last executing test programs: 2.171929868s ago: executing program 1 (id=258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x8, 0x4, &(0x7f0000001440)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000001480)='syzkaller\x00', 0x4, 0x99, &(0x7f00000014c0)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0xe, 0xf, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000bec4d4f48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001800)={@map=r1, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r1}, &(0x7f0000001880), &(0x7f00000018c0)=r0}, 0x20) sendmsg(r2, &(0x7f0000001900)={0x0, 0x803e, &(0x7f0000001940)=[{&(0x7f0000001980)='H', 0x20001401}], 0x1}, 0x0) 1.977172943s ago: executing program 4 (id=269): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1000801, &(0x7f0000000080)=ANY=[], 0x8, 0x1f3, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x133140, 0x2) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4090, 0x1000}], 0xc) 1.895120974s ago: executing program 4 (id=271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000480), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1.300455959s ago: executing program 1 (id=286): unshare(0x2a020480) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000004c0)='io.stat\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) 1.050077545s ago: executing program 4 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xc, 0x10, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.049652375s ago: executing program 1 (id=291): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000380)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x63, 0x30, 0x62, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000880)={0x0, "151122330e66778899aabbccddeeff00132233445566778899aabbccddeeff0011223344556677ff00112233445566770399aabbccddeeff00001b00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000d80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x36, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x30, 0x65]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x32, 0x37, 0x32, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x32, 0xf]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x36, 0x62, 0x33, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x31, 0x36]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001cc0)={'fscrypt:', @desc1}, &(0x7f0000001d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000001d80), &(0x7f0000001dc0)={'syz', 0x2}, &(0x7f0000001e00)='c', 0x1, r0) 1.043317575s ago: executing program 4 (id=292): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x79a, &(0x7f0000000380)="$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") prctl$PR_SET_PTRACER(0x1c, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000c80)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 988.959706ms ago: executing program 1 (id=295): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3a) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x14000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) 974.902937ms ago: executing program 1 (id=296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x8, 0x4, &(0x7f0000001440)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000001480)='syzkaller\x00', 0x4, 0x99, &(0x7f00000014c0)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0xe, 0xf, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000bec4d4f48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001800)={@map, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{}, &(0x7f0000001880), &(0x7f00000018c0)=r0}, 0x20) sendmsg(r1, &(0x7f0000001900)={0x0, 0x803e, &(0x7f0000001940)=[{&(0x7f0000001980)='H', 0x20001401}], 0x1}, 0x0) 914.683898ms ago: executing program 3 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x8000) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x730f8c1b, 0x80) linkat(r0, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', r1, &(0x7f0000000200)='./proc\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 539.852317ms ago: executing program 2 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r0, &(0x7f0000000500)='3', 0x4e) syz_clone3(&(0x7f0000000540)={0x200000300, &(0x7f0000000140), 0x0, 0x0, {0x1}, 0x0, 0x0, &(0x7f0000000300)=""/163, 0x0, 0x0, {r0}}, 0x58) 443.11305ms ago: executing program 3 (id=300): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000014c0)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000600ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) 165.922056ms ago: executing program 2 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xc, 0x10, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 165.777916ms ago: executing program 0 (id=303): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c00000000006113860000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 165.683186ms ago: executing program 3 (id=304): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r1 = syz_open_pts(r0, 0x141401) write(r1, &(0x7f0000000100)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x2) 165.364806ms ago: executing program 2 (id=305): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000380)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x63, 0x30, 0x62, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000880)={0x0, "151122330e66778899aabbccddeeff00132233445566778899aabbccddeeff0011223344556677ff00112233445566770399aabbccddeeff00001b00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000d80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x36, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x30, 0x65]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x32, 0x37, 0x32, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x32, 0xf]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x36, 0x62, 0x33, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x31, 0x36]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001cc0)={'fscrypt:', @desc1}, &(0x7f0000001d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000001d80), &(0x7f0000001dc0)={'syz', 0x2}, &(0x7f0000001e00)='c', 0x1, r0) 135.214128ms ago: executing program 0 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f00000008c0), 0x619, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 134.922348ms ago: executing program 0 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) 134.655157ms ago: executing program 2 (id=308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 128.217137ms ago: executing program 1 (id=309): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) ppoll(&(0x7f0000000100)=[{r0, 0xc040}], 0x1, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) 85.296028ms ago: executing program 0 (id=310): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000340)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x8, 0x0) 85.172938ms ago: executing program 3 (id=311): syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa080202"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x28, 0x2c, 0xff, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}]}}}}}, 0x0) 85.048448ms ago: executing program 2 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./tracing\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracing/events/sched/filter\x00', 0x101, 0x1c) write(r0, &(0x7f00000007c0)="2828d43220f6cba9fd7c35a4a9b4891d649373be197f57c12fdcba46ab29", 0x1e) 61.910739ms ago: executing program 3 (id=313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000a40)=ANY=[], 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) 61.259039ms ago: executing program 4 (id=314): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8c16, &(0x7f0000000480)=ANY=[], 0x8, 0x2bf, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 51.90117ms ago: executing program 0 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xc, 0x10, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.49044ms ago: executing program 4 (id=316): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="18e9a2238354e533a2000000000000000000000002000000c60001002500000085100000010000009500000000000000184000008200"/63], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r4, &(0x7f0000000680), &(0x7f00000006c0)=@tcp=r2}, 0x20) sendto(r3, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x80c00, 0x0) fcntl$notify(r6, 0x402, 0x34) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='sched\x00') copy_file_range(r7, 0x0, r7, &(0x7f0000000480)=0xfffffffffffffff7, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 16.44419ms ago: executing program 0 (id=317): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20004010) socket$inet6(0xa, 0x6, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x1, r0, 0x0, 0xb, 0x0) 8.8718ms ago: executing program 2 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x619, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 0s ago: executing program 3 (id=319): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000380)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x63, 0x30, 0x62, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000880)={0x0, "151122330e66778899aabbccddeeff00132233445566778899aabbccddeeff0011223344556677ff00112233445566770399aabbccddeeff00001b00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000d80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000f40)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x36, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x30, 0x65]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x32, 0x37, 0x32, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x32, 