a05ab16698a46c21577d3b808dbed5a32d5c896c7bee108e160a0dff9dd2a9ce3508a62c17fd1c94693760da53e38355feb71c0153fe5b10b1aff914ddfb7a61a8bfc4361e077f54a", 0xac}, {&(0x7f0000000180)="3fe738a0dfb25af2819b4cb0c80f8f568f8419c4864d6e826761", 0x1a}], 0x2}, 0x20000011) write(r0, &(0x7f0000001200)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228c29b717b6934bdef1800e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f230519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108cb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c336737e7212ca13647e4bbd9ce6656123f394b7f26f1e0420a9ac4cb25", 0xda) shutdown(r0, 0x1) 397.234142ms ago: executing program 2 (id=1503): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) 397.012371ms ago: executing program 2 (id=1504): socket$inet6_tcp(0xa, 0x1, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) gettid() mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 396.800762ms ago: executing program 2 (id=1505): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x198, 0x1f0, 0x1f0, 0x198, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @multicast1, 0xff0000ff, 0x0, 'sit0\x00', '\x00', {}, {}, 0xc}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x81, 0x3]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400], 0x0, 0x0, 0xffffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) signalfd(r0, &(0x7f0000000140)={[0xfffffffffffffff6]}, 0x8) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="071404", @ANYRES32, @ANYRESHEX=r0, @ANYRES8=r2], 0xa8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000018000504010000000000000002180000fe03000100000000080001000a141e00160012000a00fe80000000000000000000000000000100000800040002000000"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000200000000000000022000000000000000000000080001000a141e28"], 0x24}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @loopback, 0x7}, 0x1c) listen(r5, 0x5) sendto$inet6(r4, 0x0, 0x0, 0x24040004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7f}, 0x1c) 330.109377ms ago: executing program 0 (id=1506): sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/245, 0xfffffffffffffe4e, 0x30c64a8c5dc2dff0, 0x0, 0x0) 316.906479ms ago: executing program 0 (id=1507): mkdirat(0xffffffffffffff9c, 0x0, 0x137) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = memfd_create(0x0, 0x2) sendfile(r3, r3, 0x0, 0x8) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x100, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3a8bc000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f00000011c0)={&(0x7f0000000000)=0x8, 0x3, &(0x7f0000001800), &(0x7f0000001180)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x800) setsockopt$sock_int(r4, 0x1, 0x800000000f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 189.785708ms ago: executing program 6 (id=1508): r0 = syz_open_procfs$namespace(0x0, 0x0) setns(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) socket$igmp6(0xa, 0x3, 0x2) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) r5 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 90.574399ms ago: executing program 0 (id=1509): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000000)={0x0}) wait4(r0, &(0x7f0000000000), 0x40000000, 0x0) 81.780082ms ago: executing program 5 (id=1510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8005000100030000000500040006000000080002000600"], 0x40}, 0x1, 0x0, 0x0, 0x24881}, 0x800) 16.556346ms ago: executing program 5 (id=1511): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e20, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0xffffffffffffffff) 16.258156ms ago: executing program 4 (id=1512): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000440)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x4, 0x101}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x40}, 0x300, 0x0, 0x2, 0x8, 0xfffe, 0x400}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setreuid(0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4080) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r3, &(0x7f0000001640)="8b", 0x1) 16.152256ms ago: executing program 5 (id=1513): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002800)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/4096, 0x1000, 0x1, &(0x7f0000002740)=""/169, 0xa9}, &(0x7f0000002840)=0x40) 0s ago: executing program 5 (id=1514): socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/class/net/bridge0/bridge/multicast_querier\x00', 0x20081, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) kernel console output (not intermixed with test programs): dm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.471289][ T30] audit: type=1107 audit(1790959118.495:286): pid=1327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ÌçG'3š•lÕ¨‹K>uwIh$ô 0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y' [ 81.490830][ T1336] loop4: detected capacity change from 0 to 512 [ 81.571429][ T1336] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.583799][ T1336] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.756317][ T30] audit: type=1400 audit(1790959118.815:287): avc: denied { append } for pid=1335 comm="syz.4.286" path="/59/file0/rdma.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.788859][ T1336] SELinux: Context : is not valid (left unmapped). [ 81.797253][ T30] audit: type=1400 audit(1790959118.855:288): avc: denied { relabelto } for pid=1335 comm="syz.4.286" name="rdma.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 81.873062][ T685] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 81.914996][ T685] usb 3-1: USB disconnect, device number 2 [ 82.133876][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 82.169179][ T30] audit: type=1400 audit(1790959119.225:289): avc: denied { map } for pid=1359 comm="syz.0.294" path="socket:[18970]" dev="sockfs" ino=18970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 82.215916][ T593] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 82.228103][ T1363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 82.239273][ T1363] loop4: detected capacity change from 0 to 256 [ 82.255069][ T1362] netlink: 'syz.2.295': attribute type 4 has an invalid length. [ 82.263707][ T30] audit: type=1400 audit(1790959119.315:290): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 82.420701][ T1363] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 82.433168][ T1363] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 1) [ 82.441249][ T1363] exFAT-fs (loop4): failed to load alloc-bitmap [ 82.449367][ T1363] exFAT-fs (loop4): failed to recognize exfat type [ 82.480062][ T30] audit: type=1400 audit(1790959119.535:291): avc: denied { read } for pid=1365 comm="syz.1.296" path="socket:[19663]" dev="sockfs" ino=19663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.528403][ T1302] device usb0 entered promiscuous mode [ 82.562964][ T30] audit: type=1400 audit(1790959119.565:292): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.570108][ T279] usb 4-1: USB disconnect, device number 2 [ 82.625852][ T279] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 82.712870][ T30] audit: type=1400 audit(1790959119.565:293): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=2721 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.756360][ T1373] mmap: syz.2.297 (1373) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 83.017052][ T1388] loop2: detected capacity change from 0 to 512 [ 83.094906][ T1388] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.104060][ T1388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.124419][ T1388] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.298: bad orphan inode 131083 [ 83.138492][ T1388] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 83.262762][ T593] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.452724][ T279] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.662750][ T593] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.702774][ T593] usb 5-1: not running at top speed; connect to a high speed hub [ 83.780924][ T1420] syz.0.306 uses obsolete (PF_INET,SOCK_PACKET) [ 83.782800][ T593] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 4 [ 83.835468][ T1430] loop2: detected capacity change from 0 to 256 [ 83.881228][ T279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.892082][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.902425][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.912604][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 83.923013][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 83.933098][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 83.942949][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 83.953067][ T593] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 83.953099][ T593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.953119][ T593] usb 5-1: Product: syz [ 83.953131][ T593] usb 5-1: Manufacturer: syz [ 83.953144][ T593] usb 5-1: SerialNumber: syz [ 83.983975][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 84.010463][ T1430] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 84.104182][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 84.114552][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 84.124572][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 84.134509][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 84.144727][ T279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.155056][ T279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.168749][ T279] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 84.238980][ T1446] loop1: detected capacity change from 0 to 128 [ 84.270211][ T1450] loop2: detected capacity change from 0 to 512 [ 84.296320][ T1446] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 84.310858][ T1446] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.372854][ T279] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 84.382439][ T279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.391074][ T279] usb 4-1: Product: syz [ 84.395561][ T279] usb 4-1: Manufacturer: syz [ 84.397882][ T1450] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.403311][ T1454] loop1: detected capacity change from 0 to 512 [ 84.411852][ T1450] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.418488][ T279] usb 4-1: SerialNumber: syz [ 84.462903][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.470804][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.478516][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.486720][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.494283][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.498092][ T593] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.501606][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.515935][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.942904][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.950564][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.976054][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.991909][ T1402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 85.273680][ T593] usb 5-1: USB disconnect, device number 2 [ 85.420360][ T1245] usb 4-1: USB disconnect, device number 3 [ 85.429003][ T1469] loop4: detected capacity change from 0 to 16 [ 85.472320][ T1469] erofs: (device loop4): mounted with root inode @ nid 36. [ 85.612410][ T1481] loop4: detected capacity change from 0 to 256 [ 85.681200][ T1481] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 85.872115][ T555] udevd[555]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.231802][ T1500] loop4: detected capacity change from 0 to 512 [ 86.314756][ T1500] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.342242][ T1500] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.620774][ T1509] loop4: detected capacity change from 0 to 512 [ 86.824500][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 86.824526][ T30] audit: type=1400 audit(1790959123.885:316): avc: denied { name_bind } for pid=1514 comm="syz.1.344" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 86.855564][ T1509] EXT4-fs (loop4): Ignoring removed nobh option [ 86.876642][ T1509] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.904604][ T1509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.930594][ T1502] SELinux: Context system_u:object is not valid (left unmapped). [ 86.939545][ T30] audit: type=1400 audit(1790959124.005:317): avc: denied { relabelto } for pid=1501 comm="syz.3.341" name="cgroup.procs" dev="cgroup" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 86.945494][ T1512] loop2: detected capacity change from 0 to 512 [ 86.967117][ T1509] EXT4-fs (loop4): 1 truncate cleaned up [ 86.989501][ T1509] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,test_dummy_encryption,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000003,dioread_lock,block_validity,noblock_validity,. Quota mode: none. [ 87.000294][ T30] audit: type=1400 audit(1790959124.005:318): avc: denied { associate } for pid=1501 comm="syz.3.341" name="cgroup.procs" dev="cgroup" ino=161 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 87.047598][ T1512] EXT4-fs (loop2): 1 truncate cleaned up [ 87.053662][ T1512] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 87.083210][ T1525] loop1: detected capacity change from 0 to 1024 [ 87.113635][ T30] audit: type=1400 audit(1790959124.175:319): avc: denied { read write } for pid=1511 comm="syz.2.343" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.123718][ T1512] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.343: bg 0: block 465: padding at end of block bitmap is not set [ 87.136916][ T30] audit: type=1400 audit(1790959124.185:320): avc: denied { open } for pid=1511 comm="syz.2.343" path="/73/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.174661][ T1516] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 87.188323][ T1512] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 87.196674][ T1528] bridge0: port 3(syz_tun) entered blocking state [ 87.201482][ T1525] EXT4-fs (loop1): Mount option "dioread_nolock" incompatible with ext3 [ 87.241547][ T1512] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.241547][ T1512] [ 87.252245][ T1528] bridge0: port 3(syz_tun) entered disabled state [ 87.263793][ T1528] device syz_tun