last executing test programs: 47.798423684s ago: executing program 0 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./debug\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) fchdir(r0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000001900)='./debug/tracing/options/context-info\x00', 0x800, 0x0) 47.798279324s ago: executing program 0 (id=221): r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x180) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000480)='7', 0x1) fcntl$lock(r3, 0x26, 0x0) fcntl$lock(r3, 0x24, &(0x7f00000004c0)={0x1, 0x1, 0x7, 0xf34}) 47.455180082s ago: executing program 0 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14388}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x4a9, 0x52f}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x9d}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 47.452857782s ago: executing program 0 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000340)='./file0/../file0\x00') mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00') 47.436155203s ago: executing program 0 (id=237): openat(0xffffffffffffff9c, 0x0, 0x80780, 0xc2) r0 = io_uring_setup(0x7d3, &(0x7f00000010c0)={0x0, 0xddf7, 0x2, 0x4000001, 0x181}) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000001140)={0x77359400}, &(0x7f0000001180)) 47.375664984s ago: executing program 0 (id=242): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x800, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000340)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) symlinkat(&(0x7f0000001100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 47.320172846s ago: executing program 32 (id=242): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x800, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000340)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) symlinkat(&(0x7f0000001100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 44.905603655s ago: executing program 4 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40804) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 44.846265427s ago: executing program 4 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) syz_open_dev$ublk_chdev(&(0x7f0000000080), 0x0, 0x151100) socket$nl_route(0x10, 0x3, 0x0) 44.829240737s ago: executing program 4 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x17e) mount(0x0, 0x0, &(0x7f0000000780)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='7', 0x1) socket$nl_generic(0x10, 0x3, 0x10) 44.543467984s ago: executing program 4 (id=327): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4004004, &(0x7f0000000300)={0xc9, 0x4, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) 44.529865974s ago: executing program 4 (id=329): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f00000004c0)='3', 0x4e) copy_file_range(r0, 0x0, r0, &(0x7f0000000380)=0x7, 0x168e, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) 44.239272581s ago: executing program 4 (id=336): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 29.25922541s ago: executing program 33 (id=336): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 1.695030348s ago: executing program 3 (id=1695): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000380)="0179cae92693cd79a6592b3cdaa040618e6347c7e9ee7eca73262f92e1164238da669284a9086c042e70feb7af607d1bf5ecee3cb95d973f7eca7820e1a6", 0x3e, 0x0, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/62, 0x3e, 0x10122, 0x0, 0x0) 1.317722097s ago: executing program 6 (id=1713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000006c0)="fc30dbe99679dd0987d9b79d2816807e5ae56a882530ffe1ae10045ba28c5dd5d248346be2a47ba7ee4ad5737e6f7ee5972f54c5c05986ceaefcd934112e67e808e7197431b1ccde1f3f6c5fc18a493805bc62c575cbdf0d821e4d78766945408115744f77f5fd65bbdc64876a8a4cc6c9ac20ba24e72a582ac25cf4c4abc66e220276c80ddfadfb0d2dbd81ac158689bb3ee37cd6030474f0b67ab077d71a4af43f2ad4865aebe10863d1fbc13d4b6fa0cf2ac1622bf3c908302f7e49debf566d5390f5cc4dca4aefa4823d39cb7dd4f4b9ccaa3deca2483f38c68a6dd882630c645b3731764f609c43fdf70d1426eb074aaf64f950877536287cbb548ae806ec459b787cbca0bbc12a0044111c8b688d9d2c1400cbd43c21fee0085f3a88a87d0acc4328488cf64db57a3ac6ca7ba0effedb266c9c8c2eb03d42aa488241af22018d2f94b6e657a54801b656a8806f1f6b009a6e9f37d02caa6795ca7bd3cac3507f37a462e1ac4439246310bfef901b7664009228e5db784966aa690a2a06414cb47c02440fb402a214f204030d28d13f1267dddfab49dc95ab673ec2a243ded076600e33fdca0495a0807d4a3057b703770316b6afd5dcd1ebe22e7922e67c8378c09623c068e49f788048bd2390e8d48301490e26b950018a18b196d038d9786f268a202b76acdeb0e879e291b0585aecc2b12b692e4ebde3703a7036408accf2a7ce0155b54bbd79aebb61e2f881ee21b5dc3b1971194f66e741442683da9d9015f3535458b69b1a231ddba9dedc1c3008bdf45b6b5d8d55f70d016836a1ffcf797c8e87451a3aea994e9a8bf28339910570d2c5fd5cf258e13649667da0fb5597144ba9beaae4488fab4bf92db02dd8a567a3448fbd4994c7ef6e94c1d94fe246a50dd0d4254dbde51ae8f0c135961175d68913beb0dbd725206beb1510ebb44319a9bdcb8949f46cf187faa8ff4095ec2ced4080e9510e16eac28ab16d2b52eef8131b6bb14059566c7b40ec939c3d9da8c07cea2a41943d2b0f2c46935e9d91e0f60933e70e83362e381f8c77bcf5462a8e951b2d268e27c0942c85ef832e731d9c0c72911fb8a5ad85e0d710b48d54d2c1ca5de57b3cc28c7ab7504c11e3ed03a68509159b8ca0b2be181a3ca748cd02969b94907c2687fca03fb6423854627f0c54f8af5b84630c34ec70815063c8ca0303bd6d97f53e2437a177381eb10ec1108d87285d3669fec1b2f31acc0f5663e888cabc8aeda7ca34f377377c7100edf49a914538835a916a0f84bfb5754fe3313c801168f806675b9813c3c3c5a52cbde1b907b2922ecda1db0a81108622e3517aea76f0debee7c452bef87f78394e0d9a85b90db51fd5d953a528d12ce517deef93b518ebc26197818238481940e1b8747f8d3e3398403837fe86a5c67a708c40e6c89275c1f9d07cfd5cee1d0379275899b1cda60b71f1ebe48867864529cd72e8437c01e71fd06c5c5b88752378932aaefc5dfb8580b00ba024cf132cfc2960d50aa0b33e3683f7f193accdd3ee2d0c47724165a0698d5098112ffa058ee93aa3b692ccbfd34274763c74f831c91fb84f7be645b0a00630226659d48e49da81a6d78f4478ad25458d91aae203a9b7413e65d7ae0b837312d09368852ef44960f71e9a2f915cfaa1b0848f2ef1dd6a7656bbfb0247a1f34e1b4d55c83578f2ba3eab5f94c878341e7c05d6a79a6e8c1024cebe808a09e1f202ecd024dfdd939d57ce4ed5a48d6a9b2df40b18d1f2e8b214e172fd05aa5159b71849bef0c9f576255a646453042c4d47e93ae8e0242e58c92fbdfe6748f4787c3ef1da49f0baa841ebbfe490cefca35910db567e59453824299cd26e625fbcfff898261de4f57e54ef909b2694adf79efec260f423055d48e38ed6e177550f6eae88f2f8618348396d006826349612401b40a318a29b5bcbc26e387944b31a852bc9c9cbf3947c9ecab7a9d22b57567c344947d734cfe39742632ff637c63f8134da78e499454cd2bb8c5faaabc32a5508e8cb053b49420f53a2fd3bc5496a2300e758f8f5e128e3edb039267e426b863aff638a460579e29be2c9938a2a273949152d0a83f757cdafbc664abefd59297f5dd112d47724e28f52a9660f9def5be26a5afc022e69c37dda79656042651c7bddefeaadabae7dd8ed9232f5e037cf586f5dcc319e18ceb90e7ce62b9ab270fbb62b29578b40614fa0dfba6a22a1cc2a3cc06e5c48d9ed3c145f3306e4e2f44812d908d558740b932229db5fccab7d43c53cd18063ec26da594fd0b2f4536b5dcb8b6c1fba1cf907140cda17207a9ba8a185cce514849f48c455574ab110750da0ec415e1e4279fbc63c298336f87b4b4776430195a4ee37f6a265792eb8d32e02ad6611a68cbe13202cc937fc5b3b8503ed59ee75ecf8a11f62d17e3ac0a797f9192217ae30a3ca3361d92cae64d1e00e8dad64c7ac5071df5a77b8cfb7b9e32b19d6c2c435bda45ec7e9bdd1cded92048bc65b346f427dbfe30561b14d73ea105c3866798524be7f211a58ae5db271441368dc68e95add6cb60b66135d3da6000acb5941c3e78c399886c71d9d9e401f9608bcf4e20fb024456d24054f96d7430eb3560e5dba6039190a855f9cfa3e0602a3fd4b7ecf70f7762e07ad1495b82ca660ffd82d1be4d9c098c42a70915d37157c27c7fc07b9eba5dad6bb798b76fe20df121d38ad3c1a33b8b707b1080e34bdd137dd73320a96ecd1d77ad5f73dac3b9a495fdd887c0ed81abb889d665b20fa0eea5ae0fabf7c4660604a3d767b281b8ff54a41af67da99a68598bfeb7060c40db6944cfb5a73058d31832b981b28e5c27c485feeb4a0d5913df851eb935c10b21c0e97f149040972ace826d5d55e09c70f9e43c3e57bfaa84ecbd44e5a4309511a8e5c73d4f7a5a05cc33598b1d5ce596d564b843ca60040358e4ca652d30b8dc3b00e73a3f284578321471cfc12316a80e1d77261598b540a14613100323f11e2bfd1db94d99e7a4cea7c18d82ef0b04eacc956bc032a6c0f3e7c6c0415f9d7ff18a7e72a60c0ec33779b6c4789616c0767294ca898a50ffc7887a4c7376c7d28eb0b74c29b4e399d99fcf91be83c922aabe8065533724c9d82f819bc7a7ebcfe3586b8e2ccde8a0e0ef4fa32e78d1ac90654e70fcb565e81dbe5e51801f501a379e98a74bd31e358950ecd8b5da2232bf90d48c1979d88c429ff77df926be757213796e457064fbff5cb7fee41c32159a9cdaa1176cd406f0823abd8c2b8f83dfb96e5e2474d79e30f726c47746520ff4b3227a636d1d24fc19515a63e8333211aa6bc63961eb810ec4830d16baacd52f96eb3d16adc4128500eda2188d88d9ef0235531455eed0657874b425d6ba68a67e3905ab6f4f729aa9ced5ceb96cd183806a6c3720e907f6c7b226c0fe15219c2ff3320c2e6880ad016dc8bdd911d60ea77d971ed05ca154b0e5ee7d6ebc28b86a66baedca6d39939943bff1d8b39dea87a59fecc6279f9b117b04562db7e952b516a91a364a3b57f9f51324764b4e2c50e0dd2b4a62d19fa665be338e0071edc2725a4a775e9eb0a9e1d01482ed9009e2b17deae69740399203d231b2cb54635aab4a5bc71c1d75d5c27a0e850ad7c39a38c2658d72e8bac7e9fd4f351ad427faafebf7beed212a2fae3cc0c811cb54c468d9aacc303567a5ab03d8c00007c80085b5d39285bb161d8db8de11ec6dce9eab7b7dadd892a4f25e3382a4fe72ce2b309d02ceeadb8daa6e28f4baf8535e7dbb888005651bb5f434ec32b45042363bc424dc3b3441fcc12cef6779ca4032835a225a4196aa952ed12eebd4712fe385dd933fc4110de767d0f9127e7cd815d613a454c56f3be15526c6af0cddae6a7ff375d283871b8761e1cc63f3ada963c127bcb528f971b50ebe6da93b36c1c0b11b7a677c3a2a5a09f2e9350b509f22a51e9c1f3e11383e703b9053ddb5884e9a5804b51fa06f7fbb2ddb8a2d72bebcced8d80834780cfcc578e0e2d0219b4d120b3587db65809709197a0c9f5f5262b091fbbf15f4767206f85406e2fad15c29407243834872d55f13a42a9745822b317edb26488e8517de1c61d5003776faa94fb2d851b4c914dfafea5f0228ce3c2c795511ea5d1bc2b47ee56f56cafd0670e81ee59d2a6125075e98d475f671eca2020d96b7cc33167fde43aa045ef9d71db070d02e642bab72d0e9ac64be602228d8e1e91e9486765c2bf6cfccd723564edbbf13a44809d5a03ae5800bde612ec4dc2a96cb9b8de34998b2ba891549d956f333eb2da9a67312d77c46cb1135694e582a4ac41d9eeb4ff87047e12418f9896ffc567c67a4d172203d79077b901ff42a34dadcbf4b80eacf84093206c563d377f30e427fcff6e1e8ad572e2e4dfc3def367feaacf526fcc75cf81d013d24d51adc630db4a51053e70ce6f482f4c41d973b68dac37214e9315556e5fba8dcd68bcaa24256045ada481af6dfd80b01336ba5405b3a6f810eccff2f79e640b8ec1871140f0b773b70f13fad81121fb16f4a92db25d29206c00b3768e47dbe827257e5901c62e2509438ac6596722d9882893e2ea8b1191e09a6638eaae77c8b52c5eba0c3fa2230e48510a1b810259101d75bc488bffdfe1a9c6da9e05e149ce2e9b865db0d884f1028f03c84d947cd33895d8581c83ec55431b340b7fb04cb36d187fe6bc204f6bc390aeec4c949ff0d3db4c1c5b85909f838cf3a56b5d610036a0cc851f836ad72b73377b6eb6a869b802d1c07c424dea55f91e88defff0f07a856a2ba15070f19d5fc5858ac33e233713a1a8445e3255bf43aea9c7cc18f1c225c4b194a333d42c4bb72c994a877b5ae840f1a4f52c9d3bb3afb187b251d1c68f380a5dbd1689a78d98e7edc49014ad7c79708758d8e23c5082298627e38f1e19e1623a8b7e12a6435deae6698f0015d8e2e1e918ab06d060dacad0d6cc6d835619fe361d5e8cde40565b76913a904b7e7c60ddfcce6afc9e4676ca526a68920bcf8fee9d5055ca360d390524ac6aee07060220e13f82d53d3048b7eb0657db4597bf9ad73b1963dee280f181d3d9428baa692e2486112a308c7c5e81f98dacc516909df9df934edc8db18b7d49afc2e00c863dfeb70362571bc9cf0c4c179df7b4ab5ae4737a611966cf9c3593d6731e31ac048f046f78a2ded8c71a5bd422fc7b68239175555896d42563c8cc5b950fd28fa54db2e0cc6cded799f087befa8acd68eea3644b2711259296667530c42e8ee3dab02ce2fe770e68fbbf12e1c274ad54bbd95d16530abfca59d268bd02d5a78d9a5bd91127fcb2bca57436f7bcbffc08422ec54f887fcdd84a81ea0228d75bcca42f2d4b5bd138f5c0821ffb185cbe6c1750b3de7ef6775898c6695e11bfbe2db80e0a500841c45514ee4bd2e84809cd3046eb820c9c96976a90732eebbd3023d02cb7d67f9cc891f8ba370037fd97ea0c5132ce63354c0e7fb7921602680da18f7dda895a287a9393d5", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001680)=0x40) 1.309629218s ago: executing program 6 (id=1714): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000c80)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) 1.280080158s ago: executing program 6 (id=1715): r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) iopl(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7fffffffffffffff, 0x3a, '', 0x3a, '\\{@%', 0x3a, './sys'}, 0x29) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006c80)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x800) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1000) ftruncate(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) userfaultfd(0x80001) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 1.279977008s ago: executing program 6 (id=1716): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000008a80)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000008ac0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000008b00)='\x00', 0x9801) move_mount(r0, &(0x7f0000008b40)='.\x00', 0xffffffffffffff9c, &(0x7f0000008b80)='./file0\x00', 0x0) mount$bind(&(0x7f0000008bc0)='./file0/../file0\x00', &(0x7f0000008c00)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000008c40)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000008c80)='./file0\x00', &(0x7f0000008cc0)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000008d00)='\x00', 0x89901) move_mount(r1, &(0x7f0000008d40)='.\x00', 0xffffffffffffff9c, &(0x7f0000008d80)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.279738978s ago: executing program 6 (id=1717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002880)=@base={0x6, 0x4, 0x40, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940), &(0x7f0000002980), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 1.167183261s ago: executing program 6 (id=1718): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xff) 1.167113961s ago: executing program 34 (id=1718): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xff) 1.040037364s ago: executing program 2 (id=1727): listen(0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x42}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000540)) 995.021475ms ago: executing program 2 (id=1728): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f00000000c0)=0x0) io_submit(r2, 0xf000, &(0x7f0000000140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)='m', 0xfffffdfc}]) io_destroy(r2) 808.22695ms ago: executing program 3 (id=1729): r0 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) process_vm_readv(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/167, 0xa7}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/98, 0x62}], 0x1, 0x0) 808.10888ms ago: executing program 3 (id=1730): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000a00), 0x0, 0x40000120, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) r4 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000880)='asymmetric\x00', 0x0, &(0x7f0000000a40)="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", 0x559, r4) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x86dd, 0x0, 0x1, 0xe5}, 0x80, &(0x7f00000000c0)}, 0x4) 798.10005ms ago: executing program 2 (id=1731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010101}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 777.372291ms ago: executing program 3 (id=1732): io_uring_setup(0x1bf7, &(0x7f00000000c0)={0x0, 0xfffffffa, 0x80, 0x10000003, 0x6f}) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000004c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r0, 0x5452, &(0x7f0000000580)=0x2) pselect6(0x40, &(0x7f0000000600)={0x0, 0x4000000000000000, 0x0, 0x0, 0xaaa, 0x2}, &(0x7f0000000640)={0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x9c8a, 0x0, 0xfffffffffffffffe, 0x400}, 0x0, 0x0, 0x0) 731.186692ms ago: executing program 2 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xc}, @TCA_FW_ACT={0x4}]}}]}, 0x3c}}, 0x0) 730.987662ms ago: executing program 3 (id=1735): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x67) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendto$inet(r0, 0x0, 0x38, 0x20000800, &(0x7f0000000640)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) 641.387144ms ago: executing program 3 (id=1738): r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f00000002c0)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) flock(r0, 0x5) 641.197954ms ago: executing program 2 (id=1739): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$9p_unix(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000180), 0x400, &(0x7f0000002c00)={'trans=unix,', {[{@nodevmap}, {@cachetag={'cachetag', 0x3d, 'lowerdir'}}, {@nodevmap}], [{@subj_role={'subj_role', 0x3d, 'nfs_export=on'}}]}}) 619.307535ms ago: executing program 2 (id=1742): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) close(r0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000900)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000940)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000980)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) r2 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 233.084664ms ago: executing program 7 (id=1773): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000a0800010001"], 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0), 0x1000) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) 192.814505ms ago: executing program 7 (id=1776): r0 = socket(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x927, 0x4) sendmmsg(r0, &(0x7f0000000780)=[{{&(0x7f00000007c0)=@phonet={0x23, 0x40, 0x6, 0x7}, 0x80, 0x0}}], 0x1, 0x24040001) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2020, 0x0) 192.610485ms ago: executing program 7 (id=1778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) 192.539285ms ago: executing program 1 (id=1779): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'btrfs.', 'lowerd8\x15\x0fir'}, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 183.814566ms