last executing test programs: 11.329019743s ago: executing program 1 (id=1393): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000090542b3c5917422254e9adfa195e81bfb02520127ed6d02a271b0561eb71d2c75f68819cf61a0dcedeb162dc7dcd9ecc30c9c41292612595c13de82737", @ANYRES16=r2, @ANYBLOB="010026bd7000475f00002e0000000a0001007770616e300000000c0005000200aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) mount$9p_tcp(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0), 0x2, &(0x7f00000014c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}]}}) 10.21127964s ago: executing program 1 (id=1404): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x7, @perf_bp={0x0, 0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r5 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) 6.853368362s ago: executing program 1 (id=1424): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sync() sync() sync() r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x20000400) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@local}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) syz_io_uring_setup(0x2d6d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xdf3, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r5, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) 5.761403829s ago: executing program 3 (id=1435): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a", 0x5, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5.562949044s ago: executing program 3 (id=1436): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'rose0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1bb5818a4d175af}, 0x40) socket$packet(0x11, 0x3, 0x300) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b05d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b0e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000000d00)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000000ac00000000000000"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000540)="43210098") 3.625396441s ago: executing program 3 (id=1443): syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.612521421s ago: executing program 1 (id=1444): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x7, @perf_bp={0x0, 0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r6 = socket(0x1e, 0x4, 0x0) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r6], 0x14) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000040), &(0x7f0000000640)}, 0x20) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 3.384920497s ago: executing program 3 (id=1446): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x3}, &(0x7f0000000140)=0x8) setreuid(0x0, 0xee00) setpriority(0x2, 0x0, 0x8) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) setxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:klogd_var_run_t:s0\x00', 0x25, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400841, 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x143842) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000080)=""/232) chdir(&(0x7f0000000000)='./file0\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 3.208724721s ago: executing program 2 (id=1447): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a", 0x5, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.005268906s ago: executing program 2 (id=1449): socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa670000000000000021"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a", 0x5, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f00000041c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x9200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.950866848s ago: executing program 3 (id=1450): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sync() sync() sync() r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x20000400) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@local}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa4}}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) syz_io_uring_setup(0x2d6d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xdf3, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r5, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) 2.822536091s ago: executing program 1 (id=1452): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x84e8, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES16, @ANYRES16], 0x9, 0x260, &(0x7f0000000a80)="$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") process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) mlockall(0x7) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair(0x23, 0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, 0x0, 0x0) 2.730882553s ago: executing program 0 (id=1453): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@bh, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@resgid}, {@noblock_validity}, {@data_writeback}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") 2.701242214s ago: executing program 2 (id=1454): socket$nl_netfilter(0x10, 0x3, 0xc) 2.568497667s ago: executing program 2 (id=1456): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff", 0x23}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x445, 0x0, &(0x7f0000000880)="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", 0x0, 0x3ff, 0x0, 0x95, 