entered promiscuous mode [ 87.278848][ T1528] bridge0: port 3(syz_tun) entered blocking state [ 87.285629][ T1528] bridge0: port 3(syz_tun) entered forwarding state [ 87.304234][ T1512] EXT4-fs (loop2): Total free blocks count 0 [ 87.311622][ T1512] EXT4-fs (loop2): Free/Dirty block details [ 87.386002][ T1512] EXT4-fs (loop2): free_blocks=0 [ 87.437704][ T1512] EXT4-fs (loop2): dirty_blocks=1 [ 87.443223][ T1512] EXT4-fs (loop2): Block reservation details [ 87.449700][ T1512] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 87.531176][ T1539] loop2: detected capacity change from 0 to 512 [ 87.545102][ T1539] EXT4-fs (loop2): 1 truncate cleaned up [ 87.634851][ T1539] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 87.667917][ T1539] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.350: bg 0: block 465: padding at end of block bitmap is not set [ 87.703779][ T1539] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 87.745130][ T1539] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.745130][ T1539] [ 87.862764][ T1539] EXT4-fs (loop2): Total free blocks count 0 [ 87.863791][ T1556] loop4: detected capacity change from 0 to 512 [ 87.876186][ T1539] EXT4-fs (loop2): Free/Dirty block details [ 88.143216][ T1539] EXT4-fs (loop2): free_blocks=0 [ 88.148788][ T1539] EXT4-fs (loop2): dirty_blocks=45 [ 88.155036][ T1539] EXT4-fs (loop2): Block reservation details [ 88.161587][ T1539] EXT4-fs (loop2): i_reserved_data_blocks=45 [ 88.266634][ T30] audit: type=1400 audit(1790959125.245:321): avc: denied { search } for pid=1563 comm="syz.3.360" name="/" dev="configfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.662189][ T527] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.709848][ T527] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.709848][ T527] [ 88.752382][ T1576] loop3: detected capacity change from 0 to 7 [ 88.765809][ T30] audit: type=1400 audit(1790959125.245:322): avc: denied { write } for pid=1563 comm="syz.3.360" name="functions" dev="configfs" ino=16481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.802763][ T30] audit: type=1400 audit(1790959125.245:323): avc: denied { add_name } for pid=1563 comm="syz.3.360" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.824887][ T30] audit: type=1400 audit(1790959125.735:324): avc: denied { create } for pid=1569 comm="syz.3.363" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.846041][ T30] audit: type=1400 audit(1790959125.735:325): avc: denied { write } for pid=1569 comm="syz.3.363" name="file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.358475][ T1599] loop1: detected capacity change from 0 to 16 [ 89.392887][ T1599] erofs: Unknown parameter '"©ŠÖm¹R€[œp¡[Ì šcòŸ¦1iu±¤»ÿˆú3þ˜8½/arwð°Eåµè˜rÇ‹' [ 89.512305][ T1599] hub 5-0:1.0: USB hub found [ 89.561507][ T1599] hub 5-0:1.0: 1 port detected [ 89.607035][ T1616] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 89.616069][ T1616] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.380: inode #15: comm syz.1.380: iget: illegal inode # [ 89.625443][ T1619] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.381: invalid block [ 89.630012][ T1616] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.380: couldn't read orphan inode 15 (err -117) [ 89.641795][ T1619] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.381: Invalid block bitmap block 0 in block_group 0 [ 89.662102][ T1616] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue. Quota mode: writeback. [ 89.667340][ T1619] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 89.702366][ T1619] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.381: attempt to clear invalid blocks 983261 len 1 [ 89.712831][ T544] udevd[544]: incorrect ext4 checksum on /dev/loop1 [ 89.723108][ T1616] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #2: block 13: comm syz.1.380: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=916, size=1012 fake=0 [ 89.742890][ T1619] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.381: invalid indirect mapped block 2683928664 (level 0) [ 89.757157][ T1619] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.381: Invalid inode table block 0 in block_group 0 [ 89.770408][ T1619] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 89.780832][ T1619] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 89.789658][ T1619] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.381: Invalid inode table block 0 in block_group 0 [ 89.803157][ T1619] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 89.813883][ T1619] EXT4-fs error (device loop4): ext4_truncate:4317: inode #13: comm syz.4.381: mark_inode_dirty error [ 89.825921][ T1619] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 89.856481][ T1619] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.381: Invalid inode table block 0 in block_group 0 [ 89.873205][ T1619] EXT4-fs (loop4): 1 truncate cleaned up [ 89.879006][ T1619] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none. [ 89.917007][ T1629] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.927248][ T1629] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 90.004834][ T1635] ip_tables: iptables: counters copy to user failed while replacing table [ 90.632825][ T685] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.658545][ T1659] set_capacity_and_notify: 3 callbacks suppressed [ 90.658564][ T1659] loop2: detected capacity change from 0 to 16 [ 90.708075][ T1659] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.133239][ T685] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.136841][ T1673] loop3: detected capacity change from 0 to 512 [ 91.171840][ T1671] loop4: detected capacity change from 0 to 512 [ 91.178870][ T685] usb 2-1: config 1 interface 0 has no altsetting 0 [ 91.190613][ T1671] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 91.205202][ T1671] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.402: invalid indirect mapped block 256 (level 2) [ 91.219098][ T1673] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.228749][ T1673] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 91.233277][ T1671] EXT4-fs (loop4): 2 truncates cleaned up [ 91.261004][ T1671] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 91.261339][ T1673] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 91.292836][ T685] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.302888][ T1673] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 91.312863][ T685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.312890][ T685] usb 2-1: SerialNumber: syz [ 91.326352][ T1675] capability: warning: `syz.0.401' uses 32-bit capabilities (legacy support in use) [ 91.415970][ T1673] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 91.500418][ T1679] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 91.878888][ T1685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 92.010694][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 92.010714][ T30] audit: type=1400 audit(1790959129.055:338): avc: denied { map } for pid=1678 comm="syz.4.404" path="socket:[20226]" dev="sockfs" ino=20226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.174559][ T30] audit: type=1400 audit(1790959129.055:339): avc: denied { read accept } for pid=1678 comm="syz.4.404" path="socket:[20226]" dev="sockfs" ino=20226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.199154][ T30] audit: type=1400 audit(1790959129.075:340): avc: denied { read write } for pid=1687 comm="syz.3.405" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.224044][ T30] audit: type=1400 audit(1790959129.075:341): avc: denied { open } for pid=1687 comm="syz.3.405" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.248103][ T30] audit: type=1400 audit(1790959129.075:342): avc: denied { ioctl } for pid=1687 comm="syz.3.405" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.273703][ T30] audit: type=1400 audit(1790959129.085:343): avc: denied { ioctl } for pid=1682 comm="syz.0.407" path="socket:[20233]" dev="sockfs" ino=20233 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.318267][ T1696] usb usb9: usbfs: process 1696 (syz.3.410) did not claim interface 56 before use [ 92.347685][ T30] audit: type=1400 audit(1790959129.405:344): avc: denied { validate_trans } for pid=1698 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.488228][ T1715] loop4: detected capacity change from 0 to 4096 [ 92.511403][ T1715] EXT4-fs (loop4): Test dummy encryption mode enabled [ 92.524430][ T1715] EXT4-fs (loop4): Test dummy encryption mode enabled [ 92.561338][ T1728] loop3: detected capacity change from 0 to 512 [ 92.574154][ T1715] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 92.660759][ T1728] EXT4-fs (loop3): 1 truncate cleaned up [ 92.666928][ T1728] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 92.742099][ T1728] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.421: bg 0: block 465: padding at end of block bitmap is not set [ 92.760178][ T1728] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 92.773547][ T1728] EXT4-fs (loop3): This should not happen!! Data will be lost [ 92.773547][ T1728] [ 92.792885][ T1728] EXT4-fs (loop3): Total free blocks count 0 [ 92.803848][ T1734] FAULT_INJECTION: forcing a failure. [ 92.803848][ T1734] name failslab, interval 1, probability 0, space 0, times 0 [ 92.820933][ T1728] EXT4-fs (loop3): Free/Dirty block details [ 92.827418][ T1728] EXT4-fs (loop3): free_blocks=0 [ 92.832969][ T1734] CPU: 1 PID: 1734 Comm: syz.2.423 Not tainted syzkaller #0 [ 92.840322][ T1734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.850414][ T1734] Call Trace: [ 92.853721][ T1734] [ 92.856682][ T1734] __dump_stack+0x21/0x30 [ 92.861063][ T1734] dump_stack_lvl+0x110/0x170 [ 92.865764][ T1734] ? show_regs_print_info+0x20/0x20 [ 92.871001][ T1734] dump_stack+0x15/0x20 [ 92.875183][ T1734] should_fail+0x3ab/0x500 [ 92.879631][ T1734] __should_failslab+0xa4/0xe0 [ 92.884417][ T1734] should_failslab+0x9/0x20 [ 92.888951][ T1734] slab_pre_alloc_hook+0x39/0xd0 [ 92.894029][ T1734] ? avc_alloc_node+0x83/0x4b0 [ 92.894478][ T685] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 92.898984][ T1734] kmem_cache_alloc+0x44/0x260 [ 92.913971][ T1728] EXT4-fs (loop3): dirty_blocks=1 [ 92.915375][ T1734] avc_alloc_node+0x83/0x4b0 [ 92.920403][ T1728] EXT4-fs (loop3): Block reservation details [ 92.925074][ T1734] ? __kasan_check_write+0x14/0x20 [ 92.925102][ T1734] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 92.925120][ T1734] ? _raw_spin_lock+0xf0/0xf0 [ 92.925138][ T1734] ? avc_xperms_free+0x270/0x270 [ 92.931289][ T1728] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 92.936359][ T1734] avc_compute_av+0x142/0x820 [ 92.936387][ T1734] avc_has_perm_noaudit+0x2cb/0x490 [ 92.936404][ T1734] ? avc_denied+0x1b0/0x1b0 [ 92.936423][ T1734] selinux_inode_permission+0x3b8/0x5f0 [ 92.936444][ T1734] ? selinux_inode_follow_link+0x370/0x370 [ 92.983431][ T1734] ? __kasan_check_write+0x14/0x20 [ 92.988548][ T1734] ? _raw_spin_lock+0x94/0xf0 [ 92.993225][ T1734] ? _raw_spin_trylock_bh+0x150/0x150 [ 92.998600][ T1734] security_inode_permission+0xa0/0x100 [ 93.004150][ T1734] inode_permission+0xef/0x4a0 [ 93.008914][ T1734] may_open+0x2a4/0x3f0 [ 93.013071][ T1734] path_openat+0x2631/0x2f80 [ 93.017664][ T1734] ? __kasan_slab_alloc+0xc9/0xe0 [ 93.022690][ T1734] ? slab_post_alloc_hook+0x4f/0x2b0 [ 93.027985][ T1734] ? __x64_sys_openat+0x136/0x160 [ 93.033199][ T1734] ? x64_sys_call+0x219/0x9a0 [ 93.037872][ T1734] ? do_syscall_64+0x4c/0xa0 [ 93.042573][ T1734] ? do_filp_open+0x400/0x400 [ 93.047518][ T1734] do_filp_open+0x1df/0x400 [ 93.052111][ T1734] ? vfs_tmpfile+0x2d0/0x2d0 [ 93.056709][ T1734] do_sys_openat2+0x15e/0x7f0 [ 93.061480][ T1734] ? do_sys_open+0xe0/0xe0 [ 93.065905][ T1734] __x64_sys_openat+0x136/0x160 [ 93.070777][ T1734] x64_sys_call+0x219/0x9a0 [ 93.075284][ T1734] do_syscall_64+0x4c/0xa0 [ 93.079700][ T1734] ? clear_bhb_loop+0x50/0xa0 [ 93.084380][ T1734] ? clear_bhb_loop+0x50/0xa0 [ 93.089232][ T1734] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.095130][ T1734] RIP: 0033:0x7f9f3242e98e [ 93.099551][ T1734] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.119252][ T1734] RSP: 002b:00007f9f30ec6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.127685][ T1734] RAX: ffffffffffffffda RBX: 00007f9f30ec76c0 RCX: 00007f9f3242e98e [ 93.135744][ T1734] RDX: 0000000000000000 RSI: 00007f9f30ec6c00 RDI: ffffffffffffff9c [ 93.143715][ T1734] RBP: 00007f9f30ec6c00 R08: 0000000000000000 R09: 0000000000000000 [ 93.151707][ T1734] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 93.159765][ T1734] R13: 00007f9f326f6038 R14: 00007f9f326f5fa0 R15: 00007fffa1e585f8 [ 93.167825][ T1734] [ 93.196118][ T1648] device usb0 entered promiscuous mode [ 93.214066][ T442] usb 2-1: USB disconnect, device number 3 [ 93.233530][ T442] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 93.258690][ T30] audit: type=1400 audit(1790959130.315:345): avc: denied { read } for pid=1733 comm="syz.2.423" name="usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.302687][ T30] audit: type=1400 audit(1790959130.315:346): avc: denied { read open } for pid=1733 comm="syz.2.423" path="/dev/usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.338811][ T1742] loop2: detected capacity change from 0 to 512 [ 93.364285][ T1742] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 93.405129][ T1742] EXT4-fs (loop2): 1 truncate cleaned up [ 93.410925][ T1742] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 93.609672][ T1773] loop2: detected capacity change from 0 to 1024 [ 93.653643][ T1773] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 93.660975][ T1773] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 93.681961][ T1773] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.433: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 93.701650][ T1773] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.433: couldn't read orphan inode 11 (err -117) [ 93.714100][ T1773] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 93.719056][ T30] audit: type=1400 audit(1790959130.775:347): avc: denied { ioctl } for pid=1778 comm="syz.0.436" path="socket:[20466]" dev="sockfs" ino=20466 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.763462][ T1773] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.433: Invalid block bitmap block 0 in block_group 0 [ 93.782688][ T685] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 93.792982][ T1773] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.433: Failed to acquire dquot type 0 [ 93.822314][ T306] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm kworker/u4:3: Invalid inode table block 8589934593 in block_group 0 [ 94.152935][ T685] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.297746][ T685] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 94.312843][ T685] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 94.324184][ T685] usb 4-1: Product: syz [ 94.329822][ T685] usb 4-1: Manufacturer: syz [ 94.386817][ T685] hub 4-1:4.0: bad descriptor, ignoring hub [ 94.399148][ T685] hub: probe of 4-1:4.0 failed with error -5 [ 94.419892][ T685] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 94.454633][ T1802] loop4: detected capacity change from 0 to 2048 [ 94.509840][ T1802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.551036][ T1802] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.016105][ T1817] loop1: detected capacity change from 0 to 1024 [ 96.053399][ T1817] EXT4-fs (loop1): Ignoring removed bh option [ 96.061858][ T1817] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 96.087295][ T1817] EXT4-fs error (device loop1): ext4_get_journal_inode:5178: inode #32: comm syz.1.448: iget: special inode unallocated [ 96.100629][ T1817] EXT4-fs (loop1): no journal found [ 96.115673][ T1821] file system registered [ 96.122455][ T1821] ffs_data_put(): freeing [ 96.496048][ T1831] loop3: detected capacity change from 0 to 512 [ 96.573666][ T1831] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 96.589377][ T1831] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.452: invalid indirect mapped block 256 (level 2) [ 96.603347][ T279] usb 4-1: USB disconnect, device number 4 [ 96.611274][ T1831] EXT4-fs (loop3): 2 truncates cleaned up [ 96.617747][ T1831] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 97.008109][ T1819] syz.2.444 (1819) used greatest stack depth: 18536 bytes left [ 97.227496][ T1854] Line length is too long: Should be less than 4094 [ 97.243685][ T1852] IPv6: NLM_F_REPLACE set, but no existing node found! [ 97.498643][ T1873] fuse: blksize only supported for fuseblk [ 97.789447][ T1861] loop1: detected capacity change from 0 to 8192 [ 97.893602][ T1876] futex_wake_op: syz.0.472 tries to shift op by 144; fix this program [ 98.555938][ T1901] netlink: 'syz.1.484': attribute type 4 has an invalid length. [ 98.765587][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 98.765605][ T30] audit: type=1400 audit(1790959135.825:387): avc: denied { name_bind } for pid=1917 comm="syz.0.491" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.848333][ T1921] fuse: blksize only supported for fuseblk [ 99.033960][ T30] audit: type=1400 audit(1790959136.095:388): avc: denied { remount } for pid=1912 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.175876][ T1929] fuse: Bad value for 'fd' [ 99.259318][ T1939] loop3: detected capacity change from 0 to 512 [ 99.372845][ T1939] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.498: bad orphan inode 16 [ 99.426362][ T1939] ext4_test_bit(bit=15, block=18) = 1 [ 99.432737][ T1939] is_bad_inode(inode)=0 [ 99.437331][ T1939] NEXT_ORPHAN(inode)=83886080 [ 99.442133][ T1939] max_ino=32 [ 99.445754][ T1939] i_nlink=0 [ 99.492965][ T1939] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.533351][ T1939] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.313801][ T1958] FAULT_INJECTION: forcing a failure. [ 101.313801][ T1958] name failslab, interval 1, probability 0, space 0, times 0 [ 101.331032][ T1958] CPU: 1 PID: 1958 Comm: syz.3.504 Not tainted syzkaller #0 [ 101.338383][ T1958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.348557][ T1958] Call Trace: [ 101.351861][ T1958] [ 101.354901][ T1958] __dump_stack+0x21/0x30 [ 101.359263][ T1958] dump_stack_lvl+0x110/0x170 [ 101.364368][ T1958] ? show_regs_print_info+0x20/0x20 [ 101.369596][ T1958] dump_stack+0x15/0x20 [ 101.373864][ T1958] should_fail+0x3ab/0x500 [ 101.378476][ T1958] __should_failslab+0xa4/0xe0 [ 101.383277][ T1958] should_failslab+0x9/0x20 [ 101.387930][ T1958] slab_pre_alloc_hook+0x39/0xd0 [ 101.392917][ T1958] ? key_alloc+0x2c1/0xef0 [ 101.397459][ T1958] kmem_cache_alloc+0x44/0x260 [ 101.402377][ T1958] key_alloc+0x2c1/0xef0 [ 101.406799][ T1958] keyring_alloc+0x47/0xb0 [ 101.411424][ T1958] lookup_user_key+0x448/0x11b0 [ 101.416397][ T1958] ? lookup_user_key_possessed+0x40/0x40 [ 101.422067][ T1958] ? search_process_keyrings_rcu+0x280/0x280 [ 101.428082][ T1958] ? __kasan_check_write+0x14/0x20 [ 101.433207][ T1958] ? _copy_from_user+0x95/0xd0 [ 101.437978][ T1958] __se_sys_add_key+0x311/0x410 [ 101.442830][ T1958] ? __x64_sys_add_key+0xd0/0xd0 [ 101.447773][ T1958] ? ksys_write+0x1fa/0x260 [ 101.452285][ T1958] ? __secure_computing+0xea/0x290 [ 101.457426][ T1958] __x64_sys_add_key+0xbf/0xd0 [ 101.462192][ T1958] x64_sys_call+0x713/0x9a0 [ 101.466704][ T1958] do_syscall_64+0x4c/0xa0 [ 101.471141][ T1958] ? clear_bhb_loop+0x50/0xa0 [ 101.475905][ T1958] ? clear_bhb_loop+0x50/0xa0 [ 101.480671][ T1958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.486585][ T1958] RIP: 0033:0x7f0740c26159 [ 101.490999][ T1958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.510635][ T1958] RSP: 002b:00007f073f67f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 101.519157][ T1958] RAX: ffffffffffffffda RBX: 00007f0740eadfa0 RCX: 00007f0740c26159 [ 101.527501][ T1958] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 101.535659][ T1958] RBP: 00007f0740cbd06b R08: ffffffffffffffff R09: 0000000000000000 [ 101.543826][ T1958] R10: 00000000000002d2 R11: 0000000000000246 R12: 0000000000000000 [ 101.551824][ T1958] R13: 00007f0740eae038 R14: 00007f0740eadfa0 R15: 00007ffc81b5cbc8 [ 101.559803][ T1958] [ 101.630619][ T1966] loop1: detected capacity change from 0 to 4096 [ 101.663693][ T1966] EXT4-fs (loop1): Test dummy encryption mode enabled [ 101.670577][ T1966] EXT4-fs (loop1): Test dummy encryption mode enabled [ 101.695192][ T1966] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 101.834211][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 102.167374][ T30] audit: type=1400 audit(1790959139.155:389): avc: denied { ioctl } for pid=1976 comm="syz.1.510" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.623776][ T30] audit: type=1400 audit(1790959139.675:390): avc: denied { connect } for pid=1990 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.683018][ T30] audit: type=1400 audit(1790959139.675:391): avc: denied { read } for pid=1990 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.732737][ T309] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.863862][ T2016] loop1: detected capacity change from 0 to 512 [ 102.894307][ T2016] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 102.992700][ T309] usb 4-1: Using ep0 maxpacket: 16 [ 103.152770][ T309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.232787][ T309] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1024 [ 103.243112][ T309] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 64 [ 103.253128][ T309] usb 4-1: config 1 interface 0 has no altsetting 0 [ 103.262739][ T442] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.306767][ T2033] loop1: detected capacity change from 0 to 512 [ 103.355499][ T2033] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 103.365004][ T2033] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 103.643113][ T442] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 103.670925][ T442] usb 3-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 103.697393][ T2040] 9pnet: Insufficient options for proto=fd [ 103.744847][ T309] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.754481][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.762800][ T309] usb 4-1: Product: syz [ 103.767035][ T309] usb 4-1: Manufacturer: syz [ 103.776345][ T309] usb 4-1: SerialNumber: syz [ 103.832767][ T442] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.846063][ T442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.860627][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 103.869893][ T442] usb 3-1: SerialNumber: syz [ 103.875794][ T30] audit: type=1400 audit(1790959140.845:392): avc: denied { setopt } for pid=2041 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.943206][ T30] audit: type=1400 audit(1790959140.965:393): avc: denied { setopt } for pid=2031 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.983220][ T442] usb 3-1: bad CDC descriptors [ 104.036952][ T2060] loop1: detected capacity change from 0 to 128 [ 104.062876][ T2060] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 104.088366][ T2060] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 104.097174][ T2060] FAT-fs (loop1): Filesystem has been set read-only [ 104.105919][ T2060] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 104.213975][ T30] audit: type=1400 audit(1790959141.275:394): avc: denied { bind } for pid=2027 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.235322][ T287] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 104.246067][ T442] usb 3-1: USB disconnect, device number 3 [ 104.380926][ T30] audit: type=1400 audit(1790959141.435:395): avc: denied { getopt } for pid=2070 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.400829][ T1984] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.565027][ T1984] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.573865][ T2073] loop1: detected capacity change from 0 to 512 [ 104.608607][ T2073] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.540: corrupted inode contents [ 104.621037][ T2073] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #16: comm syz.1.540: mark_inode_dirty error [ 104.633036][ T2073] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.540: corrupted inode contents [ 104.645481][ T2073] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.540: mark_inode_dirty error [ 104.657653][ T2073] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.540: corrupted inode contents [ 104.671708][ T2073] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 104.680750][ T2073] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.540: corrupted inode contents [ 104.693118][ T2073] EXT4-fs error (device loop1): ext4_truncate:4317: inode #16: comm syz.1.540: mark_inode_dirty error [ 104.704924][ T2073] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 104.715081][ T2073] EXT4-fs (loop1): 1 truncate cleaned up [ 104.721010][ T2073] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 104.735530][ T2073] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.780609][ T2078] FAULT_INJECTION: forcing a failure. [ 104.780609][ T2078] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 104.794002][ T2078] CPU: 1 PID: 2078 Comm: syz.3.546 Not tainted syzkaller #0 [ 104.801309][ T2078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.811487][ T2078] Call Trace: [ 104.814807][ T2078] [ 104.817754][ T2078] __dump_stack+0x21/0x30 [ 104.822192][ T2078] dump_stack_lvl+0x110/0x170 [ 104.827319][ T2078] ? show_regs_print_info+0x20/0x20 [ 104.832535][ T2078] ? __kasan_check_read+0x11/0x20 [ 104.837751][ T2078] ? free_unref_page_commit+0x187/0x3f0 [ 104.843420][ T2078] dump_stack+0x15/0x20 [ 104.847592][ T2078] should_fail+0x3ab/0x500 [ 104.852033][ T2078] should_fail_alloc_page+0x55/0x80 [ 104.857255][ T2078] prepare_alloc_pages+0x13f/0x590 [ 104.862580][ T2078] ? __alloc_pages_bulk+0xab0/0xab0 [ 104.867803][ T2078] ? release_pages+0x1264/0x12c0 [ 104.872778][ T2078] __alloc_pages+0x11d/0x460 [ 104.877404][ T2078] ? unlock_page_memcg+0x114/0x130 [ 104.882532][ T2078] ? prep_new_page+0x110/0x110 [ 104.887329][ T2078] ? page_remove_rmap+0xc6d/0xf40 [ 104.892460][ T2078] ? page_add_file_rmap+0x700/0x700 [ 104.897776][ T2078] ? __kasan_check_write+0x14/0x20 [ 104.903095][ T2078] ? _raw_spin_lock+0x94/0xf0 [ 104.907793][ T2078] __get_free_pages+0x10/0x30 [ 104.912580][ T2078] __tlb_remove_page_size+0x18a/0x310 [ 104.918171][ T2078] unmap_page_range+0x1059/0x1e00 [ 104.923429][ T2078] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 104.929900][ T2078] ? lru_cache_add+0x7e0/0x7e0 [ 104.934693][ T2078] ? schedule_preempt_disabled+0x20/0x20 [ 104.940354][ T2078] unmap_vmas+0x26d/0x380 [ 104.944711][ T2078] ? unmap_page_range+0x1e00/0x1e00 [ 104.950121][ T2078] ? __kasan_check_write+0x14/0x20 [ 104.955261][ T2078] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 104.960931][ T2078] exit_mmap+0x412/0x8b0 [ 104.965312][ T2078] ? vm_brk+0x30/0x30 [ 104.969326][ T2078] ? mutex_unlock+0x8f/0x230 [ 104.974036][ T2078] ? uprobe_clear_state+0x2c6/0x320 [ 104.979273][ T2078] __mmput+0x92/0x300 [ 104.983294][ T2078] mmput+0x50/0x150 [ 104.987132][ T2078] do_exit+0xacc/0x29a0 [ 104.991330][ T2078] ? put_task_struct+0x90/0x90 [ 104.996207][ T2078] ? __kasan_check_write+0x14/0x20 [ 105.001490][ T2078] ? _raw_spin_lock_irq+0x95/0xf0 [ 105.006556][ T2078] do_group_exit+0x149/0x310 [ 105.011275][ T2078] ? __kasan_check_write+0x14/0x20 [ 105.016602][ T2078] ? recalc_sigpending+0x1ac/0x230 [ 105.021957][ T2078] get_signal+0x64f/0x1430 [ 105.026700][ T2078] arch_do_signal_or_restart+0xe2/0x1100 [ 105.032369][ T2078] ? _raw_spin_unlock+0x4d/0x70 [ 105.037257][ T2078] ? alloc_fd+0x4c2/0x570 [ 105.041622][ T2078] ? get_sigframe_size+0x10/0x10 [ 105.046589][ T2078] ? __se_sys_futex+0x135/0x330 [ 105.051479][ T2078] ? pipe_fcntl+0x510/0x510 [ 105.056280][ T2078] exit_to_user_mode_loop+0xa7/0xe0 [ 105.061517][ T2078] exit_to_user_mode_prepare+0x87/0xd0 [ 105.067017][ T2078] syscall_exit_to_user_mode+0x1a/0x30 [ 105.072695][ T2078] do_syscall_64+0x58/0xa0 [ 105.077157][ T2078] ? clear_bhb_loop+0x50/0xa0 [ 105.081870][ T2078] ? clear_bhb_loop+0x50/0xa0 [ 105.086583][ T2078] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.092594][ T2078] RIP: 0033:0x7f0740c26159 [ 105.097039][ T2078] Code: Unable to access opcode bytes at RIP 0x7f0740c2612f. [ 105.104508][ T2078] RSP: 002b:00007f073f67f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.112953][ T2078] RAX: 0000000000000001 