0xf]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x36, 0x62, 0x33, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x31, 0x36]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001cc0)={'fscrypt:', @desc1}, &(0x7f0000001d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000001d80), &(0x7f0000001dc0)={'syz', 0x2}, &(0x7f0000001e00)='c', 0x1, r0) kernel console output (not intermixed with test programs): ss permissive=1 [ 22.298969][ T28] audit: type=1400 audit(1792156635.402:63): avc: denied { siginh } for pid=267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.454096][ T274] sshd-session (274) used greatest stack depth: 20896 bytes left Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 30.132695][ T28] audit: type=1400 audit(1792156643.242:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.136326][ T279] cgroup: Unknown subsys name 'net' [ 30.155950][ T28] audit: type=1400 audit(1792156643.242:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.183487][ T28] audit: type=1400 audit(1792156643.272:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.183952][ T279] cgroup: Unknown subsys name 'devices' [ 30.298719][ T279] cgroup: Unknown subsys name 'hugetlb' [ 30.304388][ T279] cgroup: Unknown subsys name 'rlimit' [ 30.409827][ T28] audit: type=1400 audit(1792156643.522:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.433410][ T28] audit: type=1400 audit(1792156643.522:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.458355][ T28] audit: type=1400 audit(1792156643.522:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.488789][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.498212][ T28] audit: type=1400 audit(1792156643.612:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.524008][ T28] audit: type=1400 audit(1792156643.612:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.545051][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.551179][ T28] audit: type=1400 audit(1792156643.652:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.583939][ T28] audit: type=1400 audit(1792156643.652:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.495553][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.502682][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.510506][ T287] device bridge_slave_0 entered promiscuous mode [ 31.518599][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.525661][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.533368][ T287] device bridge_slave_1 entered promiscuous mode [ 31.564534][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.571647][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.579248][ T288] device bridge_slave_0 entered promiscuous mode [ 31.609340][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.616416][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.624245][ T288] device bridge_slave_1 entered promiscuous mode [ 31.700817][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.708187][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.715628][ T289] device bridge_slave_0 entered promiscuous mode [ 31.724679][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.731924][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.739562][ T289] device bridge_slave_1 entered promiscuous mode [ 31.783045][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.790210][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.797869][ T291] device bridge_slave_0 entered promiscuous mode [ 31.821621][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.828787][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.836177][ T291] device bridge_slave_1 entered promiscuous mode [ 31.886247][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.893717][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.901477][ T290] device bridge_slave_0 entered promiscuous mode [ 31.930482][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.937585][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.944885][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.951967][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.960591][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.967762][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.975285][ T290] device bridge_slave_1 entered promiscuous mode [ 31.994551][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.001645][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.009032][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.016094][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.091096][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.098518][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.105789][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.113583][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.120817][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.147831][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.156123][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.163219][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.170700][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.178965][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.186003][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.244490][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.254080][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.281190][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.289404][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.297816][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.304852][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.313215][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.322005][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.329587][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.337671][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.361089][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.369117][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.377006][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.385183][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.392270][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.400519][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.408864][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.415928][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.433745][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.441999][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.451512][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.469713][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.478783][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.487748][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.494791][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.502637][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.511276][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.519693][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.526796][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.535085][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.547116][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.554725][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.563108][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.571717][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.581528][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.590009][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.598398][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.605470][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.624297][ T288] device veth0_vlan entered promiscuous mode [ 32.646929][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.654866][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.663348][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.672588][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.681218][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.689637][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.697572][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.705589][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.713719][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.721945][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.730157][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.738145][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.746178][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.754373][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.762848][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.771244][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.778321][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.785734][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.793972][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.802101][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.809804][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.817505][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.824969][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.832688][ T287] device veth0_vlan entered promiscuous mode [ 32.842495][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.850999][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.864586][ T288] device veth1_macvtap entered promiscuous mode [ 