ago: executing program 7 (id=1781): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000024) fcntl$setsig(r0, 0xa, 0x25) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104) 169.218475ms ago: executing program 7 (id=1782): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) openat2(r1, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)={0x80001, 0x0, 0x35}, 0x18) 168.521655ms ago: executing program 1 (id=1783): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x36, &(0x7f0000000880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000008c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0x4, 0xb, 0x0, 0x5, {[@exp_fastopen={0xfe, 0x4}, @timestamp={0x8, 0xa, 0x800, 0x7f}, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @timestamp={0x8, 0xa, 0x5, 0x3}]}}}}}}}, 0x0) 110.106757ms ago: executing program 5 (id=1785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002880)=@base={0x6, 0x4, 0x40, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940), &(0x7f0000002980), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 109.896127ms ago: executing program 7 (id=1786): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002980)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000029c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000002a00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = gettid() timer_create(0x0, &(0x7f0000002a40)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000002a80)) timer_settime(0x0, 0x1, &(0x7f0000002ac0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 109.776927ms ago: executing program 5 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='10', 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000c8001004300000040"], 0x50) 51.148188ms ago: executing program 1 (id=1788): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000002440)={0x30, 0x29, 0x2, {0x9b}}, 0xb) 51.009848ms ago: executing program 5 (id=1789): syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "894000", 0x46, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) 50.960708ms ago: executing program 1 (id=1790): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') read$FUSE(r0, &(0x7f0000001a80)={0x2020}, 0x2020) pread64(r0, &(0x7f0000003ac0)=""/186, 0xba, 0x591f) read(r0, &(0x7f00000002c0)=""/173, 0xad) 50.899708ms ago: executing program 5 (id=1791): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002600)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002640)=0x8) sendfile(r0, r0, 0x0, 0x80000001) 50.776008ms ago: executing program 1 (id=1792): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f0000000240), 0x1, 0x240, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3) 50.514138ms ago: executing program 5 (id=1793): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000006400), 0x0, &(0x7f0000006440)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000006480)='./file0\x00', &(0x7f00000064c0), 0x0, &(0x7f0000006500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) 16.237009ms ago: executing program 1 (id=1794): unshare(0x24020400) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1795): ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f00000002c0)=@tcp=r0}, 0x20) sendto(r1, &(0x7f0000000300)="01", 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 07ffee5b97c18 [ 93.486042][ T1668] [ 93.521222][ T1685] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 93.586520][ T1691] FAULT_INJECTION: forcing a failure. [ 93.586520][ T1691] name failslab, interval 1, probability 0, space 0, times 0 [ 93.648463][ T1691] CPU: 1 PID: 1691 Comm: syz.1.541 Not tainted syzkaller #0 [ 93.655800][ T1691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.665862][ T1691] Call Trace: [ 93.669149][ T1691] [ 93.672089][ T1691] __dump_stack+0x21/0x24 [ 93.676444][ T1691] dump_stack_lvl+0x110/0x170 [ 93.681148][ T1691] ? __cfi_dump_stack_lvl+0x8/0x8 [ 93.686185][ T1691] ? __cfi_do_futex+0x10/0x10 [ 93.690871][ T1691] dump_stack+0x15/0x24 [ 93.695047][ T1691] should_fail_ex+0x3bf/0x510 [ 93.699740][ T1691] ? getname_flags+0xba/0x510 [ 93.704425][ T1691] __should_failslab+0xac/0xf0 [ 93.709201][ T1691] should_failslab+0x9/0x20 [ 93.713712][ T1691] kmem_cache_alloc+0x3b/0x320 [ 93.718335][ T1699] FAULT_INJECTION: forcing a failure. [ 93.718335][ T1699] name failslab, interval 1, probability 0, space 0, times 0 [ 93.718577][ T1691] getname_flags+0xba/0x510 [ 93.718603][ T1691] ? __kasan_check_write+0x14/0x20 [ 93.740751][ T1691] getname+0x19/0x20 [ 93.744647][ T1691] __x64_sys_execve+0x78/0xb0 [ 93.749327][ T1691] x64_sys_call+0x98/0x9a0 [ 93.753744][ T1691] do_syscall_64+0x4c/0xa0 [ 93.758154][ T1691] ? clear_bhb_loop+0x30/0x80 [ 93.762820][ T1691] ? clear_bhb_loop+0x30/0x80 [ 93.767484][ T1691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.773369][ T1691] RIP: 0033:0x7f5f5859e559 [ 93.777772][ T1691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.797362][ T1691] RSP: 002b:00007f5f59520028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 93.805763][ T1691] RAX: ffffffffffffffda RBX: 00007f5f58825fa0 RCX: 00007f5f5859e559 [ 93.813722][ T1691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 93.821685][ T1691] RBP: 00007f5f586358b0 R08: 0000000000000000 R09: 0000000000000000 [ 93.829656][ T1691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.837621][ T1691] R13: 00007f5f58826038 R14: 00007f5f58825fa0 R15: 00007ffd615050f8 [ 93.845596][ T1691] [ 93.848607][ T1699] CPU: 0 PID: 1699 Comm: syz.3.545 Not tainted syzkaller #0 [ 93.855891][ T1699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.865929][ T1699] Call Trace: [ 93.869191][ T1699] [ 93.872105][ T1699] __dump_stack+0x21/0x24 [ 93.876434][ T1699] dump_stack_lvl+0x110/0x170 [ 93.881112][ T1699] ? __cfi_dump_stack_lvl+0x8/0x8 [ 93.886129][ T1699] dump_stack+0x15/0x24 [ 93.890273][ T1699] should_fail_ex+0x3bf/0x510 [ 93.894943][ T1699] ? inet_bind2_bucket_create+0x35/0x350 [ 93.900562][ T1699] __should_failslab+0xac/0xf0 [ 93.905319][ T1699] should_failslab+0x9/0x20 [ 93.909810][ T1699] kmem_cache_alloc+0x3b/0x320 [ 93.914571][ T1699] ? kmem_cache_alloc+0x166/0x320 [ 93.919587][ T1699] ? inet_bind_bucket_create+0x2f/0x290 [ 93.925118][ T1699] inet_bind2_bucket_create+0x35/0x350 [ 93.930563][ T1699] inet_csk_get_port+0x10b9/0x16f0 [ 93.935664][ T1699] ? __cfi_inet_csk_get_port+0x10/0x10 [ 93.941104][ T1699] inet_csk_listen_start+0x130/0x330 [ 93.946376][ T1699] inet_listen+0x2e9/0x6e0 [ 93.950783][ T1699] ? __cfi_inet_listen+0x10/0x10 [ 93.955706][ T1699] ? __fget_files+0x2d1/0x330 [ 93.960367][ T1699] ? security_socket_listen+0x8a/0xb0 [ 93.965725][ T1699] __x64_sys_listen+0x210/0x290 [ 93.970561][ T1699] x64_sys_call+0x1fd/0x9a0 [ 93.975048][ T1699] do_syscall_64+0x4c/0xa0 [ 93.979450][ T1699] ? clear_bhb_loop+0x30/0x80 [ 93.984114][ T1699] ? clear_bhb_loop+0x30/0x80 [ 93.988772][ T1699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.994650][ T1699] RIP: 0033:0x7fb080f9e559 [ 93.999049][ T1699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.018641][ T1699] RSP: 002b:00007fb081eae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 94.027039][ T1699] RAX: ffffffffffffffda RBX: 00007fb081225fa0 RCX: 00007fb080f9e559 [ 94.034995][ T1699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 94.042948][ T1699] RBP: 00007fb0810358b0 R08: 0000000000000000 R09: 0000000000000000 [ 94.050902][ T1699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.058865][ T1699] R13: 00007fb081226038 R14: 00007fb081225fa0 R15: 00007ffee5b97c18 [ 94.066835][ T1699] [ 94.254273][ T1678] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 94.269199][ T1678] FAT-fs (loop2): Filesystem has been set read-only [ 94.284339][ T1707] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 94.323314][ T1689] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 94.343435][ T1689] FAT-fs (loop5): Filesystem has been set read-only [ 94.361735][ T1708] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 94.468204][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 94.468220][ T28] audit: type=1400 audit(1792074632.162:323): avc: denied { bind } for pid=1717 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.495356][ T28] audit: type=1400 audit(1792074632.192:324): avc: denied { listen } for pid=1717 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.514928][ T28] audit: type=1400 audit(1792074632.192:325): avc: denied { accept } for pid=1717 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.549026][ T28] audit: type=1400 audit(1792074632.252:326): avc: denied { read } for pid=1717 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.670568][ T1732] FAULT_INJECTION: forcing a failure. [ 94.670568][ T1732] name failslab, interval 1, probability 0, space 0, times 0 [ 94.683808][ T1732] CPU: 1 PID: 1732 Comm: syz.2.558 Not tainted syzkaller #0 [ 94.691113][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.701176][ T1732] Call Trace: [ 94.704458][ T1732] [ 94.707389][ T1732] __dump_stack+0x21/0x24 [ 94.711737][ T1732] dump_stack_lvl+0x110/0x170 [ 94.716429][ T1732] ? __cfi_dump_stack_lvl+0x8/0x8 [ 94.721468][ T1732] ? __bitmap_weight+0xb9/0x110 [ 94.726329][ T1732] ? __alloc_percpu_gfp+0x25/0x30 [ 94.731363][ T1732] dump_stack+0x15/0x24 [ 94.735531][ T1732] should_fail_ex+0x3bf/0x510 [ 94.740211][ T1732] __should_failslab+0xac/0xf0 [ 94.744982][ T1732] should_failslab+0x9/0x20 [ 94.749492][ T1732] __kmem_cache_alloc_node+0x3d/0x2d0 [ 94.754878][ T1732] ? io_uring_alloc_task_context+0x17f/0x540 [ 94.760862][ T1732] ? __cfi_mutex_lock+0x10/0x10 [ 94.765721][ T1732] ? io_uring_alloc_task_context+0x17f/0x540 [ 94.771702][ T1732] kmalloc_trace+0x29/0xb0 [ 94.776123][ T1732] io_uring_alloc_task_context+0x17f/0x540 [ 94.781935][ T1732] ? __cfi_io_uring_alloc_task_context+0x8/0x8 [ 94.788118][ T1732] ? __kasan_check_write+0x14/0x20 [ 94.793250][ T1732] ? _raw_spin_lock+0x94/0xf0 [ 94.797978][ T1732] ? __cfi__raw_spin_lock+0x10/0x10 [ 94.803195][ T1732] ? security_inode_init_security_anon+0x95/0xc0 [ 94.809539][ T1732] __io_uring_add_tctx_node+0x349/0x4f0 [ 94.815091][ T1732] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 94.821163][ T1732] io_uring_install_fd+0x35/0x80 [ 94.826103][ T1732] io_uring_create+0x935/0xde1 [ 94.830874][ T1732] __x64_sys_io_uring_setup+0x21b/0x230 [ 94.836464][ T1732] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 94.842542][ T1732] ? __kasan_check_write+0x14/0x20 [ 94.847659][ T1732] ? fpregs_restore_userregs+0x128/0x260 [ 94.853300][ T1732] ? switch_fpu_return+0xe/0x10 [ 94.858166][ T1732] x64_sys_call+0x4ab/0x9a0 [ 94.862674][ T1732] do_syscall_64+0x4c/0xa0 [ 94.867101][ T1732] ? clear_bhb_loop+0x30/0x80 [ 94.871787][ T1732] ? clear_bhb_loop+0x30/0x80 [ 94.876476][ T1732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.882372][ T1732] RIP: 0033:0x7f019ad9e559 [ 94.886799][ T1732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.906414][ T1732] RSP: 002b:00007f019bbc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 94.914846][ T1732] RAX: ffffffffffffffda RBX: 00007f019b025fa0 RCX: 00007f019ad9e559 [ 94.922828][ T1732] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000146f [ 94.930809][ T1732] RBP: 00007f019ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 94.938792][ T1732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.946771][ T1732] R13: 00007f019b026038 R14: 00007f019b025fa0 R15: 00007fff1b426d28 [ 94.954757][ T1732] [ 94.998151][ T1736] device gre1 entered promiscuous mode [ 95.057636][ T1744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 95.072407][ T1741] set_capacity_and_notify: 3 callbacks suppressed [ 95.072472][ T1741] loop3: detected capacity change from 0 to 8192 [ 95.271165][ T1760] loop2: detected capacity change from 0 to 8192 [ 95.294811][ T1760] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.312031][ T1741] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 95.329791][ T1741] FAT-fs (loop3): Filesystem has been set read-only [ 95.337177][ T1758] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 95.407918][ T1776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 95.529914][ T1786] loop5: detected capacity change from 0 to 256 [ 95.566087][ T1786] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.583143][ T28] audit: type=1400 audit(1792074633.282:327): avc: denied { search } for pid=1793 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.631753][ T28] audit: type=1400 audit(1792074633.282:328): avc: denied { read } for pid=1795 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.659836][ T1803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 95.661373][ T28] audit: type=1400 audit(1792074633.282:329): avc: denied { open } for pid=1795 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.693569][ T1803] FAT-fs (loop5): Filesystem has been set read-only [ 95.721435][ T28] audit: type=1400 audit(1792074633.282:330): avc: denied { getattr } for pid=1795 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.725516][ T1803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 95.770180][ T1815] loop3: detected capacity change from 0 to 128 [ 95.791259][ T28] audit: type=1400 audit(1792074633.282:331): avc: denied { getattr } for pid=1795 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.817677][ T1815] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 95.829562][ T1803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 95.847770][ T1803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 95.855768][ T28] audit: type=1400 audit(1792074633.332:332): avc: denied { read } for pid=1798 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.877667][ T8] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 95.887403][ T1803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 95.895579][ T1803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 95.905227][ T1803] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 95.951059][ T1823] FAULT_INJECTION: forcing a failure. [ 95.951059][ T1823] name failslab, interval 1, probability 0, space 0, times 0 [ 95.978906][ T1823] CPU: 1 PID: 1823 Comm: syz.3.593 Not tainted syzkaller #0 [ 95.986240][ T1823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.996568][ T1823] Call Trace: [ 95.999852][ T1823] [ 96.002783][ T1823] __dump_stack+0x21/0x24 [ 96.007136][ T1823] dump_stack_lvl+0x110/0x170 [ 96.011827][ T1823] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.016875][ T1823] ? kasan_set_track+0x60/0x70 [ 96.021650][ T1823] ? kasan_set_track+0x4b/0x70 [ 96.026421][ T1823] ? kasan_save_alloc_info+0x1f/0x30 [ 96.031718][ T1823] dump_stack+0x15/0x24 [ 96.036064][ T1823] should_fail_ex+0x3bf/0x510 [ 96.040750][ T1823] __should_failslab+0xac/0xf0 [ 96.045539][ T1823] should_failslab+0x9/0x20 [ 96.050048][ T1823] __kmem_cache_alloc_node+0x3d/0x2d0 [ 96.055437][ T1823] ? wakeup_source_register+0x5a/0x3d0 [ 96.060917][ T1823] ? wakeup_source_register+0x5a/0x3d0 [ 96.066387][ T1823] kmalloc_trace+0x29/0xb0 [ 96.070821][ T1823] wakeup_source_register+0x5a/0x3d0 [ 96.076117][ T1823] ? memcpy+0x56/0x70 [ 96.080099][ T1823] ep_create_wakeup_source+0x167/0x530 [ 96.085567][ T1823] ? ep_get_upwards_depth_proc+0x1b0/0x1b0 [ 96.091382][ T1823] ? __kasan_slab_alloc+0x72/0x80 [ 96.096424][ T1823] ? __cfi__raw_spin_lock+0x10/0x10 [ 96.101635][ T1823] ? ep_insert+0x4b4/0x14c0 [ 96.106146][ T1823] ep_insert+0xce2/0x14c0 [ 96.110486][ T1823] ? ep_loop_check+0x80/0x80 [ 96.115079][ T1823] ? mutex_lock+0x93/0x1b0 [ 96.119498][ T1823] ? security_capable+0x99/0xc0 [ 96.124355][ T1823] do_epoll_ctl+0x878/0xdc0 [ 96.128866][ T1823] __x64_sys_epoll_ctl+0x162/0x1b0 [ 96.133986][ T1823] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 96.139628][ T1823] ? fpregs_restore_userregs+0x128/0x260 [ 96.145266][ T1823] ? switch_fpu_return+0xe/0x10 [ 96.150123][ T1823] x64_sys_call+0x839/0x9a0 [ 96.154727][ T1823] do_syscall_64+0x4c/0xa0 [ 96.159156][ T1823] ? clear_bhb_loop+0x30/0x80 [ 96.163838][ T1823] ? clear_bhb_loop+0x30/0x80 [ 96.168520][ T1823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.174414][ T1823] RIP: 0033:0x7fb080f9e559 [ 96.178836][ T1823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.198451][ T1823] RSP: 002b:00007fb081eae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 96.206875][ T1823] RAX: ffffffffffffffda RBX: 00007fb081225fa0 RCX: 00007fb080f9e559 [ 96.214854][ T1823] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 96.222843][ T1823] RBP: 00007fb0810358b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.230821][ T1823] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 96.238798][ T1823] R13: 00007fb081226038 R14: 00007fb081225fa0 R15: 00007ffee5b97c18 [ 96.246779][ T1823] [ 96.305428][ T1834] ip_tables: iptables: counters copy to user failed while replacing table [ 96.749146][ T1892] loop3: detected capacity change from 0 to 512 [ 96.776426][ T1899] FAULT_INJECTION: forcing a failure. [ 96.776426][ T1899] name failslab, interval 1, probability 0, space 0, times 0 [ 96.793433][ T1899] CPU: 1 PID: 1899 Comm: syz.1.617 Not tainted syzkaller #0 [ 96.800739][ T1899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.810796][ T1899] Call Trace: [ 96.814087][ T1899] [ 96.817015][ T1899] __dump_stack+0x21/0x24 [ 96.821361][ T1899] dump_stack_lvl+0x110/0x170 [ 96.826057][ T1899] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.831109][ T1899] dump_stack+0x15/0x24 [ 96.835277][ T1899] should_fail_ex+0x3bf/0x510 [ 96.839965][ T1899] __should_failslab+0xac/0xf0 [ 96.844743][ T1899] should_failslab+0x9/0x20 [ 96.849249][ T1899] __kmem_cache_alloc_node+0x3d/0x2d0 [ 96.854628][ T1899] ? ovl_fill_super+0x1c2/0x4790 [ 96.859565][ T1899] ? ovl_fill_super+0x1c2/0x4790 [ 96.864507][ T1899] kmalloc_trace+0x29/0xb0 [ 96.868921][ T1899] ovl_fill_super+0x1c2/0x4790 [ 96.873687][ T1899] ? xas_store+0xb65/0x17d0 [ 96.878194][ T1899] ? xas_nomem+0x6b/0x1f0 [ 96.882522][ T1899] ? ida_alloc_range+0x808/0x840 [ 96.887475][ T1899] ? __cfi_ovl_fill_super+0x10/0x10 [ 96.892672][ T1899] ? rwsem_write_trylock+0x136/0x300 [ 96.897959][ T1899] ? __cfi_ida_alloc_range+0x10/0x10 [ 96.903251][ T1899] ? clear_nonspinnable+0x60/0x60 [ 96.908278][ T1899] ? up_write+0x7b/0x290 [ 96.912533][ T1899] ? register_shrinker_prepared+0xd7/0x100 [ 96.918348][ T1899] ? __cfi_set_anon_super+0x10/0x10 [ 96.923562][ T1899] ? __cfi_ovl_fill_super+0x10/0x10 [ 96.928762][ T1899] mount_nodev+0x6a/0x100 [ 96.933095][ T1899] ovl_mount+0x2c/0x40 [ 96.937162][ T1899] legacy_get_tree+0xfe/0x1a0 [ 96.941849][ T1899] ? __cfi_ovl_mount+0x10/0x10 [ 96.946615][ T1899] vfs_get_tree+0x9a/0x270 [ 96.951032][ T1899] do_new_mount+0x251/0xb40 [ 96.955545][ T1899] ? security_capable+0x99/0xc0 [ 96.960399][ T1899] path_mount+0x640/0xfd0 [ 96.964745][ T1899] __se_sys_mount+0x320/0x390 [ 96.969416][ T1899] ? __this_cpu_preempt_check+0x13/0x20 [ 96.974958][ T1899] ? __x64_sys_mount+0xd0/0xd0 [ 96.979708][ T1899] ? __kasan_check_write+0x14/0x20 [ 96.984811][ T1899] ? fpregs_restore_userregs+0x128/0x260 [ 96.990435][ T1899] __x64_sys_mount+0xbf/0xd0 [ 96.995095][ T1899] x64_sys_call+0x65d/0x9a0 [ 96.999583][ T1899] do_syscall_64+0x4c/0xa0 [ 97.003988][ T1899] ? clear_bhb_loop+0x30/0x80 [ 97.008666][ T1899] ? clear_bhb_loop+0x30/0x80 [ 97.013326][ T1899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.019205][ T1899] RIP: 0033:0x7f5f5859e559 [ 97.023603][ T1899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.043190][ T1899] RSP: 002b:00007f5f59520028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.051584][ T1899] RAX: ffffffffffffffda RBX: 00007f5f58825fa0 RCX: 00007f5f5859e559 [ 97.059537][ T1899] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 97.067493][ T1899] RBP: 00007f5f586358b0 R08: 00002000000002c0 R09: 0000000000000000 [ 97.075445][ T1899] R10: 0000000001000010 R11: 0000000000000246 R12: 0000000000000000 [ 97.083400][ T1899] R13: 00007f5f58826038 R14: 00007f5f58825fa0 R15: 00007ffd615050f8 [ 97.091361][ T1899] [ 97.177765][ T1892] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 97.185565][ T1892] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 97.374394][ T1933] overlayfs: overlapping lowerdir path [ 97.454833][ T1948] FAULT_INJECTION: forcing a failure. [ 97.454833][ T1948] name failslab, interval 1, probability 0, space 0, times 0 [ 97.467956][ T1948] CPU: 1 PID: 1948 Comm: syz.2.638 Not tainted syzkaller #0 [ 97.475258][ T1948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.485330][ T1948] Call Trace: [ 97.488625][ T1948] [ 97.491577][ T1948] __dump_stack+0x21/0x24 [ 97.495922][ T1948] dump_stack_lvl+0x110/0x170 [ 97.500611][ T1948] ? __cfi_dump_stack_lvl+0x8/0x8 [ 97.505656][ T1948] ? xas_create+0x1525/0x16b0 [ 97.510339][ T1948] dump_stack+0x15/0x24 [ 97.514507][ T1948] should_fail_ex+0x3bf/0x510 [ 97.519191][ T1948] __should_failslab+0xac/0xf0 [ 97.523971][ T1948] should_failslab+0x9/0x20 [ 97.528481][ T1948] slab_pre_alloc_hook+0x30/0x1d0 [ 97.533521][ T1948] ? xas_store+0xb65/0x17d0 [ 97.538030][ T1948] kmem_cache_alloc_lru+0x49/0x280 [ 97.543151][ T1948] ? __d_alloc+0x34/0x6d0 [ 97.547494][ T1948] __d_alloc+0x34/0x6d0 [ 97.551663][ T1948] d_alloc_pseudo+0x1d/0x70 [ 97.556183][ T1948] alloc_file_pseudo+0xe0/0x200 [ 97.561048][ T1948] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 97.566515][ T1948] ? _raw_spin_unlock+0x4c/0x70 [ 97.571379][ T1948] anon_inode_getfile+0xa6/0x180 [ 97.576339][ T1948] do_eventfd+0x17b/0x2e0 [ 97.580673][ T1948] __x64_sys_eventfd2+0x5a/0x70 [ 97.585525][ T1948] x64_sys_call+0x2f2/0x9a0 [ 97.590039][ T1948] do_syscall_64+0x4c/0xa0 [ 97.594465][ T1948] ? clear_bhb_loop+0x30/0x80 [ 97.599155][ T1948] ? clear_bhb_loop+0x30/0x80 [ 97.603838][ T1948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.609731][ T1948] RIP: 0033:0x7f019ad9e559 [ 97.614150][ T1948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.633848][ T1948] RSP: 002b:00007f019bbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 97.642276][ T1948] RAX: ffffffffffffffda RBX: 00007f019b025fa0 RCX: 00007f019ad9e559 [ 97.650264][ T1948] RDX: 0000000000000000 RSI: 0000000000080001 RDI: 0000000000000007 [ 97.658250][ T1948] RBP: 00007f019ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 97.666232][ T1948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.674215][ T1948] R13: 00007f019b026038 R14: 00007f019b025fa0 R15: 00007fff1b426d28 [ 97.682199][ T1948] [ 97.739696][ T1954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.107895][ T1969] netlink: 72 bytes leftover after parsing attributes in process `syz.5.647'. [ 98.433915][ T2004] device team_slave_0 entered promiscuous mode [ 98.504528][ T2012] loop5: detected capacity change from 0 to 16 [ 98.511800][ T2014] FAULT_INJECTION: forcing a failure. [ 98.511800][ T2014] name failslab, interval 1, probability 0, space 0, times 0 [ 98.525087][ T2012] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 98.538554][ T2014] CPU: 1 PID: 2014 Comm: syz.3.669 Not tainted syzkaller #0 [ 98.545871][ T2014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.549132][ T2012] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 98.555930][ T2014] Call Trace: [ 98.555940][ T2014] [ 98.572616][ T2014] __dump_stack+0x21/0x24 [ 98.576964][ T2014] dump_stack_lvl+0x110/0x170 [ 98.581665][ T2014] ? __cfi_dump_stack_lvl+0x8/0x8 [ 98.586725][ T2014] dump_stack+0x15/0x24 [ 98.590913][ T2014] should_fail_ex+0x3bf/0x510 [ 98.595600][ T2014] ? __proc_create+0x376/0x8f0 [ 98.600376][ T2014] __should_failslab+0xac/0xf0 [ 98.605158][ T2014] should_failslab+0x9/0x20 [ 98.609679][ T2014] kmem_cache_alloc+0x3b/0x320 [ 98.614451][ T2014] __proc_create+0x376/0x8f0 [ 98.619048][ T2014] ? proc_symlink+0x1f0/0x1f0 [ 98.623730][ T2014] ? __kasan_check_write+0x14/0x20 [ 98.628834][ T2014] ? _raw_write_lock+0x94/0xf0 [ 98.633589][ T2014] proc_create_reg+0x96/0x110 [ 98.638259][ T2014] proc_create_net_data+0x95/0x1a0 [ 98.643360][ T2014] ? __cfi_proc_create_net_data+0x10/0x10 [ 98.649075][ T2014] ? _proc_mkdir+0x11e/0x150 [ 98.653657][ T2014] nf_log_net_init+0x62/0x680 [ 98.658318][ T2014] ? __cfi_nf_log_net_init+0x10/0x10 [ 98.663592][ T2014] ops_init+0x2ce/0x470 [ 98.667729][ T2014] ? memset+0x35/0x40 [ 98.671695][ T2014] setup_net+0x4b4/0xcd0 [ 98.675920][ T2014] ? copy_net_ns+0x5c0/0x5c0 [ 98.680494][ T2014] ? __kasan_kmalloc+0x95/0xb0 [ 98.685242][ T2014] ? copy_net_ns+0x185/0x5c0 [ 98.689822][ T2014] copy_net_ns+0x355/0x5c0 [ 98.694228][ T2014] create_new_namespaces+0x3a8/0x660 [ 98.699501][ T2014] unshare_nsproxy_namespaces+0x120/0x170 [ 98.705206][ T2014] ksys_unshare+0x4d5/0x850 [ 98.709701][ T2014] ? __cfi_ksys_unshare+0x10/0x10 [ 98.714713][ T2014] ? fpregs_restore_userregs+0x128/0x260 [ 98.720330][ T2014] __x64_sys_unshare+0x38/0x40 [ 98.725082][ T2014] x64_sys_call+0x767/0x9a0 [ 98.729570][ T2014] do_syscall_64+0x4c/0xa0 [ 98.733996][ T2014] ? clear_bhb_loop+0x30/0x80 [ 98.738660][ T2014] ? clear_bhb_loop+0x30/0x80 [ 98.743324][ T2014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.749198][ T2014] RIP: 0033:0x7fb080f9e559 [ 98.753603][ T2014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.773202][ T2014] RSP: 002b:00007fb081eae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 98.781614][ T2014] RAX: ffffffffffffffda RBX: 00007fb081225fa0 RCX: 00007fb080f9e559 [ 98.789582][ T2014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000600 [ 98.797540][ T2014] RBP: 00007fb0810358b0 R08: 0000000000000000 R09: 0000000000000000 [ 98.805492][ T2014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.813447][ T2014] R13: 00007fb081226038 R14: 00007fb081225fa0 R15: 00007ffee5b97c18 [ 98.821494][ T2014] [ 98.829821][ T2012] erofs: (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 98.855975][ T2012] erofs: (device loop5): mounted with root inode @ nid 36. [ 98.864766][ T2016] FAULT_INJECTION: forcing a failure. [ 98.864766][ T2016] name failslab, interval 1, probability 0, space 0, times 0 [ 98.900677][ T2016] CPU: 1 PID: 2016 Comm: syz.2.670 Not tainted syzkaller #0 [ 98.907099][ T2018] bridge0: port 3(syz_tun) entered blocking state [ 98.907999][ T2016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.924304][ T2018] bridge0: port 3(syz_tun) entered disabled state [ 98.924447][ T2016] Call Trace: [ 98.924454][ T2016] [ 98.937036][ T2016] __dump_stack+0x21/0x24 [ 98.937830][ T2018] device syz_tun entered promiscuous mode [ 98.941384][ T2016] dump_stack_lvl+0x110/0x170 [ 98.941414][ T2016] ? __cfi_dump_stack_lvl+0x8/0x8 [ 98.941438][ T2016] ? xlate_dir+0xb3/0xd0 [ 98.952717][ T2018] bridge0: port 3(syz_tun) entered blocking state [ 98.956808][ T2016] ? xlate_dir+0x5a/0xd0 [ 98.956834][ T2016] dump_stack+0x15/0x24 [ 98.961097][ T2018] bridge0: port 3(syz_tun) entered forwarding state [ 98.967444][ T2016] should_fail_ex+0x3bf/0x510 [ 98.987043][ T2016] __should_failslab+0xac/0xf0 [ 98.991820][ T2016] should_failslab+0x9/0x20 [ 98.996334][ T2016] kmem_cache_alloc_node+0x42/0x330 [ 99.001540][ T2016] ? __alloc_skb+0xe8/0x4a0 [ 99.006056][ T2016] ? _raw_spin_unlock+0x4c/0x70 [ 99.010918][ T2016] __alloc_skb+0xe8/0x4a0 [ 99.015259][ T2016] inet_netconf_notify_devconf+0x169/0x220 [ 99.021077][ T2016] __devinet_sysctl_register+0x2af/0x320 [ 99.026713][ T2016] ? devinet_sysctl_register+0x1e0/0x1e0 [ 99.032361][ T2016] ? memcpy+0x56/0x70 [ 99.036339][ T2016] devinet_init_net+0x33e/0x5b0 [ 99.041201][ T2016] ops_init+0x2ce/0x470 [ 99.045366][ T2016] setup_net+0x4b4/0xcd0 [ 99.049610][ T2016] ? copy_net_ns+0x5c0/0x5c0 [ 99.054203][ T2016] ? __kasan_kmalloc+0x95/0xb0 [ 99.058977][ T2016] ? copy_net_ns+0x185/0x5c0 [ 99.063574][ T2016] copy_net_ns+0x355/0x5c0 [ 99.068003][ T2016] create_new_namespaces+0x3a8/0x660 [ 99.073299][ T2016] unshare_nsproxy_namespaces+0x120/0x170 [ 99.079035][ T2016] ksys_unshare+0x4d5/0x850 [ 99.083554][ T2016] ? __cfi_ksys_unshare+0x10/0x10 [ 99.088592][ T2016] ? fpregs_restore_userregs+0x128/0x260 [ 99.094232][ T2016] __x64_sys_unshare+0x38/0x40 [ 99.099030][ T2016] x64_sys_call+0x767/0x9a0 [ 99.103540][ T2016] do_syscall_64+0x4c/0xa0 [ 99.107965][ T2016] ? clear_bhb_loop+0x30/0x80 [ 99.112650][ T2016] ? clear_bhb_loop+0x30/0x80 [ 99.116714][ T2018] device syz_tun left promiscuous mode [ 99.117331][ T2016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.128653][ T2016] RIP: 0033:0x7f019ad9e559 [ 99.133072][ T2016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.134754][ T2018] bridge0: port 3(syz_tun) entered disabled state [ 99.152676][ T2016] RSP: 002b:00007f019bbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 99.152699][ T2016] RAX: ffffffffffffffda RBX: 00007f019b025fa0 RCX: 00007f019ad9e559 [ 99.152710][ T2016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 99.152720][ T2016] RBP: 00007f019ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 99.152731][ T2016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.152741][ T2016] R13: 00007f019b026038 R14: 00007f019b025fa0 R15: 00007fff1b426d28 [ 99.207342][ T2016] [ 99.210972][ T2018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.226733][ T2022] FAULT_INJECTION: forcing a failure. [ 99.226733][ T2022] name failslab, interval 1, probability 0, space 0, times 0 [ 99.236155][ T2018] device bridge_slave_0 left promiscuous mode [ 99.239508][ T2012] syz.5.668: attempt to access beyond end of device [ 99.239508][ T2012] loop5: rw=0, sector=46, nr_sectors = 1 limit=16 [ 99.258707][ T2022] CPU: 1 PID: 2022 Comm: syz.1.672 Not tainted syzkaller #0 [ 99.265999][ T2022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.272291][ T2018] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.276051][ T2022] Call Trace: [ 99.276058][ T2022] [ 99.276065][ T2022] __dump_stack+0x21/0x24 [ 99.293584][ T2022] dump_stack_lvl+0x110/0x170 [ 99.298283][ T2022] ? __cfi_dump_stack_lvl+0x8/0x8 [ 99.298525][ T2012] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 99.303328][ T2022] dump_stack+0x15/0x24 [ 99.303359][ T2022] should_fail_ex+0x3bf/0x510 [ 99.320465][ T2022] ? vm_area_alloc+0xe9/0x1a0 [ 99.325160][ T2022] __should_failslab+0xac/0xf0 [ 99.329935][ T2022] should_failslab+0x9/0x20 [ 99.334450][ T2022] kmem_cache_alloc+0x3b/0x320 [ 99.339226][ T2022] vm_area_alloc+0xe9/0x1a0 [ 99.343736][ T2022] mmap_region+0xfab/0x2130 [ 99.348253][ T2022] ? __cfi_mmap_region+0x10/0x10 [ 99.353208][ T2022] ? get_unmapped_area+0x30c/0x370 [ 99.358337][ T2022] do_mmap+0x858/0xdd0 [ 99.362420][ T2022] ? __cfi_do_mmap+0x10/0x10 [ 99.367025][ T2022] ? do_futex+0x2bf/0x430 [ 99.371372][ T2022] vm_mmap_pgoff+0x206/0x3f0 [ 99.376009][ T2022] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 99.381130][ T2022] ? xfd_validate_state+0x70/0x150 [ 99.386254][ T2022] ksys_mmap_pgoff+0xf6/0x1d0 [ 99.390947][ T2022] ? __kasan_check_write+0x14/0x20 [ 99.396052][ T2022] __x64_sys_mmap+0xfa/0x110 [ 99.400630][ T2022] x64_sys_call+0x8fd/0x9a0 [ 99.405122][ T2022] do_syscall_64+0x4c/0xa0 [ 99.409531][ T2022] ? clear_bhb_loop+0x30/0x80 [ 99.414199][ T2022] ? clear_bhb_loop+0x30/0x80 [ 99.418865][ T2022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.424740][ T2022] RIP: 0033:0x7f5f5859e559 [ 99.429137][ T2022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.448725][ T2022] RSP: 002b:00007f5f59520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 99.457121][ T2022] RAX: ffffffffffffffda RBX: 00007f5f58825fa0 RCX: 00007f5f5859e559 [ 99.465080][ T2022] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 99.473059][ T2022] RBP: 00007f5f586358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 99.481012][ T2022] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 99.488969][ T2022] R13: 00007f5f58826038 R14: 00007f5f58825fa0 R15: 00007ffd615050f8 [ 99.496930][ T2022] [ 99.500580][ T2018] device bridge_slave_1 left promiscuous mode [ 99.506726][ T2018] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.549153][ T2027] netlink: 'syz.5.675': attribute type 16 has an invalid length. [ 99.567214][ T2030] loop1: detected capacity change from 0 to 16 [ 99.574596][ T2027] netlink: 'syz.5.675': attribute type 17 has an invalid length. [ 99.591391][ T2027] netlink: 'syz.5.675': attribute type 27 has an invalid length. [ 99.599331][ T2030] erofs: (device loop1): mounted with root inode @ nid 36. [ 99.857595][ T2045] FAULT_INJECTION: forcing a failure. [ 99.857595][ T2045] name failslab, interval 1, probability 0, space 0, times 0 [ 99.898964][ T2045] CPU: 0 PID: 2045 Comm: syz.5.683 Not tainted syzkaller #0 [ 99.906292][ T2045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.916355][ T2045] Call Trace: [ 99.919637][ T2045] [ 99.922572][ T2045] __dump_stack+0x21/0x24 [ 99.926918][ T2045] dump_stack_lvl+0x110/0x170 [ 99.931609][ T2045] ? __cfi_dump_stack_lvl+0x8/0x8 [ 99.936654][ T2045] dump_stack+0x15/0x24 [ 99.940823][ T2045] should_fail_ex+0x3bf/0x510 [ 99.945506][ T2045] __should_failslab+0xac/0xf0 [ 99.950277][ T2045] should_failslab+0x9/0x20 [ 99.954784][ T2045] __kmem_cache_alloc_node+0x3d/0x2d0 [ 99.960166][ T2045] ? key_alloc+0x318/0xf00 [ 99.964595][ T2045] ? slab_post_alloc_hook+0x6d/0x2d0 [ 99.969893][ T2045] ? key_alloc+0x318/0xf00 [ 99.974325][ T2045] __kmalloc_node_track_caller+0xa1/0x1e0 [ 99.980048][ T2045] ? key_alloc+0x2d3/0xf00 [ 99.984474][ T2045] kmemdup+0x2b/0x60 [ 99.988380][ T2045] key_alloc+0x318/0xf00 [ 99.992642][ T2045] keyring_alloc+0x47/0xb0 [ 99.997063][ T2045] join_session_keyring+0x11d/0x430 [ 100.002267][ T2045] ? lookup_user_key+0x522/0x1150 [ 100.007305][ T2045] lookup_user_key+0x529/0x1150 [ 100.012166][ T2045] ? __cfi_lookup_user_key+0x10/0x10 [ 100.017455][ T2045] ? do_futex+0x2e2/0x430 [ 100.021785][ T2045] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 100.027952][ T2045] __se_sys_add_key+0x311/0x410 [ 100.032809][ T2045] ? __x64_sys_add_key+0xd0/0xd0 [ 100.037752][ T2045] ? xfd_validate_state+0x70/0x150 [ 100.042875][ T2045] ? __kasan_check_write+0x14/0x20 [ 100.047990][ T2045] ? fpregs_restore_userregs+0x128/0x260 [ 100.053627][ T2045] __x64_sys_add_key+0xbf/0xd0 [ 100.058401][ T2045] x64_sys_call+0x6aa/0x9a0 [ 100.062910][ T2045] do_syscall_64+0x4c/0xa0 [ 100.067338][ T2045] ? clear_bhb_loop+0x30/0x80 [ 100.072025][ T2045] ? clear_bhb_loop+0x30/0x80 [ 100.076713][ T2045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.082609][ T2045] RIP: 0033:0x7f6a2ad9e559 [ 100.087025][ T2045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.106634][ T2045] RSP: 002b:00007f6a2bd2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 100.115054][ T2045] RAX: ffffffffffffffda RBX: 00007f6a2b025fa0 RCX: 00007f6a2ad9e559 [ 100.123042][ T2045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 100.131014][ T2045] RBP: 00007f6a2ae358b0 R08: fffffffffffffffd R09: 0000000000000000 [ 100.138995][ T2045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.146968][ T2045] R13: 00007f6a2b026038 R14: 00007f6a2b025fa0 R15: 