RBX: 00007f0740eadfa8 RCX: 00007f0740c26159 [ 105.120954][ T2078] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0740eadfac [ 105.129353][ T2078] RBP: 00007f0740eadfa0 R08: 002bd14beb336a79 R09: 0000000000000000 [ 105.137803][ T2078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.145923][ T2078] R13: 00007f0740eae038 R14: 00007ffc81b5cae0 R15: 00007ffc81b5cbc8 [ 105.154457][ T2078] [ 105.208429][ T309] usb 4-1: bad CDC descriptors [ 105.217334][ T309] usb 4-1: USB disconnect, device number 5 [ 105.319643][ T2089] loop3: detected capacity change from 0 to 256 [ 105.402561][ T2094] loop1: detected capacity change from 0 to 128 [ 105.435044][ T2089] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 105.461924][ T2089] attempt to access beyond end of device [ 105.461924][ T2089] loop3: rw=524288, want=34359738496, limit=256 [ 105.462789][ T30] audit: type=1400 audit(1790959142.515:396): avc: denied { map } for pid=2088 comm="syz.3.550" path="/91/file1/file1" dev="loop3" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.498375][ T2089] attempt to access beyond end of device [ 105.498375][ T2089] loop3: rw=0, want=34359738496, limit=256 [ 105.510251][ T2089] attempt to access beyond end of device [ 105.510251][ T2089] loop3: rw=0, want=34359738496, limit=256 [ 105.535790][ T2089] attempt to access beyond end of device [ 105.535790][ T2089] loop3: rw=0, want=34359738496, limit=256 [ 105.562847][ T2089] attempt to access beyond end of device [ 105.562847][ T2089] loop3: rw=0, want=34359738496, limit=256 [ 105.592881][ T2089] attempt to access beyond end of device [ 105.592881][ T2089] loop3: rw=0, want=34359738496, limit=256 [ 105.604684][ T2088] attempt to access beyond end of device [ 105.604684][ T2088] loop3: rw=0, want=34359738496, limit=256 [ 105.616769][ T2089] attempt to access beyond end of device [ 105.616769][ T2089] loop3: rw=0, want=34359738496, limit=256 [ 105.628969][ T2088] attempt to access beyond end of device [ 105.628969][ T2088] loop3: rw=0, want=34359738496, limit=256 [ 105.640957][ T2089] attempt to access beyond end of device [ 105.640957][ T2089] loop3: rw=0, want=34359738496, limit=256 [ 106.606233][ T30] audit: type=1400 audit(1790959143.665:397): avc: denied { ioctl } for pid=2120 comm="syz.4.559" path="socket:[21150]" dev="sockfs" ino=21150 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.643072][ T2122] loop3: detected capacity change from 0 to 512 [ 106.662526][ T2122] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.558: missing EA_INODE flag [ 106.674401][ T2122] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.558: error while reading EA inode 2 err=-117 [ 106.687110][ T2122] EXT4-fs (loop3): 1 orphan inode deleted [ 106.692941][ T2122] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 106.978824][ T2148] fuse: blksize only supported for fuseblk [ 107.092743][ T2105] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 107.412816][ T2105] usb 4-1: not running at top speed; connect to a high speed hub [ 107.492736][ T2105] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.503021][ T2105] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 107.513324][ T2105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.553392][ T2105] usb 4-1: Found UVC 1.00 device (046d:0825) [ 107.560492][ T2105] usb 4-1: No streaming interface found for terminal 2. [ 107.740703][ T2198] Illegal XDP return value 3249269631, expect packet loss! [ 107.756681][ T309] usb 4-1: USB disconnect, device number 6 [ 107.873974][ T2204] fuse: blksize only supported for fuseblk [ 108.038826][ T2206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 108.061034][ T2206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 108.074411][ T2206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 108.087376][ T2206] : renamed from bond_slave_1 [ 108.148503][ T2216] netlink: 'syz.0.601': attribute type 4 has an invalid length. [ 108.369259][ T2228] futex_wake_op: syz.3.607 tries to shift op by 144; fix this program [ 108.378280][ T2228] futex_wake_op: syz.3.607 tries to shift op by 144; fix this program [ 108.481154][ T2242] netlink: 'syz.3.613': attribute type 4 has an invalid length. [ 108.795234][ T2252] loop2: detected capacity change from 0 to 512 [ 108.821145][ T2252] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 108.838379][ T2252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 108.848520][ T2252] System zones: 1-12 [ 108.848852][ T2256] futex_wake_op: syz.0.620 tries to shift op by 144; fix this program [ 108.861287][ T2256] futex_wake_op: syz.0.620 tries to shift op by 144; fix this program [ 108.870001][ T2252] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.617: invalid block [ 108.881916][ T2252] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.617: invalid indirect mapped block 8 (level 2) [ 108.895649][ T2252] EXT4-fs (loop2): 1 truncate cleaned up [ 108.902607][ T2252] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,nomblk_io_submit,data_err=ignore,max_batch_time=0x0000000000000001,nodelalloc,noauto_da_alloc,,errors=continue. Quota mode: none. [ 108.960488][ T2266] netlink: 'syz.0.624': attribute type 4 has an invalid length. [ 109.000861][ T2272] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.395618][ T2284] futex_wake_op: syz.3.632 tries to shift op by 144; fix this program [ 109.404078][ T2284] futex_wake_op: syz.3.632 tries to shift op by 144; fix this program [ 109.423939][ T2286] loop3: detected capacity change from 0 to 256 [ 109.569433][ T2291] loop2: detected capacity change from 0 to 256 [ 109.691735][ T2291] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 109.796242][ T2302] netlink: 'syz.4.638': attribute type 4 has an invalid length. [ 109.916010][ T2314] futex_wake_op: syz.0.644 tries to shift op by 144; fix this program [ 109.924535][ T2314] futex_wake_op: syz.0.644 tries to shift op by 144; fix this program [ 110.029343][ T2318] x_tables: duplicate underflow at hook 3 [ 110.091553][ T30] audit: type=1400 audit(1790960171.142:398): avc: denied { nlmsg_read } for pid=2321 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.126254][ T2326] netlink: 'syz.0.649': attribute type 4 has an invalid length. [ 110.159004][ T2332] 9pnet: Insufficient options for proto=fd [ 110.377891][ T2340] futex_wake_op: syz.3.655 tries to shift op by 144; fix this program [ 110.386455][ T2340] futex_wake_op: syz.3.655 tries to shift op by 144; fix this program [ 110.408383][ T2342] loop3: detected capacity change from 0 to 128 [ 110.429243][ T2344] loop2: detected capacity change from 0 to 512 [ 110.473511][ T2344] EXT4-fs (loop2): Ignoring removed bh option [ 110.479724][ T2344] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.483978][ T2342] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 110.510100][ T2342] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 110.517002][ T2344] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 110.518857][ T2342] FAT-fs (loop3): Filesystem has been set read-only [ 110.536308][ T2344] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.555363][ T288] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 110.612137][ T30] audit: type=1400 audit(1790960427.664:399): avc: denied { setattr } for pid=2343 comm="syz.2.657" path="/116/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.652266][ T2352] netlink: 'syz.3.660': attribute type 4 has an invalid length. [ 110.790867][ T2361] loop2: detected capacity change from 0 to 1024 [ 110.861660][ T2361] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,usrquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 110.877120][ T2361] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.161388][ T2406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=2406 comm=syz.2.684 [ 111.187901][ T2410] loop2: detected capacity change from 0 to 512 [ 111.225451][ T2410] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 111.242136][ T2410] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.246227][ T2420] netlink: 'syz.0.689': attribute type 4 has an invalid length. [ 111.279934][ T2424] netlink: 'syz.0.692': attribute type 1 has an invalid length. [ 111.287912][ T2424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.692'. [ 111.287917][ T1245] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.321828][ T2428] loop2: detected capacity change from 0 to 256 [ 111.336174][ T2432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 111.345854][ T2432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 111.357452][ T2432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 111.361746][ T2428] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 111.367065][ T2432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=2432 comm=syz.0.695 [ 111.443145][ T2446] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 111.454252][ T2446] netlink: 45 bytes leftover after parsing attributes in process `syz.0.701'. [ 111.463571][ T2448] netlink: 76 bytes leftover after parsing attributes in process `syz.2.703'. [ 111.489960][ T2452] netlink: 'syz.2.705': attribute type 4 has an invalid length. [ 111.506455][ T2454] loop2: detected capacity change from 0 to 256 [ 111.520825][ T2454] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 111.533121][ T1245] usb 4-1: Using ep0 maxpacket: 16 [ 111.672912][ T1245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.684531][ T1245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.695995][ T1245] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.709958][ T1245] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.722281][ T2466] fuse: blksize only supported for fuseblk [ 111.734179][ T1245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.786192][ T1245] usb 4-1: config 0 descriptor?? [ 112.266740][ T1245] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input10 [ 112.280873][ T1245] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 112.476994][ T1245] usb 4-1: USB disconnect, device number 7 [ 112.524211][ T2490] loop2: detected capacity change from 0 to 128 [ 113.741007][ T2490] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 113.755032][ T2490] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.796426][ T2514] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 113.806892][ T2514] netlink: 45 bytes leftover after parsing attributes in process `syz.0.731'. [ 113.896657][ T2519] fuse: blksize only supported for fuseblk [ 113.923893][ T30] audit: type=1400 audit(1790961198.986:400): avc: denied { create } for pid=2520 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.455270][ T2545] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.489472][ T2551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 114.534567][ T2563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 114.870868][ T30] audit: type=1400 audit(1790961711.924:401): avc: denied { read } for pid=2571 comm="syz.3.755" name="bmaControls" dev="configfs" ino=22418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 114.914235][ T30] audit: type=1400 audit(1790961711.974:402): avc: denied { create } for pid=2579 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 114.953773][ T2584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 114.963288][ T2584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 115.094865][ T2614] loop3: detected capacity change from 0 to 512 [ 115.105993][ T2614] EXT4-fs (loop3): Ignoring removed bh option [ 115.110079][ T30] audit: type=1400 audit(1790961968.162:403): avc: denied { create } for pid=2618 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.112217][ T2614] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.131830][ T30] audit: type=1400 audit(1790961968.162:404): avc: denied { read } for pid=2618 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.167015][ T30] audit: type=1400 audit(1790961968.222:405): avc: denied { write } for pid=2618 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.216468][ T2617] fuse: Bad value for 'fd' [ 115.299350][ T30] audit: type=1400 audit(1790961968.352:406): avc: denied { getopt } for pid=2618 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.452051][ T30] audit: type=1400 audit(1790961968.502:407): avc: denied { listen } for pid=2625 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.477873][ T2614] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 115.506189][ T2614] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.524762][ T30] audit: type=1400 audit(1790961968.582:408): avc: denied { ioctl } for pid=2629 comm="syz.2.780" path="net:[4026532552]" dev="nsfs" ino=4026532552 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.651291][ T2646] loop2: detected capacity change from 0 to 128 [ 115.709405][ T2646] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 115.727839][ T2646] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 115.737289][ T2646] FAT-fs (loop2): Filesystem has been set read-only [ 115.750202][ T2646] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 115.785004][ T290] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 115.874703][ T2667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=2667 comm=syz.2.798 [ 115.897576][ T30] audit: type=1400 audit(1790961968.952:409): avc: denied { ioctl } for pid=2668 comm="syz.3.799" path="socket:[23587]" dev="sockfs" ino=23587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.915352][ T2673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.801'. [ 115.931677][ T30] audit: type=1400 audit(1790961968.982:410): avc: denied { connect } for pid=2668 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.006979][ T30] audit: type=1400 audit(1790961968.982:411): avc: denied { write } for pid=2668 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.070034][ T30] audit: type=1400 audit(1790962225.125:412): avc: denied { name_bind } for pid=2687 comm="syz.0.808" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 117.295791][ T2828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2828 comm=syz.0.875 [ 117.312472][ T2822] loop2: detected capacity change from 0 to 512 [ 117.367885][ T2822] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 117.381300][ T2822] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 117.389812][ T2822] System zones: 1-12 [ 117.395202][ T2822] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.872: invalid block [ 117.396637][ T2851] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 117.407457][ T2822] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.872: invalid indirect mapped block 8 (level 2) [ 117.414435][ T2851] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 117.428492][ T2822] EXT4-fs (loop2): 1 truncate cleaned up [ 117.441488][ T2822] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,nomblk_io_submit,data_err=ignore,max_batch_time=0x0000000000000001,nodelalloc,noauto_da_alloc,,errors=continue. Quota mode: none. [ 117.453088][ T2853] netlink: 'syz.0.887': attribute type 15 has an invalid length. [ 117.721911][ T2913] netlink: 'syz.0.917': attribute type 3 has an invalid length. [ 117.744137][ T2917] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 117.754792][ T2917] netlink: 45 bytes leftover after parsing attributes in process `syz.0.919'. [ 118.020504][ T2919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=2919 comm=syz.2.920 [ 118.152488][ T2945] tipc: Started in network mode [ 118.157508][ T2945] tipc: Node identity ac14140f, cluster identity 4711 [ 118.164645][ T2945] tipc: New replicast peer: 255.255.255.255 [ 118.170901][ T2945] tipc: Enabled bearer , priority 10 [ 118.214370][ T2954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 118.216236][ T2955] loop2: detected capacity change from 0 to 512 [ 118.316592][ T2955] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 118.336803][ T2955] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.937: iget: bad i_size value: 360287970189639680 [ 118.350359][ T2955] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.937: couldn't read orphan inode 15 (err -117) [ 118.362716][ T2955] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 120.282746][ T685] tipc: Node number set to 2886997007 [ 120.365816][ T2976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 120.407107][ T2982] netlink: 'syz.2.949': attribute type 5 has an invalid length. [ 120.430584][ T2993] FAULT_INJECTION: forcing a failure. [ 120.430584][ T2993] name failslab, interval 1, probability 0, space 0, times 0 [ 120.438627][ T2995] loop2: detected capacity change from 0 to 128 [ 120.443477][ T2993] CPU: 1 PID: 2993 Comm: syz.3.954 Not tainted syzkaller #0 [ 120.457108][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.467453][ T2993] Call Trace: [ 120.471032][ T2993] [ 120.473986][ T2993] __dump_stack+0x21/0x30 [ 120.478343][ T2993] dump_stack_lvl+0x110/0x170 [ 120.483048][ T2993] ? show_regs_print_info+0x20/0x20 [ 120.488374][ T2993] dump_stack+0x15/0x20 [ 120.492544][ T2993] should_fail+0x3ab/0x500 [ 120.497095][ T2993] __should_failslab+0xa4/0xe0 [ 120.501932][ T2993] should_failslab+0x9/0x20 [ 120.506462][ T2993] slab_pre_alloc_hook+0x39/0xd0 [ 120.511520][ T2993] ? security_inode_alloc+0x33/0x110 [ 120.516834][ T2993] kmem_cache_alloc+0x44/0x260 [ 120.521629][ T2993] security_inode_alloc+0x33/0x110 [ 120.526776][ T2993] inode_init_always+0x72c/0x9b0 [ 120.531837][ T2993] ? ovl_d_real+0x530/0x530 [ 120.536371][ T2993] ? ovl_lookup_inode+0x140/0x140 [ 120.541431][ T2993] iget5_locked+0xe0/0x270 [ 120.545890][ T2993] ? ovl_get_trap_inode+0x1a0/0x1a0 [ 120.551298][ T2993] ovl_get_trap_inode+0x8d/0x1a0 [ 120.556279][ T2993] ovl_fill_super+0x27c2/0x4410 [ 120.561268][ T2993] ? ovl_mount+0x40/0x40 [ 120.565550][ T2993] ? rwsem_write_trylock+0x136/0x300 [ 120.570875][ T2993] ? up_write+0x7b/0x290 [ 120.575254][ T2993] ? free_anon_bdev+0x30/0x30 [ 120.579959][ T2993] ? ovl_mount+0x40/0x40 [ 120.584218][ T2993] mount_nodev+0x5c/0xf0 [ 120.588585][ T2993] ovl_mount+0x2c/0x40 [ 120.592680][ T2993] legacy_get_tree+0xed/0x190 [ 120.597397][ T2993] ? virtio_fs_request_complete+0xce0/0xce0 [ 120.603593][ T2993] vfs_get_tree+0x89/0x260 [ 120.608048][ T2993] do_new_mount+0x251/0xb40 [ 120.612581][ T2993] ? security_capable+0x87/0xb0 [ 120.617087][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 120.617102][ T30] audit: type=1400 audit(1790962997.675:420): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 120.617451][ T2993] path_mount+0x640/0xff0 [ 120.649470][ T2993] __se_sys_mount+0x320/0x390 [ 120.654185][ T2993] ? __x64_sys_mount+0xd0/0xd0 [ 120.659024][ T2993] ? __kasan_check_write+0x14/0x20 [ 120.664172][ T2993] __x64_sys_mount+0xbf/0xd0 [ 120.668867][ T2993] x64_sys_call+0x6bf/0x9a0 [ 120.673415][ T2993] do_syscall_64+0x4c/0xa0 [ 120.678011][ T2993] ? clear_bhb_loop+0x50/0xa0 [ 120.682722][ T2993] ? clear_bhb_loop+0x50/0xa0 [ 120.687558][ T2993] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.693490][ T2993] RIP: 0033:0x7f0740c26159 [ 120.697968][ T2993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.702188][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.717874][ T2993] RSP: 002b:00007f073f67f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.717903][ T2993] RAX: ffffffffffffffda RBX: 00007f0740eadfa0 RCX: 00007f0740c26159 [ 120.717916][ T2993] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 120.717929][ T2993] RBP: 00007f0740cbd06b R08: 0000200000000040 R09: 0000000000000000 [ 120.717940][ T2993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.717951][ T2993] R13: 00007f0740eae038 R14: 00007f0740eadfa0 R15: 00007ffc81b5cbc8 [ 120.725279][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.733478][ T2993] [ 120.785233][ T3001] device bridge_slave_0 entered promiscuous mode [ 120.785771][ T2995] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.803828][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.834947][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.859214][ T3001] device bridge_slave_1 entered promiscuous mode [ 120.891940][ T3021] fuse: Bad value for 'fd' [ 120.983052][ T3029] loop2: detected capacity change from 0 to 1024 [ 120.989004][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.996773][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.004189][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.011246][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.066230][ T30] audit: type=1400 audit(1790962998.125:421): avc: denied { mounton } for pid=3024 comm="syz.2.968" path="/205/file1" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.089335][ T3029] EXT4-fs (loop2): Unrecognized mount option "smackfsdef=ext4" or missing value [ 121.099020][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.111196][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.128536][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.144223][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.160584][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.179753][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.210845][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.236118][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.252080][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.268040][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.286228][ T3001] device veth0_vlan entered promiscuous mode [ 121.310831][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.325518][ T3001] device veth1_macvtap entered promiscuous mode [ 121.341943][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.358851][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.381289][ T30] audit: type=1400 audit(1790962998.435:422): avc: denied { mount } for pid=3001 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.406620][ T30] audit: type=1400 audit(1790962998.435:423): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/root/syzkaller.UniiYa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 121.450024][ T3046] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 121.461308][ T3046] netlink: 45 bytes leftover after parsing attributes in process `syz.5.957'. [ 121.502310][ T3044] loop2: detected capacity change from 0 to 1024 [ 121.521954][ T3044] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 121.536270][ T3044] EXT4-fs (loop2): Unrecognized mount option "smackfsroot=nolazytime" or missing value [ 121.633476][ T30] audit: type=1400 audit(1790962998.695:424): avc: denied { bind } for pid=3056 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.646844][ T3061] loop2: detected capacity change from 0 to 512 [ 121.763614][ T3072] loop3: detected capacity change from 0 to 1024 [ 121.787820][ T3071] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 121.801315][ T3071] netlink: 45 bytes leftover after parsing attributes in process `syz.4.987'. [ 121.834966][ T3072] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.852500][ T3079] loop2: detected capacity change from 0 to 256 [ 121.867653][ T30] audit: type=1400 audit(1790962998.925:425): avc: denied { append } for pid=3070 comm="syz.3.988" path="/172/file1/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.921203][ T30] audit: type=1400 audit(1790962998.955:426): avc: denied { ioctl } for pid=3070 comm="syz.3.988" path="/172/file1/file1" dev="loop3" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.021937][ T3079] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 122.248812][ T3108] loop3: detected capacity change from 0 to 256 [ 122.340194][ T3111] device syzkaller0 entered promiscuous mode [ 122.387507][ T3120] loop5: detected capacity change from 0 to 128 [ 122.415402][ T3120] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.541187][ T3150] loop3: detected capacity change from 0 to 1024 [ 122.587367][ T3150] EXT4-fs (loop3): Unrecognized mount option "smackfsdef=ext4" or missing value [ 122.606221][ T3152] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 122.662607][ T3172] 9pnet: Insufficient options for proto=fd [ 122.836597][ T3180] EXT4-fs (loop2): Ignoring removed oldalloc option [ 122.872732][ T3180] EXT4-fs (loop2): Ignoring removed orlov option [ 122.893310][ T3184] EXT4-fs (loop3): Test dummy encryption mode enabled [ 122.905465][ T3190] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 122.926577][ T3184] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1039: inode has both inline data and extents flags [ 122.940355][ T3184] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1039: couldn't read orphan inode 15 (err -117) [ 122.943571][ T3180] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 122.953936][ T3190] netlink: 45 bytes leftover after parsing attributes in process `syz.5.1042'. [ 122.967188][ T3180] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.980697][ T3184] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 123.065573][ T3207] EXT4-fs (loop5): Ignoring removed bh option [ 123.071730][ T3207] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.106208][ T3209] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 123.125856][ T3207] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 123.145369][ T30] audit: type=1326 audit(1790963768.202:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.4.1049" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc516c159 code=0x7fc00000 [ 123.173776][ T3207] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.279407][ T3234] set_capacity_and_notify: 5 callbacks suppressed [ 123.279428][ T3234] loop5: detected capacity change from 0 to 256 [ 123.327109][ T3234] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 123.371638][ T3240] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 123.382130][ T3240] netlink: 45 bytes leftover after parsing attributes in process `syz.5.1061'. [ 123.402397][ T3242] loop5: detected capacity change from 0 to 128 [ 123.414405][ T3242] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 123.429054][ T3242] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 123.437757][ T3242] FAT-fs (loop5): Filesystem has been set read-only [ 123.448842][ T3001] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 123.472093][ T3244] loop5: detected capacity change from 0 to 512 [ 123.506160][ T3244] EXT4-fs (loop5): Ignoring removed bh option [ 123.512457][ T3244] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.534422][ T3244] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 123.551823][ T3244] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.703415][ T3252] loop5: detected capacity change from 0 to 8192 [ 123.743216][ T544] loop5: p3 < > p4 [ 123.747737][ T544] loop5: p4 size 851974 extends beyond EOD, truncated [ 123.757247][ T3252] loop5: p3 < > p4 [ 123.761889][ T3252] loop5: p4 size 851974 extends beyond EOD, truncated [ 123.784085][ T30] audit: type=1400 audit(1790963768.842:428): avc: denied { read } for pid=3253 comm="syz.5.