32.880168][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.890106][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.898335][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.905847][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.913688][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.922427][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.930903][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.944708][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.953184][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.962956][ T290] device veth0_vlan entered promiscuous mode [ 32.970168][ T287] device veth1_macvtap entered promiscuous mode [ 32.982030][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.990134][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.998789][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.013775][ T291] device veth0_vlan entered promiscuous mode [ 33.023444][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.032021][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.040648][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.049018][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.057724][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.066018][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.074764][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.083613][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.092398][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.100847][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.109414][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.117275][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.134944][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.143097][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.151462][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.160867][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.170429][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.178187][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.189456][ T290] device veth1_macvtap entered promiscuous mode [ 33.196575][ T289] device veth0_vlan entered promiscuous mode [ 33.205550][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.225371][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 33.233553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.242236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.255999][ T289] device veth1_macvtap entered promiscuous mode [ 33.269384][ T291] device veth1_macvtap entered promiscuous mode [ 33.276204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.284588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.293380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.302656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.311900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.314627][ T312] FAULT_INJECTION: forcing a failure. [ 33.314627][ T312] name failslab, interval 1, probability 0, space 0, times 1 [ 33.320800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.334119][ T312] CPU: 1 PID: 312 Comm: syz.3.6 Not tainted syzkaller #0 [ 33.347826][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.357945][ T312] Call Trace: [ 33.361260][ T312] [ 33.364220][ T312] __dump_stack+0x21/0x24 [ 33.368704][ T312] dump_stack_lvl+0x110/0x170 [ 33.373402][ T312] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.378440][ T312] ? vfs_write+0xa51/0xd00 [ 33.382878][ T312] dump_stack+0x15/0x24 [ 33.387048][ T312] should_fail_ex+0x3bf/0x510 [ 33.391733][ T312] ? copy_fs_struct+0x4c/0x220 [ 33.396512][ T312] __should_failslab+0xac/0xf0 [ 33.401307][ T312] should_failslab+0x9/0x20 [ 33.405838][ T312] kmem_cache_alloc+0x3b/0x320 [ 33.410619][ T312] copy_fs_struct+0x4c/0x220 [ 33.415221][ T312] ksys_unshare+0x392/0x850 [ 33.419737][ T312] ? __cfi_ksys_unshare+0x10/0x10 [ 33.424774][ T312] ? fpregs_restore_userregs+0x128/0x260 [ 33.430519][ T312] __x64_sys_unshare+0x38/0x40 [ 33.435297][ T312] x64_sys_call+0x767/0x9a0 [ 33.439838][ T312] do_syscall_64+0x4c/0xa0 [ 33.444280][ T312] ? clear_bhb_loop+0x30/0x80 [ 33.448963][ T312] ? clear_bhb_loop+0x30/0x80 [ 33.453645][ T312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.459546][ T312] RIP: 0033:0x7fc69e99e559 [ 33.463992][ T312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.483605][ T312] RSP: 002b:00007fc69f8cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 33.492060][ T312] RAX: ffffffffffffffda RBX: 00007fc69ec25fa0 RCX: 00007fc69e99e559 [ 33.500047][ T312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 33.508037][ T312] RBP: 00007fc69ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 33.516042][ T312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.524020][ T312] R13: 00007fc69ec26038 R14: 00007fc69ec25fa0 R15: 00007fff80f4fbb8 [ 33.532153][ T312] [ 33.549621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.558792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.570699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.575019][ T314] Zero length message leads to an empty skb [ 33.581223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.593633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.602376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.602935][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.618420][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.626260][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.634133][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.641984][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.649887][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.657722][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.665563][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.673437][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.681268][ T314] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 33.707385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.720087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.729046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.737682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.857657][ T336] FAULT_INJECTION: forcing a failure. [ 33.857657][ T336] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.901413][ T322] loop3: detected capacity change from 0 to 8192 [ 33.914738][ T336] CPU: 1 PID: 336 Comm: syz.2.13 Not tainted syzkaller #0 [ 33.921933][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.932116][ T336] Call Trace: [ 33.935432][ T336] [ 33.938389][ T336] __dump_stack+0x21/0x24 [ 33.942877][ T336] dump_stack_lvl+0x110/0x170 [ 33.947607][ T336] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.953032][ T336] dump_stack+0x15/0x24 [ 33.957288][ T336] should_fail_ex+0x3bf/0x510 [ 33.962014][ T336] should_fail+0xb/0x10 [ 33.966387][ T336] should_fail_usercopy+0x1a/0x20 [ 33.971460][ T336] _copy_from_user+0x1e/0xc0 [ 33.976095][ T336] keyctl_pkey_params_get_2+0x11d/0x4a0 [ 33.981691][ T336] ? keyctl_pkey_e_d_s+0x310/0x310 [ 33.986859][ T336] keyctl_pkey_e_d_s+0xcb/0x310 [ 33.991756][ T336] ? __cfi_keyctl_pkey_e_d_s+0x10/0x10 [ 33.997266][ T336] __se_sys_keyctl+0x44e/0xe10 [ 34.002075][ T336] ? __x64_sys_keyctl+0xd0/0xd0 [ 34.007094][ T336] ? do_futex+0x2e2/0x430 [ 34.011467][ T336] ? __cfi_do_futex+0x10/0x10 [ 34.016178][ T336] ? __kasan_check_write+0x14/0x20 [ 34.021332][ T336] ? mutex_unlock+0x8f/0x230 [ 34.026031][ T336] ? __se_sys_futex+0x136/0x310 [ 34.030920][ T336] ? __this_cpu_preempt_check+0x13/0x20 [ 34.036533][ T336] ? xfd_validate_state+0x70/0x150 [ 34.041694][ T336] ? __kasan_check_write+0x14/0x20 [ 34.046850][ T336] ? fpregs_restore_userregs+0x128/0x260 [ 34.052545][ T336] __x64_sys_keyctl+0xbf/0xd0 [ 34.057288][ T336] x64_sys_call+0x71a/0x9a0 [ 34.061837][ T336] do_syscall_64+0x4c/0xa0 [ 34.066290][ T336] ? clear_bhb_loop+0x30/0x80 [ 34.071010][ T336] ? clear_bhb_loop+0x30/0x80 [ 34.075816][ T336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.081787][ T336] RIP: 0033:0x7fef4c39e559 [ 34.086277][ T336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.105930][ T336] RSP: 002b:00007fef4d2a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 34.114433][ T336] RAX: ffffffffffffffda RBX: 00007fef4c625fa0 RCX: 00007fef4c39e559 [ 34.122631][ T336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000019 [ 34.130654][ T336] RBP: 00007fef4c4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 34.138673][ T336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.146679][ T336] R13: 00007fef4c626038 R14: 00007fef4c625fa0 R15: 00007fff69c481e8 [ 34.154698][ T336] [ 34.198386][ T347] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.250881][ T322] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 34.303589][ T371] loop3: detected capacity change from 0 to 256 [ 34.312872][ T374] loop1: detected capacity change from 0 to 256 [ 34.589262][ T411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 34.599808][ T414] FAULT_INJECTION: forcing a failure. [ 34.599808][ T414] name fail_futex, interval 1, probability 0, space 0, times 1 [ 34.618950][ T414] CPU: 1 PID: 414 Comm: syz.0.39 Not tainted syzkaller #0 [ 34.626128][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.636264][ T414] Call Trace: [ 34.639579][ T414] [ 34.642547][ T414] __dump_stack+0x21/0x24 [ 34.646930][ T414] dump_stack_lvl+0x110/0x170 [ 34.651688][ T414] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.656780][ T414] dump_stack+0x15/0x24 [ 34.660991][ T414] should_fail_ex+0x3bf/0x510 [ 34.665713][ T414] should_fail+0xb/0x10 [ 34.669913][ T414] get_futex_key+0x143/0xb10 [ 34.674552][ T414] ? kasan_quarantine_put+0x34/0x190 [ 34.679880][ T414] ? __cfi_get_futex_key+0x10/0x10 [ 34.685041][ T414] ? kmem_cache_free+0x12d/0x300 [ 34.690052][ T414] ? ____kasan_slab_free+0x13d/0x180 [ 34.695388][ T414] futex_wake+0x150/0x8e0 [ 34.699759][ T414] ? audit_log_end+0x1eb/0x240 [ 34.704572][ T414] ? kmem_cache_free+0x12d/0x300 [ 34.709588][ T414] ? __cfi_futex_wake+0x10/0x10 [ 34.714578][ T414] ? audit_seccomp+0x12f/0x160 [ 34.719393][ T414] ? __seccomp_filter+0xb08/0x1a50 [ 34.724545][ T414] do_futex+0x2bf/0x430 [ 34.728775][ T414] ? __cfi_do_futex+0x10/0x10 [ 34.733493][ T414] ? __kasan_check_write+0x14/0x20 [ 34.738643][ T414] ? mutex_unlock+0x8f/0x230 [ 34.743277][ T414] __se_sys_futex+0x136/0x310 [ 34.747992][ T414] ? __x64_sys_futex+0x100/0x100 [ 34.752972][ T414] ? ksys_write+0x1fa/0x260 [ 34.757515][ T414] ? __cfi_ksys_write+0x10/0x10 [ 34.762408][ T414] ? __secure_computing+0xea/0x290 [ 34.767565][ T414] __x64_sys_futex+0xe5/0x100 [ 34.772288][ T414] x64_sys_call+0x7ec/0x9a0 [ 34.776842][ T414] do_syscall_64+0x4c/0xa0 [ 34.781295][ T414] ? clear_bhb_loop+0x30/0x80 [ 34.786064][ T414] ? clear_bhb_loop+0x30/0x80 [ 34.790788][ T414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.796747][ T414] RIP: 0033:0x7fb27819e559 [ 34.801196][ T414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.820846][ T414] RSP: 002b:00007fb2790e50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 34.829417][ T414] RAX: ffffffffffffffda RBX: 00007fb278426188 RCX: 00007fb27819e559 [ 34.837428][ T414] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb27842618c [ 34.845440][ T414] RBP: 00007fb278426180 R08: 0022786e302f4d1c R09: 0000000000000000 [ 34.853538][ T414] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 34.861559][ T414] R13: 00007fb278426218 R14: 00007ffd3da2d240 R15: 00007ffd3da2d328 [ 34.867652][ T418] loop1: detected capacity change from 0 to 2048 [ 34.869573][ T414] [ 34.951822][ T418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.017111][ T436] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 35.173260][ T446] loop3: detected capacity change from 0 to 512 [ 35.218012][ T446] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 35.257245][ T446] FAT-fs (loop3): Filesystem has been set read-only [ 35.280948][ T446] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 35.291641][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 35.291656][ T28] audit: type=1400 audit(1792156648.402:225): avc: denied { read write } for pid=450 comm="syz.0.61" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.334182][ T446] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 35.367202][ T28] audit: type=1400 audit(1792156648.402:226): avc: denied { open } for pid=450 comm="syz.0.61" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.460192][ T28] audit: type=1400 audit(1792156648.402:227): avc: denied { ioctl } for pid=450 comm="syz.0.61" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.533408][ T28] audit: type=1400 audit(1792156648.612:228): avc: denied { sqpoll } for pid=458 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.586589][ T308] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.596352][ T28] audit: type=1400 audit(1792156648.632:229): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.633104][ T471] loop2: detected capacity change from 0 to 128 [ 35.786509][ T308] usb 1-1: Using ep0 maxpacket: 32 [ 35.792861][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.816544][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.830096][ T308] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 35.841283][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.842304][ T462] FAULT_INJECTION: forcing a failure. [ 35.842304][ T462] name failslab, interval 1, probability 0, space 0, times 0 [ 35.858964][ T28] audit: type=1400 audit(1792156648.962:230): avc: denied { mount } for pid=472 comm="syz.2.70" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.884763][ T462] CPU: 1 PID: 462 Comm: syz.4.65 Not tainted syzkaller #0 [ 35.891920][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.902023][ T462] Call Trace: [ 35.905347][ T462] [ 35.908326][ T462] __dump_stack+0x21/0x24 [ 35.912722][ T462] dump_stack_lvl+0x110/0x170 [ 35.917455][ T462] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.922526][ T462] ? stack_trace_save+0xa6/0xf0 [ 35.927414][ T462] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 35.933263][ T462] dump_stack+0x15/0x24 [ 35.937484][ T462] should_fail_ex+0x3bf/0x510 [ 35.942202][ T462] ? mas_alloc_nodes+0x2d8/0x850 [ 35.947180][ T462] __should_failslab+0xac/0xf0 [ 35.952013][ T462] should_failslab+0x9/0x20 [ 35.956554][ T462] kmem_cache_alloc+0x3b/0x320 [ 35.961368][ T462] mas_alloc_nodes+0x2d8/0x850 [ 35.966179][ T462] mas_preallocate+0xe3d/0x1430 [ 35.971080][ T462] ? __cfi_mas_preallocate+0x10/0x10 [ 35.976404][ T462] vma_link+0x114/0x420 [ 35.980606][ T462] ? insert_vm_struct+0x310/0x310 [ 35.985681][ T462] copy_vma+0x870/0xb30 [ 35.989872][ T462] ? do_mas_munmap+0x2b0/0x2b0 [ 35.994707][ T462] ? __cfi_copy_vma+0x10/0x10 [ 35.999410][ T462] ? arch_get_unmapped_area_topdown+0xec/0x590 [ 36.005589][ T462] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 36.012203][ T462] move_vma+0x518/0x10e0 [ 36.016494][ T462] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 36.023277][ T462] ? vma_expandable+0xf0/0xf0 [ 36.027979][ T462] ? security_mmap_addr+0x83/0xa0 [ 36.033029][ T462] mremap_to+0x54a/0x600 [ 36.037299][ T462] __se_sys_mremap+0x475/0xc90 [ 36.042349][ T462] ? __cfi_do_futex+0x10/0x10 [ 36.047049][ T462] ? _raw_spin_lock+0x94/0xf0 [ 36.051852][ T462] ? __x64_sys_mremap+0xd0/0xd0 [ 36.056729][ T462] ? __se_sys_futex+0x136/0x310 [ 36.061600][ T462] ? __this_cpu_preempt_check+0x13/0x20 [ 36.067184][ T462] ? xfd_validate_state+0x70/0x150 [ 36.072324][ T462] ? __kasan_check_write+0x14/0x20 [ 36.077451][ T462] ? fpregs_restore_userregs+0x128/0x260 [ 36.083101][ T462] __x64_sys_mremap+0xbf/0xd0 [ 36.087802][ T462] x64_sys_call+0x989/0x9a0 [ 36.092330][ T462] do_syscall_64+0x4c/0xa0 [ 36.096761][ T462] ? clear_bhb_loop+0x30/0x80 [ 36.101459][ T462] ? clear_bhb_loop+0x30/0x80 [ 36.106337][ T462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.112260][ T462] RIP: 0033:0x7fa55cb9e559 [ 36.116700][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.136343][ T462] RSP: 002b:00007fa55db1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 36.144784][ T462] RAX: ffffffffffffffda RBX: 00007fa55ce25fa0 RCX: 00007fa55cb9e559 [ 36.152780][ T462] RDX: 0000000000003021 RSI: 0000000000004015 RDI: 0000200000001000 [ 36.160773][ T462] RBP: 00007fa55cc358b0 R08: 0000200000ffd000 R09: 0000000000000000 [ 36.168760][ T462] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 36.176746][ T462] R13: 00007fa55ce26038 R14: 00007fa55ce25fa0 R15: 00007ffdda405348 [ 36.184744][ T462] [ 36.222488][ T308] usb 1-1: config 0 descriptor?? [ 36.413601][ T28] audit: type=1400 audit(1792156649.522:231): avc: denied { read write } for pid=478 comm="syz.3.71" name="dynamic_events" dev="tracefs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 36.483525][ T28] audit: type=1400 audit(1792156649.552:232): avc: denied { open } for pid=478 comm="syz.3.71" path="/13/tracefs/dynamic_events" dev="tracefs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 36.513065][ T287] EXT4-fs (loop1): unmounting filesystem. [ 36.670189][ T28] audit: type=1400 audit(1792156649.772:233): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.679966][ T308] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 36.717582][ T497] loop3: detected capacity change from 0 to 128 [ 36.733307][ T28] audit: type=1400 audit(1792156649.842:234): avc: denied { read write } for pid=499 comm="syz.1.81" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.759804][ T503] FAULT_INJECTION: forcing a failure. [ 36.759804][ T503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.783245][ T503] CPU: 1 PID: 503 Comm: syz.4.83 Not tainted syzkaller #0 [ 36.790467][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.800568][ T503] Call Trace: [ 36.803893][ T503] [ 36.806888][ T503] __dump_stack+0x21/0x24 [ 36.811285][ T503] dump_stack_lvl+0x110/0x170 [ 36.816050][ T503] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.821136][ T503] ? release_firmware_map_entry+0x190/0x190 [ 36.827167][ T503] ? __futex_queue+0x175/0x300 [ 36.831979][ T503] dump_stack+0x15/0x24 [ 36.836209][ T503] should_fail_ex+0x3bf/0x510 [ 36.837254][ T510] FAULT_INJECTION: forcing a failure. [ 36.837254][ T510] name failslab, interval 1, probability 0, space 0, times 0 [ 36.840949][ T503] should_fail+0xb/0x10 [ 36.840978][ T503] should_fail_usercopy+0x1a/0x20 [ 36.862807][ T503] _copy_from_user+0x1e/0xc0 [ 36.867435][ T503] iovec_from_user+0x1aa/0x2e0 [ 36.872235][ T503] __import_iovec+0x6d/0x460 [ 36.876856][ T503] ? __cfi_futex_wait+0x10/0x10 [ 36.881743][ T503] import_iovec+0x7c/0xb0 [ 36.886103][ T503] vfs_writev+0x154/0x5f0 [ 36.890472][ T503] ? do_writev+0x2c0/0x2c0 [ 36.894925][ T503] ? vfs_write+0xa51/0xd00 [ 36.899379][ T503] ? __fdget_pos+0x1f2/0x380 [ 36.904007][ T503] ? do_writev+0x76/0x2c0 [ 36.908376][ T503] do_writev+0x14e/0x2c0 [ 36.912672][ T503] ? do_readv+0x450/0x450 [ 36.917047][ T503] ? fpregs_restore_userregs+0x128/0x260 [ 36.922768][ T503] __x64_sys_writev+0x7d/0x90 [ 36.927768][ T503] x64_sys_call+0xad/0x9a0 [ 36.932249][ T503] do_syscall_64+0x4c/0xa0 [ 36.936817][ T503] ? clear_bhb_loop+0x30/0x80 [ 36.941549][ T503] ? clear_bhb_loop+0x30/0x80 [ 36.946267][ T503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.952204][ T503] RIP: 0033:0x7fa55cb9e559 [ 36.956655][ T503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.976320][ T503] RSP: 002b:00007fa55db1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 36.984944][ T503] RAX: ffffffffffffffda RBX: 00007fa55ce25fa0 RCX: 00007fa55cb9e559 [ 36.992962][ T503] RDX: 0000000000000003 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 37.000985][ T503] RBP: 00007fa55cc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 37.009026][ T503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.017038][ T503] R13: 00007fa55ce26038 R14: 00007fa55ce25fa0 R15: 00007ffdda405348 [ 37.025139][ T503] [ 37.028203][ T510] CPU: 0 PID: 510 Comm: syz.2.84 Not tainted syzkaller #0 [ 37.035828][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.045900][ T510] Call Trace: [ 37.049212][ T510] [ 37.052180][ T510] __dump_stack+0x21/0x24 [ 37.056670][ T510] dump_stack_lvl+0x110/0x170 [ 37.061418][ T510] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.066512][ T510] dump_stack+0x15/0x24 [ 37.070753][ T510] should_fail_ex+0x3bf/0x510 [ 37.075625][ T510] __should_failslab+0xac/0xf0 [ 37.080414][ T510] should_failslab+0x9/0x20 [ 37.085571][ T510] __kmem_cache_alloc_node+0x3d/0x2d0 [ 37.091082][ T510] ? copy_mm+0x1c1/0x1ad0 [ 37.095658][ T510] ? copy_mm+0x1c1/0x1ad0 [ 37.100272][ T510] kmalloc_trace+0x29/0xb0 [ 37.104746][ T510] copy_mm+0x1c1/0x1ad0 [ 37.108954][ T510] ? kasan_save_alloc_info+0x1f/0x30 [ 37.114292][ T510] ? copy_signal+0x630/0x630 [ 37.118931][ T510] ? _raw_spin_lock+0x94/0xf0 [ 37.123659][ T510] ? memset+0x35/0x40 [ 37.127682][ T510] ? __init_rwsem+0x11b/0x1f0 [ 37.132410][ T510] ? copy_signal+0x4eb/0x630 [ 37.137059][ T510] copy_process+0x12d8/0x3500 [ 37.141788][ T510] ? preempt_schedule_thunk+0x16/0x18 [ 37.147225][ T510] ? try_to_wake_up+0x6c6/0x1250 [ 37.152238][ T510] ? __kasan_check_write+0x14/0x20 [ 37.157380][ T510] ? idle_dummy+0x10/0x10 [ 37.161730][ T510] ? __kasan_check_write+0x14/0x20 [ 37.166885][ T510] ? copy_clone_args_from_user+0x602/0x6d0 [ 37.172966][ T510] kernel_clone+0x22f/0x7f0 [ 37.177492][ T510] ? __delayed_free_task+0x20/0x20 [ 37.182624][ T510] ? __cfi_kernel_clone+0x10/0x10 [ 37.187676][ T510] __x64_sys_clone3+0x2ce/0x360 [ 37.192546][ T510] ? __cfi_do_futex+0x10/0x10 [ 37.197254][ T510] ? __cfi___x64_sys_clone3+0x10/0x10 [ 37.202644][ T510] ? mutex_unlock+0x8f/0x230 [ 37.207386][ T510] ? __kasan_check_write+0x14/0x20 [ 37.212527][ T510] ? fpregs_restore_userregs+0x128/0x260 [ 37.218194][ T510] ? switch_fpu_return+0xe/0x10 [ 37.223084][ T510] x64_sys_call+0x4ce/0x9a0 [ 37.227607][ T510] do_syscall_64+0x4c/0xa0 [ 37.232048][ T510] ? clear_bhb_loop+0x30/0x80 [ 37.236757][ T510] ? clear_bhb_loop+0x30/0x80 [ 37.241463][ T510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.247403][ T510] RIP: 0033:0x7fef4c39e559 [ 37.251842][ T510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.271482][ T510] RSP: 002b:00007fef4d2a8ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 37.279937][ T510] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fef4c39e559 [ 37.287955][ T510] RDX: 00007fef4d2a8f10 RSI: 0000000000000058 RDI: 00007fef4d2a8f10 [ 37.295948][ T510] RBP: 00007fef4c4358b0 R08: 0000000000000000 R09: 0000000000000058 [ 37.303943][ T510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.311956][ T510] R13: 00007fef4c626038 R14: 00007fef4c625fa0 R15: 00007fff69c481e8 [ 37.319955][ T510] [ 37.333833][ T292] usb 1-1: USB disconnect, device number 2 [ 37.347960][ T346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.460925][ T531] device batadv_slave_0 entered promiscuous mode [ 37.477648][ T530] device batadv_slave_0 left promiscuous mode [ 37.590184][ T559] capability: warning: `syz.2.106' uses deprecated v2 capabilities in a way that may be insecure [ 37.788662][ T566] process 'syz.1.101' launched '/dev/fd/-1/./file0/file0/file0' with NULL argv: empty string added [ 37.945755][ T594] ======================================================= [ 37.945755][ T594] WARNING: The mand mount option has been deprecated and [ 37.945755][ T594] and is ignored by this kernel. Remove the mand [ 37.945755][ T594] option from the mount to silence this warning. [ 37.945755][ T594] ======================================================= [ 38.005455][ T596] FAULT_INJECTION: forcing a failure. [ 38.005455][ T596] name failslab, interval 1, probability 0, space 0, times 0 [ 38.019854][ T596] CPU: 0 PID: 596 Comm: syz.0.122 Not tainted syzkaller #0 [ 38.027124][ T596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.037227][ T596] Call Trace: [ 38.040550][ T596] [ 38.043515][ T596] __dump_stack+0x21/0x24 [ 38.047890][ T596] dump_stack_lvl+0x110/0x170 [ 38.052611][ T596] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.057686][ T596] dump_stack+0x15/0x24 [ 38.061887][ T596] should_fail_ex+0x3bf/0x510 [ 38.066600][ T596] __should_failslab+0xac/0xf0 [ 38.071412][ T596] should_failslab+0x9/0x20 [ 38.075948][ T596] __kmem_cache_alloc_node+0x3d/0x2d0 [ 38.081365][ T596] ? xfrm_sysctl_init+0xc6/0x280 [ 38.086391][ T596] ? xfrm_sysctl_init+0xc6/0x280 [ 38.091366][ T596] __kmalloc_node_track_caller+0xa1/0x1e0 [ 38.097135][ T596] kmemdup+0x2b/0x60 [ 38.101124][ T596] xfrm_sysctl_init+0xc6/0x280 [ 38.105927][ T596] xfrm_net_init+0x903/0xda0 [ 38.110579][ T596] ops_init+0x2ce/0x470 [ 38.114820][ T596] setup_net+0x4b4/0xcd0 [ 38.119109][ T596] ? copy_net_ns+0x5c0/0x5c0 [ 38.123742][ T596] ? __kasan_kmalloc+0x95/0xb0 [ 38.128554][ T596] ? copy_net_ns+0x185/0x5c0 [ 38.133196][ T596] copy_net_ns+0x355/0x5c0 [ 38.137657][ T596] create_new_namespaces+0x3a8/0x660 [ 38.142991][ T596] unshare_nsproxy_namespaces+0x120/0x170 [ 38.148733][ T596] ksys_unshare+0x4d5/0x850 [ 38.153303][ T596] ? __cfi_ksys_unshare+0x10/0x10 [ 38.158384][ T596] ? fpregs_restore_userregs+0x128/0x260 [ 38.164102][ T596] __x64_sys_unshare+0x38/0x40 [ 38.168969][ T596] x64_sys_call+0x767/0x9a0 [ 38.173536][ T596] do_syscall_64+0x4c/0xa0 [ 38.177989][ T596] ? clear_bhb_loop+0x30/0x80 [ 38.182714][ T596] ? clear_bhb_loop+0x30/0x80 [ 38.187467][ T596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.193412][ T596] RIP: 0033:0x7fb27819e559 [ 38.197890][ T596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.217537][ T596] RSP: 002b:00007fb279127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 38.226174][ T596] RAX: ffffffffffffffda RBX: 00007fb278425fa0 RCX: 00007fb27819e559 [ 38.234199][ T596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 38.242249][ T596] RBP: 00007fb2782358b0 R08: 0000000000000000 R09: 0000000000000000 [ 38.250271][ T596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.250295][ T596] R13: 00007fb278426038 R14: 00007fb278425fa0 R15: 00007ffd3da2d328 [ 38.266412][ T596] ¹$7\+yrhT .mFϸ1&$[n0KsTo ")v [ 38.474686][ T621] loop0: detected capacity change from 0 to 8192 [ 38.538740][ T621] loop0: p1[EZD] p3 p4 [ 38.559456][ T621] loop0: p1 size 67043332 extends beyond EOD, truncated [ 38.582729][ T621] loop0: p3 start 33556736 is beyond EOD, truncated [ 38.603376][ T621] loop0: p4 size 32769 extends beyond EOD, truncated [ 38.690184][ T647] FAULT_INJECTION: forcing a failure. [ 38.690184][ T647] name failslab, interval 1, probability 0, space 0, times 0 [ 38.752920][ T647] CPU: 0 PID: 647 Comm: syz.0.146 Not tainted syzkaller #0 [ 38.760311][ T647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.771772][ T647] Call Trace: [ 38.776476][ T647] [ 38.780877][ T647] __dump_stack+0x21/0x24 [ 38.786612][ T647] dump_stack_lvl+0x110/0x170 [ 38.792692][ T647] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.799174][ T647] ? stack_trace_save+0xa6/0xf0 [ 38.805442][ T647] ? __stack_depot_save+0x36/0x490 [ 38.811952][ T647] dump_stack+0x15/0x24 [ 38.817568][ T647] should_fail_ex+0x3bf/0x510 [ 38.823846][ T647] __should_failslab+0xac/0xf0 [ 38.830025][ T647] should_failslab+0x9/0x20 [ 38.835953][ T647] slab_pre_alloc_hook+0x30/0x1d0 [ 38.842415][ T647] kmem_cache_alloc_lru+0x49/0x280 [ 38.848933][ T647] ? __d_alloc+0x34/0x6d0 [ 38.854738][ T647] __d_alloc+0x34/0x6d0 [ 38.860313][ T647] d_alloc_pseudo+0x1d/0x70 [ 38.866242][ T647] alloc_file_pseudo+0xe0/0x200 [ 38.872522][ T647] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 38.879585][ T647] ? _raw_spin_unlock+0x4c/0x70 [ 38.885840][ T647] anon_inode_getfile+0xa6/0x180 [ 38.892216][ T647] do_epoll_create+0x26d/0x350 [ 38.898380][ T647] __x64_sys_epoll_create1+0x37/0x40 [ 38.905087][ T647] x64_sys_call+0x346/0x9a0 [ 38.911008][ T647] do_syscall_64+0x4c/0xa0 [ 38.916839][ T647] ? clear_bhb_loop+0x30/0x80 [ 38.923013][ T647] ? clear_bhb_loop+0x30/0x80 [ 38.929193][ T647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.936590][ T647] RIP: 0033:0x7fb27819e559 [ 38.942419][ T647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.963442][ T647] RSP: 002b:00007fb279127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 38.973263][ T647] RAX: ffffffffffffffda RBX: 00007fb278425fa0 RCX: 00007fb27819e559 [ 38.982639][ T647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.992059][ T647] RBP: 00007fb2782358b0 R08: 0000000000000000 R09: 0000000000000000 [ 39.001447][ T647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.010826][ T647] R13: 00007fb278426038 R14: 00007fb278425fa0 R15: 00007ffd3da2d328 [ 39.020248][ T647] [ 39.028391][ T662] net_ratelimit: 44 callbacks suppressed [ 39.028409][ T662] ip_tables: iptables: counters copy to user failed while replacing table [ 39.268021][ T693] ip_tables: iptables: counters copy to user failed while replacing table [ 39.551964][ T749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.193'. [ 39.768631][ T762] FAULT_INJECTION: forcing a failure. [ 39.768631][ T762] name failslab, interval 1, probability 0, space 0, times 0 [ 39.781416][ T762] CPU: 1 PID: 762 Comm: syz.4.198 Not tainted syzkaller #0 [ 39.788661][ T762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 39.798939][ T762] Call Trace: [ 39.802263][ T762] [ 39.805232][ T762] __dump_stack+0x21/0x24 [ 39.809628][ T762] dump_stack_lvl+0x110/0x170 [ 39.814378][ T762] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.819473][ T762] dump_stack+0x15/0x24 [ 39.823697][ T762] should_fail_ex+0x3bf/0x510 [ 39.828446][ T762] __should_failslab+0xac/0xf0 [ 39.833302][ T762] should_failslab+0x9/0x20 [ 39.837855][ T762] __kmem_cache_alloc_node+0x3d/0x2d0 [ 39.843467][ T762] ? ovl_fill_super+0x32b/0x4790 [ 39.848464][ T762] ? selinux_cred_prepare+0x74/0x80 [ 39.853736][ T762] ? ovl_fill_super+0x32b/0x4790 [ 39.858772][ T762] __kmalloc_node_track_caller+0xa1/0x1e0 [ 39.864550][ T762] kstrdup+0x3b/0x80 [ 39.868495][ T762] ovl_fill_super+0x32b/0x4790 [ 39.873313][ T762] ? xas_store+0xb65/0x17d0 [ 39.878003][ T762] ? xas_nomem+0x6b/0x1f0 [ 39.882395][ T762] ? ida_alloc_range+0x808/0x840 [ 39.887444][ T762] ? __cfi_ovl_fill_super+0x10/0x10 [ 39.892780][ T762] ? rwsem_write_trylock+0x136/0x300 [ 39.898217][ T762] ? __cfi_ida_alloc_range+0x10/0x10 [ 39.903566][ T762] ? clear_nonspinnable+0x60/0x60 [ 39.908686][ T762] ? up_write+0x7b/0x290 [ 39.912995][ T762] ? register_shrinker_prepared+0xd7/0x100 [ 39.918870][ T762] ? __cfi_set_anon_super+0x10/0x10 [ 39.924134][ T762] ? __cfi_ovl_fill_super+0x10/0x10 [ 39.929386][ T762] mount_nodev+0x6a/0x100 [ 39.933770][ T762] ovl_mount+0x2c/0x40 [ 39.937895][ T762] legacy_get_tree+0xfe/0x1a0 [ 39.942641][ T762] ? __cfi_ovl_mount+0x10/0x10 [ 39.947462][ T762] vfs_get_tree+0x9a/0x270 [ 39.951933][ T762] do_new_mount+0x251/0xb40 [ 39.956483][ T762] ? security_capable+0x99/0xc0 [ 39.961449][ T762] path_mount+0x640/0xfd0 [ 39.965852][ T762] __se_sys_mount+0x320/0x390 [ 39.970592][ T762] ? __this_cpu_preempt_check+0x13/0x20 [ 39.976285][ T762] ? __x64_sys_mount+0xd0/0xd0 [ 39.981101][ T762] ? __kasan_check_write+0x14/0x20 [ 39.986266][ T762] ? fpregs_restore_userregs+0x128/0x260 [ 39.991957][ T762] __x64_sys_mount+0xbf/0xd0 [ 39.996606][ T762] x64_sys_call+0x65d/0x9a0 [ 40.001160][ T762] do_syscall_64+0x4c/0xa0 [ 40.005628][ T762] ? clear_bhb_loop+0x30/0x80 [ 40.010363][ T762] ? clear_bhb_loop+0x30/0x80 [ 40.015145][ T762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.021087][ T762] RIP: 0033:0x7fa55cb9e559 [ 40.025585][ T762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.045670][ T762] RSP: 002b:00007fa55db1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.054136][ T762] RAX: ffffffffffffffda RBX: 00007fa55ce25fa0 RCX: 00007fa55cb9e559 [ 40.062158][ T762] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 40.070176][ T762] RBP: 00007fa55cc358b0 R08: 0000200000000340 R09: 0000000000000000 [ 40.078214][ T762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.086217][ T762] R13: 00007fa55ce26038 R14: 00007fa55ce25fa0 R15: 00007ffdda405348 [ 40.094217][ T762] [ 40.300482][ T806] FAULT_INJECTION: forcing a failure. [ 40.300482][ T806] name failslab, interval 1, probability 0, space 0, times 0 [ 40.316694][ T806] CPU: 1 PID: 806 Comm: syz.2.219 Not tainted syzkaller #0 [ 40.324010][ T806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 40.334116][ T806] Call Trace: [ 40.337441][ T806] [ 40.340414][ T806] __dump_stack+0x21/0x24 [ 40.344891][ T806] dump_stack_lvl+0x110/0x170 [ 40.349626][ T806] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.354713][ T806] ? __kasan_slab_free+0x11/0x20 [ 40.359729][ T806] dump_stack+0x15/0x24 [ 40.363954][ T806] should_fail_ex+0x3bf/0x510 [ 40.368680][ T806] __should_failslab+0xac/0xf0 [ 40.373513][ T806] should_failslab+0x9/0x20 [ 40.378067][ T806] __kmem_cache_alloc_node+0x3d/0x2d0 [ 40.383595][ T806] ? fuse_get_tree+0x74/0x4f0 [ 40.388424][ T806] ? __cfi_generic_parse_monolithic+0x10/0x10 [ 40.394595][ T806] ? fuse_get_tree+0x74/0x4f0 [ 40.399377][ T806] kmalloc_trace+0x29/0xb0 [ 40.403889][ T806] fuse_get_tree+0x74/0x4f0 [ 40.408462][ T806] vfs_get_tree+0x9a/0x270 [ 40.412916][ T806] do_new_mount+0x251/0xb40 [ 40.417619][ T806] ? security_capable+0x99/0xc0 [ 40.422506][ T806] path_mount+0x640/0xfd0 [ 40.426888][ T806] __se_sys_mount+0x320/0x390 [ 40.431641][ T806] ? __this_cpu_preempt_check+0x13/0x20 [ 40.437531][ T806] ? __x64_sys_mount+0xd0/0xd0 [ 40.442324][ T806] ? __kasan_check_write+0x14/0x20 [ 40.447555][ T806] ? fpregs_restore_userregs+0x128/0x260 [ 40.453221][ T806] __x64_sys_mount+0xbf/0xd0 [ 40.457839][ T806] x64_sys_call+0x65d/0x9a0 [ 40.462379][ T806] do_syscall_64+0x4c/0xa0 [ 40.466848][ T806] ? clear_bhb_loop+0x30/0x80 [ 40.471583][ T806] ? clear_bhb_loop+0x30/0x80 [ 40.476300][ T806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.482224][ T806] RIP: 0033:0x7fef4c39e559 [ 40.486677][ T806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.506326][ T806] RSP: 002b:00007fef4d2a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.514877][ T806] RAX: ffffffffffffffda RBX: 00007fef4c625fa0 RCX: 00007fef4c39e559 [ 40.522912][ T806] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 40.530919][ T806] RBP: 00007fef4c4358b0 R08: 0000200000000240 R09: 0000000000000000 [ 40.538928][ T806] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 40.546926][ T806] R13: 00007fef4c626038 R14: 00007fef4c625fa0 R15: 00007fff69c481e8 [ 40.554932][ T806] [ 40.579397][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 40.579413][ T28] audit: type=1400 audit(1792156653.692:274): avc: denied { read write } for pid=817 comm="syz.0.223" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.610458][ T28] audit: type=1400 audit(1792156653.722:275): avc: denied { open } for pid=817 comm="syz.0.223" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.635231][ T28] audit: type=1400 audit(1792156653.722:276): avc: denied { ioctl } for pid=817 comm="syz.0.223" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.683794][ T827] loop4: detected capacity change from 0 to 128 [ 40.700576][ T827] syz.4.228: attempt to access beyond end of device [ 40.700576][ T827] loop4: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 40.714449][ T827] syz.4.228: attempt to access beyond end of device [ 40.714449][ T827] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 40.757675][ T835] loop2: detected capacity change from 0 to 2048 [ 40.780855][ T835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.141367][ T857] device ip6gre1 entered promiscuous mode [ 41.190050][ T857] syz.1.240 (857) used greatest stack depth: 18824 bytes left [ 41.312790][ T28] audit: type=1400 audit(1792156654.422:277): avc: denied { listen } for pid=864 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.346772][ T28] audit: type=1400 audit(1792156654.442:278): avc: denied { accept } for pid=864 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.395177][ T28] audit: type=1400 audit(1792156654.492:279): avc: denied { connect } for pid=864 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.457993][ T28] audit: type=1400 audit(1792156654.492:280): avc: denied { shutdown } for pid=864 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.520704][ T28] audit: type=1400 audit(1792156654.532:281): avc: denied { name_bind } for pid=867 comm="syz.1.245" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.558776][ T878] FAULT_INJECTION: forcing a failure. [ 41.558776][ T878] name failslab, interval 1, probability 0, space 0, times 0 [ 41.576945][ T878] CPU: 1 PID: 878 Comm: syz.0.250 Not tainted syzkaller #0 [ 41.584409][ T878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.594509][ T878] Call Trace: [ 41.597830][ T878] [ 41.600802][ T878] __dump_stack+0x21/0x24 [ 41.605196][ T878] dump_stack_lvl+0x110/0x170 [ 41.609931][ T878] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.615012][ T878] dump_stack+0x15/0x24 [ 41.619220][ T878] should_fail_ex+0x3bf/0x510 [ 41.623937][ T878] __should_failslab+0xac/0xf0 [ 41.628762][ T878] should_failslab+0x9/0x20 [ 41.633314][ T878] __kmem_cache_alloc_node+0x3d/0x2d0 [ 41.638844][ T878] ? __se_sys_timerfd_create+0x196/0x490 [ 41.644525][ T878] ? __se_sys_timerfd_create+0x196/0x490 [ 41.650280][ T878] kmalloc_trace+0x29/0xb0 [ 41.654877][ T878] __se_sys_timerfd_create+0x196/0x490 [ 41.660377][ T878] ? __this_cpu_preempt_check+0x13/0x20 [ 41.665955][ T878] ? xfd_validate_state+0x70/0x150 [ 41.671097][ T878] ? __x64_sys_timerfd_create+0x70/0x70 [ 41.676684][ T878] ? fpregs_restore_userregs+0x128/0x260 [ 41.682347][ T878] __x64_sys_timerfd_create+0x5b/0x70 [ 41.687751][ T878] x64_sys_call+0x30e/0x9a0 [ 41.692289][ T878] do_syscall_64+0x4c/0xa0 [ 41.696729][ T878] ? clear_bhb_loop+0x30/0x80 [ 41.701438][ T878] ? clear_bhb_loop+0x30/0x80 [ 41.706148][ T878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.712065][ T878] RIP: 0033:0x7fb27819e559 [ 41.716508][ T878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.736139][ T878] RSP: 002b:00007fb279127028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 41.744582][ T878] RAX: ffffffffffffffda RBX: 00007fb278425fa0 RCX: 00007fb27819e559 [ 41.752582][ T878] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 41.760579][ T878] RBP: 00007fb2782358b0 R08: 0000000000000000 R09: 