00007ffc5ec854f8 [ 100.154948][ T2045] [ 100.176049][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 100.176063][ T28] audit: type=1400 audit(1792074637.872:346): avc: denied { remount } for pid=2052 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.204470][ T2053] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.204487][ T2053] overlayfs: failed to set xattr on upper [ 100.231909][ T28] audit: type=1400 audit(1792074637.902:347): avc: denied { mounton } for pid=2052 comm="syz.3.686" path="/175/file0/file1/file0" dev="ramfs" ino=25519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 100.231938][ T28] audit: type=1400 audit(1792074637.902:348): avc: denied { create } for pid=2052 comm="syz.3.686" name="#31" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 100.231959][ T28] audit: type=1400 audit(1792074637.902:349): avc: denied { link } for pid=2052 comm="syz.3.686" name="#31" dev="ramfs" ino=25523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 100.231980][ T28] audit: type=1400 audit(1792074637.902:350): avc: denied { unlink } for pid=2052 comm="syz.3.686" name="#32" dev="ramfs" ino=25523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 100.232001][ T28] audit: type=1400 audit(1792074637.902:351): avc: denied { rename } for pid=2052 comm="syz.3.686" name="#32" dev="ramfs" ino=25523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 100.278639][ T2062] overlayfs: maximum fs stacking depth exceeded [ 100.404316][ T2074] loop2: detected capacity change from 0 to 256 [ 100.429507][ T2077] FAULT_INJECTION: forcing a failure. [ 100.429507][ T2077] name failslab, interval 1, probability 0, space 0, times 0 [ 100.462694][ T2077] CPU: 1 PID: 2077 Comm: syz.5.698 Not tainted syzkaller #0 [ 100.470024][ T2077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.480090][ T2077] Call Trace: [ 100.483372][ T2077] [ 100.486305][ T2077] __dump_stack+0x21/0x24 [ 100.490648][ T2077] dump_stack_lvl+0x110/0x170 [ 100.495346][ T2077] ? __cfi_dump_stack_lvl+0x8/0x8 [ 100.496619][ T2083] loop1: detected capacity change from 0 to 256 [ 100.500388][ T2077] dump_stack+0x15/0x24 [ 100.500418][ T2077] should_fail_ex+0x3bf/0x510 [ 100.515441][ T2077] __should_failslab+0xac/0xf0 [ 100.520214][ T2077] should_failslab+0x9/0x20 [ 100.524726][ T2077] slab_pre_alloc_hook+0x30/0x1d0 [ 100.529767][ T2077] ? kasan_save_alloc_info+0x1f/0x30 [ 100.535064][ T2077] kmem_cache_alloc_lru+0x49/0x280 [ 100.540193][ T2077] ? __d_alloc+0x34/0x6d0 [ 100.544534][ T2077] __d_alloc+0x34/0x6d0 [ 100.548699][ T2077] d_alloc_pseudo+0x1d/0x70 [ 100.553231][ T2077] alloc_file_pseudo+0xe0/0x200 [ 100.558096][ T2077] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 100.563561][ T2077] ? alloc_anon_inode+0x225/0x300 [ 100.568592][ T2077] ? memcpy+0x56/0x70 [ 100.572582][ T2077] ? alloc_anon_inode+0x225/0x300 [ 100.577616][ T2077] aio_setup_ring+0x1f2/0xbc0 [ 100.582307][ T2077] ? free_ioctx_reqs+0x160/0x160 [ 100.587261][ T2077] ioctx_alloc+0x31d/0x720 [ 100.591690][ T2077] __se_sys_io_setup+0x6f/0x230 [ 100.596562][ T2077] __x64_sys_io_setup+0x5b/0x70 [ 100.601432][ T2077] x64_sys_call+0x840/0x9a0 [ 100.605939][ T2077] do_syscall_64+0x4c/0xa0 [ 100.610362][ T2077] ? clear_bhb_loop+0x30/0x80 [ 100.615024][ T2077] ? clear_bhb_loop+0x30/0x80 [ 100.619681][ T2077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.625557][ T2077] RIP: 0033:0x7f6a2ad9e559 [ 100.629955][ T2077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.649565][ T2077] RSP: 002b:00007f6a2bd2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 100.657959][ T2077] RAX: ffffffffffffffda RBX: 00007f6a2b025fa0 RCX: 00007f6a2ad9e559 [ 100.665931][ T2077] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 100.673882][ T2077] RBP: 00007f6a2ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 100.681840][ T2077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.689794][ T2077] R13: 00007f6a2b026038 R14: 00007f6a2b025fa0 R15: 00007ffc5ec854f8 [ 100.697751][ T2077] [ 100.735148][ T2085] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.742949][ T2085] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.751854][ T2097] loop1: detected capacity change from 0 to 16 [ 100.751988][ T2085] device bridge_slave_0 entered promiscuous mode [ 100.759407][ T2097] erofs: (device loop1): mounted with root inode @ nid 36. [ 100.770634][ T2085] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.775253][ T2097] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 100.784923][ T2085] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.803424][ T2085] device bridge_slave_1 entered promiscuous mode [ 100.809646][ T2097] syz.1.706: attempt to access beyond end of device [ 100.809646][ T2097] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 100.818705][ T2106] xt_socket: unknown flags 0x4 [ 100.826808][ T2097] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 100.838954][ T2097] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 100.848005][ T2097] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 100.857843][ T2097] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 100.866995][ T2097] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 100.881660][ T2097] syz.1.706: attempt to access beyond end of device [ 100.881660][ T2097] loop1: rw=524288, sector=96, nr_sectors = 40 limit=16 [ 100.901405][ T2097] syz.1.706: attempt to access beyond end of device [ 100.901405][ T2097] loop1: rw=524288, sector=16, nr_sectors = 72 limit=16 [ 100.930515][ T28] audit: type=1400 audit(1792074638.622:352): avc: denied { accept } for pid=2111 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.932475][ T2085] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.957038][ T2085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.964338][ T2085] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.971374][ T2085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.994734][ T2114] loop3: detected capacity change from 0 to 16 [ 101.002600][ T2114] erofs: (device loop3): mounted with root inode @ nid 36. [ 101.030343][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.045471][ T2114] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.055076][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.075058][ T2114] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851] [ 101.086063][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.087016][ T2114] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 101.095889][ T2118] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 101.130382][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.146214][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.153301][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.178486][ T2118] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851] [ 101.191545][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.206847][ T2118] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 101.216176][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.223257][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.257152][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.275630][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.299893][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.316571][ T10] tipc: Left network mode [ 101.320292][ T2085] device veth0_vlan entered promiscuous mode [ 101.333422][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.342715][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.350864][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.366394][ T2085] device veth1_macvtap entered promiscuous mode [ 101.377353][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.409246][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.417769][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.457032][ T2144] FAULT_INJECTION: forcing a failure. [ 101.457032][ T2144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.470786][ T2144] CPU: 1 PID: 2144 Comm: syz.6.696 Not tainted syzkaller #0 [ 101.478091][ T2144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.488130][ T2144] Call Trace: [ 101.491398][ T2144] [ 101.494316][ T2144] __dump_stack+0x21/0x24 [ 101.498641][ T2144] dump_stack_lvl+0x110/0x170 [ 101.503309][ T2144] ? __cfi_dump_stack_lvl+0x8/0x8 [ 101.508324][ T2144] dump_stack+0x15/0x24 [ 101.512472][ T2144] should_fail_ex+0x3bf/0x510 [ 101.517133][ T2144] should_fail+0xb/0x10 [ 101.521270][ T2144] should_fail_usercopy+0x1a/0x20 [ 101.526278][ T2144] _copy_from_user+0x1e/0xc0 [ 101.530854][ T2144] shmem_mfill_atomic_pte+0x6bf/0xf80 [ 101.536220][ T2144] ? __cfi___alloc_pages+0x10/0x10 [ 101.541325][ T2144] ? __cfi_shmem_mfill_atomic_pte+0x10/0x10 [ 101.547207][ T2144] ? _raw_spin_unlock+0x4c/0x70 [ 101.552046][ T2144] ? __pte_alloc+0x1a8/0x2a0 [ 101.556621][ T2144] ? __cfi___pte_alloc+0x10/0x10 [ 101.561543][ T2144] mcopy_atomic+0x647/0xed0 [ 101.566030][ T2144] ? __cfi_mcopy_atomic+0x10/0x10 [ 101.571041][ T2144] userfaultfd_ioctl+0x2061/0x4650 [ 101.576144][ T2144] ? release_firmware_map_entry+0x190/0x190 [ 101.582017][ T2144] ? __futex_queue+0x175/0x300 [ 101.586762][ T2144] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 101.592211][ T2144] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 101.597045][ T2144] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 101.602667][ T2144] ? futex_wait+0x5f1/0x900 [ 101.609011][ T2144] ? __cfi_futex_wait+0x10/0x10 [ 101.614213][ T2144] ? ioctl_has_perm+0x1b8/0x4f0 [ 101.619059][ T2144] ? ioctl_has_perm+0x3a6/0x4f0 [ 101.623899][ T2144] ? has_cap_mac_admin+0x370/0x370 [ 101.629193][ T2144] ? alloc_file+0x48b/0x600 [ 101.633712][ T2144] ? do_futex+0x2e2/0x430 [ 101.638026][ T2144] ? selinux_file_ioctl+0x3ad/0x4c0 [ 101.643218][ T2144] ? __cfi_do_futex+0x10/0x10 [ 101.647886][ T2144] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 101.653430][ T2144] ? __fget_files+0x2d1/0x330 [ 101.658104][ T2144] ? security_file_ioctl+0x95/0xc0 [ 101.663208][ T2144] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 101.668663][ T2144] __se_sys_ioctl+0x12f/0x1b0 [ 101.673329][ T2144] __x64_sys_ioctl+0x7b/0x90 [ 101.677903][ T2144] x64_sys_call+0x58b/0x9a0 [ 101.682396][ T2144] do_syscall_64+0x4c/0xa0 [ 101.686807][ T2144] ? clear_bhb_loop+0x30/0x80 [ 101.691469][ T2144] ? clear_bhb_loop+0x30/0x80 [ 101.696128][ T2144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.702011][ T2144] RIP: 0033:0x7fcaa679e559 [ 101.706411][ T2144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.725998][ T2144] RSP: 002b:00007fcaa75a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.734398][ T2144] RAX: ffffffffffffffda RBX: 00007fcaa6a25fa0 RCX: 00007fcaa679e559 [ 101.742353][ T2144] RDX: 0000200000000c40 RSI: 00000000c028aa03 RDI: 0000000000000006 [ 101.750316][ T2144] RBP: 00007fcaa68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 101.758271][ T2144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.766222][ T2144] R13: 00007fcaa6a26038 R14: 00007fcaa6a25fa0 R15: 00007ffc2ad739f8 [ 101.774179][ T2144] [ 101.883693][ T2156] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 101.903728][ T2156] syzkaller0: linktype set to 823 [ 102.173727][ T28] audit: type=1400 audit(2000000000.019:353): avc: denied { watch watch_reads } for pid=2195 comm="syz.2.749" path="/140/file0" dev="tmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.280295][ T10] device bridge_slave_1 left promiscuous mode [ 102.293739][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.321313][ T10] device bridge_slave_0 left promiscuous mode [ 102.327469][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.360180][ T10] device veth1_macvtap left promiscuous mode [ 102.380517][ T10] device veth0_vlan left promiscuous mode [ 102.430226][ T2232] mmap: syz.2.765 (2232): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 102.564342][ T2246] syz.1.770 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.757989][ T2278] futex_wake_op: syz.1.782 tries to shift op by 32; fix this program [ 102.922646][ T28] audit: type=1400 audit(2000000000.769:354): avc: denied { write } for pid=2293 comm="syz.1.789" name="snmp" dev="proc" ino=4026532509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 102.956593][ T28] audit: type=1400 audit(2000000000.769:355): avc: denied { nlmsg_write } for pid=2285 comm="syz.6.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 104.193677][ T2427] kvm: apic: phys broadcast and lowest prio [ 104.212511][ T2427] X.509: Couldn't decode AuthKeyIdentifier [ 104.980188][ T2499] syz.2.872 (2499): /proc/2498/oom_adj is deprecated, please use /proc/2498/oom_score_adj instead. [ 105.257119][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 105.257133][ T28] audit: type=1326 audit(2000000003.099:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.292278][ T28] audit: type=1326 audit(2000000003.099:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.317382][ T28] audit: type=1326 audit(2000000003.109:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.342190][ T28] audit: type=1326 audit(2000000003.109:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.371803][ T28] audit: type=1326 audit(2000000003.109:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.399653][ T28] audit: type=1326 audit(2000000003.109:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.424657][ T28] audit: type=1326 audit(2000000003.109:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.449560][ T28] audit: type=1326 audit(2000000003.109:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.474539][ T28] audit: type=1326 audit(2000000003.109:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.506130][ T28] audit: type=1326 audit(2000000003.109:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2519 comm="syz.6.881" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fcaa679e559 code=0x7ffc0000 [ 105.626960][ T2548] X.509: Couldn't decode AuthKeyIdentifier [ 105.935893][ T2577] kvm [2576]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 106.549183][ T2618] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 106.579796][ T2618] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 106.597607][ T2618] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 106.624307][ T2618] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 106.641130][ T2618] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 107.328754][ T2677] kvm: apic: phys broadcast and lowest prio [ 107.476587][ T2686] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.679979][ T2700] kvm: emulating exchange as write [ 108.094839][ T2741] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 108.216148][ T2757] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.279920][ T2861] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 109.669112][ T2892] kvm: apic: phys broadcast and lowest prio [ 109.675351][ T2892] X.509: Couldn't decode AuthKeyIdentifier [ 110.119552][ T2954] kvm: apic: phys broadcast and lowest prio [ 110.125819][ T2954] X.509: Couldn't decode AuthKeyIdentifier [ 112.738004][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 112.738019][ T28] audit: type=1326 audit(2000000010.579:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 112.840181][ T28] audit: type=1326 audit(2000000010.619:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 112.895333][ T28] audit: type=1326 audit(2000000010.619:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 112.939060][ T28] audit: type=1326 audit(2000000010.619:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 112.983300][ T28] audit: type=1326 audit(2000000010.619:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 113.040463][ T28] audit: type=1326 audit(2000000010.619:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 113.099113][ T28] audit: type=1326 audit(2000000010.619:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 113.138913][ T28] audit: type=1326 audit(2000000010.619:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 113.176375][ T3044] ip_tables: iptables: counters copy to user failed while replacing table [ 113.204851][ T28] audit: type=1326 audit(2000000010.619:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 113.261339][ T3051] kvm: apic: phys broadcast and lowest prio [ 113.266095][ T28] audit: type=1326 audit(2000000010.619:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.5.1065" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2ad9e559 code=0x7ffc0000 [ 113.442723][ T3008] syz.3.1061 (3008) used greatest stack depth: 20648 bytes left [ 113.451452][ T3063] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1080'. [ 113.461332][ T3063] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1080'. [ 113.485884][ T3065] ip_tables: iptables: counters copy to user failed while replacing table [ 113.502245][ T3070] loop2: detected capacity change from 0 to 16 [ 113.515455][ T3070] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.542687][ T3075] kvm: apic: phys broadcast and lowest prio [ 113.621620][ T3091] ./mnt: Can't open blockdev [ 113.694347][ T3108] loop5: detected capacity change from 0 to 8192 [ 113.719203][ T3108] loop5: p1 p2 p3 [ 113.723598][ T3108] loop5: p1 start 51379968 is beyond EOD, truncated [ 113.731058][ T3108] loop5: p3 size 100663552 extends beyond EOD, truncated [ 113.754978][ T3111] kvm: apic: phys broadcast and lowest prio [ 113.827341][ T3117] loop2: detected capacity change from 0 to 