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.820857][ T3258] FAULT_INJECTION: forcing a failure. [ 123.820857][ T3258] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.831537][ T555] udevd[555]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 123.834287][ T3258] CPU: 0 PID: 3258 Comm: syz.5.1069 Not tainted syzkaller #0 [ 123.845143][ T544] udevd[544]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 123.851145][ T3258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.851160][ T3258] Call Trace: [ 123.851166][ T3258] [ 123.851172][ T3258] __dump_stack+0x21/0x30 [ 123.866233][ T555] udevd[555]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 123.870949][ T3258] dump_stack_lvl+0x110/0x170 [ 123.875931][ T544] udevd[544]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 123.877190][ T3258] ? show_regs_print_info+0x20/0x20 [ 123.911531][ T3258] ? __kasan_check_write+0x14/0x20 [ 123.916749][ T3258] dump_stack+0x15/0x20 [ 123.921536][ T3258] should_fail+0x3ab/0x500 [ 123.926216][ T3258] should_fail_usercopy+0x1a/0x20 [ 123.931261][ T3258] _copy_from_user+0x20/0xd0 [ 123.936116][ T3258] copy_bpf_fprog_from_user+0x1a0/0x300 [ 123.941698][ T3258] ? linkwatch_event+0x60/0x60 [ 123.946477][ T3258] ? avc_has_perm+0x163/0x250 [ 123.951183][ T3258] sock_setsockopt+0xf21/0x2470 [ 123.956165][ T3258] ? __sock_set_mark+0x160/0x160 [ 123.962217][ T3258] ? selinux_socket_setsockopt+0x282/0x360 [ 123.968062][ T3258] ? selinux_socket_getsockopt+0x340/0x340 [ 123.973889][ T3258] ? vfs_write+0xc72/0xfd0 [ 123.978311][ T3258] ? __fget_files+0x2e1/0x340 [ 123.982996][ T3258] ? security_socket_setsockopt+0x82/0xa0 [ 123.988900][ T3258] __sys_setsockopt+0x261/0x470 [ 123.994118][ T3258] ? __kasan_check_write+0x14/0x20 [ 123.999325][ T3258] ? __ia32_sys_recv+0xb0/0xb0 [ 124.004280][ T3258] ? ksys_write+0x1fa/0x260 [ 124.009259][ T3258] ? __kasan_check_write+0x14/0x20 [ 124.014386][ T3258] __x64_sys_setsockopt+0xbf/0xd0 [ 124.019423][ T3258] x64_sys_call+0x982/0x9a0 [ 124.025236][ T3258] do_syscall_64+0x4c/0xa0 [ 124.029931][ T3258] ? clear_bhb_loop+0x50/0xa0 [ 124.034696][ T3258] ? clear_bhb_loop+0x50/0xa0 [ 124.039375][ T3258] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.045358][ T3258] RIP: 0033:0x7f5e9a59f159 [ 124.050033][ T3258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.069728][ T3258] RSP: 002b:00007f5e98ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.078228][ T3258] RAX: ffffffffffffffda RBX: 00007f5e9a826fa0 RCX: 00007f5e9a59f159 [ 124.086370][ T3258] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 124.094432][ T3258] RBP: 00007f5e9a63606b R08: 0000000000000010 R09: 0000000000000000 [ 124.102415][ T3258] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 124.110385][ T3258] R13: 00007f5e9a827038 R14: 00007f5e9a826fa0 R15: 00007ffecf5561c8 [ 124.118545][ T3258] [ 124.132716][ T30] audit: type=1326 audit(1790963769.182:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.4.1049" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fc516c159 code=0x7fc00000 [ 124.190170][ T3266] loop5: detected capacity change from 0 to 256 [ 124.225716][ T3273] FAULT_INJECTION: forcing a failure. [ 124.225716][ T3273] name failslab, interval 1, probability 0, space 0, times 0 [ 124.243653][ T3272] loop3: detected capacity change from 0 to 2048 [ 124.258628][ T3266] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 124.303652][ T3273] CPU: 1 PID: 3273 Comm: syz.2.1075 Not tainted syzkaller #0 [ 124.311608][ T3273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.321695][ T3273] Call Trace: [ 124.325002][ T3273] [ 124.327960][ T3273] __dump_stack+0x21/0x30 [ 124.332319][ T3273] dump_stack_lvl+0x110/0x170 [ 124.337067][ T3273] ? show_regs_print_info+0x20/0x20 [ 124.342385][ T3273] dump_stack+0x15/0x20 [ 124.346679][ T3273] should_fail+0x3ab/0x500 [ 124.351137][ T3273] __should_failslab+0xa4/0xe0 [ 124.355957][ T3273] should_failslab+0x9/0x20 [ 124.360880][ T3273] slab_pre_alloc_hook+0x39/0xd0 [ 124.365870][ T3273] __kmalloc+0x6d/0x2c0 [ 124.370879][ T3273] ? ovl_fill_super+0x1730/0x4410 [ 124.376169][ T3273] ovl_fill_super+0x1730/0x4410 [ 124.381389][ T3273] ? ovl_mount+0x40/0x40 [ 124.385714][ T3273] ? rwsem_write_trylock+0x136/0x300 [ 124.391010][ T3273] ? idr_replace+0x1a0/0x1a0 [ 124.396479][ T3273] ? clear_nonspinnable+0x60/0x60 [ 124.401884][ T3273] ? up_write+0x7b/0x290 [ 124.406508][ T3273] ? free_anon_bdev+0x30/0x30 [ 124.411196][ T3273] ? ovl_mount+0x40/0x40 [ 124.415531][ T3273] mount_nodev+0x5c/0xf0 [ 124.419860][ T3273] ovl_mount+0x2c/0x40 [ 124.424025][ T3273] legacy_get_tree+0xed/0x190 [ 124.429072][ T3273] ? virtio_fs_request_complete+0xce0/0xce0 [ 124.435083][ T3273] vfs_get_tree+0x89/0x260 [ 124.439513][ T3273] do_new_mount+0x251/0xb40 [ 124.444136][ T3273] ? security_capable+0x87/0xb0 [ 124.449395][ T3273] path_mount+0x640/0xff0 [ 124.454386][ T3273] __se_sys_mount+0x320/0x390 [ 124.459404][ T3273] ? __x64_sys_mount+0xd0/0xd0 [ 124.464647][ T3273] ? __kasan_check_write+0x14/0x20 [ 124.469776][ T3273] __x64_sys_mount+0xbf/0xd0 [ 124.474713][ T3273] x64_sys_call+0x6bf/0x9a0 [ 124.479340][ T3273] do_syscall_64+0x4c/0xa0 [ 124.483783][ T3273] ? clear_bhb_loop+0x50/0xa0 [ 124.488724][ T3273] ? clear_bhb_loop+0x50/0xa0 [ 124.493513][ T3273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.499779][ T3273] RIP: 0033:0x7f9f3246e159 [ 124.504227][ T3273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.524111][ T3273] RSP: 002b:00007f9f30ec7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.532639][ T3273] RAX: ffffffffffffffda RBX: 00007f9f326f5fa0 RCX: 00007f9f3246e159 [ 124.540999][ T3273] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 124.549107][ T3273] RBP: 00007f9f3250506b R08: 0000200000000040 R09: 0000000000000000 [ 124.557083][ T3273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.565791][ T3273] R13: 00007f9f326f6038 R14: 00007f9f326f5fa0 R15: 00007fffa1e585f8 [ 124.573792][ T3273] [ 124.634937][ T3272] EXT4-fs (loop3): Unrecognized mount option "smackfstransmute=9p" or missing value [ 124.731813][ T3317] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1097'. [ 124.874746][ T3342] loop2: detected capacity change from 0 to 7 [ 125.892674][ T387] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.927143][ T3394] loop2: detected capacity change from 0 to 512 [ 125.947970][ T3394] EXT4-fs (loop2): Ignoring removed bh option [ 125.954867][ T3394] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.974735][ T3394] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 125.992094][ T3394] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.097251][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 126.097267][ T30] audit: type=1400 audit(1790963771.152:432): avc: denied { mount } for pid=3407 comm="syz.0.1137" name="/" dev="ramfs" ino=25047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.130395][ T3412] overlayfs: failed to clone upperpath [ 126.141325][ T3414] loop2: detected capacity change from 0 to 512 [ 126.153169][ T3414] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 126.168266][ T3414] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #11: comm syz.2.1134: corrupted inode contents [ 126.183250][ T3414] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #11: comm syz.2.1134: mark_inode_dirty error [ 126.195785][ T3414] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1134: invalid indirect mapped block 1 (level 1) [ 126.209453][ T3414] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #11: comm syz.2.1134: corrupted inode contents [ 126.221767][ T3414] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 126.231308][ T3414] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #11: comm syz.2.1134: corrupted inode contents [ 126.243845][ T3414] EXT4-fs error (device loop2): ext4_truncate:4317: inode #11: comm syz.2.1134: mark_inode_dirty error [ 126.252713][ T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.255814][ T3414] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 126.275783][ T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.276377][ T3414] EXT4-fs (loop2): 1 truncate cleaned up [ 126.291980][ T3414] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.296138][ T387] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 126.330554][ T3414] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #2: block 13: comm syz.2.1134: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 126.332670][ T387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.300033][ T387] usb 4-1: config 0 descriptor?? [ 128.320480][ T3427] loop3: detected capacity change from 0 to 512 [ 128.326932][ T387] usb 4-1: can't set config #0, error -71 [ 128.352810][ T387] usb 4-1: USB disconnect, device number 8 [ 128.427865][ T3435] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 128.432453][ T3427] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.1145: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 128.453656][ T3427] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1145: couldn't read orphan inode 11 (err -117) [ 128.472874][ T3427] EXT4-fs (loop3): 1 truncate cleaned up [ 128.478600][ T3427] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 128.523116][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 128.553643][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.563442][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 128.653932][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.667424][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.675852][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.684783][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.687933][ T3427] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1145: bg 0: block 5: invalid block bitmap [ 128.692913][ T30] audit: type=1400 audit(1790963773.742:433): avc: denied { mounton } for pid=3426 comm="syz.3.1145" path="/196/file0/file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.693577][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.705996][ T3427] overlayfs: failed to set xattr on upper [ 128.743147][ T3447] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 128.758213][ T3427] overlayfs: ...falling back to index=off,metacopy=off. [ 128.765606][ T3447] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 128.780805][ T3427] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 128.798592][ T3447] overlayfs: failed to set xattr on upper [ 128.819059][ T3451] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 128.840335][ T3451] netlink: 45 bytes leftover after parsing attributes in process `syz.5.1152'. [ 128.883881][ T3455] loop5: detected capacity change from 0 to 1024 [ 128.884484][ T288] EXT4-fs error (device loop3): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 14953464 [ 128.904027][ T288] EXT4-fs error (device loop3): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 14953464 [ 128.920689][ T3455] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.944107][ T3455] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none. [ 128.977714][ T3455] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 128.992552][ T3455] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.007019][ T3455] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 129.019764][ T3455] EXT4-fs (loop5): This should not happen!! Data will be lost [ 129.019764][ T3455] [ 129.028178][ T3458] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 129.030126][ T30] audit: type=1400 audit(1790963774.082:434): avc: denied { ioctl } for pid=3454 comm="syz.5.1154" path="/30/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.043366][ T3458] EXT4-fs (loop5): This should not happen!! Data will be lost [ 129.043366][ T3458] [ 129.068128][ T3455] EXT4-fs (loop5): Total free blocks count 0 [ 129.095327][ T3455] EXT4-fs (loop5): Free/Dirty block details [ 129.101964][ T3458] EXT4-fs (loop5): Total free blocks count 0 [ 129.108193][ T3455] EXT4-fs (loop5): free_blocks=20480 [ 129.111598][ T3458] EXT4-fs (loop5): Free/Dirty block details [ 129.115002][ T3455] EXT4-fs (loop5): dirty_blocks=80 [ 129.217444][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.230818][ T3461] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.237593][ T3466] loop5: detected capacity change from 0 to 512 [ 129.239635][ T3461] device bridge_slave_0 entered promiscuous mode [ 129.255726][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.263359][ T3461] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.265792][ T3466] EXT4-fs (loop5): Ignoring removed bh option [ 129.270979][ T3461] device bridge_slave_1 entered promiscuous mode [ 129.283250][ T3466] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.319811][ T3466] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 129.340447][ T3466] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.346828][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.358345][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.365875][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.373069][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.387103][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.395248][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.429241][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.439190][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.465988][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.474734][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.483413][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.490686][ T527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.499744][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.508380][ T3479] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 129.518266][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.526949][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.534042][ T527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.548208][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.556868][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.566374][ T3479] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1164'. [ 129.580318][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.588655][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.603729][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.612366][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.626281][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.634845][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.643512][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.651364][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.660243][ T3461] device veth0_vlan entered promiscuous mode [ 129.672482][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.680853][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.691014][ T3461] device veth1_macvtap entered promiscuous mode [ 129.702452][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.710995][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.719712][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.728984][ T813] device bridge_slave_1 left promiscuous mode [ 129.735749][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.744044][ T813] device bridge_slave_0 left promiscuous mode [ 129.748895][ T3491] loop2: detected capacity change from 0 to 1024 [ 129.750446][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.765347][ T813] device veth1_macvtap left promiscuous mode [ 129.771630][ T813] device veth0_vlan left promiscuous mode [ 129.774503][ T3491] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,noauto_da_alloc,nolazytime,auto_da_alloc=0x0000000000000006,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 129.806836][ T30] audit: type=1400 audit(1790963774.862:435): avc: denied { watch watch_reads } for pid=3490 comm="syz.2.1168" path="/225/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.887149][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.895620][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.907228][ T3495] device syzkaller0 entered promiscuous mode [ 129.972002][ T3505] loop2: detected capacity change from 0 to 512 [ 130.001211][ T3505] EXT4-fs (loop2): Ignoring removed bh option [ 130.012762][ T3505] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.054792][ T3505] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 131.072785][ T3505] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.125087][ T30] audit: type=1400 audit(1790963776.182:436): avc: denied { setopt } for pid=3530 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.180468][ T3538] loop2: detected capacity change from 0 to 256 [ 131.198606][ T30] audit: type=1400 audit(1790963776.252:437): avc: denied { nlmsg_write } for pid=3544 comm="syz.6.