0000000000000000 [ 41.768592][ T878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.776585][ T878] R13: 00007fb278426038 R14: 00007fb278425fa0 R15: 00007ffd3da2d328 [ 41.784603][ T878] [ 41.899241][ T28] audit: type=1400 audit(1792156655.012:282): avc: denied { remount } for pid=886 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.963925][ T290] EXT4-fs (loop2): unmounting filesystem. [ 42.077889][ T908] loop0: detected capacity change from 0 to 16 [ 42.089404][ T908] erofs: (device loop0): erofs_init_device: empty device tag @ pos 0 [ 42.137908][ T347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.204596][ T914] loop0: detected capacity change from 0 to 2048 [ 42.248458][ T914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.265083][ T924] FAULT_INJECTION: forcing a failure. [ 42.265083][ T924] name fail_futex, interval 1, probability 0, space 0, times 0 [ 42.349983][ T924] CPU: 1 PID: 924 Comm: syz.2.272 Not tainted syzkaller #0 [ 42.357265][ T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.367445][ T924] Call Trace: [ 42.370759][ T924] [ 42.373726][ T924] __dump_stack+0x21/0x24 [ 42.378111][ T924] dump_stack_lvl+0x110/0x170 [ 42.382838][ T924] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.387923][ T924] ? __stack_depot_save+0x36/0x490 [ 42.393089][ T924] dump_stack+0x15/0x24 [ 42.397290][ T924] should_fail_ex+0x3bf/0x510 [ 42.402006][ T924] should_fail+0xb/0x10 [ 42.406204][ T924] get_futex_key+0x143/0xb10 [ 42.410869][ T924] ? __cfi_get_futex_key+0x10/0x10 [ 42.416128][ T924] futex_wake+0x150/0x8e0 [ 42.420497][ T924] ? __cfi_futex_wake+0x10/0x10 [ 42.425383][ T924] ? kasan_quarantine_put+0x34/0x190 [ 42.430713][ T924] ? kmem_cache_free+0x12d/0x300 [ 42.435754][ T924] ? __kasan_slab_free+0x11/0x20 [ 42.440748][ T924] do_futex+0x2bf/0x430 [ 42.444954][ T924] ? __cfi_do_futex+0x10/0x10 [ 42.449678][ T924] __se_sys_futex+0x136/0x310 [ 42.454578][ T924] ? __kasan_check_write+0x14/0x20 [ 42.459753][ T924] ? __x64_sys_futex+0x100/0x100 [ 42.464732][ T924] ? xfd_validate_state+0x70/0x150 [ 42.469911][ T924] __x64_sys_futex+0xe5/0x100 [ 42.474643][ T924] x64_sys_call+0x7ec/0x9a0 [ 42.479193][ T924] do_syscall_64+0x4c/0xa0 [ 42.483659][ T924] ? clear_bhb_loop+0x30/0x80 [ 42.488387][ T924] ? clear_bhb_loop+0x30/0x80 [ 42.493100][ T924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.499023][ T924] RIP: 0033:0x7fef4c39e559 [ 42.503553][ T924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.523184][ T924] RSP: 002b:00007fef4d2a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.531662][ T924] RAX: ffffffffffffffda RBX: 00007fef4c625fa8 RCX: 00007fef4c39e559 [ 42.539684][ T924] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef4c625fac [ 42.547770][ T924] RBP: 00007fef4c625fa0 R08: 000e3471bdfbd790 R09: 0000000000000000 [ 42.555793][ T924] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 42.563806][ T924] R13: 00007fef4c626038 R14: 00007fff69c48100 R15: 00007fff69c481e8 [ 42.571840][ T924] [ 42.600501][ T28] audit: type=1400 audit(1792156655.712:283): avc: denied { bind } for pid=927 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.718106][ T289] EXT4-fs (loop0): unmounting filesystem. [ 42.769419][ T951] FAULT_INJECTION: forcing a failure. [ 42.769419][ T951] name failslab, interval 1, probability 0, space 0, times 0 [ 42.782135][ T951] CPU: 1 PID: 951 Comm: syz.0.283 Not tainted syzkaller #0 [ 42.789365][ T951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.799431][ T951] Call Trace: [ 42.802739][ T951] [ 42.805973][ T951] __dump_stack+0x21/0x24 [ 42.810378][ T951] dump_stack_lvl+0x110/0x170 [ 42.815120][ T951] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.820211][ T951] dump_stack+0x15/0x24 [ 42.824433][ T951] should_fail_ex+0x3bf/0x510 [ 42.829159][ T951] __should_failslab+0xac/0xf0 [ 42.833987][ T951] should_failslab+0x9/0x20 [ 42.838539][ T951] __kmem_cache_alloc_node+0x3d/0x2d0 [ 42.843978][ T951] ? selinux_key_alloc+0x56/0x190 [ 42.849067][ T951] ? selinux_key_alloc+0x56/0x190 [ 42.854152][ T951] kmalloc_trace+0x29/0xb0 [ 42.858634][ T951] selinux_key_alloc+0x56/0x190 [ 42.863718][ T951] security_key_alloc+0x85/0xc0 [ 42.868634][ T951] key_alloc+0x73e/0xf00 [ 42.872937][ T951] request_key_auth_new+0x694/0x8f0 [ 42.878168][ T951] ? __kasan_check_write+0x14/0x20 [ 42.883359][ T951] ? __cfi_request_key_auth_new+0x10/0x10 [ 42.889105][ T951] ? mutex_unlock+0x8f/0x230 [ 42.893716][ T951] ? refcount_dec_and_lock+0x25/0xa0 [ 42.899071][ T951] request_key_and_link+0xa87/0x1180 [ 42.904471][ T951] ? key_task_permission+0x36d/0x4a0 [ 42.909803][ T951] ? __cfi_request_key_and_link+0x10/0x10 [ 42.915560][ T951] ? downgrade_write+0x370/0x370 [ 42.920626][ T951] ? __cfi_asymmetric_key_cmp_partial+0x10/0x10 [ 42.926933][ T951] ? __cfi_keyring_search_iterator+0x10/0x10 [ 42.932936][ T951] ? __kasan_check_write+0x14/0x20 [ 42.938072][ T951] __se_sys_request_key+0x293/0x350 [ 42.943309][ T951] ? __x64_sys_request_key+0xb0/0xb0 [ 42.948619][ T951] ? fpregs_restore_userregs+0x128/0x260 [ 42.954289][ T951] __x64_sys_request_key+0x9b/0xb0 [ 42.959430][ T951] x64_sys_call+0x69c/0x9a0 [ 42.963981][ T951] do_syscall_64+0x4c/0xa0 [ 42.968416][ T951] ? clear_bhb_loop+0x30/0x80 [ 42.973125][ T951] ? clear_bhb_loop+0x30/0x80 [ 42.977823][ T951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.983731][ T951] RIP: 0033:0x7fb27819e559 [ 42.988164][ T951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.007881][ T951] RSP: 002b:00007fb279127028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 43.016359][ T951] RAX: ffffffffffffffda RBX: 00007fb278425fa0 RCX: 00007fb27819e559 [ 43.024357][ T951] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 43.032368][ T951] RBP: 00007fb2782358b0 R08: 0000000000000000 R09: 0000000000000000 [ 43.040356][ T951] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 43.048344][ T951] R13: 00007fb278426038 R14: 00007fb278425fa0 R15: 00007ffd3da2d328 [ 43.056350][ T951] [ 43.092641][ T960] loop0: detected capacity change from 0 to 128 [ 43.209322][ T960] syz.0.287: attempt to access beyond end of device [ 43.209322][ T960] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 43.232268][ T960] syz.0.287: attempt to access beyond end of device [ 43.232268][ T960] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 43.241427][ T982] FAULT_INJECTION: forcing a failure. [ 43.241427][ T982] name failslab, interval 1, probability 0, space 0, times 0 [ 43.246608][ T960] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 43.258994][ T982] CPU: 0 PID: 982 Comm: syz.3.298 Not tainted syzkaller #0 [ 43.273141][ T960] syz.0.287: attempt to access beyond end of device [ 43.273141][ T960] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 43.274003][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.289129][ T960] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 43.297390][ T982] Call Trace: [ 43.297402][ T982] [ 43.297410][ T982] __dump_stack+0x21/0x24 [ 43.306569][ T960] syz.0.287: attempt to access beyond end of device [ 43.306569][ T960] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 43.309156][ T982] dump_stack_lvl+0x110/0x170 [ 43.312104][ T960] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 43.316446][ T982] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.316485][ T982] dump_stack+0x15/0x24 [ 43.316516][ T982] should_fail_ex+0x3bf/0x510 [ 43.316537][ T982] ? copy_fs_struct+0x4c/0x220 [ 43.361740][ T982] __should_failslab+0xac/0xf0 [ 43.364919][ T960] syz.0.287: attempt to access beyond end of device [ 43.364919][ T960] loop0: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 43.366553][ T982] should_failslab+0x9/0x20 [ 43.366581][ T982] kmem_cache_alloc+0x3b/0x320 [ 43.366611][ T982] ? perf_event_init_task+0x47c/0x4c0 [ 43.394782][ T982] copy_fs_struct+0x4c/0x220 [ 43.399431][ T982] copy_fs+0x6f/0x140 [ 43.403492][ T982] copy_process+0x124f/0x3500 [ 43.408226][ T982] ? idle_dummy+0x10/0x10 [ 43.412607][ T982] ? copy_clone_args_from_user+0x5fb/0x6d0 [ 43.418459][ T982] kernel_clone+0x22f/0x7f0 [ 43.423024][ T982] ? __delayed_free_task+0x20/0x20 [ 43.428185][ T982] ? __cfi_kernel_clone+0x10/0x10 [ 43.433262][ T982] __x64_sys_clone3+0x2ce/0x360 [ 43.438170][ T982] ? __cfi_do_futex+0x10/0x10 [ 43.442881][ T982] ? __cfi___x64_sys_clone3+0x10/0x10 [ 43.448297][ T982] ? mutex_unlock+0x8f/0x230 [ 43.452937][ T982] ? __kasan_check_write+0x14/0x20 [ 43.458090][ T982] ? fpregs_restore_userregs+0x128/0x260 [ 43.463767][ T982] ? switch_fpu_return+0xe/0x10 [ 43.467929][ T985] syz.0.287: attempt to access beyond end of device [ 43.467929][ T985] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 43.468704][ T982] x64_sys_call+0x4ce/0x9a0 [ 43.486543][ T982] do_syscall_64+0x4c/0xa0 [ 43.491000][ T982] ? clear_bhb_loop+0x30/0x80 [ 43.495815][ T982] ? clear_bhb_loop+0x30/0x80 [ 43.500543][ T982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.506481][ T982] RIP: 0033:0x7fc69e99e559 [ 43.510409][ T985] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 43.519548][ T982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.519571][ T982] RSP: 002b:00007fc69f8ceef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 43.519593][ T982] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc69e99e559 [ 43.519608][ T982] RDX: 00007fc69f8cef10 RSI: 0000000000000058 RDI: 00007fc69f8cef10 [ 43.519622][ T982] RBP: 00007fc69ea358b0 R08: 0000000000000000 R09: 0000000000000058 [ 43.519635][ T982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.579665][ T982] R13: 00007fc69ec26038 R14: 00007fc69ec25fa0 R15: 00007fff80f4fbb8 [ 43.587729][ T982] [ 43.619903][ T989] FAULT_INJECTION: forcing a failure. [ 43.619903][ T989] name failslab, interval 1, probability 0, space 0, times 0 [ 43.633119][ T989] CPU: 1 PID: 989 Comm: syz.2.299 Not tainted syzkaller #0 [ 43.640374][ T989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.650554][ T989] Call Trace: [ 43.653867][ T989] [ 43.656832][ T989] __dump_stack+0x21/0x24 [ 43.661223][ T989] dump_stack_lvl+0x110/0x170 [ 43.665956][ T989] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.671090][ T989] ? __schedule+0xcbb/0x1700 [ 43.675734][ T989] dump_stack+0x15/0x24 [ 43.679946][ T989] should_fail_ex+0x3bf/0x510 [ 43.684668][ T989] __should_failslab+0xac/0xf0 [ 43.689477][ T989] should_failslab+0x9/0x20 [ 43.694067][ T989] kmem_cache_alloc_node+0x42/0x330 [ 43.699323][ T989] ? dup_task_struct+0x5a/0x900 [ 43.704255][ T989] dup_task_struct+0x5a/0x900 [ 43.709004][ T989] ? __kasan_check_write+0x14/0x20 [ 43.714162][ T989] copy_process+0x5e7/0x3500 [ 43.718810][ T989] ? preempt_schedule_thunk+0x16/0x18 [ 43.724224][ T989] ? try_to_wake_up+0x6c6/0x1250 [ 43.729216][ T989] ? __kasan_check_write+0x14/0x20 [ 43.734362][ T989] ? wake_up_q+0x101/0x1a0 [ 43.738841][ T989] ? idle_dummy+0x10/0x10 [ 43.743219][ T989] ? copy_clone_args_from_user+0x5fb/0x6d0 [ 43.749059][ T989] kernel_clone+0x22f/0x7f0 [ 43.753608][ T989] ? __delayed_free_task+0x20/0x20 [ 43.758764][ T989] ? __cfi_kernel_clone+0x10/0x10 [ 43.763920][ T989] __x64_sys_clone3+0x2ce/0x360 [ 43.768812][ T989] ? __cfi_do_futex+0x10/0x10 [ 43.773552][ T989] ? __cfi___x64_sys_clone3+0x10/0x10 [ 43.778972][ T989] ? mutex_unlock+0x8f/0x230 [ 43.783601][ T989] ? __kasan_check_write+0x14/0x20 [ 43.788751][ T989] ? fpregs_restore_userregs+0x128/0x260 [ 43.794427][ T989] ? switch_fpu_return+0xe/0x10 [ 43.799323][ T989] x64_sys_call+0x4ce/0x9a0 [ 43.803868][ T989] do_syscall_64+0x4c/0xa0 [ 43.808318][ T989] ? clear_bhb_loop+0x30/0x80 [ 43.813036][ T989] ? clear_bhb_loop+0x30/0x80 [ 43.817748][ T989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.823681][ T989] RIP: 0033:0x7fef4c39e559 [ 43.828134][ T989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.847772][ T989] RSP: 002b:00007fef4d2a8ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 43.856230][ T989] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fef4c39e559 [ 43.864235][ T989] RDX: 00007fef4d2a8f10 RSI: 0000000000000058 RDI: 00007fef4d2a8f10 [ 43.872238][ T989] RBP: 00007fef4c4358b0 R08: 0000000000000000 R09: 0000000000000058 [ 43.880259][ T989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.888261][ T989] R13: 00007fef4c626038 R14: 00007fef4c625fa0 R15: 00007fff69c481e8 [ 43.896719][ T989] [ 43.907877][ T991] netlink: 'syz.3.300': attribute type 6 has an invalid length. [ 43.939480][ T991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.300'. [ 44.106094][ T1021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 44.116989][ T1021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.313'. [ 44.155476][ T1028] ================================================================== [ 44.163618][ T1028] BUG: KASAN: use-after-free in sk_skb_adjust_room+0x34e/0x610 [ 44.171224][ T1028] Read of size 8 at addr ffff88810f85b748 by task syz.4.316/1028 [ 44.178983][ T1028] [ 44.181339][ T1028] CPU: 1 PID: 1028 Comm: syz.4.316 Not tainted syzkaller #0 [ 44.188657][ T1028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.198755][ T1028] Call Trace: [ 44.202074][ T1028] [ 44.205038][ T1028] __dump_stack+0x21/0x24 [ 44.209461][ T1028] dump_stack_lvl+0x110/0x170 [ 44.214232][ T1028] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.219320][ T1028] ? pskb_expand_head+0x436/0x12b0 [ 44.224526][ T1028] ? sk_skb_adjust_room+0x34e/0x610 [ 44.229792][ T1028] print_address_description+0x71/0x200 [ 44.235432][ T1028] print_report+0x4a/0x60 [ 44.239818][ T1028] kasan_report+0x122/0x150 [ 44.244388][ T1028] ? sk_skb_adjust_room+0x34e/0x610 [ 44.249649][ T1028] __asan_report_load8_noabort+0x14/0x20 [ 44.255302][ T1028] sk_skb_adjust_room+0x34e/0x610 [ 44.260360][ T1028] bpf_prog_e15ab8bd9cea3c06+0x19/0x20 [ 44.266122][ T1028] sk_psock_verdict_recv+0x1c8/0x7b0 [ 44.271423][ T1028] ? skb_recv_datagram+0x140/0x180 [ 44.276564][ T1028] unix_stream_read_skb+0x12e/0x2f0 [ 44.281809][ T1028] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 44.287729][ T1028] ? __cfi_sk_psock_verdict_recv+0x10/0x10 [ 44.293575][ T1028] ? __cfi_unix_stream_read_skb+0x10/0x10 [ 44.299323][ T1028] ? __kasan_check_write+0x14/0x20 [ 44.304480][ T1028] ? _raw_spin_lock+0x94/0xf0 [ 44.309203][ T1028] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 44.315039][ T1028] sk_psock_verdict_data_ready+0xaf/0x1d0 [ 44.320828][ T1028] unix_stream_sendmsg+0x631/0xa80 [ 44.325955][ T1028] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 44.331599][ T1028] ? security_socket_sendmsg+0x93/0xb0 [ 44.337077][ T1028] __sys_sendto+0x4ac/0x660 [ 44.341628][ T1028] ? __cfi___sys_sendto+0x10/0x10 [ 44.346692][ T1028] ? __this_cpu_preempt_check+0x13/0x20 [ 44.352260][ T1028] ? xfd_validate_state+0x70/0x150 [ 44.357394][ T1028] ? __kasan_check_write+0x14/0x20 [ 44.362515][ T1028] __x64_sys_sendto+0xe5/0x100 [ 44.367299][ T1028] x64_sys_call+0x83/0x9a0 [ 44.371735][ T1028] do_syscall_64+0x4c/0xa0 [ 44.376220][ T1028] ? clear_bhb_loop+0x30/0x80 [ 44.380929][ T1028] ? clear_bhb_loop+0x30/0x80 [ 44.385635][ T1028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.391556][ T1028] RIP: 0033:0x7fa55cb9e559 [ 44.396003][ T1028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.415616][ T1028] RSP: 002b:00007fa55db1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 44.424046][ T1028] RAX: ffffffffffffffda RBX: 00007fa55ce25fa0 RCX: 00007fa55cb9e559 [ 44.432213][ T1028] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 44.440203][ T1028] RBP: 00007fa55cc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 44.448203][ T1028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.456184][ T1028] R13: 00007fa55ce26038 R14: 00007fa55ce25fa0 R15: 00007ffdda405348 [ 44.464174][ T1028] [ 44.467225][ T1028] [ 44.469548][ T1028] Allocated by task 98: [ 44.473702][ T1028] kasan_set_track+0x4b/0x70 [ 44.478310][ T1028] kasan_save_alloc_info+0x1f/0x30 [ 44.483542][ T1028] __kasan_slab_alloc+0x72/0x80 [ 44.488407][ T1028] slab_post_alloc_hook+0x4f/0x2d0 [ 44.493551][ T1028] kmem_cache_alloc+0x166/0x320 [ 44.498438][ T1028] sk_prot_alloc+0x5f/0x320 [ 44.502989][ T1028] sk_alloc+0x3b/0x460 [ 44.507091][ T1028] unix_create1+0xb8/0x710 [ 44.511541][ T1028] unix_create+0x149/0x200 [ 44.515987][ T1028] __sock_create+0x39e/0x7c0 [ 44.520601][ T1028] __sys_socket+0xcd/0x1a0 [ 44.525061][ T1028] __x64_sys_socket+0x7a/0x90 [ 44.529771][ T1028] x64_sys_call+0x449/0x9a0 [ 44.534310][ T1028] do_syscall_64+0x4c/0xa0 [ 44.538770][ T1028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.544736][ T1028] [ 44.547062][ T1028] The buggy address belongs to the object at ffff88810f85b700 [ 44.547062][ T1028] which belongs to the cache UNIX-STREAM of size 1152 [ 44.561214][ T1028] The buggy address is located 72 bytes inside of [ 44.561214][ T1028] 1152-byte region [ffff88810f85b700, ffff88810f85bb80) [ 44.574499][ T1028] [ 44.576849][ T1028] The buggy address belongs to the physical page: [ 44.583308][ T1028] page:ffffea00043e1600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f858 [ 44.593608][ T1028] head:ffffea00043e1600 order:2 compound_mapcount:0 compound_pincount:0 [ 44.601967][ T1028] flags: 0x4000000000010200(slab|head|zone=1) [ 44.608178][ T1028] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888108883e00 [ 44.616787][ T1028] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 44.625668][ T1028] page dumped because: kasan: bad access detected [ 44.632125][ T1028] page_owner tracks the page as allocated [ 44.637849][ T1028] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 88, tgid 88 (acpid), ts 5804702431, free_ts 0 [ 44.657305][ T1028] post_alloc_hook+0x1f5/0x210 [ 44.662111][ T1028] prep_new_page+0x1c/0x110 [ 44.666653][ T1028] get_page_from_freelist+0x2ca9/0x2d20 [ 44.672242][ T1028] __alloc_pages+0x1fa/0x610 [ 44.676846][ T1028] alloc_slab_page+0x6e/0xf0 [ 44.681444][ T1028] new_slab+0x98/0x3e0 [ 44.685532][ T1028] ___slab_alloc+0x70f/0xb70 [ 44.690166][ T1028] __slab_alloc+0x5e/0xa0 [ 44.694547][ T1028] kmem_cache_alloc+0x1a8/0x320 [ 44.699464][ T1028] sk_prot_alloc+0x5f/0x320 [ 44.703981][ T1028] sk_alloc+0x3b/0x460 [ 44.708074][ T1028] unix_create1+0xb8/0x710 [ 44.712505][ T1028] unix_create+0x149/0x200 [ 44.716926][ T1028] __sock_create+0x39e/0x7c0 [ 44.721530][ T1028] __sys_socket+0xcd/0x1a0 [ 44.725956][ T1028] __x64_sys_socket+0x7a/0x90 [ 44.730644][ T1028] page_owner free stack trace missing [ 44.736289][ T1028] [ 44.738618][ T1028] Memory state around the buggy address: [ 44.744268][ T1028] ffff88810f85b600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.752467][ T1028] ffff88810f85b680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.760585][ T1028] >ffff88810f85b700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.768693][ T1028] ^ [ 44.775141][ T1028] ffff88810f85b780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.783299][ T1028] ffff88810f85b800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.791377][ T1028] ================================================================== [ 44.806812][ T1028] Disabling lock debugging due to kernel taint