0x11, &(0x7f0000001980)="100d3ed3c2e94a82021a46c55272ea983b8ad8479baba0a68e1ffcbdbcd2850bf14cd4076eb529edaf1633cbdc8f439a21d0e62552984f5c045cb4943f676a825ca5e30113becb3e4f47e3e2a3be3d94f0c13671f67d5a4957fbdcc0a2f3a9673d48fb69416edfad40a51db8d7098df20cb1fe3c5bd370514eff5b2e23e2b50697d01aea251ef1f4f36ba37a08fabb4eadbc8efc77", &(0x7f0000001a40)="b292847ba0b07610ad15deb2aaec03906f", 0x5, 0x0, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002f00)={0x53, 0xfffffffffffffffb, 0xb2, 0x10, @scatter={0xa, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/135, 0x87}, {&(0x7f0000002c00)=""/95, 0x5f}, {&(0x7f0000002c80)=""/104, 0x68}]}, &(0x7f0000002dc0)="d7d573e9a63eee7960de3cac65a232fc495f7b73b5949276990189c46a474ed2a334f9fb54b2baf6fba16a1b4e9d306fde4508d08347b266608623e702847f2667b7f8aef1b239c7b20e999e0d1cbabfe006027a68b8b43eff142fb351de24053895f0c56c95bf9f3af80aca9f7d28b2a6610f6d898d9d14648376d76106ac4a5523acb352891ff8c809a6645b4c0c8de1835762e59d1bfabffc6d026a3183cedb197cbad5422fbd7c7b05ee4e667ba2e4b3", &(0x7f0000002e80)=""/54, 0xff, 0x10002, 0x3, &(0x7f0000002ec0)}) fallocate(r3, 0x10, 0x10007, 0x10001) 2.550448427s ago: executing program 0 (id=1457): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000b80)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x200000d, &(0x7f0000000440)={[], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fowner_gt={'fowner>', r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x36, 0x33, 0x35, 0x31, 0x31, 0x66], 0x2d, [0x65, 0x36, 0x63, 0x37], 0x2d, [0x61, 0x31, 0x32, 0x38], 0x2d, [0x35, 0x32, 0x0, 0x62], 0x2d, [0x38, 0x36, 0x35, 0x39, 0x62, 0x33, 0x33, 0x64]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, '\\]:'}}, {@subj_type={'subj_type', 0x3d, '\n\xe7\xd3_\b\xa0.\x8f\xf7\xa7'}}, {@uid_gt={'uid>', r0}}]}, 0x2, 0x4fa, &(0x7f00000013c0)="$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") statx(0xffffffffffffff9c, 0x0, 0x1000, 0x56159817211d7953, &(0x7f0000002500)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x2000006}]}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "fcdb54", 0x2c, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x1, 0xb, 0x1, 0x2, 0x7, 0x0, 0x3, 0xc, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x4e20, 0x4e21}, 0x3, 0x2}, 0x1, 0x3}}}}}}}}}, 0x0) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 2.45406256s ago: executing program 0 (id=1458): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="040000000000") 2.387035251s ago: executing program 0 (id=1459): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a", 0x5, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.374612382s ago: executing program 4 (id=1460): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, 0x0) r5 = semget(0x3, 0x2, 0x426) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000081b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x3, 0x8]) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000000a00)="c7", 0x1) sendfile(r8, r7, 0x0, 0x2fffe) sendfile(r8, r7, 0x0, 0x7ffff000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000340), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.355244702s ago: executing program 2 (id=1461): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x20000044) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) setxattr(0x0, 0x0, 0x0, 0x0, 0x2) 2.338014823s ago: executing program 0 (id=1462): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x800000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r2, 0x29, 0x15, &(0x7f00000000c0), 0xb9) fchdir(r1) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4400c0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x4, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r6, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_VERSION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x7c}}, 0x24004001) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xfffffffffffffcf7) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000100)=@rnullb, r7, &(0x7f0000000400)) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000080)={0x0, 0x4f, 0x900, 0x8001, 0x1}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) socket(0x10, 0x3, 0x0) 2.200837136s ago: executing program 1 (id=1463): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x7, @perf_bp={0x0, 0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r6 = socket(0x1e, 0x4, 0x0) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r6], 0x14) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f0000000040), &(0x7f0000000640)}, 0x20) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 2.200571536s ago: executing program 2 (id=1464): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000090542b3c5917422254e9adfa195e81bfb02520127ed6d02a271b0561eb71d2c75f68819cf61a0dcedeb162dc7dcd9ecc30c9c41292612595c13de82737", @ANYRES16=r2, @ANYBLOB="010026bd7000475f00002e0000000a0001007770616e300000000c0005000200aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) mount$9p_tcp(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0), 0x2, &(0x7f00000014c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}]}}) 2.199843746s ago: executing program 0 (id=1465): socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa670000000000000021"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a", 0x5, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f00000041c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x9200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.341931897s ago: executing program 4 (id=1466): socket(0x3, 0x5, 0x4131) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x4, 0x0, 0x0, 0x5, 0x89, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x38, 0x5}, 0x1040, 0x7, 0x101, 0x1, 0x4, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x30, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.298330138s ago: executing program 4 (id=1467): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') writev(r0, &(0x7f00000000c0), 0x0) 1.248658799s ago: executing program 4 (id=1468): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000b80)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x200000d, &(0x7f0000000440)={[], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fowner_gt={'fowner>', r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x36, 0x33, 0x35, 0x31, 0x31, 0x66], 0x2d, [0x65, 0x36, 0x63, 0x37], 0x2d, [0x61, 0x31, 0x32, 0x38], 0x2d, [0x35, 0x32, 0x0, 0x62], 0x2d, [0x38, 0x36, 0x35, 0x39, 0x62, 0x33, 0x33, 0x64]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, '\\]:'}}, {@subj_type={'subj_type', 0x3d, '\n\xe7\xd3_\b\xa0.\x8f\xf7\xa7'}}, {@uid_gt={'uid>', r0}}]}, 0x2, 0x4fa, &(0x7f00000013c0)="$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") statx(0xffffffffffffff9c, 0x0, 0x1000, 0x56159817211d7953, &(0x7f0000002500)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x2000006}]}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "fcdb54", 0x2c, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x1, 0xb, 0x1, 0x2, 0x7, 0x0, 0x3, 0xc, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x4e20, 0x4e21}, 0x3, 0x2}, 0x1, 0x3}}}}}}}}}, 0x0) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 1.247699339s ago: executing program 4 (id=1469): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="040000000000") 1.22091273s ago: executing program 4 (id=1470): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write(r0, &(0x7f0000000000)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") r1 = syz_io_uring_complete(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000540)=0x4) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000000080)=""/51, 0x33}, {0x0}], 0x2, 0x3, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x204801, 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x500, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 0s ago: executing program 3 (id=1471): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, 0x0) r5 = semget(0x3, 0x2, 0x426) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000081b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x3, 0x8]) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000000a00)="c7", 0x1) sendfile(r8, r7, 0x0, 0x2fffe) sendfile(r8, r7, 0x0, 0x7ffff000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000340), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): filesystem error report for type 5 error -117 [ 197.661789][ T6816] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1001: invalid indirect mapped block 3 (level 2) [ 197.661872][ T6816] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.662217][ T6816] EXT4-fs (loop4): 1 orphan inode deleted [ 197.662231][ T6816] EXT4-fs (loop4): 1 truncate cleaned up [ 197.664372][ T6816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.967854][ T29] audit: type=1400 audit(1788328654.269:1335): avc: denied { write } for pid=6815 comm="syz.4.1001" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.167295][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.167417][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.319139][ T6835] ext4: Unknown parameter 'func' [ 199.368152][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.607376][ T6848] set_capacity_and_notify: 1 callbacks suppressed [ 199.607407][ T6848] loop2: detected capacity change from 0 to 512 [ 199.909854][ T6859] FAULT_INJECTION: forcing a failure. [ 199.909854][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 199.909896][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.3.1014 Not tainted syzkaller #0 PREEMPT(lazy) [ 199.909928][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.910020][ T6859] Call Trace: [ 199.910029][ T6859] [ 199.910038][ T6859] __dump_stack+0x1d/0x30 [ 199.910072][ T6859] dump_stack_lvl+0x95/0xd0 [ 199.910126][ T6859] dump_stack+0x15/0x1b [ 199.910152][ T6859] should_fail_ex+0x262/0x280 [ 199.910177][ T6859] ? security_inode_alloc+0x37/0x100 [ 199.910261][ T6859] should_failslab+0x8c/0xb0 [ 199.910331][ T6859] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 199.910380][ T6859] ? security_inode_alloc+0x37/0x100 [ 199.910411][ T6859] security_inode_alloc+0x37/0x100 [ 199.910536][ T6859] inode_init_always_gfp+0x495/0x4e0 [ 199.910714][ T6859] alloc_inode+0x58/0x170 [ 199.910809][ T6859] new_inode+0x1d/0xe0 [ 199.910902][ T6859] devpts_pty_new+0x60/0x320 [ 199.911036][ T6859] ? __list_add_valid_or_report+0x38/0xe0 [ 199.911229][ T6859] ptmx_open+0x17e/0x240 [ 199.911321][ T6859] chrdev_open+0x2eb/0x3a0 [ 199.911436][ T6859] do_dentry_open+0x49f/0xa60 [ 199.911557][ T6859] ? __pfx_chrdev_open+0x10/0x10 [ 199.911661][ T6859] ? may_open+0x1ee/0x350 [ 199.911832][ T6859] vfs_open+0x37/0x1e0 [ 199.911903][ T6859] path_openat+0xc01/0x10d0 [ 199.912007][ T6859] do_file_open+0x16c/0x290 [ 199.912175][ T6859] do_sys_openat2+0xa0/0x130 [ 199.912261][ T6859] __x64_sys_openat+0xf2/0x120 [ 199.912344][ T6859] x64_sys_call+0x1f72/0x2550 [ 199.912459][ T6859] do_syscall_64+0x112/0x360 [ 199.912647][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.912725][ T6859] RIP: 0033:0x7fb291d8e159 [ 199.912836][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.912978][ T6859] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.913048][ T6859] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 199.913096][ T6859] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 199.913145][ T6859] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 0000000000000000 [ 199.913250][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.913290][ T6859] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 199.913368][ T6859] [ 200.595691][ T6870] loop1: detected capacity change from 0 to 4096 [ 200.614329][ T6870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.846640][ T6875] loop2: detected capacity change from 0 to 512 [ 200.860928][ T6875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1016: bg 0: block 5: invalid block bitmap [ 200.860996][ T6875] loop2: lost filesystem error report for type 5 error -117 [ 200.873691][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 200.873708][ C0] EXT4-fs (loop2): initial error at time 1788328657: ext4_validate_block_bitmap:436 [ 200.873726][ C0] EXT4-fs (loop2): last error at time 1788328657: ext4_validate_block_bitmap:436 [ 200.909650][ T6875] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 200.909680][ T6875] loop2: lost filesystem error report for type 5 error -117 [ 200.919115][ T6875] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1016: invalid indirect mapped block 3 (level 2) [ 200.919178][ T6875] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 200.939985][ T6875] EXT4-fs (loop2): 1 orphan inode deleted [ 200.940083][ T6875] EXT4-fs (loop2): 1 truncate cleaned up [ 200.940557][ T6875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.039005][ T29] audit: type=1400 audit(1788328657.429:1336): avc: denied { write } for pid=6874 comm="syz.2.1016" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.415325][ T6838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.440473][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.465006][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.657659][ T6889] loop1: detected capacity change from 0 to 1024 [ 202.675871][ T6889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.701680][ T29] audit: type=1400 audit(1788328659.089:1337): avc: denied { getopt } for pid=6885 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.713299][ T6906] bond0: no command found in slaves file - use +ifname or -ifname [ 202.792382][ T6889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.867797][ T29] audit: type=1400 audit(1788328659.249:1338): avc: denied { write } for pid=6888 comm="syz.1.1017" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.942991][ T6912] loop4: detected capacity change from 0 to 4096 [ 202.985462][ T6912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.058835][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.068804][ T6917] loop2: detected capacity change from 0 to 512 [ 203.109493][ T6917] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1029: bg 0: block 5: invalid block bitmap [ 203.109525][ T6917] loop2: lost filesystem error report for type 5 error -117 [ 203.121912][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 203.121935][ C0] EXT4-fs (loop2): initial error at time 1788328659: ext4_validate_block_bitmap:436 [ 203.121962][ C0] EXT4-fs (loop2): last error at time 1788328659: ext4_validate_block_bitmap:436 [ 203.154650][ T6917] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 203.154686][ T6917] loop2: lost filesystem error report for type 5 error -117 [ 203.163813][ T6917] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1029: invalid indirect mapped block 3 (level 2) [ 203.163852][ T6917] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.189432][ T6917] EXT4-fs (loop2): 1 orphan inode deleted [ 203.189466][ T6917] EXT4-fs (loop2): 1 truncate cleaned up [ 203.189728][ T6917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.316580][ T29] audit: type=1400 audit(1788328659.699:1339): avc: denied { write } for pid=6916 comm="syz.2.1029" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.083579][ T6920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.094605][ T6929] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1031'. [ 206.125670][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.127448][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.205484][ T6951] loop3: detected capacity change from 0 to 512 [ 206.212176][ T6951] ext4: Unknown parameter 'func' [ 206.220068][ T6955] FAULT_INJECTION: forcing a failure. [ 206.220068][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.220099][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.1.1041 Not tainted syzkaller #0 PREEMPT(lazy) [ 206.220221][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.220272][ T6955] Call Trace: [ 206.220297][ T6955] [ 206.220318][ T6955] __dump_stack+0x1d/0x30 [ 206.220476][ T6955] dump_stack_lvl+0x95/0xd0 [ 206.220537][ T6955] dump_stack+0x15/0x1b [ 206.220597][ T6955] should_fail_ex+0x262/0x280 [ 206.220718][ T6955] should_fail+0xb/0x20 [ 206.220782][ T6955] should_fail_usercopy+0x1a/0x20 [ 206.220856][ T6955] _copy_to_user+0x20/0xa0 [ 206.220927][ T6955] simple_read_from_buffer+0xb5/0x130 [ 206.221023][ T6955] proc_fail_nth_read+0x10e/0x150 [ 206.221203][ T6955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.221300][ T6955] vfs_read+0x18e/0x7c0 [ 206.221428][ T6955] ? __rcu_read_unlock+0x4e/0x70 [ 206.221573][ T6955] ? __fget_files+0x184/0x1c0 [ 206.221639][ T6955] ? mutex_lock+0x57/0x90 [ 206.221712][ T6955] ksys_read+0xdc/0x1a0 [ 206.221779][ T6955] __x64_sys_read+0x40/0x50 [ 206.221909][ T6955] x64_sys_call+0x2135/0x2550 [ 206.221989][ T6955] do_syscall_64+0x112/0x360 [ 206.222092][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.222152][ T6955] RIP: 0033:0x7f39f6dde98e [ 206.222199][ T6955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.222279][ T6955] RSP: 002b:00007f39f5876fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.222341][ T6955] RAX: ffffffffffffffda RBX: 00007f39f58776c0 RCX: 00007f39f6dde98e [ 206.222383][ T6955] RDX: 000000000000000f RSI: 00007f39f58770a0 RDI: 0000000000000004 [ 206.222418][ T6955] RBP: 00007f39f5877090 R08: 0000000000000000 R09: 0000000000000000 [ 206.222460][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.222496][ T6955] R13: 00007f39f70a6038 R14: 00007f39f70a5fa0 R15: 00007fffacc051d8 [ 206.222576][ T6955] [ 206.982953][ T6973] ip_tables: iptables: counters copy to user failed while replacing table [ 207.133316][ T6976] loop3: detected capacity change from 0 to 512 [ 207.141576][ T6976] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1048: bg 0: block 5: invalid block bitmap [ 207.141610][ T6976] loop3: lost filesystem error report for type 5 error -117 [ 207.143284][ T6976] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 207.143303][ T6976] loop3: lost filesystem error report for type 5 error -117 [ 207.143432][ T6976] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1048: invalid indirect mapped block 3 (level 2) [ 207.143466][ T6976] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 207.144074][ T6976] EXT4-fs (loop3): 1 orphan inode deleted [ 207.144129][ T6976] EXT4-fs (loop3): 1 truncate cleaned up [ 207.144999][ T6976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.282585][ T29] audit: type=1400 audit(1788328663.669:1340): avc: denied { write } for pid=6975 comm="syz.3.1048" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.439355][ T29] audit: type=1400 audit(1788328663.829:1341): avc: denied { setopt } for pid=6988 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.554324][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.789443][ T7003] loop3: detected capacity change from 0 to 512 [ 207.789888][ T7003] ext4: Unknown parameter 'func' [ 207.875206][ T29] audit: type=1400 audit(1788328664.259:1342): avc: denied { write } for pid=6992 comm="syz.0.1053" path="socket:[16847]" dev="sockfs" ino=16847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.993535][ T29] audit: type=1400 audit(1788328664.379:1343): avc: denied { kexec_image_load } for pid=6992 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 208.051920][ T7010] loop1: detected capacity change from 0 to 2048 [ 208.113033][ T7010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.303948][ T7016] loop4: detected capacity change from 0 to 1764 [ 209.025754][ T29] audit: type=1400 audit(1788328665.409:1344): avc: denied { write } for pid=7004 comm="syz.1.1059" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.025805][ T29] audit: type=1400 audit(1788328665.409:1345): avc: denied { write } for pid=7004 comm="syz.1.1059" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.025836][ T29] audit: type=1400 audit(1788328665.409:1346): avc: denied { remove_name } for pid=7004 comm="syz.1.1059" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.025909][ T29] audit: type=1400 audit(1788328665.409:1347): avc: denied { rename } for pid=7004 comm="syz.1.1059" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.614286][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.151578][ T7029] loop2: detected capacity change from 0 to 1764 [ 210.830356][ T7028] loop4: detected capacity change from 0 to 512 [ 210.841929][ T7028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1065: bg 0: block 5: invalid block bitmap [ 210.842041][ T7028] loop4: lost filesystem error report for type 5 error -117 [ 210.854452][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 210.854470][ C1] EXT4-fs (loop4): initial error at time 1788328667: ext4_validate_block_bitmap:436 [ 210.854493][ C1] EXT4-fs (loop4): last error at time 1788328667: ext4_validate_block_bitmap:436 [ 210.890692][ T7028] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 210.890841][ T7028] loop4: lost filesystem error report for type 5 error -117 [ 210.890998][ T7028] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1065: invalid indirect mapped block 3 (level 2) [ 210.891028][ T7028] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 210.891206][ T7028] EXT4-fs (loop4): 1 orphan inode deleted [ 210.891224][ T7028] EXT4-fs (loop4): 1 truncate cleaned up [ 210.891616][ T7028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.976545][ T7033] loop1: detected capacity change from 0 to 512 [ 210.992799][ T7033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 211.020193][ T7033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.020252][ T7033] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.046859][ T29] audit: type=1400 audit(1788328667.429:1348): avc: denied { write } for pid=7032 comm="syz.1.1066" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.192728][ T29] audit: type=1400 audit(1788328667.579:1349): avc: denied { write } for pid=7027 comm="syz.4.1065" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.265757][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.600369][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.683210][ T7050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.745879][ T7050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.811960][ T7063] loop4: detected capacity change from 0 to 512 [ 211.820398][ T7063] ext4: Unknown parameter 'func' [ 211.889968][ T7050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.933278][ T7069] loop3: detected capacity change from 0 to 256 [ 212.140393][ T7070] loop1: detected capacity change from 0 to 1764 [ 212.334891][ T7050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.438012][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.552270][ T7072] FAULT_INJECTION: forcing a failure. [ 212.552270][ T7072] name failslab, interval 1, probability 0, space 0, times 0 [ 212.552304][ T7072] CPU: 0 UID: 0 PID: 7072 Comm: syz.3.1079 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.552338][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.552416][ T7072] Call Trace: [ 212.552423][ T7072] [ 212.552429][ T7072] __dump_stack+0x1d/0x30 [ 212.552459][ T7072] dump_stack_lvl+0x95/0xd0 [ 212.552480][ T7072] dump_stack+0x15/0x1b [ 212.552544][ T7072] should_fail_ex+0x262/0x280 [ 212.552572][ T7072] should_failslab+0x8c/0xb0 [ 212.552601][ T7072] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 212.552632][ T7072] ? alloc_inode+0x9a/0x170 [ 212.552686][ T7072] ? alloc_inode+0x9a/0x170 [ 212.552729][ T7072] alloc_inode+0x9a/0x170 [ 212.552763][ T7072] new_inode+0x1d/0xe0 [ 212.552805][ T7072] devpts_pty_new+0x60/0x320 [ 212.552831][ T7072] ? __list_add_valid_or_report+0x38/0xe0 [ 212.552860][ T7072] ptmx_open+0x17e/0x240 [ 212.552880][ T7072] chrdev_open+0x2eb/0x3a0 [ 212.552947][ T7072] do_dentry_open+0x49f/0xa60 [ 212.552985][ T7072] ? __pfx_chrdev_open+0x10/0x10 [ 212.553023][ T7072] ? may_open+0x1ee/0x350 [ 212.553055][ T7072] vfs_open+0x37/0x1e0 [ 212.553073][ T7072] path_openat+0xc01/0x10d0 [ 212.553143][ T7072] ? __css_rstat_updated+0xbb/0x280 [ 212.553266][ T7072] do_file_open+0x16c/0x290 [ 212.553310][ T7072] do_sys_openat2+0xa0/0x130 [ 212.553338][ T7072] __x64_sys_openat+0xf2/0x120 [ 212.553399][ T7072] x64_sys_call+0x1f72/0x2550 [ 212.553425][ T7072] do_syscall_64+0x112/0x360 [ 212.553500][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.553521][ T7072] RIP: 0033:0x7fb291d8e159 [ 212.553535][ T7072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.553588][ T7072] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.553614][ T7072] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 212.553633][ T7072] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 212.553646][ T7072] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 0000000000000000 [ 212.553658][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.553669][ T7072] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 212.553758][ T7072] [ 212.854581][ T3965] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.863274][ T3965] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.863322][ T3965] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.950924][ T7067] loop2: detected capacity change from 0 to 512 [ 213.222767][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 213.222789][ T29] audit: type=1400 audit(1788328669.609:1352): avc: denied { listen } for pid=7090 comm="syz.3.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.259738][ T29] audit: type=1400 audit(1788328669.649:1353): avc: denied { write } for pid=7090 comm="syz.3.1086" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.289486][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 213.298831][ T7099] program syz.3.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.356441][ T7107] FAULT_INJECTION: forcing a failure. [ 213.356441][ T7107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.356483][ T7107] CPU: 0 UID: 0 PID: 7107 Comm: syz.0.1089 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.356508][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.356580][ T7107] Call Trace: [ 213.356589][ T7107] [ 213.356598][ T7107] __dump_stack+0x1d/0x30 [ 213.356697][ T7107] dump_stack_lvl+0x95/0xd0 [ 213.356719][ T7107] dump_stack+0x15/0x1b [ 213.356777][ T7107] should_fail_ex+0x262/0x280 [ 213.356800][ T7107] should_fail+0xb/0x20 [ 213.356852][ T7107] should_fail_usercopy+0x1a/0x20 [ 213.356880][ T7107] _copy_from_iter+0xcc/0xe70 [ 213.356982][ T7107] ? __alloc_skb+0x516/0x6f0 [ 213.357010][ T7107] ? __alloc_skb+0x209/0x6f0 [ 213.357047][ T7107] netlink_sendmsg+0x4a4/0x6f0 [ 213.357089][ T7107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.357171][ T7107] ____sys_sendmsg+0x532/0x580 [ 213.357242][ T7107] ___sys_sendmsg+0x195/0x1e0 [ 213.357305][ T7107] __x64_sys_sendmsg+0xd4/0x160 [ 213.357361][ T7107] x64_sys_call+0x22ab/0x2550 [ 213.357449][ T7107] do_syscall_64+0x112/0x360 [ 213.357479][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.357569][ T7107] RIP: 0033:0x7fb809d2e159 [ 213.357588][ T7107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.357611][ T7107] RSP: 002b:00007fb808787028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.357703][ T7107] RAX: ffffffffffffffda RBX: 00007fb809fb5fa0 RCX: 00007fb809d2e159 [ 213.357716][ T7107] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 213.357728][ T7107] RBP: 00007fb808787090 R08: 0000000000000000 R09: 0000000000000000 [ 213.357740][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.357754][ T7107] R13: 00007fb809fb6038 R14: 00007fb809fb5fa0 R15: 00007ffd8eb223f8 [ 213.357778][ T7107] [ 213.836447][ T7119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.836564][ T7119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.889765][ T7124] loop1: detected capacity change from 0 to 512 [ 213.902160][ T7124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1095: bg 0: block 5: invalid block bitmap [ 213.902198][ T7124] loop1: lost filesystem error report for type 5 error -117 [ 213.902362][ T7124] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 213.902384][ T7124] loop1: lost filesystem error report for type 5 error -117 [ 213.902493][ T7124] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1095: invalid indirect mapped block 3 (level 2) [ 213.902525][ T7124] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 213.902671][ T7124] EXT4-fs (loop1): 1 orphan inode deleted [ 213.902744][ T7124] EXT4-fs (loop1): 1 truncate cleaned up [ 213.903126][ T7124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.057140][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1098'. [ 214.079169][ T29] audit: type=1400 audit(1788328670.469:1354): avc: denied { write } for pid=7123 comm="syz.1.1095" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.101794][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1098'. [ 214.321289][ T29] audit: type=1400 audit(1788328670.709:1355): avc: denied { ioctl } for pid=7155 comm="syz.0.1106" path="socket:[17010]" dev="sockfs" ino=17010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.094418][ T7168] loop3: detected capacity change from 0 to 512 [ 216.827334][ T7119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.865057][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.897381][ T29] audit: type=1400 audit(1788328673.279:1356): avc: denied { create } for pid=7177 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.946928][ T7184] loop1: detected capacity change from 0 to 512 [ 216.952589][ T7184] ext4: Unknown parameter 'func' [ 216.973217][ T7180] loop3: detected capacity change from 0 to 512 [ 217.019686][ T7180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.023427][ T29] audit: type=1400 audit(1788328673.409:1357): avc: denied { read write } for pid=7174 comm="syz.0.1112" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 217.023532][ T29] audit: type=1400 audit(1788328673.409:1358): avc: denied { open } for pid=7174 comm="syz.0.1112" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 217.079795][ T7180] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.091311][ T7180] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.1114: iget: bad i_size value: 2533274857506816 [ 217.100710][ T7180] EXT4-fs (loop3): Remounting filesystem read-only [ 217.182926][ T7198] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1118'. [ 217.215773][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.250436][ T29] audit: type=1400 audit(1788328673.629:1359): avc: denied { block_suspend } for pid=7209 comm="syz.3.1122" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.250547][ T29] audit: type=1400 audit(1788328673.639:1360): avc: denied { create } for pid=7209 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.250578][ T29] audit: type=1400 audit(1788328673.639:1361): avc: denied { bind } for pid=7209 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.317543][ T7214] loop1: detected capacity change from 0 to 512 [ 217.332845][ T7214] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1123: bg 0: block 5: invalid block bitmap [ 217.332885][ T7214] loop1: lost filesystem error report for type 5 error -117 [ 217.345351][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 217.345392][ C0] EXT4-fs (loop1): initial error at time 1788328673: ext4_validate_block_bitmap:436 [ 217.345431][ C0] EXT4-fs (loop1): last error at time 1788328673: ext4_validate_block_bitmap:436 [ 217.345510][ T7214] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 217.345607][ T7214] loop1: lost filesystem error report for type 5 error -117 [ 217.353092][ T7214] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1123: invalid indirect mapped block 3 (level 2) [ 217.353204][ T7214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.360061][ T7214] EXT4-fs (loop1): 1 orphan inode deleted [ 217.360083][ T7214] EXT4-fs (loop1): 1 truncate cleaned up [ 217.360539][ T7214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.500964][ T7222] loop3: detected capacity change from 0 to 512 [ 217.501321][ T7222] ext4: Unknown parameter 'func' [ 217.519251][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.519571][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.607698][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.731036][ T7258] FAULT_INJECTION: forcing a failure. [ 217.731036][ T7258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.731072][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.2.1136 