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.249571][ T3552] loop6: detected capacity change from 0 to 512 [ 131.274388][ T3559] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 131.297440][ T3552] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.310674][ T3559] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1186'. [ 131.338331][ T30] audit: type=1326 audit(1790963776.392:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.5.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a59f159 code=0x7ffc0000 [ 131.370540][ T3552] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.485181][ T30] audit: type=1326 audit(1790963776.422:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.5.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a59f159 code=0x7ffc0000 [ 131.521035][ T30] audit: type=1326 audit(1790963776.422:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.5.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a59f159 code=0x7ffc0000 [ 131.560543][ T30] audit: type=1326 audit(1790963776.422:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.5.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a59f159 code=0x7ffc0000 [ 131.586440][ T30] audit: type=1326 audit(1790963776.422:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.5.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e9a59f159 code=0x7ffc0000 [ 131.613013][ T30] audit: type=1326 audit(1790963776.422:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.5.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a59f159 code=0x7ffc0000 [ 131.638852][ T30] audit: type=1326 audit(1790963776.422:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.5.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a59f159 code=0x7ffc0000 [ 131.698669][ T30] audit: type=1326 audit(1790963776.422:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3567 comm="syz.5.1188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a59f159 code=0x7ffc0000 [ 131.706298][ T3584] loop6: detected capacity change from 0 to 512 [ 131.782010][ T3584] EXT4-fs (loop6): Ignoring removed bh option [ 131.794450][ T3584] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.814707][ T3584] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 131.835980][ T3584] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.330429][ T3608] overlayfs: failed to clone upperpath [ 132.379183][ T3621] loop6: detected capacity change from 0 to 512 [ 132.410978][ T3631] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 132.411532][ T3630] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.428745][ T3631] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1205'. [ 132.440677][ T3621] EXT4-fs (loop6): Ignoring removed bh option [ 132.446956][ T3630] overlayfs: failed to set xattr on upper [ 132.451989][ T3621] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.482301][ T3621] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 132.499787][ T3621] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.696241][ T3645] loop5: detected capacity change from 0 to 256 [ 132.745648][ T3645] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 134.401590][ T3671] loop5: detected capacity change from 0 to 512 [ 134.416747][ T3675] loop6: detected capacity change from 0 to 512 [ 134.456442][ T3671] EXT4-fs (loop5): Test dummy encryption mode enabled [ 134.486413][ T3671] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.1222: inode has both inline data and extents flags [ 134.646275][ T3699] loop2: detected capacity change from 0 to 512 [ 135.789733][ T3671] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1222: couldn't read orphan inode 15 (err -117) [ 135.808703][ T3671] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 135.823847][ T3699] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1227: bg 0: block 385: padding at end of block bitmap is not set [ 135.838696][ T3699] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 135.848638][ T3699] EXT4-fs (loop2): 2 truncates cleaned up [ 135.854431][ T3699] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.058420][ T3716] FAULT_INJECTION: forcing a failure. [ 136.058420][ T3716] name failslab, interval 1, probability 0, space 0, times 0 [ 136.071656][ T3716] CPU: 1 PID: 3716 Comm: syz.6.1235 Not tainted syzkaller #0 [ 136.079143][ T3716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.089688][ T3716] Call Trace: [ 136.093156][ T3716] [ 136.096329][ T3716] __dump_stack+0x21/0x30 [ 136.100795][ T3716] dump_stack_lvl+0x110/0x170 [ 136.105766][ T3716] ? show_regs_print_info+0x20/0x20 [ 136.111088][ T3716] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 136.117115][ T3716] ? _raw_spin_lock+0xf0/0xf0 [ 136.121804][ T3716] dump_stack+0x15/0x20 [ 136.126065][ T3716] should_fail+0x3ab/0x500 [ 136.130875][ T3716] __should_failslab+0xa4/0xe0 [ 136.135737][ T3716] should_failslab+0x9/0x20 [ 136.140591][ T3716] slab_pre_alloc_hook+0x39/0xd0 [ 136.145525][ T3716] ? radix_tree_node_alloc+0x80/0x380 [ 136.150909][ T3716] kmem_cache_alloc+0x44/0x260 [ 136.155855][ T3716] ? tipc_setsockopt+0x6b8/0x960 [ 136.161406][ T3716] radix_tree_node_alloc+0x80/0x380 [ 136.166634][ T3716] idr_get_free+0x2b1/0xa90 [ 136.171227][ T3716] idr_alloc+0x1a3/0x2f0 [ 136.175565][ T3716] ? idr_alloc_u32+0x310/0x310 [ 136.180452][ T3716] ? _raw_spin_lock_irq+0xf0/0xf0 [ 136.185799][ T3716] ? kmem_cache_alloc_trace+0x119/0x270 [ 136.191582][ T3716] ? tipc_conn_alloc+0x5a/0x460 [ 136.196813][ T3716] tipc_conn_alloc+0x284/0x460 [ 136.201622][ T3716] tipc_topsrv_kern_subscr+0x153/0x340 [ 136.207184][ T3716] ? conn_put+0x320/0x320 [ 136.211757][ T3716] ? tipc_group_create+0xa0/0x590 [ 136.216808][ T3716] tipc_group_create+0x3b8/0x590 [ 136.221901][ T3716] tipc_sk_join+0x249/0x680 [ 136.226854][ T3716] ? __tipc_sendstream+0x1190/0x1190 [ 136.232325][ T3716] ? preempt_schedule_irq+0xca/0x120 [ 136.238016][ T3716] ? __kasan_check_write+0x14/0x20 [ 136.243330][ T3716] ? _copy_from_user+0x95/0xd0 [ 136.248310][ T3716] tipc_setsockopt+0x6b8/0x960 [ 136.253377][ T3716] ? irqentry_exit_cond_resched+0x29/0x30 [ 136.259279][ T3716] ? irqentry_exit+0x37/0x40 [ 136.264064][ T3716] ? tipc_shutdown+0x3f0/0x3f0 [ 136.268871][ T3716] ? tipc_shutdown+0x3f0/0x3f0 [ 136.273638][ T3716] ? __sys_setsockopt+0x2cd/0x470 [ 136.279044][ T3716] ? tipc_shutdown+0x3f0/0x3f0 [ 136.283908][ T3716] __sys_setsockopt+0x2e9/0x470 [ 136.289776][ T3716] ? __kasan_check_write+0x14/0x20 [ 136.295519][ T3716] ? __ia32_sys_recv+0xb0/0xb0 [ 136.300628][ T3716] ? ksys_write+0x1fa/0x260 [ 136.305267][ T3716] ? __kasan_check_write+0x14/0x20 [ 136.310840][ T3716] __x64_sys_setsockopt+0xbf/0xd0 [ 136.315869][ T3716] x64_sys_call+0x982/0x9a0 [ 136.320557][ T3716] do_syscall_64+0x4c/0xa0 [ 136.325167][ T3716] ? clear_bhb_loop+0x50/0xa0 [ 136.329942][ T3716] ? clear_bhb_loop+0x50/0xa0 [ 136.334932][ T3716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.341450][ T3716] RIP: 0033:0x7ff58c2b7159 [ 136.345944][ T3716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.366604][ T3716] RSP: 002b:00007ff58ad10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.375731][ T3716] RAX: ffffffffffffffda RBX: 00007ff58c53efa0 RCX: 00007ff58c2b7159 [ 136.384444][ T3716] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 136.393164][ T3716] RBP: 00007ff58c34e06b R08: 00000000000004bd R09: 0000000000000000 [ 136.401672][ T3716] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 136.410349][ T3716] R13: 00007ff58c53f038 R14: 00007ff58c53efa0 R15: 00007ffcc72cfbb8 [ 136.418552][ T3716] [ 136.471900][ T3720] loop5: detected capacity change from 0 to 512 [ 136.499105][ T3724] loop6: detected capacity change from 0 to 256 [ 136.509008][ T3720] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.1237: missing EA_INODE flag [ 136.520953][ T3720] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1237: error while reading EA inode 2 err=-117 [ 136.534280][ T3720] EXT4-fs (loop5): 1 orphan inode deleted [ 136.540356][ T3720] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.602989][ T3724] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 138.327137][ T3765] device syzkaller0 entered promiscuous mode [ 138.585678][ T3792] fuse: Bad value for 'fd' [ 138.602018][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 138.602038][ T30] audit: type=1400 audit(1790963783.652:461): avc: denied { create } for pid=3791 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.361544][ T3829] loop5: detected capacity change from 0 to 512 [ 140.369621][ T3825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 140.397987][ T544] udevd[544]: symlink '../../loop5' '/dev/disk/by-diskseq/456.tmp-b7:5' failed: Read-only file system [ 140.412552][ T3825] device vlan2 entered promiscuous mode [ 140.419265][ T3825] device gretap0 entered promiscuous mode [ 140.431008][ T544] udevd[544]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 140.431485][ T3829] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.445392][ T3823] loop6: detected capacity change from 0 to 8192 [ 140.460250][ T3829] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.491354][ T3829] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1286: corrupted xattr block 33 [ 140.513667][ T3829] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 140.553447][ T3849] ip_tables: iptables: counters copy to user failed while replacing table [ 140.567117][ T555] udevd[555]: symlink '../../loop6' '/dev/disk/by-diskseq/457.tmp-b7:6' failed: Read-only file system [ 140.614367][ T555] udevd[555]: symlink '../../loop6' '/dev/disk/by-label/SYZKALLER.tmp-b7:6' failed: Read-only file system [ 140.634072][ T555] udevd[555]: symlink '../../loop6' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:6' failed: Read-only file system [ 140.655445][ T544] udevd[544]: symlink '../../loop6' '/dev/disk/by-diskseq/457.tmp-b7:6' failed: Read-only file system [ 140.686146][ T555] udevd[555]: symlink '../../loop5' '/dev/disk/by-diskseq/456.tmp-b7:5' failed: Read-only file system [ 140.689464][ T544] udevd[544]: symlink '../../loop6' '/dev/disk/by-label/SYZKALLER.tmp-b7:6' failed: Read-only file system [ 140.704749][ T555] udevd[555]: symlink '../../loop5' '/dev/disk/by-diskseq/456.tmp-b7:5' failed: Read-only file system [ 140.735401][ T544] udevd[544]: symlink '../../loop6' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:6' failed: Read-only file system [ 141.254906][ T3900] loop5: detected capacity change from 0 to 256 [ 141.272286][ T30] audit: type=1400 audit(1790963786.322:462): avc: denied { bind } for pid=3901 comm="syz.4.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.309546][ T30] audit: type=1400 audit(1790963786.322:463): avc: denied { connect } for pid=3901 comm="syz.4.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.224356][ T3900] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 142.251369][ T30] audit: type=1400 audit(1790963787.302:464): avc: denied { getopt } for pid=3910 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.287381][ T30] audit: type=1400 audit(1790963787.342:465): avc: denied { execute } for pid=3914 comm="syz.0.1322" name="file1" dev="tmpfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.342575][ T30] audit: type=1400 audit(1790963787.362:466): avc: denied { execute_no_trans } for pid=3914 comm="syz.0.1322" path="/404/file1" dev="tmpfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.374735][ T3922] overlayfs: failed to clone upperpath [ 142.377697][ T30] audit: type=1400 audit(1790963787.432:467): avc: denied { watch_reads } for pid=3921 comm="syz.0.1326" path="/406/file0" dev="tmpfs" ino=2196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.467713][ T3931] loop6: detected capacity change from 0 to 1024 [ 142.599450][ T3931] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 142.624401][ T30] audit: type=1400 audit(1790963787.682:468): avc: denied { rename } for pid=3930 comm="syz.6.1330" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.647985][ T30] audit: type=1326 audit(1790963787.702:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.0.1336" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbbcbd0159 code=0x0 [ 142.648905][ T3931] EXT4-fs error (device loop6): ext4_empty_dir:3168: inode #11: block 623: comm syz.6.1330: Attempting to read directory block (623) that is past i_size (638464) [ 142.914579][ T3958] loop6: detected capacity change from 0 to 256 [ 143.328040][ T3958] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 143.406758][ T30] audit: type=1400 audit(1790963788.462:470): avc: denied { ioctl } for pid=3972 comm="syz.5.1345" path="/66/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 144.842991][ T4019] overlayfs: failed to clone upperpath [ 144.935466][ T30] audit: type=1400 audit(1790963789.992:471): avc: denied { shutdown } for pid=4036 comm="syz.6.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.988590][ T4046] loop6: detected capacity change from 0 to 128 [ 144.992413][ T30] audit: type=1400 audit(1790963790.042:472): avc: denied { accept } for pid=4047 comm="syz.2.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.039088][ T30] audit: type=1400 audit(1790963790.072:473): avc: denied { read } for pid=4047 comm="syz.2.