2048 [ 113.860650][ T3117] GPT:first_usable_lbas don't match. [ 113.866020][ T3117] GPT:34 != 290 [ 113.869524][ T3117] GPT: Use GNU Parted to correct GPT errors. [ 113.875530][ T3117] loop2: p1 p2 p3 [ 113.911620][ T338] udevd[338]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 113.911983][ T310] udevd[310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 113.922829][ T439] udevd[439]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 113.984095][ T3135] loop2: detected capacity change from 0 to 256 [ 114.097639][ T3152] loop2: detected capacity change from 0 to 128 [ 114.153477][ T3159] loop2: detected capacity change from 0 to 256 [ 114.165825][ T3159] FAT-fs (loop2): Directory bread(block 64) failed [ 114.173435][ T3159] FAT-fs (loop2): Directory bread(block 65) failed [ 114.180260][ T3159] FAT-fs (loop2): Directory bread(block 66) failed [ 114.186828][ T3159] FAT-fs (loop2): Directory bread(block 67) failed [ 114.194016][ T3159] FAT-fs (loop2): Directory bread(block 68) failed [ 114.200626][ T3159] FAT-fs (loop2): Directory bread(block 69) failed [ 114.207205][ T3159] FAT-fs (loop2): Directory bread(block 70) failed [ 114.213873][ T3159] FAT-fs (loop2): Directory bread(block 71) failed [ 114.220593][ T3159] FAT-fs (loop2): Directory bread(block 72) failed [ 114.227100][ T3159] FAT-fs (loop2): Directory bread(block 73) failed [ 114.260141][ T3163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.267722][ T3163] device bridge_slave_0 left promiscuous mode [ 114.274089][ T3163] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.282005][ T3163] device bridge_slave_1 left promiscuous mode [ 114.288218][ T3163] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.342360][ T3171] FAULT_INJECTION: forcing a failure. [ 114.342360][ T3171] name failslab, interval 1, probability 0, space 0, times 0 [ 114.355297][ T3171] CPU: 0 PID: 3171 Comm: syz.2.1129 Not tainted syzkaller #0 [ 114.362681][ T3171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.372733][ T3171] Call Trace: [ 114.376002][ T3171] [ 114.378936][ T3171] __dump_stack+0x21/0x24 [ 114.383275][ T3171] dump_stack_lvl+0x110/0x170 [ 114.387937][ T3171] ? __cfi_dump_stack_lvl+0x8/0x8 [ 114.392949][ T3171] ? kasan_save_alloc_info+0x1f/0x30 [ 114.398219][ T3171] ? bpf_int_jit_compile+0x474/0xcb00 [ 114.403574][ T3171] ? bpf_prepare_filter+0x101c/0x11c0 [ 114.408932][ T3171] ? __get_filter+0x2e2/0x410 [ 114.413621][ T3171] ? sk_attach_filter+0x23/0x140 [ 114.418556][ T3171] ? sock_setsockopt+0x5a/0x70 [ 114.423306][ T3171] dump_stack+0x15/0x24 [ 114.427449][ T3171] should_fail_ex+0x3bf/0x510 [ 114.432116][ T3171] __should_failslab+0xac/0xf0 [ 114.436863][ T3171] should_failslab+0x9/0x20 [ 114.441352][ T3171] __kmem_cache_alloc_node+0x3d/0x2d0 [ 114.446707][ T3171] ? kvmalloc_node+0x28a/0x460 [ 114.451454][ T3171] ? kvmalloc_node+0x28a/0x460 [ 114.456195][ T3171] __kmalloc_node+0xa2/0x1e0 [ 114.460767][ T3171] kvmalloc_node+0x28a/0x460 [ 114.465365][ T3171] ? __cfi_kvmalloc_node+0x10/0x10 [ 114.470455][ T3171] ? bpf_prog_pack_alloc+0x38e/0x3a0 [ 114.475721][ T3171] bpf_jit_binary_pack_alloc+0x1a9/0x420 [ 114.481337][ T3171] ? __cfi_jit_fill_hole+0x10/0x10 [ 114.486430][ T3171] ? __cfi_bpf_jit_binary_pack_alloc+0x10/0x10 [ 114.492567][ T3171] ? ns_capable_noaudit+0x8f/0xf0 [ 114.497569][ T3171] bpf_int_jit_compile+0xb7e0/0xcb00 [ 114.502837][ T3171] ? __kasan_slab_free+0x11/0x20 [ 114.507758][ T3171] ? __kmem_cache_free+0xb7/0x1b0 [ 114.512770][ T3171] ? ____kasan_slab_free+0x132/0x180 [ 114.518055][ T3171] ? __cfi_bpf_int_jit_compile+0x10/0x10 [ 114.523722][ T3171] ? sk_filter_release_rcu+0x110/0x110 [ 114.529188][ T3171] bpf_prog_select_runtime+0x89c/0xbb0 [ 114.534630][ T3171] ? kmemdup+0x46/0x60 [ 114.538678][ T3171] ? memcpy+0x56/0x70 [ 114.542638][ T3171] ? bpf_prog_realloc+0x185/0x200 [ 114.547643][ T3171] bpf_prepare_filter+0x101c/0x11c0 [ 114.552825][ T3171] ? bpf_prog_create+0x1f0/0x1f0 [ 114.557740][ T3171] ? kmemdup+0x46/0x60 [ 114.561793][ T3171] ? memcpy+0x56/0x70 [ 114.565802][ T3171] __get_filter+0x2e2/0x410 [ 114.570290][ T3171] sk_attach_filter+0x23/0x140 [ 114.575050][ T3171] sk_setsockopt+0x1fac/0x28b0 [ 114.579813][ T3171] ? __cfi_sk_setsockopt+0x10/0x10 [ 114.584908][ T3171] ? selinux_socket_setsockopt+0x282/0x360 [ 114.590698][ T3171] ? __fget_files+0x2d1/0x330 [ 114.595358][ T3171] sock_setsockopt+0x5a/0x70 [ 114.599943][ T3171] __sys_setsockopt+0x269/0x4e0 [ 114.604794][ T3171] ? __cfi___sys_setsockopt+0x10/0x10 [ 114.610153][ T3171] ? __this_cpu_preempt_check+0x13/0x20 [ 114.615695][ T3171] ? xfd_validate_state+0x70/0x150 [ 114.620796][ T3171] ? __kasan_check_write+0x14/0x20 [ 114.625893][ T3171] ? fpregs_restore_userregs+0x128/0x260 [ 114.631511][ T3171] __x64_sys_setsockopt+0xbf/0xd0 [ 114.636524][ T3171] x64_sys_call+0x124/0x9a0 [ 114.641016][ T3171] do_syscall_64+0x4c/0xa0 [ 114.645423][ T3171] ? clear_bhb_loop+0x30/0x80 [ 114.650085][ T3171] ? clear_bhb_loop+0x30/0x80 [ 114.654746][ T3171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.660626][ T3171] RIP: 0033:0x7f019ad9e559 [ 114.665026][ T3171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.684616][ T3171] RSP: 002b:00007f019bbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.693014][ T3171] RAX: ffffffffffffffda RBX: 00007f019b025fa0 RCX: 00007f019ad9e559 [ 114.700969][ T3171] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 114.708922][ T3171] RBP: 00007f019ae358b0 R08: 0000000000000010 R09: 0000000000000000 [ 114.716878][ T3171] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 114.724831][ T3171] R13: 00007f019b026038 R14: 00007f019b025fa0 R15: 00007fff1b426d28 [ 114.732789][ T3171] [ 114.780845][ T3184] loop3: detected capacity change from 0 to 256 [ 114.973005][ T3231] loop6: detected capacity change from 0 to 128 [ 115.014213][ T2085] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 115.023183][ T3235] loop5: detected capacity change from 0 to 256 [ 115.039109][ T2085] FAT-fs (loop6): Filesystem has been set read-only [ 115.126743][ T3253] loop6: detected capacity change from 0 to 512 [ 115.249914][ T3257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.421398][ T3279] X.509: Couldn't decode AuthKeyIdentifier [ 115.720397][ T3308] fuse: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 115.867603][ T3330] FAULT_INJECTION: forcing a failure. [ 115.867603][ T3330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.891870][ T3330] CPU: 1 PID: 3330 Comm: syz.5.1201 Not tainted syzkaller #0 [ 115.899274][ T3330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.909337][ T3330] Call Trace: [ 115.912618][ T3330] [ 115.915550][ T3330] __dump_stack+0x21/0x24 [ 115.919899][ T3330] dump_stack_lvl+0x110/0x170 [ 115.924586][ T3330] ? __cfi_dump_stack_lvl+0x8/0x8 [ 115.929624][ T3330] ? do_futex+0x2e2/0x430 [ 115.933963][ T3330] dump_stack+0x15/0x24 [ 115.938136][ T3330] should_fail_ex+0x3bf/0x510 [ 115.942825][ T3330] should_fail+0xb/0x10 [ 115.946984][ T3330] should_fail_usercopy+0x1a/0x20 [ 115.952017][ T3330] _copy_from_user+0x1e/0xc0 [ 115.956617][ T3330] __se_sys_openat2+0x149/0x2c0 [ 115.961479][ T3330] ? __this_cpu_preempt_check+0x13/0x20 [ 115.967035][ T3330] ? __x64_sys_openat2+0xb0/0xb0 [ 115.971984][ T3330] ? fpregs_restore_userregs+0x128/0x260 [ 115.977623][ T3330] __x64_sys_openat2+0x9b/0xb0 [ 115.982404][ T3330] x64_sys_call+0x54c/0x9a0 [ 115.986915][ T3330] do_syscall_64+0x4c/0xa0 [ 115.991343][ T3330] ? clear_bhb_loop+0x30/0x80 [ 115.996029][ T3330] ? clear_bhb_loop+0x30/0x80 [ 116.000713][ T3330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.006615][ T3330] RIP: 0033:0x7f6a2ad9e559 [ 116.011033][ T3330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.030658][ T3330] RSP: 002b:00007f6a2bd2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 116.039096][ T3330] RAX: ffffffffffffffda RBX: 00007f6a2b025fa0 RCX: 00007f6a2ad9e559 [ 116.047077][ T3330] RDX: 0000200000000500 RSI: 0000000000000000 RDI: 0000000000000003 [ 116.055060][ T3330] RBP: 00007f6a2ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 116.063068][ T3330] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 116.071080][ T3330] R13: 00007f6a2b026038 R14: 00007f6a2b025fa0 R15: 00007ffc5ec854f8 [ 116.079066][ T3330] [ 116.333857][ T3358] X.509: Couldn't decode AuthKeyIdentifier [ 116.349765][ T3360] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.638600][ T10] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 116.646084][ T10] FAT-fs (loop3): Filesystem has been set read-only [ 116.652889][ T10] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 117.000538][ T3404] FAT-fs (loop1): bogus number of FAT sectors [ 117.020827][ T3404] FAT-fs (loop1): Can't find a valid FAT filesystem [ 117.116339][ T3417] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.147892][ T3417] overlayfs: failed to set xattr on upper [ 117.168556][ T3417] overlayfs: ...falling back to index=off,metacopy=off. [ 117.169128][ T3424] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 117.180931][ T3417] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 117.233829][ T3435] ip_tables: iptables: counters copy to user failed while replacing table [ 117.246345][ T3424] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.258656][ T3424] overlayfs: failed to set xattr on upper [ 117.384051][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.393221][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.401336][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.410488][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.418778][ T310] loop1: unable to read partition table [ 117.424773][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.433939][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.468611][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.477775][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.485777][ T3463] loop1: unable to read partition table [ 117.491525][ T3463] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 117.498549][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.514124][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.521864][ T3468] FAULT_INJECTION: forcing a failure. [ 117.521864][ T3468] name failslab, interval 1, probability 0, space 0, times 0 [ 117.523594][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.535227][ T3468] CPU: 0 PID: 3468 Comm: syz.1.1260 Not tainted syzkaller #0 [ 117.543631][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.550951][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.550974][ T3468] Call Trace: [ 117.550981][ T3468] [ 117.550988][ T3468] __dump_stack+0x21/0x24 [ 117.560240][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.568812][ T3468] dump_stack_lvl+0x110/0x170 [ 117.568842][ T3468] ? __cfi_dump_stack_lvl+0x8/0x8 [ 117.572107][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.575277][ T3468] ? format_decode+0xbc5/0x1520 [ 117.579940][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.588663][ T3468] dump_stack+0x15/0x24 [ 117.588691][ T3468] should_fail_ex+0x3bf/0x510 [ 117.593341][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.598337][ T3468] ? key_alloc+0x2d3/0xf00 [ 117.606398][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.610937][ T3468] __should_failslab+0xac/0xf0 [ 117.620045][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 117.624164][ T3468] should_failslab+0x9/0x20 [ 117.667046][ T3468] kmem_cache_alloc+0x3b/0x320 [ 117.671805][ T3468] ? key_user_lookup+0x1c8/0x460 [ 117.676732][ T3468] key_alloc+0x2d3/0xf00 [ 117.680965][ T3468] request_key_auth_new+0x694/0x8f0 [ 117.686152][ T3468] ? __kasan_check_write+0x14/0x20 [ 117.691247][ T3468] ? __cfi_request_key_auth_new+0x10/0x10 [ 117.696957][ T3468] ? mutex_unlock+0x8f/0x230 [ 117.701532][ T3468] ? refcount_dec_and_lock+0x25/0xa0 [ 117.706806][ T3468] request_key_and_link+0xa87/0x1180 [ 117.712077][ T3468] ? key_task_permission+0x36d/0x4a0 [ 117.717349][ T3468] ? __cfi_request_key_and_link+0x10/0x10 [ 117.723057][ T3468] ? downgrade_write+0x370/0x370 [ 117.727987][ T3468] ? __cfi_asymmetric_key_cmp_partial+0x10/0x10 [ 117.734214][ T3468] ? __cfi_keyring_search_iterator+0x10/0x10 [ 117.740177][ T3468] ? __kasan_check_write+0x14/0x20 [ 117.745270][ T3468] __se_sys_request_key+0x293/0x350 [ 117.750453][ T3468] ? __x64_sys_request_key+0xb0/0xb0 [ 117.755725][ T3468] ? fpregs_restore_userregs+0x128/0x260 [ 117.761342][ T3468] __x64_sys_request_key+0x9b/0xb0 [ 117.766438][ T3468] x64_sys_call+0x69c/0x9a0 [ 117.770937][ T3468] do_syscall_64+0x4c/0xa0 [ 117.775341][ T3468] ? clear_bhb_loop+0x30/0x80 [ 117.780001][ T3468] ? clear_bhb_loop+0x30/0x80 [ 117.784663][ T3468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.790539][ T3468] RIP: 0033:0x7f5f5859e559 [ 117.794936][ T3468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.814524][ T3468] RSP: 002b:00007f5f59520028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 117.822927][ T3468] RAX: ffffffffffffffda RBX: 00007f5f58825fa0 RCX: 00007f5f5859e559 [ 117.830882][ T3468] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 117.838834][ T3468] RBP: 00007f5f586358b0 R08: 0000000000000000 R09: 0000000000000000 [ 117.846810][ T3468] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 117.854765][ T3468] R13: 00007f5f58826038 R14: 00007f5f58825fa0 R15: 00007ffd615050f8 [ 117.862726][ T3468] [ 118.094190][ T3481] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 118.100099][ T3481] syzkaller0: linktype set to 823 [ 118.105437][ T3481] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 118.160663][ T3491] FAULT_INJECTION: forcing a failure. [ 118.160663][ T3491] name failslab, interval 1, probability 0, space 0, times 0 [ 118.173911][ T3491] CPU: 1 PID: 3491 Comm: syz.2.1271 Not tainted syzkaller #0 [ 118.181305][ T3491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.191365][ T3491] Call Trace: [ 118.194369][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 118.194384][ T28] audit: type=1400 audit(2000000016.029:487): avc: denied { checkpoint_restore } for pid=3493 comm="syz.3.1272" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.194645][ T3491] [ 118.203335][ T3496] netem: change failed [ 118.222374][ T3491] __dump_stack+0x21/0x24 [ 118.222413][ T3491] dump_stack_lvl+0x110/0x170 [ 118.222436][ T3491] ? __cfi_dump_stack_lvl+0x8/0x8 [ 118.222460][ T3491] dump_stack+0x15/0x24 [ 118.247546][ T3491] should_fail_ex+0x3bf/0x510 [ 118.252224][ T3491] ? security_inode_alloc+0x33/0x120 [ 118.257511][ T3491] __should_failslab+0xac/0xf0 [ 118.262279][ T3491] should_failslab+0x9/0x20 [ 118.266773][ T3491] kmem_cache_alloc+0x3b/0x320 [ 118.271531][ T3491] security_inode_alloc+0x33/0x120 [ 118.276634][ T3491] inode_init_always+0x6ee/0x950 [ 118.281560][ T3491] new_inode_pseudo+0xa2/0x1f0 [ 118.286317][ T3491] new_inode+0x28/0x1e0 [ 118.290456][ T3491] proc_pid_make_inode+0x24/0x1c0 [ 118.295470][ T3491] proc_map_files_instantiate+0x75/0x120 [ 118.301087][ T3491] proc_fill_cache+0x1f3/0x3f0 [ 118.305845][ T3491] ? __cfi_proc_map_files_instantiate+0x10/0x10 [ 118.312078][ T3491] ? __cfi_proc_fill_cache+0x10/0x10 [ 118.317357][ T3491] ? __cfi_snprintf+0x10/0x10 [ 118.322018][ T3491] ? __genradix_ptr+0x1b9/0x1e0 [ 118.326854][ T3491] proc_map_files_readdir+0x8a0/0xb00 [ 118.332217][ T3491] ? __cfi_proc_map_files_readdir+0x10/0x10 [ 118.338105][ T3491] ? downgrade_write+0x370/0x370 [ 118.343047][ T3491] ? __cfi_down_read_killable+0x10/0x10 [ 118.348591][ T3491] ? security_file_permission+0x94/0xb0 [ 118.354138][ T3491] iterate_dir+0x26d/0x610 [ 118.358554][ T3491] ? __cfi_proc_map_files_readdir+0x10/0x10 [ 118.364452][ T3491] __se_sys_getdents64+0xf2/0x250 [ 118.369473][ T3491] ? __x64_sys_getdents64+0x90/0x90 [ 118.374666][ T3491] ? xfd_validate_state+0x70/0x150 [ 118.379770][ T3491] ? __cfi_filldir64+0x10/0x10 [ 118.384521][ T3491] ? fpregs_restore_userregs+0x128/0x260 [ 118.390140][ T3491] __x64_sys_getdents64+0x7b/0x90 [ 118.395148][ T3491] x64_sys_call+0x15c/0x9a0 [ 118.399636][ T3491] do_syscall_64+0x4c/0xa0 [ 118.404045][ T3491] ? clear_bhb_loop+0x30/0x80 [ 118.408708][ T3491] ? clear_bhb_loop+0x30/0x80 [ 118.413371][ T3491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.419247][ T3491] RIP: 0033:0x7f019ad9e559 [ 118.423648][ T3491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.443237][ T3491] RSP: 002b:00007f019bbc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 118.451633][ T3491] RAX: ffffffffffffffda RBX: 00007f019b025fa0 RCX: 00007f019ad9e559 [ 118.459589][ T3491] RDX: 000000000000004b RSI: 0000200000001ac0 RDI: 0000000000000003 [ 118.467544][ T3491] RBP: 00007f019ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 118.475496][ T3491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.483452][ T3491] R13: 00007f019b026038 R14: 00007f019b025fa0 R15: 00007fff1b426d28 [ 118.491409][ T3491] [ 118.569566][ T28] audit: type=1400 audit(2000000016.419:488): avc: denied { mount } for pid=3504 comm="syz.2.1276" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.729592][ T3511] FAULT_INJECTION: forcing a failure. [ 118.729592][ T3511] name failslab, interval 1, probability 0, space 0, times 0 [ 118.742260][ T3511] CPU: 1 PID: 3511 Comm: syz.1.1278 Not tainted syzkaller #0 [ 118.749717][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.759759][ T3511] Call Trace: [ 118.763022][ T3511] [ 118.765940][ T3511] __dump_stack+0x21/0x24 [ 118.770272][ T3511] dump_stack_lvl+0x110/0x170 [ 118.774937][ T3511] ? __cfi_dump_stack_lvl+0x8/0x8 [ 118.779953][ T3511] dump_stack+0x15/0x24 [ 118.784119][ T3511] should_fail_ex+0x3bf/0x510 [ 118.788782][ T3511] ? security_inode_alloc+0x33/0x120 [ 118.794077][ T3511] __should_failslab+0xac/0xf0 [ 118.798829][ T3511] should_failslab+0x9/0x20 [ 118.803316][ T3511] kmem_cache_alloc+0x3b/0x320 [ 118.808066][ T3511] security_inode_alloc+0x33/0x120 [ 118.813187][ T3511] inode_init_always+0x6ee/0x950 [ 118.818131][ T3511] new_inode_pseudo+0xa2/0x1f0 [ 118.822882][ T3511] new_inode+0x28/0x1e0 [ 118.827030][ T3511] shmem_get_inode+0x36d/0xba0 [ 118.831779][ T3511] shmem_mknod+0x59/0x1d0 [ 118.836107][ T3511] ? shmem_mkdir+0x17/0x60 [ 118.840508][ T3511] shmem_mkdir+0x2f/0x60 [ 118.844743][ T3511] vfs_mkdir+0x39c/0x580 [ 118.848976][ T3511] do_mkdirat+0x174/0x4d0 [ 118.853311][ T3511] __x64_sys_mkdirat+0x89/0xa0 [ 118.858077][ T3511] x64_sys_call+0x73d/0x9a0 [ 118.862568][ T3511] do_syscall_64+0x4c/0xa0 [ 118.866969][ T3511] ? clear_bhb_loop+0x30/0x80 [ 118.871654][ T3511] ? clear_bhb_loop+0x30/0x80 [ 118.876316][ T3511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.882209][ T3511] RIP: 0033:0x7f5f5859d3c7 [ 118.886618][ T3511] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.906215][ T3511] RSP: 002b:00007f5f5951fe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 118.914630][ T3511] RAX: ffffffffffffffda RBX: 00007f5f5951fee0 RCX: 00007f5f5859d3c7 [ 118.922620][ T3511] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 118.930578][ T3511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.938535][ T3511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 118.946499][ T3511] R13: 00007f5f5951fea0 R14: 0000000000000000 R15: 0000000000000000 [ 118.954486][ T3511] [ 119.010039][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.017225][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.029795][ T3521] overlayfs: failed to set xattr on upper [ 119.035661][ T3521] overlayfs: ...falling back to index=off,metacopy=off. [ 119.039686][ T3517] device bridge_slave_1 left promiscuous mode [ 119.042934][ T3521] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 119.052333][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.065601][ T3525] set_capacity_and_notify: 6 callbacks suppressed [ 119.065616][ T3525] loop1: detected capacity change from 0 to 128 [ 119.078793][ T3517] device bridge_slave_0 left promiscuous mode [ 119.084912][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.097105][ T3525] syz.1.1285: attempt to access beyond end of device [ 119.097105][ T3525] loop1: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 119.112743][ T3524] syz.1.1285: attempt to access beyond end of device [ 119.112743][ T3524] loop1: rw=524288, sector=145, nr_sectors = 79 limit=128 [ 119.229445][ T3548] syz.1.1285: attempt to access beyond end of device [ 119.229445][ T3548] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.244521][ T3548] syz.1.1285: attempt to access beyond end of device [ 119.244521][ T3548] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 119.257883][ T3548] syz.1.1285: attempt to access beyond end of device [ 119.257883][ T3548] loop1: rw=0, sector=151, nr_sectors = 1 limit=128 [ 119.285870][ T3554] loop5: detected capacity change from 0 to 512 [ 119.308889][ T3554] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 119.317731][ T3554] FAT-fs (loop5): Filesystem has been set read-only [ 119.324721][ T3554] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 119.350570][ T3554] tipc: Started in network mode [ 119.355439][ T3554] tipc: Node identity e04e0001, cluster identity 4711 [ 119.362782][ T3554] tipc: Node number set to 3763208193 [ 119.484469][ T3561] loop2: detected capacity change from 0 to 8192 [ 119.570612][ T28] audit: type=1400 audit(2000000017.419:489): avc: denied { read write } for pid=3580 comm="syz.3.1308" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 119.595881][ T28] audit: type=1400 audit(2000000017.419:490): avc: denied { open } for pid=3580 comm="syz.3.1308" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 119.632876][ T3586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=3586 comm=syz.3.1310 [ 119.688286][ T3591] bridge0: port 1(syz_tun) entered blocking state [ 119.694886][ T3591] bridge0: port 1(syz_tun) entered disabled state [ 119.702473][ T3591] device syz_tun entered promiscuous mode [ 119.732216][ T3599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 119.741949][ T28] audit: type=1400 audit(2000000017.589:491): avc: denied { setopt } for pid=3597 comm="syz.3.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.774162][ T28] audit: type=1400 audit(2000000017.619:492): avc: denied { mount } for pid=3602 comm="syz.3.1318" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 119.826193][ T3616] loop2: detected capacity change from 0 to 128 [ 119.835017][ T3616] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 119.839106][ T3613] loop3: detected capacity change from 0 to 8192 [ 119.843259][ T3616] FAT-fs (loop2): Filesystem has been set read-only [ 119.856711][ T3616] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 119.870568][ T3613] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.887754][ T3613] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 119.894973][ T3613] FAT-fs (loop3): Filesystem has been set read-only [ 119.901826][ T3613] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 119.910937][ T3613] FAT-fs (loop3): error, clusters badly computed (3 != 2) [ 119.922280][ T3613] FAT-fs (loop3): error, clusters badly computed (4 != 3) [ 119.929650][ T3613] FAT-fs (loop3): error, clusters badly computed (5 != 4) [ 119.936883][ T3613] FAT-fs (loop3): error, clusters badly computed (6 != 5) [ 119.944572][ T3613] FAT-fs (loop3): error, clusters badly computed (7 != 6) [ 119.952181][ T3613] FAT-fs (loop3): error, clusters badly computed (8 != 7) [ 119.962666][ T3613] FAT-fs (loop3): error, clusters badly computed (9 != 8) [ 119.970150][ T3613] FAT-fs (loop3): error, clusters badly computed (10 != 9) [ 119.979179][ T3613] FAT-fs (loop3): error, clusters badly computed (11 != 10) [ 119.986621][ T3613] FAT-fs (loop3): error, clusters badly computed (12 != 11) [ 119.994205][ T3613] FAT-fs (loop3): error, clusters badly computed (13 != 12) [ 120.002952][ T3613] FAT-fs (loop3): error, clusters badly computed (14 != 13) [ 120.010500][ T3613] FAT-fs (loop3): error, clusters badly computed (15 != 14) [ 120.019733][ T3613] FAT-fs (loop3): error, clusters badly computed (16 != 15) [ 120.022967][ T3635] loop1: detected capacity change from 0 to 256 [ 120.027772][ T3613] FAT-fs (loop3): error, clusters badly computed (17 != 16) [ 120.041183][ T3635] FAT-fs (loop1): bogus number of directory entries (1) [ 120.041674][ T3613] FAT-fs (loop3): error, clusters badly computed (18 != 17) [ 120.055101][ T3635] FAT-fs (loop1): Can't find a valid FAT filesystem [ 120.055923][ T3613] FAT-fs (loop3): error, clusters badly computed (19 != 18) [ 120.070597][ T3637] loop2: detected capacity change from 0 to 256 [ 120.077201][ T3637] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 120.087775][ T3613] FAT-fs (loop3): error, clusters badly computed (20 != 19) [ 120.099748][ T3613] FAT-fs (loop3): error, clusters badly computed (21 != 20) [ 120.107443][ T3613] FAT-fs (loop3): error, clusters badly computed (22 != 21) [ 120.114948][ T3613] FAT-fs (loop3): error, clusters badly computed (23 != 22) [ 120.132123][ T3613] FAT-fs (loop3): error, clusters badly computed (24 != 23) [ 120.140454][ T3613] FAT-fs (loop3): error, clusters badly computed (25 != 24) [ 120.147797][ T3613] FAT-fs (loop3): error, clusters badly computed (26 != 25) [ 120.155384][ T3613] FAT-fs (loop3): error, clusters badly computed (27 != 26) [ 120.163806][ T3613] FAT-fs (loop3): error, clusters badly computed (28 != 27) [ 120.171333][ T3613] FAT-fs (loop3): error, clusters badly computed (29 != 28) [ 120.179400][ T3613] FAT-fs (loop3): error, clusters badly computed (30 != 29) [ 120.196127][ T3613] FAT-fs (loop3): error, clusters badly computed (31 != 30) [ 120.204913][ T3613] FAT-fs (loop3): error, clusters badly computed (32 != 31) [ 120.212694][ T3613] FAT-fs (loop3): error, clusters badly computed (33 != 32) [ 120.224389][ T3613] FAT-fs (loop3): error, clusters badly computed (34 != 33) [ 120.233494][ T3613] FAT-fs (loop3): error, clusters badly computed (35 != 34) [ 120.241680][ T3613] FAT-fs (loop3): error, clusters badly computed (36 != 35) [ 120.249150][ T3613] FAT-fs (loop3): error, clusters badly computed (37 != 36) [ 120.250838][ T3654] device ip6gre1 entered promiscuous mode [ 120.256465][ T3613] FAT-fs (loop3): error, clusters badly computed (38 != 37) [ 120.276696][ T3613] FAT-fs (loop3): error, clusters badly computed (39 != 38) [ 120.284260][ T3613] FAT-fs (loop3): error, clusters badly computed (40 != 39) [ 120.297490][ T3613] FAT-fs (loop3): error, clusters badly computed (41 != 40) [ 120.305977][ T3613] FAT-fs (loop3): error, clusters badly computed (42 != 41) [ 120.314238][ T3613] FAT-fs (loop3): error, clusters badly computed (43 != 42) [ 120.322749][ T3613] FAT-fs (loop3): error, clusters badly computed (44 != 43) [ 120.330815][ T3613] FAT-fs (loop3): error, clusters badly computed (45 != 44) [ 120.339249][ T3613] FAT-fs (loop3): error, clusters badly computed (46 != 45) [ 120.346759][ T3613] FAT-fs (loop3): error, clusters badly computed (47 != 46) [ 120.356143][ T3673] loop6: detected capacity change from 0 to 512 [ 120.367580][ T3613] FAT-fs (loop3): error, clusters badly computed (48 != 47) [ 120.372927][ T3679] fuse: Bad value for 'fd' [ 120.378464][ T3613] FAT-fs (loop3): error, clusters badly computed (49 != 48) [ 120.387206][ T3613] FAT-fs (loop3): error, clusters badly computed (50 != 49) [ 120.394918][ T3673] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.405584][ T3613] FAT-fs (loop3): error, clusters badly computed (51 != 50) [ 120.413344][ T3613] FAT-fs (loop3): error, clusters badly computed (52 != 51) [ 120.421075][ T3613] FAT-fs (loop3): error, clusters badly computed (53 != 52) [ 120.428866][ T3613] FAT-fs (loop3): error, clusters badly computed (54 != 53) [ 120.443249][ T3613] FAT-fs (loop3): error, clusters badly computed (55 != 54) [ 120.458552][ T3613] FAT-fs (loop3): error, clusters badly computed (56 != 55) [ 120.466141][ T3613] FAT-fs (loop3): error, clusters badly computed (57 != 56) [ 120.473603][ T3613] FAT-fs (loop3): error, clusters badly computed (58 != 57) [ 120.481397][ T3613] FAT-fs (loop3): error, clusters badly computed (59 != 58) [ 120.489411][ T3613] FAT-fs (loop3): error, clusters badly computed (60 != 59) [ 120.496778][ T3613] FAT-fs (loop3): error, clusters badly computed (61 != 60) [ 120.504165][ T3613] FAT-fs (loop3): error, clusters badly computed (62 != 61) [ 120.511802][ T3613] FAT-fs (loop3): error, clusters badly computed (63 != 62) [ 120.519350][ T3613] FAT-fs (loop3): error, clusters badly computed (64 != 63) [ 120.526992][ T3613] FAT-fs (loop3): error, clusters badly computed (65 != 64) [ 120.534540][ T3613] FAT-fs (loop3): error, clusters badly computed (66 != 65) [ 120.543917][ T3613] FAT-fs (loop3): error, clusters badly computed (67 != 66) [ 120.551371][ T3613] FAT-fs (loop3): error, clusters badly computed (68 != 67) [ 120.559108][ T3613] FAT-fs (loop3): error, clusters badly computed (69 != 68) [ 120.567688][ T3613] FAT-fs (loop3): error, clusters badly computed (70 != 69) [ 120.575109][ T3613] FAT-fs (loop3): error, clusters badly computed (71 != 70) [ 120.592055][ T3613] FAT-fs (loop3): error, clusters badly computed (72 != 71) [ 120.599083][ T3703] loop6: detected capacity change from 0 to 2048 [ 120.599655][ T3613] FAT-fs (loop3): error, clusters badly computed (73 != 72) [ 120.614820][ T3613] FAT-fs (loop3): error, clusters badly computed (74 != 73) [ 120.622250][ T3613] FAT-fs (loop3): error, clusters badly computed (75 != 74) [ 120.631214][ T3613] FAT-fs (loop3): error, clusters badly computed (76 != 75) [ 120.638606][ T3613] FAT-fs (loop3): error, clusters badly computed (77 != 76) [ 120.645944][ T3613] FAT-fs (loop3): error, clusters badly computed (78 != 77) [ 120.653377][ T3613] FAT-fs (loop3): error, clusters badly computed (79 != 78) [ 120.661002][ T3703] loop6: p2 < > p4 [ 120.665888][ T3703] loop6: p4 size 262144 extends beyond EOD, truncated [ 120.669765][ T3613] FAT-fs (loop3): error, clusters badly computed (80 != 79) [ 120.717797][ T3713] kvm: apic: phys broadcast and lowest prio [ 120.725106][ T3713] X.509: Couldn't decode AuthKeyIdentifier [ 120.804247][ T3721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1371'. [ 120.814683][ T3721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1371'. [ 120.887548][ T3734] FAULT_INJECTION: forcing a failure. [ 120.887548][ T3734] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.900611][ T3734] CPU: 1 PID: 3734 Comm: syz.3.1377 Not tainted syzkaller #0 [ 120.907980][ T3734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.918035][ T3734] Call Trace: [ 120.921366][ T3734] [ 120.924286][ T3734] __dump_stack+0x21/0x24 [ 120.928629][ T3734] dump_stack_lvl+0x110/0x170 [ 120.933318][ T3734] ? __cfi_dump_stack_lvl+0x8/0x8 [ 120.938340][ T3734] dump_stack+0x15/0x24 [ 120.942512][ T3734] should_fail_ex+0x3bf/0x510 [ 120.947177][ T3734] should_fail+0xb/0x10 [ 120.951327][ T3734] get_futex_key+0x170/0xb10 [ 120.955946][ T3734] ? __cfi_get_futex_key+0x10/0x10 [ 120.961056][ T3734] ? __kasan_kmalloc+0x95/0xb0 [ 120.965833][ T3734] ? futex_setup_timer+0xb0/0xc0 [ 120.970789][ T3734] futex_lock_pi+0x1d6/0x970 [ 120.975392][ T3734] ? __kasan_check_read+0x11/0x20 [ 120.980424][ T3734] ? __cfi_futex_lock_pi+0x10/0x10 [ 120.985543][ T3734] ? __cfi_futex_wake+0x10/0x10 [ 120.990379][ T3734] ? vfs_write+0xa51/0xd00 [ 120.994777][ T3734] do_futex+0x1de/0x430 [ 120.998917][ T3734] ? __cfi_do_futex+0x10/0x10 [ 121.003588][ T3734] ? __kasan_check_write+0x14/0x20 [ 121.008700][ T3734] ? mutex_unlock+0x8f/0x230 [ 121.013281][ T3734] __se_sys_futex+0x136/0x310 [ 121.017938][ T3734] ? __x64_sys_futex+0x100/0x100 [ 121.022860][ T3734] ? __kasan_check_write+0x14/0x20 [ 121.027969][ T3734] ? fput+0x154/0x1a0 [ 121.031933][ T3734] ? __kasan_check_write+0x14/0x20 [ 121.037028][ T3734] __x64_sys_futex+0xe5/0x100 [ 121.041700][ T3734] x64_sys_call+0x7ec/0x9a0 [ 121.046184][ T3734] do_syscall_64+0x4c/0xa0 [ 121.050587][ T3734] ? clear_bhb_loop+0x30/0x80 [ 121.055261][ T3734] ? clear_bhb_loop+0x30/0x80 [ 121.059927][ T3734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.065813][ T3734] RIP: 0033:0x7fb080f9e559 [ 121.070211][ T3734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.089810][ T3734] RSP: 002b:00007fb081eae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.098223][ T3734] RAX: ffffffffffffffda RBX: 00007fb081225fa0 RCX: 00007fb080f9e559 [ 121.106190][ T3734] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 121.114148][ T3734] RBP: 00007fb0810358b0 R08: 0000000000000000 R09: 0000000034fffffd [ 121.122108][ T3734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.130066][ T3734] R13: 00007fb081226038 R14: 00007fb081225fa0 R15: 00007ffee5b97c18 [ 121.138025][ T3734] [ 121.171936][ T3740] kvm: apic: phys broadcast and lowest prio [ 121.178252][ T3740] X.509: Couldn't decode AuthKeyIdentifier [ 121.204591][ T28] audit: type=1400 audit(2000000019.049:493): avc: denied { mount } for pid=3744 comm="syz.1.1382" name="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 121.211287][ T3745] loop1: detected capacity change from 0 to 2048 [ 121.233614][ T28] audit: type=1400 audit(2000000019.049:494): avc: denied { search } for pid=3744 comm="syz.1.1382" name="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.261910][ T3745] loop1: p3 < > [ 121.276441][ T28] audit: type=1400 audit(2000000019.119:495): avc: denied { write } for pid=3744 comm="syz.1.1382" name="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.310490][ T3755] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 121.314060][ T310] udevd[310]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 121.351049][ T28] audit: type=1400 audit(2000000019.199:496): avc: denied { read } for pid=3762 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 getty: ttyS0: read error: Resource temporarily unavailable [ 121.462309][ T3770] FAULT_INJECTION: forcing a failure. [ 121.462309][ T3770] name failslab, interval 1, probability 0, space 0, times 0 [ 121.475237][ T3770] CPU: 0 PID: 3770 Comm: syz.6.1394 Not tainted syzkaller #0 [ 121.482644][ T3770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.492691][ T3770] Call Trace: [ 121.495970][ T3770] [ 121.498885][ T3770] __dump_stack+0x21/0x24 [ 121.503202][ T3770] dump_stack_lvl+0x110/0x170 [ 121.507863][ T3770] ? __cfi_dump_stack_lvl+0x8/0x8 [ 121.510050][ T3773] X.509: Couldn't decode AuthKeyIdentifier [ 121.512871][ T3770] ? is_bpf_text_address+0x177/0x190 [ 121.523921][ T3770] ? kernel_text_address+0xa0/0xd0 [ 121.529026][ T3770] dump_stack+0x15/0x24 [ 121.533199][ T3770] should_fail_ex+0x3bf/0x510 [ 121.537856][ T3770] __should_failslab+0xac/0xf0 [ 121.542623][ T3770] should_failslab+0x9/0x20 [ 121.547110][ T3770] __kmem_cache_alloc_node+0x3d/0x2d0 [ 121.552464][ T3770] ? sidtab_sid2str_get+0x137/0x2c0 [ 121.557666][ T3770] ? sidtab_sid2str_get+0x137/0x2c0 [ 