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.969309][ T4046] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 145.997001][ T4061] loop5: detected capacity change from 0 to 256 [ 146.019675][ T4046] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.039190][ T4046] ext2 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.101173][ T30] audit: type=1400 audit(1790963792.151:474): avc: denied { sys_admin } for pid=4089 comm="syz.4.1399" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 146.131090][ T4061] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 146.206167][ T4095] loop6: detected capacity change from 0 to 512 [ 146.316324][ T4095] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.346405][ T4095] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.357772][ T4107] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 146.381503][ T4095] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 146.420782][ T4095] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 146.597699][ T4113] FAULT_INJECTION: forcing a failure. [ 146.597699][ T4113] name failslab, interval 1, probability 0, space 0, times 0 [ 146.611919][ T4113] CPU: 0 PID: 4113 Comm: syz.6.1405 Not tainted syzkaller #0 [ 146.619517][ T4113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.629764][ T4113] Call Trace: [ 146.633150][ T4113] [ 146.636102][ T4113] __dump_stack+0x21/0x30 [ 146.640732][ T4113] dump_stack_lvl+0x110/0x170 [ 146.645611][ T4113] ? show_regs_print_info+0x20/0x20 [ 146.650833][ T4113] dump_stack+0x15/0x20 [ 146.655094][ T4113] should_fail+0x3ab/0x500 [ 146.659529][ T4113] __should_failslab+0xa4/0xe0 [ 146.664309][ T4113] should_failslab+0x9/0x20 [ 146.669069][ T4113] slab_pre_alloc_hook+0x39/0xd0 [ 146.674298][ T4113] ? vm_area_dup+0x26/0x210 [ 146.679025][ T4113] kmem_cache_alloc+0x44/0x260 [ 146.684517][ T4113] vm_area_dup+0x26/0x210 [ 146.689073][ T4113] __split_vma+0xac/0x3e0 [ 146.694321][ T4113] ? vmacache_find+0x38e/0x490 [ 146.699622][ T4113] __do_munmap+0x43c/0x1090 [ 146.704349][ T4113] __vm_munmap+0x14e/0x280 [ 146.708902][ T4113] ? vm_munmap+0x30/0x30 [ 146.713237][ T4113] __x64_sys_munmap+0x6b/0x80 [ 146.718047][ T4113] x64_sys_call+0xc9/0x9a0 [ 146.722742][ T4113] do_syscall_64+0x4c/0xa0 [ 146.727351][ T4113] ? clear_bhb_loop+0x50/0xa0 [ 146.732056][ T4113] ? clear_bhb_loop+0x50/0xa0 [ 146.736753][ T4113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.743108][ T4113] RIP: 0033:0x7ff58c2b6f87 [ 146.747570][ T4113] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.767801][ T4113] RSP: 002b:00007ff58ad0ed18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 146.776524][ T4113] RAX: ffffffffffffffda RBX: 00007ff584000000 RCX: 00007ff58c2b6f87 [ 146.784550][ T4113] RDX: 0000000000000000 RSI: 0000000001310000 RDI: 00007ff582cf0000 [ 146.792816][ T4113] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 146.800809][ T4113] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 146.809055][ T4113] R13: 0000000000001000 R14: 00007ff588000000 R15: 0000000001310000 [ 146.817417][ T4113] [ 147.006213][ T30] audit: type=1326 audit(1790963793.061:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.2.1409" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3246e159 code=0x0 [ 147.096074][ T4137] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 147.106945][ T4137] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1418'. [ 147.985156][ T4157] loop5: detected capacity change from 0 to 128 [ 147.988125][ T4155] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1422'. [ 148.009364][ T4157] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 148.033395][ T4157] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 148.050700][ T4157] FAT-fs (loop5): Filesystem has been set read-only [ 148.078914][ T3001] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 148.160543][ T4179] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 148.162229][ T4177] loop6: detected capacity change from 0 to 256 [ 148.171327][ T4179] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1433'. [ 148.861890][ T4199] loop6: detected capacity change from 0 to 256 [ 148.938385][ T4199] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 149.067484][ T30] audit: type=1400 audit(1790963795.121:476): avc: denied { setopt } for pid=4218 comm="syz.5.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.089871][ T4219] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1450'. [ 149.224551][ T4239] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 149.253473][ T4239] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1458'. [ 149.981225][ T30] audit: type=1400 audit(1790963796.031:477): avc: denied { read write } for pid=4255 comm="syz.5.1466" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 150.010203][ T30] audit: type=1400 audit(1790963796.071:478): avc: denied { open } for pid=4255 comm="syz.5.1466" path="/81/proc/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 150.097145][ T4272] loop6: detected capacity change from 0 to 256 [ 150.269038][ T4278] device bridge2 entered promiscuous mode [ 150.280418][ T4272] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 150.364178][ T30] audit: type=1326 audit(1790963796.421:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.0.1475" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbbcbd0159 code=0x0 [ 151.079942][ T4293] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1479'. [ 151.433919][ T4301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1481'. [ 151.452820][ T30] audit: type=1400 audit(1790963797.461:480): avc: denied { bind } for pid=4300 comm="syz.6.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.472841][ T4301] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1481'. [ 151.485193][ T4305] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 151.506885][ T4305] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1484'. [ 152.142530][ T4326] ip_tables: iptables: counters copy to user failed while replacing table [ 152.413664][ T4343] loop6: detected capacity change from 0 to 512 [ 152.499893][ T4343] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1498: missing EA_INODE flag [ 152.511873][ T4343] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1498: error while reading EA inode 2 err=-117 [ 152.524724][ T4343] EXT4-fs (loop6): 1 orphan inode deleted [ 152.530792][ T4343] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 152.644168][ T4351] overlayfs: failed to clone upperpath [ 152.665965][ T4351] overlayfs: failed to clone upperpath [ 152.898059][ T4354] loop6: detected capacity change from 0 to 128 [ 152.936879][ T4361] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 152.948219][ T4361] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1505'. [ 153.116111][ T4354] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 153.161047][ T8] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 153.301993][ T30] audit: type=1400 audit(1790963799.351:481): avc: denied { ioctl } for pid=4372 comm="syz.5.1511" path="socket:[27332]" dev="sockfs" ino=27332 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.333208][ C1] ================================================================== [ 153.341554][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 153.349363][ C1] Read of size 8 at addr ffff8881393f9590 by task ksoftirqd/1/25 [ 153.357579][ C1] [ 153.360009][ C1] CPU: 1 PID: 25 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 153.367410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.378032][ C1] Call Trace: [ 153.381511][ C1] [ 153.384584][ C1] __dump_stack+0x21/0x30 [ 153.389058][ C1] dump_stack_lvl+0x110/0x170 [ 153.393819][ C1] ? show_regs_print_info+0x20/0x20 [ 153.399136][ C1] ? load_image+0x3f0/0x3f0 [ 153.403677][ C1] ? __raise_softirq_irqoff+0x17/0xd0 [ 153.409183][ C1] ? raise_softirq+0x7d/0xf0 [ 153.413855][ C1] print_address_description+0x7f/0x2c0 [ 153.419510][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 153.424584][ C1] kasan_report+0x10f/0x150 [ 153.429143][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 153.434174][ C1] __asan_report_load8_noabort+0x14/0x20 [ 153.439921][ C1] rcu_cblist_dequeue+0x6c/0xb0 [ 153.444891][ C1] rcu_do_batch+0x412/0xbf0 [ 153.449600][ C1] ? local_bh_enable+0x20/0x20 [ 153.454452][ C1] ? __kasan_check_write+0x14/0x20 [ 153.459590][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 153.464365][ C1] rcu_core+0x4a3/0xef0 [ 153.468670][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 153.473882][ C1] ? sched_clock_cpu+0x18/0x3d0 [ 153.478808][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 153.484367][ C1] ? rcu_softirq_qs+0xd7/0x2f0 [ 153.489163][ C1] ? irqtime_account_irq+0x76/0x390 [ 153.494942][ C1] rcu_core_si+0x9/0x10 [ 153.499109][ C1] handle_softirqs+0x250/0x560 [ 153.503905][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 153.509292][ C1] run_ksoftirqd+0x28/0x40 [ 153.513724][ C1] smpboot_thread_fn+0x446/0x880 [ 153.518704][ C1] kthread+0x3f5/0x4f0 [ 153.522785][ C1] ? cpu_report_death+0x1b0/0x1b0 [ 153.528014][ C1] ? kthread_blkcg+0xd0/0xd0 [ 153.532631][ C1] ret_from_fork+0x1f/0x30 [ 153.537489][ C1] [ 153.540727][ C1] [ 153.543109][ C1] Allocated by task 4375: [ 153.547701][ C1] __kasan_kmalloc+0xd4/0x100 [ 153.552728][ C1] __kmalloc+0x13d/0x2c0 [ 153.557097][ C1] l2tp_session_create+0x39/0xb60 [ 153.562594][ C1] pppol2tp_connect+0xbf5/0x1640 [ 153.567657][ C1] __sys_connect+0x3cb/0x450 [ 153.572345][ C1] __x64_sys_connect+0x7a/0x90 [ 153.577253][ C1] x64_sys_call+0x7c/0x9a0 [ 153.582078][ C1] do_syscall_64+0x4c/0xa0 [ 153.587007][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.592942][ C1] [ 153.595313][ C1] Freed by task 8: [ 153.599020][ C1] kasan_set_track+0x4a/0x70 [ 153.603609][ C1] kasan_set_free_info+0x23/0x40 [ 153.608589][ C1] ____kasan_slab_free+0x125/0x160 [ 153.613882][ C1] __kasan_slab_free+0x11/0x20 [ 153.618643][ C1] slab_free_freelist_hook+0xc2/0x190 [ 153.624004][ C1] kfree+0xc4/0x270 [ 153.627844][ C1] l2tp_session_put+0xaf/0x1a0 [ 153.632643][ C1] l2tp_session_delete+0x3a9/0x4a0 [ 153.638043][ C1] l2tp_tunnel_del_work+0x180/0x3d0 [ 153.643249][ C1] process_one_work+0x6c8/0xbb0 [ 153.648116][ C1] worker_thread+0xaa0/0x1250 [ 153.652889][ C1] kthread+0x3f5/0x4f0 [ 153.656985][ C1] ret_from_fork+0x1f/0x30 [ 153.661651][ C1] [ 153.663978][ C1] Last potentially related work creation: [ 153.669697][ C1] kasan_save_stack+0x3a/0x60 [ 153.674379][ C1] __kasan_record_aux_stack+0xd2/0x100 [ 153.679833][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 153.685652][ C1] call_rcu+0x10b/0xf60 [ 153.689817][ C1] pppol2tp_release+0x1e3/0x2b0 [ 153.694957][ C1] sock_close+0xb8/0x200 [ 153.699328][ C1] __fput+0x22b/0x900 [ 153.703425][ C1] ____fput+0x15/0x20 [ 153.707422][ C1] task_work_run+0x127/0x190 [ 153.712212][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 153.717410][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 153.722870][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 153.728349][ C1] do_syscall_64+0x58/0xa0 [ 153.732858][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.738833][ C1] [ 153.741166][ C1] The buggy address belongs to the object at ffff8881393f9400 [ 153.741166][ C1] which belongs to the cache kmalloc-512 of size 512 [ 153.755637][ C1] The buggy address is located 400 bytes inside of [ 153.755637][ C1] 512-byte region [ffff8881393f9400, ffff8881393f9600) [ 153.769718][ C1] The buggy address belongs to the page: [ 153.775973][ C1] page:ffffea0004e4fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881393fb000 pfn:0x1393f8 [ 153.787891][ C1] head:ffffea0004e4fe00 order:2 compound_mapcount:0 compound_pincount:0 [ 153.796220][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 153.802416][ C1] raw: 4000000000010200 ffffea0004a6a200 0000000300000003 ffff888100042f00 [ 153.811010][ C1] raw: ffff8881393fb000 0000000080100005 00000001ffffffff 0000000000000000 [ 153.819681][ C1] page dumped because: kasan: bad access detected [ 153.826277][ C1] page_owner tracks the page as allocated [ 153.831989][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 90, ts 103712789692, free_ts 103551586755 [ 153.853265][ C1] post_alloc_hook+0x192/0x1b0 [ 153.858900][ C1] prep_new_page+0x1c/0x110 [ 153.863891][ C1] get_page_from_freelist+0x2c3a/0x2cd0 [ 153.869496][ C1] __alloc_pages+0x1a2/0x460 [ 153.874092][ C1] new_slab+0xa0/0x4d0 [ 153.878191][ C1] ___slab_alloc+0x3ac/0x840 [ 153.883120][ C1] __slab_alloc+0x49/0x90 [ 153.887764][ C1] __kmalloc_track_caller+0x169/0x2c0 [ 153.893174][ C1] __alloc_skb+0x210/0x730 [ 153.898310][ C1] alloc_skb_with_frags+0xa8/0x620 [ 153.903794][ C1] sock_alloc_send_pskb+0x87f/0x9a0 [ 153.909244][ C1] unix_dgram_sendmsg+0x6f3/0x19b0 [ 153.914538][ C1] __sys_sendto+0x46d/0x620 [ 153.919275][ C1] __x64_sys_sendto+0xe5/0x100 [ 153.924230][ C1] x64_sys_call+0x178/0x9a0 [ 153.928962][ C1] do_syscall_64+0x4c/0xa0 [ 153.933503][ C1] page last free stack trace: [ 153.938745][ C1] free_unref_page_prepare+0x5fa/0x600 [ 153.944448][ C1] free_unref_page+0xae/0x540 [ 153.949151][ C1] __free_pages+0x6c/0x100 [ 153.953684][ C1] free_pages+0x82/0x90 [ 153.957854][ C1] kasan_depopulate_vmalloc_pte+0x6b/0x90 [ 153.963709][ C1] __apply_to_page_range+0x8ca/0xc70 [ 153.969192][ C1] apply_to_existing_page_range+0x38/0x50 [ 153.975228][ C1] kasan_release_vmalloc+0x97/0xb0 [ 153.980520][ C1] __purge_vmap_area_lazy+0xa8d/0x1890 [ 153.985975][ C1] _vm_unmap_aliases+0x2f1/0x370 [ 153.991016][ C1] vm_unmap_aliases+0x19/0x20 [ 153.995705][ C1] change_page_attr_set_clr+0x317/0xc30 [ 154.001266][ C1] set_memory_ro+0x89/0xd0 [ 154.005691][ C1] bpf_int_jit_compile+0xbf12/0xc4c0 [ 154.011514][ C1] bpf_prog_select_runtime+0x6ea/0x9e0 [ 154.017580][ C1] bpf_prepare_filter+0x100e/0x11b0 [ 154.022977][ C1] [ 154.025384][ C1] Memory state around the buggy address: [ 154.031118][ C1] ffff8881393f9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.039353][ C1] ffff8881393f9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.047821][ C1] >ffff8881393f9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.055959][ C1] ^ [ 154.060546][ C1] ffff8881393f9600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.068756][ C1] ffff8881393f9680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.076908][ C1] ================================================================== [ 154.084962][ C1] Disabling lock debugging due to kernel taint [ 154.103569][ T30] audit: type=1400 audit(1790963800.161:482): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1