121.562848][ T3770] __kmalloc_node_track_caller+0xa1/0x1e0 [ 121.568560][ T3770] ? memcpy+0x56/0x70 [ 121.572524][ T3770] kmemdup+0x2b/0x60 [ 121.576397][ T3770] sidtab_sid2str_get+0x137/0x2c0 [ 121.581409][ T3770] security_sid_to_context_core+0x2ac/0x480 [ 121.587311][ T3770] security_sid_to_context_force+0x36/0x40 [ 121.593128][ T3770] selinux_inode_getsecurity+0x3fe/0x4a0 [ 121.598777][ T3770] ? __cfi_selinux_inode_getsecurity+0x10/0x10 [ 121.604941][ T3770] ? cap_inode_getsecurity+0xb4/0x860 [ 121.610318][ T3770] ? xattr_permission+0x45/0x540 [ 121.610624][ T3781] 9pnet_fd: Insufficient options for proto=fd [ 121.615266][ T3770] security_inode_getsecurity+0xd4/0x140 [ 121.626938][ T3770] vfs_getxattr+0x4ec/0x7d0 [ 121.631449][ T3770] ? __kmalloc_node+0xb2/0x1e0 [ 121.636220][ T3770] ? kvmalloc_node+0x2b3/0x460 [ 121.640987][ T3770] ? __cfi_vfs_getxattr+0x10/0x10 [ 121.646019][ T3770] ? check_stack_object+0x133/0x150 [ 121.651221][ T3770] ? __check_object_size+0x86/0x600 [ 121.656426][ T3770] do_getxattr+0x177/0x350 [ 121.660856][ T3770] path_getxattr+0x2d2/0x4d0 [ 121.665453][ T3770] ? setxattr+0x330/0x330 [ 121.669789][ T3770] ? fpregs_restore_userregs+0x128/0x260 [ 121.675434][ T3770] __x64_sys_getxattr+0xa1/0xb0 [ 121.680300][ T3770] x64_sys_call+0x8d3/0x9a0 [ 121.684826][ T3770] do_syscall_64+0x4c/0xa0 [ 121.689253][ T3770] ? clear_bhb_loop+0x30/0x80 [ 121.693938][ T3770] ? clear_bhb_loop+0x30/0x80 [ 121.698624][ T3770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.704521][ T3770] RIP: 0033:0x7fcaa679e559 [ 121.708937][ T3770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.728546][ T3770] RSP: 002b:00007fcaa75a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 121.736969][ T3770] RAX: ffffffffffffffda RBX: 00007fcaa6a25fa0 RCX: 00007fcaa679e559 [ 121.744955][ T3770] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 121.752942][ T3770] RBP: 00007fcaa68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 121.760923][ T3770] R10: 00000000000000eb R11: 0000000000000246 R12: 0000000000000000 [ 121.768896][ T3770] R13: 00007fcaa6a26038 R14: 00007fcaa6a25fa0 R15: 00007ffc2ad739f8 [ 121.776854][ T3770] [ 121.878348][ T3819] fuse: Bad value for 'fd' [ 121.978922][ T3837] kvm: apic: phys broadcast and lowest prio [ 121.985427][ T3842] ip_tables: iptables: counters copy to user failed while replacing table [ 121.986394][ T3837] X.509: Couldn't decode AuthKeyIdentifier [ 122.016575][ T3849] fuse: Bad value for 'user_id' [ 122.062966][ T3862] fuse: Bad value for 'fd' [ 122.173009][ T3885] device vlan2 entered promiscuous mode [ 122.178674][ T3885] device gretap0 entered promiscuous mode [ 122.194781][ T3884] device vlan2 left promiscuous mode [ 122.201637][ T3884] device gretap0 left promiscuous mode [ 122.249118][ T3896] kvm: apic: phys broadcast and lowest prio [ 122.259049][ T3899] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 122.272309][ T3896] X.509: Couldn't decode AuthKeyIdentifier [ 122.968358][ T3930] kvm: apic: phys broadcast and lowest prio [ 122.974826][ T3930] X.509: Couldn't decode AuthKeyIdentifier [ 123.061915][ T3943] overlayfs: failed to clone upperpath [ 123.063545][ T3941] erofs: (device loop6): erofs_init_device: empty device tag @ pos 0 [ 123.125349][ T3955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.296339][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 123.296352][ T28] audit: type=1400 audit(2000000021.139:521): avc: denied { execute } for pid=3982 comm="syz.6.1490" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.336928][ T3987] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 123.346974][ T3977] ip_tables: iptables: counters copy to user failed while replacing table [ 123.481417][ T4003] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=324023355 (324023355 ns) > initial count (48370223 ns). Using initial count to start timer. [ 123.539819][ T4003] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2389846725 (38237547600 ns) > initial count (26494534768 ns). Using initial count to start timer. [ 123.586436][ T4019] mmap: syz.5.1500 (4019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.795962][ T4057] FAULT_INJECTION: forcing a failure. [ 123.795962][ T4057] name failslab, interval 1, probability 0, space 0, times 0 [ 123.808656][ T4057] CPU: 1 PID: 4057 Comm: syz.3.1518 Not tainted syzkaller #0 [ 123.816034][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.826087][ T4057] Call Trace: [ 123.829349][ T4057] [ 123.832262][ T4057] __dump_stack+0x21/0x24 [ 123.836577][ T4057] dump_stack_lvl+0x110/0x170 [ 123.841235][ T4057] ? __cfi_dump_stack_lvl+0x8/0x8 [ 123.846244][ T4057] dump_stack+0x15/0x24 [ 123.850405][ T4057] should_fail_ex+0x3bf/0x510 [ 123.855065][ T4057] __should_failslab+0xac/0xf0 [ 123.859833][ T4057] should_failslab+0x9/0x20 [ 123.864319][ T4057] __kmem_cache_alloc_node+0x3d/0x2d0 [ 123.869689][ T4057] ? kvmalloc_node+0x28a/0x460 [ 123.874441][ T4057] ? kasan_save_alloc_info+0x1f/0x30 [ 123.879710][ T4057] ? kvmalloc_node+0x28a/0x460 [ 123.884454][ T4057] __kmalloc_node+0xa2/0x1e0 [ 123.889025][ T4057] kvmalloc_node+0x28a/0x460 [ 123.893594][ T4057] ? __cfi_kvmalloc_node+0x10/0x10 [ 123.898682][ T4057] ? __kasan_record_aux_stack+0xa0/0xc0 [ 123.904205][ T4057] ? alloc_fdtable+0xcd/0x2e0 [ 123.908865][ T4057] ? kmalloc_trace+0x40/0xb0 [ 123.913434][ T4057] alloc_fdtable+0x17f/0x2e0 [ 123.918007][ T4057] dup_fd+0x693/0x8c0 [ 123.921968][ T4057] ? mutex_unlock+0x8f/0x230 [ 123.926545][ T4057] __close_range+0x1bd/0x500 [ 123.931120][ T4057] ? __x64_sys_futex+0x100/0x100 [ 123.936038][ T4057] ? __cfi___close_range+0x10/0x10 [ 123.941135][ T4057] ? fpregs_restore_userregs+0x128/0x260 [ 123.946928][ T4057] __x64_sys_close_range+0x7a/0x90 [ 123.952025][ T4057] x64_sys_call+0x43b/0x9a0 [ 123.956518][ T4057] do_syscall_64+0x4c/0xa0 [ 123.960920][ T4057] ? clear_bhb_loop+0x30/0x80 [ 123.965579][ T4057] ? clear_bhb_loop+0x30/0x80 [ 123.970236][ T4057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.976115][ T4057] RIP: 0033:0x7fb080f9e559 [ 123.980515][ T4057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.000102][ T4057] RSP: 002b:00007fb081eae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 124.008501][ T4057] RAX: ffffffffffffffda RBX: 00007fb081225fa0 RCX: 00007fb080f9e559 [ 124.016456][ T4057] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 124.024502][ T4057] RBP: 00007fb0810358b0 R08: 0000000000000000 R09: 0000000000000000 [ 124.032457][ T4057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.040410][ T4057] R13: 00007fb081226038 R14: 00007fb081225fa0 R15: 00007ffee5b97c18 [ 124.048376][ T4057] [ 124.107505][ T4072] kvm: apic: phys broadcast and lowest prio [ 124.114103][ T4072] X.509: Couldn't decode AuthKeyIdentifier [ 124.298699][ T4097] set_capacity_and_notify: 2 callbacks suppressed [ 124.298717][ T4097] loop6: detected capacity change from 0 to 512 [ 124.345245][ T4099] loop6: detected capacity change from 0 to 512 [ 124.416595][ T4113] kvm: apic: phys broadcast and lowest prio [ 124.425151][ T4113] X.509: Couldn't decode AuthKeyIdentifier [ 124.521284][ T4127] loop6: detected capacity change from 0 to 512 [ 124.522825][ T28] audit: type=1400 audit(2000000022.369:522): avc: denied { getopt } for pid=4128 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.572659][ T4134] loop2: detected capacity change from 0 to 256 [ 124.648758][ T4140] kvm: apic: phys broadcast and lowest prio [ 124.655149][ T4140] X.509: Couldn't decode AuthKeyIdentifier [ 124.691355][ T4148] ./dev/sda1: Can't open blockdev [ 124.707105][ T4150] device vlan2 entered promiscuous mode [ 124.713007][ T4150] device erspan0 entered promiscuous mode [ 124.719222][ T4149] device vlan2 left promiscuous mode [ 124.724580][ T4149] device erspan0 left promiscuous mode [ 124.751961][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 124.851998][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1566'. [ 124.858345][ T4169] loop2: detected capacity change from 0 to 128 [ 124.883813][ T4172] FAULT_INJECTION: forcing a failure. [ 124.883813][ T4172] name failslab, interval 1, probability 0, space 0, times 0 [ 124.896486][ T4172] CPU: 0 PID: 4172 Comm: syz.2.1568 Not tainted syzkaller #0 [ 124.903861][ T4172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.913903][ T4172] Call Trace: [ 124.917168][ T4172] [ 124.920080][ T4172] __dump_stack+0x21/0x24 [ 124.924394][ T4172] dump_stack_lvl+0x110/0x170 [ 124.929051][ T4172] ? __cfi_dump_stack_lvl+0x8/0x8 [ 124.934060][ T4172] ? vsnprintf+0x189d/0x1990 [ 124.938651][ T4172] dump_stack+0x15/0x24 [ 124.942802][ T4172] should_fail_ex+0x3bf/0x510 [ 124.947460][ T4172] __should_failslab+0xac/0xf0 [ 124.952207][ T4172] should_failslab+0x9/0x20 [ 124.956690][ T4172] __kmem_cache_alloc_node+0x3d/0x2d0 [ 124.962043][ T4172] ? sidtab_sid2str_get+0x137/0x2c0 [ 124.967223][ T4172] ? audit_log_format+0x140/0x140 [ 124.972243][ T4172] ? kasan_save_alloc_info+0x1f/0x30 [ 124.977507][ T4172] ? sidtab_sid2str_get+0x137/0x2c0 [ 124.982684][ T4172] __kmalloc_node_track_caller+0xa1/0x1e0 [ 124.988392][ T4172] kmemdup+0x2b/0x60 [ 124.992277][ T4172] sidtab_sid2str_get+0x137/0x2c0 [ 124.997284][ T4172] security_sid_to_context_core+0x2ac/0x480 [ 125.003166][ T4172] security_sid_to_context+0x33/0x40 [ 125.008436][ T4172] avc_audit_post_callback+0x1db/0x830 [ 125.013889][ T4172] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 125.019848][ T4172] ? __cfi_audit_log_format+0x10/0x10 [ 125.025210][ T4172] ? audit_log_untrustedstring+0xe6/0x100 [ 125.030933][ T4172] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 125.036896][ T4172] common_lsm_audit+0x133f/0x1730 [ 125.041900][ T4172] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 125.047924][ T4172] ? debug_smp_processor_id+0x17/0x20 [ 125.053293][ T4172] ? call_rcu+0x5ae/0xf50 [ 125.057617][ T4172] ? __cfi_common_lsm_audit+0x10/0x10 [ 125.062973][ T4172] ? __cfi_call_rcu+0x10/0x10 [ 125.067654][ T4172] ? dequeue_task_fair+0x9ca/0x1d40 [ 125.072835][ T4172] slow_avc_audit+0x1c4/0x240 [ 125.077492][ T4172] ? __cfi_slow_avc_audit+0x10/0x10 [ 125.082678][ T4172] ? avc_denied+0x133/0x1b0 [ 125.087187][ T4172] avc_has_extended_perms+0x943/0xed0 [ 125.092565][ T4172] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 125.098469][ T4172] ? release_firmware_map_entry+0x190/0x190 [ 125.104362][ T4172] ? __futex_queue+0x175/0x300 [ 125.109126][ T4172] ? __cfi___futex_queue+0x10/0x10 [ 125.114237][ T4172] ? futex_wait_setup+0x1c0/0x260 [ 125.119265][ T4172] ? futex_wait+0x5f1/0x900 [ 125.123766][ T4172] ? __cfi_futex_wait+0x10/0x10 [ 125.128612][ T4172] ? ioctl_has_perm+0x1b8/0x4f0 [ 125.133470][ T4172] ioctl_has_perm+0x3a6/0x4f0 [ 125.138155][ T4172] ? has_cap_mac_admin+0x370/0x370 [ 125.143283][ T4172] ? do_futex+0x2e2/0x430 [ 125.147612][ T4172] selinux_file_ioctl+0x3ad/0x4c0 [ 125.152644][ T4172] ? __cfi_do_futex+0x10/0x10 [ 125.157320][ T4172] ? copy_user_enhanced_fast_string+0x29/0x40 [ 125.163387][ T4172] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 125.168943][ T4172] ? __fget_files+0x2d1/0x330 [ 125.173623][ T4172] security_file_ioctl+0x85/0xc0 [ 125.178569][ T4172] ? _end+0x777da03f/0x0 [ 125.182811][ T4172] ? _end+0x777da03f/0x0 [ 125.187037][ T4172] __se_sys_ioctl+0x53/0x1b0 [ 125.191606][ T4172] ? fpregs_restore_userregs+0x128/0x260 [ 125.197239][ T4172] __x64_sys_ioctl+0x7b/0x90 [ 125.201909][ T4172] x64_sys_call+0x58b/0x9a0 [ 125.206394][ T4172] do_syscall_64+0x4c/0xa0 [ 125.210810][ T4172] ? clear_bhb_loop+0x30/0x80 [ 125.215466][ T4172] ? clear_bhb_loop+0x30/0x80 [ 125.220119][ T4172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.225989][ T4172] RIP: 0033:0x7f019ad9e559 [ 125.230381][ T4172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.249972][ T4172] RSP: 002b:00007f019bbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.258379][ T4172] RAX: ffffffffffffffda RBX: 00007f019b025fa0 RCX: 00007f019ad9e559 [ 125.266334][ T4172] RDX: ffffffffff60003f RSI: 0000000000004c80 RDI: 0000000000000004 [ 125.274285][ T4172] RBP: 00007f019ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 125.282241][ T4172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.290194][ T4172] R13: 00007f019b026038 R14: 00007f019b025fa0 R15: 00007fff1b426d28 [ 125.298164][ T4172] ? _end+0x777da03f/0x0 [ 125.302390][ T4172] [ 125.310803][ T28] audit: type=1400 audit(2000000022.729:523): avc: denied { ioctl } for pid=4171 comm="syz.2.1568" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tsid=96 tclass=chr_file permissive=1 [ 125.339084][ T4179] FAULT_INJECTION: forcing a failure. [ 125.339084][ T4179] name failslab, interval 1, probability 0, space 0, times 0 [ 125.351815][ T4179] CPU: 1 PID: 4179 Comm: syz.3.1570 Not tainted syzkaller #0 [ 125.359197][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.369260][ T4179] Call Trace: [ 125.372546][ T4179] [ 125.372560][ T4179] __dump_stack+0x21/0x24 [ 125.379802][ T4179] dump_stack_lvl+0x110/0x170 [ 125.384505][ T4179] ? __cfi_dump_stack_lvl+0x8/0x8 [ 125.389544][ T4179] dump_stack+0x15/0x24 [ 125.393700][ T4179] should_fail_ex+0x3bf/0x510 [ 125.398547][ T4179] ? __alloc_file+0x28/0x2a0 [ 125.403141][ T4179] __should_failslab+0xac/0xf0 [ 125.407906][ T4179] should_failslab+0x9/0x20 [ 125.412394][ T4179] kmem_cache_alloc+0x3b/0x320 [ 125.417155][ T4179] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.422343][ T4179] __alloc_file+0x28/0x2a0 [ 125.426753][ T4179] alloc_empty_file+0x97/0x180 [ 125.431508][ T4179] alloc_file+0x59/0x600 [ 125.435743][ T4179] ? _raw_spin_unlock+0x4c/0x70 [ 125.440585][ T4179] alloc_file_pseudo+0x180/0x200 [ 125.445513][ T4179] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 125.450958][ T4179] ? _raw_spin_unlock+0x4c/0x70 [ 125.455800][ T4179] ? alloc_fd+0x4c1/0x570 [ 125.460113][ T4179] sock_alloc_file+0xba/0x270 [ 125.464778][ T4179] __sys_socket+0x138/0x1a0 [ 125.469268][ T4179] __x64_sys_socket+0x7a/0x90 [ 125.473930][ T4179] x64_sys_call+0x449/0x9a0 [ 125.478427][ T4179] do_syscall_64+0x4c/0xa0 [ 125.482833][ T4179] ? clear_bhb_loop+0x30/0x80 [ 125.487497][ T4179] ? clear_bhb_loop+0x30/0x80 [ 125.492160][ T4179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.498036][ T4179] RIP: 0033:0x7fb080f9e559 [ 125.502442][ T4179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.522033][ T4179] RSP: 002b:00007fb081eae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 125.530431][ T4179] RAX: ffffffffffffffda RBX: 00007fb081225fa0 RCX: 00007fb080f9e559 [ 125.538386][ T4179] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 125.546428][ T4179] RBP: 00007fb0810358b0 R08: 0000000000000000 R09: 0000000000000000 [ 125.554378][ T4179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.562332][ T4179] R13: 00007fb081226038 R14: 00007fb081225fa0 R15: 00007ffee5b97c18 [ 125.570296][ T4179] [ 125.580790][ T4187] FAULT_INJECTION: forcing a failure. [ 125.580790][ T4187] name failslab, interval 1, probability 0, space 0, times 0 [ 125.593520][ T4187] CPU: 1 PID: 4187 Comm: syz.2.1572 Not tainted syzkaller #0 [ 125.600934][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.610980][ T4187] Call Trace: [ 125.614244][ T4187] [ 125.617159][ T4187] __dump_stack+0x21/0x24 [ 125.621488][ T4187] dump_stack_lvl+0x110/0x170 [ 125.626151][ T4187] ? __cfi_dump_stack_lvl+0x8/0x8 [ 125.631166][ T4187] dump_stack+0x15/0x24 [ 125.635315][ T4187] should_fail_ex+0x3bf/0x510 [ 125.639982][ T4187] __should_failslab+0xac/0xf0 [ 125.644733][ T4187] should_failslab+0x9/0x20 [ 125.649223][ T4187] __kmem_cache_alloc_node+0x3d/0x2d0 [ 125.654586][ T4187] ? do_inotify_init+0xb4/0x4a0 [ 125.659420][ T4187] ? do_inotify_init+0xb4/0x4a0 [ 125.664256][ T4187] kmalloc_trace+0x29/0xb0 [ 125.668662][ T4187] do_inotify_init+0xb4/0x4a0 [ 125.673326][ T4187] __x64_sys_inotify_init1+0x37/0x40 [ 125.678601][ T4187] x64_sys_call+0x354/0x9a0 [ 125.683087][ T4187] do_syscall_64+0x4c/0xa0 [ 125.687493][ T4187] ? clear_bhb_loop+0x30/0x80 [ 125.692154][ T4187] ? clear_bhb_loop+0x30/0x80 [ 125.696813][ T4187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.702688][ T4187] RIP: 0033:0x7f019ad9e559 [ 125.707091][ T4187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.726681][ T4187] RSP: 002b:00007f019bbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 125.735080][ T4187] RAX: ffffffffffffffda RBX: 00007f019b025fa0 RCX: 00007f019ad9e559 [ 125.743032][ T4187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 125.750986][ T4187] RBP: 00007f019ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 125.758940][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.766892][ T4187] R13: 00007f019b026038 R14: 00007f019b025fa0 R15: 00007fff1b426d28 [ 125.774881][ T4187] [ 125.835131][ T28] audit: type=1326 audit(2000000023.679:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.2.1579" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f019ad9e559 code=0x0 [ 125.899763][ T28] audit: type=1400 audit(2000000023.749:525): avc: denied { read } for pid=4213 comm="syz.3.1585" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 125.995749][ T4232] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 126.001573][ T28] audit: type=1400 audit(2000000023.839:526): avc: denied { sys_module } for pid=4233 comm="syz.5.1593" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 126.063107][ T4242] 9pnet_fd: Insufficient options for proto=fd [ 126.098981][ T4249] device gretap1 entered promiscuous mode [ 126.129109][ T4257] FAULT_INJECTION: forcing a failure. [ 126.129109][ T4257] name failslab, interval 1, probability 0, space 0, times 0 [ 126.141905][ T4257] CPU: 1 PID: 4257 Comm: syz.3.1604 Not tainted syzkaller #0 [ 126.149290][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.159348][ T4257] Call Trace: [ 126.162633][ T4257] [ 126.164296][ T4265] overlayfs: failed to clone upperpath [ 126.165564][ T4257] __dump_stack+0x21/0x24 [ 126.171123][ T28] audit: type=1400 audit(2000000023.999:527): avc: denied { remount } for pid=4264 comm="syz.5.1608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.175311][ T4257] dump_stack_lvl+0x110/0x170 [ 126.199597][ T4257] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.204609][ T4257] ? avc_has_perm+0x163/0x250 [ 126.209271][ T4257] dump_stack+0x15/0x24 [ 126.213409][ T4257] should_fail_ex+0x3bf/0x510 [ 126.218067][ T4257] __should_failslab+0xac/0xf0 [ 126.222815][ T4257] should_failslab+0x9/0x20 [ 126.227301][ T4257] kmem_cache_alloc_node+0x42/0x330 [ 126.232481][ T4257] ? alloc_io_context+0x2d/0x280 [ 126.237399][ T4257] ? __cfi__raw_spin_lock+0x10/0x10 [ 126.242577][ T4257] alloc_io_context+0x2d/0x280 [ 126.247334][ T4257] set_task_ioprio+0x1ed/0x340 [ 126.252096][ T4257] __se_sys_ioprio_set+0x2ea/0x740 [ 126.257192][ T4257] __x64_sys_ioprio_set+0x7b/0x90 [ 126.262196][ T4257] x64_sys_call+0x6fe/0x9a0 [ 126.266678][ T4257] do_syscall_64+0x4c/0xa0 [ 126.271075][ T4257] ? clear_bhb_loop+0x30/0x80 [ 126.275728][ T4257] ? clear_bhb_loop+0x30/0x80 [ 126.280386][ T4257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.286257][ T4257] RIP: 0033:0x7fb080f9e559 [ 126.290647][ T4257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.310326][ T4257] RSP: 002b:00007fb081eae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 126.318714][ T4257] RAX: ffffffffffffffda RBX: 00007fb081225fa0 RCX: 00007fb080f9e559 [ 126.326666][ T4257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 126.334614][ T4257] RBP: 00007fb0810358b0 R08: 0000000000000000 R09: 0000000000000000 [ 126.342561][ T4257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.350508][ T4257] R13: 00007fb081226038 R14: 00007fb081225fa0 R15: 00007ffee5b97c18 [ 126.358465][ T4257] [ 126.385543][ T4270] device ip6gre1 entered promiscuous mode [ 126.392372][ T4268] loop3: detected capacity change from 0 to 512 [ 126.421254][ T4276] loop6: detected capacity change from 0 to 128 [ 126.450707][ T28] audit: type=1400 audit(2000000024.299:528): avc: denied { mounton } for pid=4275 comm="syz.6.1614" path="/143/file0/file0" dev="loop6" ino=1048746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 126.480891][ T4286] loop6: detected capacity change from 0 to 128 [ 126.624574][ T4321] overlayfs: failed to clone upperpath [ 126.642498][ T4325] ./dev/sda1: Can't open blockdev [ 126.916510][ T4387] ip_tables: iptables: counters copy to user failed while replacing table [ 126.941639][ T28] audit: type=1400 audit(2000000024.789:529): avc: denied { setattr } for pid=4391 comm="syz.2.1665" name="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.038459][ T4407] 9pnet: Unknown protocol version 9 [ 127.322392][ T4416] loop2: detected capacity change from 0 to 128 [ 127.487522][ T4432] loop6: detected capacity change from 0 to 8192 [ 127.512421][ T4432] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.535059][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.554193][ T4432] FAT-fs (loop6): Filesystem has been set read-only [ 127.561101][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.578456][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.587289][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.596275][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.621325][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.638491][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.657416][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.669452][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.688563][ T4432] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 127.688718][ T4444] ip_tables: iptables: counters copy to user failed while replacing table [ 127.772623][ T4444] ip_tables: iptables: counters copy to user failed while replacing table [ 127.843923][ T28] audit: type=1400 audit(2000000025.689:530): avc: denied { view } for pid=4452 comm="syz.3.1689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 127.894937][ T4449] loop6: p1 < > p2 p3 < > p4 < p5 > [ 127.900572][ T4449] loop6: partition table partially beyond EOD, truncated [ 127.908097][ T4457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 127.914485][ T4449] loop6: p1 start 3405774849 is beyond EOD, truncated [ 127.927237][ T4449] loop6: p3 start 4225 is beyond EOD, truncated [ 127.971073][ T4467] binfmt_misc: register: failed to install interpreter file ./file1 [ 128.054945][ T4482] 9pnet: p9_errstr2errno: server reported unknown error # [ 128.054945][ T4482] \,7͈^01777777777777777777777 [ 128.056516][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1703'. [ 128.077186][ T4483] netlink: 30 bytes leftover after parsing attributes in process `syz.6.1703'. [ 128.259677][ T4500] X.509: Couldn't decode AuthKeyIdentifier [ 128.483652][ T4521] X.509: Couldn't decode AuthKeyIdentifier [ 128.557189][ T28] audit: type=1400 audit(2000000026.399:531): avc: denied { read write } for pid=4533 comm="syz.2.1726" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 128.586136][ T28] audit: type=1400 audit(2000000026.429:532): avc: denied { open } for pid=4533 comm="syz.2.1726" path="/369/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 128.610530][ T28] audit: type=1400 audit(2000000026.429:533): avc: denied { ioctl } for pid=4533 comm="syz.2.1726" path="/369/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 128.615359][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.642658][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.650594][ T4532] device bridge_slave_0 entered promiscuous mode [ 128.657684][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.664760][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.672061][ T4532] device bridge_slave_1 entered promiscuous mode [ 128.709047][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.716088][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.723900][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.730940][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.749074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.756605][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.763904][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.772935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.781725][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.788800][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.807331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.821467][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.828558][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.832007][ T4548] X.509: Couldn't decode AuthKeyIdentifier [ 128.843591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.854500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.878107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.891126][ T4532] device veth0_vlan entered promiscuous mode [ 128.899533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.908263][ T4556] overlayfs: failed to clone upperpath [ 128.914240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.921866][ T4558] ip_tables: iptables: counters copy to user failed while replacing table [ 128.929264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.954482][ T4560] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 128.969242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.984587][ T28] audit: type=1400 audit(2000000026.829:534): avc: denied { write } for pid=4565 comm="syz.2.1739" name="file1" dev="tmpfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.997179][ T4532] device veth1_macvtap entered promiscuous mode [ 129.013424][ T4566] 9pnet_fd: p9_fd_create_unix (4566): problem connecting socket: ./file0/file1: -111 [ 129.016162][ T4570] X.509: Couldn't decode AuthKeyIdentifier [ 129.045642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.061760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.084400][ T28] audit: type=1400 audit(2000000026.929:535): avc: denied { watch } for pid=4579 comm="syz.5.1745" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 129.113180][ T4584] ip_tables: iptables: counters copy to user failed while replacing table [ 129.124323][ T438] kernel read not supported for file [userfaultfd] (pid: 438 comm: kworker/0:5) [ 129.133515][ T28] audit: type=1400 audit(2000000026.969:536): avc: denied { read } for pid=438 comm="kworker/0:5" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56701 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.205409][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 129.221081][ T4604] netlink: 30 bytes leftover after parsing attributes in process `syz.1.1755'. [ 129.348761][ T28] audit: type=1400 audit(2000000027.189:537): avc: denied { mounton } for pid=4634 comm="syz.1.1770" path="/syzcgroup/net/syz1/cgroup.procs" dev="cgroup" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 129.358982][ T4637] X.509: Couldn't decode AuthKeyIdentifier [ 129.384638][ T4639] set_capacity_and_notify: 2 callbacks suppressed [ 129.384651][ T4639] loop1: detected capacity change from 0 to 256 [ 129.496138][ T4662] overlayfs: failed to clone upperpath [ 129.512260][ T4665] ip_tables: iptables: counters copy to user failed while replacing table [ 129.600054][ T4681] loop1: detected capacity change from 0 to 128 [ 129.605721][ T4683] overlayfs: failed to clone lowerpath [ 129.610819][ T4681] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 129.620434][ T4681] FAT-fs (loop1): Filesystem has been set read-only [ 129.622015][ T4683] overlayfs: failed to clone lowerpath [ 129.656411][ T4688] ================================================================== [ 129.664510][ T4688] BUG: KASAN: use-after-free in sk_skb_adjust_room+0x34e/0x610 [ 129.672075][ T4688] Read of size 8 at addr ffff888120eb9448 by task syz.5.1795/4688 [ 129.679886][ T4688] [ 129.682207][ T4688] CPU: 1 PID: 4688 Comm: syz.5.1795 Not tainted syzkaller #0 [ 129.689578][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.699630][ T4688] Call Trace: [ 129.702910][ T4688] [ 129.705838][ T4688] __dump_stack+0x21/0x24 [ 129.710181][ T4688] dump_stack_lvl+0x110/0x170 [ 129.714871][ T4688] ? __cfi_dump_stack_lvl+0x8/0x8 [ 129.719910][ T4688] ? pskb_expand_head+0x436/0x12b0 [ 129.725039][ T4688] ? sk_skb_adjust_room+0x34e/0x610 [ 129.730246][ T4688] print_address_description+0x71/0x200 [ 129.735806][ T4688] print_report+0x4a/0x60 [ 129.740145][ T4688] kasan_report+0x122/0x150 [ 129.744659][ T4688] ? sk_skb_adjust_room+0x34e/0x610 [ 129.749870][ T4688] __asan_report_load8_noabort+0x14/0x20 [ 129.755503][ T4688] sk_skb_adjust_room+0x34e/0x610 [ 129.760537][ T4688] bpf_prog_e15ab8bd9cea3c06+0x19/0x20 [ 129.765996][ T4688] sk_psock_verdict_recv+0x1c8/0x7b0 [ 129.771269][ T4688] ? skb_recv_datagram+0x140/0x180 [ 129.776363][ T4688] unix_stream_read_skb+0x12e/0x2f0 [ 129.781541][ T4688] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 129.787420][ T4688] ? __cfi_sk_psock_verdict_recv+0x10/0x10 [ 129.793208][ T4688] ? __cfi_unix_stream_read_skb+0x10/0x10 [ 129.798908][ T4688] ? __kasan_check_write+0x14/0x20 [ 129.803998][ T4688] ? _raw_spin_lock+0x94/0xf0 [ 129.808662][ T4688] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 129.814449][ T4688] sk_psock_verdict_data_ready+0xaf/0x1d0 [ 129.820149][ T4688] unix_stream_sendmsg+0x631/0xa80 [ 129.825240][ T4688] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 129.830849][ T4688] ? security_socket_sendmsg+0x93/0xb0 [ 129.836290][ T4688] __sys_sendto+0x4ac/0x660 [ 129.840778][ T4688] ? __cfi___sys_sendto+0x10/0x10 [ 129.845784][ T4688] ? __this_cpu_preempt_check+0x13/0x20 [ 129.851315][ T4688] ? xfd_validate_state+0x70/0x150 [ 129.856410][ T4688] ? __kasan_check_write+0x14/0x20 [ 129.861500][ T4688] __x64_sys_sendto+0xe5/0x100 [ 129.866250][ T4688] x64_sys_call+0x83/0x9a0 [ 129.870648][ T4688] do_syscall_64+0x4c/0xa0 [ 129.875044][ T4688] ? clear_bhb_loop+0x30/0x80 [ 129.879697][ T4688] ? clear_bhb_loop+0x30/0x80 [ 129.884353][ T4688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.890225][ T4688] RIP: 0033:0x7f6a2ad9e559 [ 129.894618][ T4688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.914202][ T4688] RSP: 002b:00007f6a2bd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 129.922626][ T4688] RAX: ffffffffffffffda RBX: 00007f6a2b025fa0 RCX: 00007f6a2ad9e559 [ 129.930590][ T4688] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 129.938539][ T4688] RBP: 00007f6a2ae358b0 R08: 0000000000000000 R09: 0000000000000000 [ 129.946492][ T4688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.954455][ T4688] R13: 00007f6a2b026038 R14: 00007f6a2b025fa0 R15: 00007ffc5ec854f8 [ 129.962412][ T4688] [ 129.965413][ T4688] [ 129.967713][ T4688] Allocated by task 4095: [ 129.972020][ T4688] kasan_set_track+0x4b/0x70 [ 129.976596][ T4688] kasan_save_alloc_info+0x1f/0x30 [ 129.981683][ T4688] __kasan_slab_alloc+0x72/0x80 [ 129.986514][ T4688] slab_post_alloc_hook+0x4f/0x2d0 [ 129.991605][ T4688] kmem_cache_alloc+0x166/0x320 [ 129.996440][ T4688] sk_prot_alloc+0x5f/0x320 [ 130.000942][ T4688] sk_alloc+0x3b/0x460 [ 130.005013][ T4688] unix_create1+0xb8/0x710 [ 130.009406][ T4688] unix_stream_connect+0x1cd/0xda0 [ 130.014493][ T4688] __sys_connect+0x3da/0x460 [ 130.019060][ T4688] __x64_sys_connect+0x7a/0x90 [ 130.023804][ T4688] x64_sys_call+0x88d/0x9a0 [ 130.028282][ T4688] do_syscall_64+0x4c/0xa0 [ 130.032679][ T4688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.038549][ T4688] [ 130.040848][ T4688] Freed by task 4095: [ 130.044799][ T4688] kasan_set_track+0x4b/0x70 [ 130.049368][ T4688] kasan_save_free_info+0x2b/0x40 [ 130.054370][ T4688] ____kasan_slab_free+0x132/0x180 [ 130.059455][ T4688] __kasan_slab_free+0x11/0x20 [ 130.064194][ T4688] slab_free_freelist_hook+0xc2/0x190 [ 130.069556][ T4688] kmem_cache_free+0x12d/0x300 [ 130.074297][ T4688] __sk_destruct+0x4b4/0x5e0 [ 130.078867][ T4688] __sk_free+0x30a/0x400 [ 130.083092][ T4688] sk_free+0x54/0x90 [ 130.086965][ T4688] unix_release_sock+0xb6d/0xe60 [ 130.091882][ T4688] unix_stream_connect+0x65f/0xda0 [ 130.096968][ T4688] __sys_connect+0x3da/0x460 [ 130.101540][ T4688] __x64_sys_connect+0x7a/0x90 [ 130.106281][ T4688] x64_sys_call+0x88d/0x9a0 [ 130.110761][ T4688] do_syscall_64+0x4c/0xa0 [ 130.115160][ T4688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.121041][ T4688] [ 130.123359][ T4688] The buggy address belongs to the object at ffff888120eb9400 [ 130.123359][ T4688] which belongs to the cache UNIX-STREAM of size 1152 [ 130.137478][ T4688] The buggy address is located 72 bytes inside of [ 130.137478][ T4688] 1152-byte region [ffff888120eb9400, ffff888120eb9880) [ 130.150737][ T4688] [ 130.153044][ T4688] The buggy address belongs to the physical page: [ 130.159441][ T4688] page:ffffea000483ae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120eb8 [ 130.169654][ T4688] head:ffffea000483ae00 order:2 compound_mapcount:0 compound_pincount:0 [ 130.177955][ T4688] flags: 0x4000000000010200(slab|head|zone=1) [ 130.184010][ T4688] raw: 4000000000010200 ffffea00043e9500 dead000000000004 ffff888108c7ef00 [ 130.192659][ T4688] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 130.201216][ T4688] page dumped because: kasan: bad access detected [ 130.207613][ T4688] page_owner tracks the page as allocated [ 130.213303][ T4688] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 194, tgid 194 (sshd), ts 20432159587, free_ts 0 [ 130.232898][ T4688] post_alloc_hook+0x1f5/0x210 [ 130.237667][ T4688] prep_new_page+0x1c/0x110 [ 130.242150][ T4688] get_page_from_freelist+0x2ca9/0x2d20 [ 130.247672][ T4688] __alloc_pages+0x1fa/0x610 [ 130.252240][ T4688] alloc_slab_page+0x6e/0xf0 [ 130.256812][ T4688] new_slab+0x98/0x3e0 [ 130.260858][ T4688] ___slab_alloc+0x70f/0xb70 [ 130.265430][ T4688] __slab_alloc+0x5e/0xa0 [ 130.269739][ T4688] kmem_cache_alloc+0x1a8/0x320 [ 130.274566][ T4688] sk_prot_alloc+0x5f/0x320 [ 130.279065][ T4688] sk_alloc+0x3b/0x460 [ 130.283122][ T4688] unix_create1+0xb8/0x710 [ 130.287514][ T4688] unix_create+0x149/0x200 [ 130.291911][ T4688] __sock_create+0x39e/0x7c0 [ 130.296479][ T4688] __sys_socketpair+0x1a1/0x5b0 [ 130.301309][ T4688] __x64_sys_socketpair+0x9b/0xb0 [ 130.306317][ T4688] page_owner free stack trace missing [ 130.311660][ T4688] [ 130.313979][ T4688] Memory state around the buggy address: [ 130.319584][ T4688] ffff888120eb9300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.327627][ T4688] ffff888120eb9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.335673][ T4688] >ffff888120eb9400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.343709][ T4688] ^ [ 130.350098][ T4688] ffff888120eb9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.358140][ T4688] ffff888120eb9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.366175][ T4688] ================================================================== [ 130.388212][ T4688] Disabling lock debugging due to kernel taint