Not tainted syzkaller #0 PREEMPT(lazy) [ 217.731117][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.731199][ T7258] Call Trace: [ 217.731209][ T7258] [ 217.731218][ T7258] __dump_stack+0x1d/0x30 [ 217.731252][ T7258] dump_stack_lvl+0x95/0xd0 [ 217.731276][ T7258] dump_stack+0x15/0x1b [ 217.731303][ T7258] should_fail_ex+0x262/0x280 [ 217.731332][ T7258] should_fail+0xb/0x20 [ 217.731356][ T7258] should_fail_usercopy+0x1a/0x20 [ 217.731438][ T7258] _copy_from_iter+0xcc/0xe70 [ 217.731500][ T7258] ? __alloc_skb+0x516/0x6f0 [ 217.731535][ T7258] ? __alloc_skb+0x209/0x6f0 [ 217.731562][ T7258] netlink_sendmsg+0x4a4/0x6f0 [ 217.731664][ T7258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.731697][ T7258] ____sys_sendmsg+0x532/0x580 [ 217.731778][ T7258] ___sys_sendmsg+0x195/0x1e0 [ 217.731834][ T7258] __x64_sys_sendmsg+0xd4/0x160 [ 217.731938][ T7258] x64_sys_call+0x22ab/0x2550 [ 217.732056][ T7258] do_syscall_64+0x112/0x360 [ 217.732120][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.732153][ T7258] RIP: 0033:0x7f57dffce159 [ 217.732176][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.732202][ T7258] RSP: 002b:00007f57dea27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.732278][ T7258] RAX: ffffffffffffffda RBX: 00007f57e0255fa0 RCX: 00007f57dffce159 [ 217.732293][ T7258] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 217.732307][ T7258] RBP: 00007f57dea27090 R08: 0000000000000000 R09: 0000000000000000 [ 217.732342][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.732439][ T7258] R13: 00007f57e0256038 R14: 00007f57e0255fa0 R15: 00007fff42f19668 [ 217.732468][ T7258] [ 217.957830][ T7269] FAULT_INJECTION: forcing a failure. [ 217.957830][ T7269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.957899][ T7269] CPU: 1 UID: 0 PID: 7269 Comm: syz.1.1140 Not tainted syzkaller #0 PREEMPT(lazy) [ 217.957999][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.958016][ T7269] Call Trace: [ 217.958025][ T7269] [ 217.958035][ T7269] __dump_stack+0x1d/0x30 [ 217.958066][ T7269] dump_stack_lvl+0x95/0xd0 [ 217.958089][ T7269] dump_stack+0x15/0x1b [ 217.958118][ T7269] should_fail_ex+0x262/0x280 [ 217.958147][ T7269] should_fail+0xb/0x20 [ 217.958172][ T7269] should_fail_usercopy+0x1a/0x20 [ 217.958315][ T7269] _copy_from_iter+0xcc/0xe70 [ 217.958338][ T7269] ? __alloc_skb+0x516/0x6f0 [ 217.958365][ T7269] ? __alloc_skb+0x209/0x6f0 [ 217.958407][ T7269] netlink_sendmsg+0x4a4/0x6f0 [ 217.958447][ T7269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.958556][ T7269] ____sys_sendmsg+0x532/0x580 [ 217.958633][ T7269] ___sys_sendmsg+0x195/0x1e0 [ 217.958692][ T7269] __x64_sys_sendmsg+0xd4/0x160 [ 217.958740][ T7269] x64_sys_call+0x22ab/0x2550 [ 217.958779][ T7269] do_syscall_64+0x112/0x360 [ 217.958867][ T7269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.958895][ T7269] RIP: 0033:0x7f39f6e1e159 [ 217.958918][ T7269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.958943][ T7269] RSP: 002b:00007f39f5877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.958974][ T7269] RAX: ffffffffffffffda RBX: 00007f39f70a5fa0 RCX: 00007f39f6e1e159 [ 217.958994][ T7269] RDX: 00000000000000c0 RSI: 0000200000000080 RDI: 0000000000000003 [ 217.959018][ T7269] RBP: 00007f39f5877090 R08: 0000000000000000 R09: 0000000000000000 [ 217.959032][ T7269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.959045][ T7269] R13: 00007f39f70a6038 R14: 00007f39f70a5fa0 R15: 00007fffacc051d8 [ 217.959146][ T7269] [ 218.104748][ T7261] loop3: detected capacity change from 0 to 512 [ 218.151598][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.154861][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.156358][ T7261] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.1137: iget: bad i_size value: 12154757448730 [ 218.156450][ T7261] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 218.161905][ T7261] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1137: couldn't read orphan inode 13 (err -117) [ 218.161970][ T7261] loop3: lost filesystem error report for type 5 error -117 [ 218.168402][ T7261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.230911][ T7261] netlink: 'syz.3.1137': attribute type 4 has an invalid length. [ 218.260597][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 218.260634][ T29] audit: type=1400 audit(1788328674.649:1368): avc: denied { write } for pid=7260 comm="syz.3.1137" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.261511][ T7261] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1137: corrupted in-inode xattr: overlapping e_value [ 218.312094][ T7261] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1137: corrupted in-inode xattr: overlapping e_value [ 218.394261][ T7289] mmap: syz.1.1144 (7289) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 218.440824][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.491612][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1147'. [ 218.496572][ T29] audit: type=1400 audit(1788328674.879:1369): avc: denied { bind } for pid=7298 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.645634][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.645728][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.687226][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.687354][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.721864][ T29] audit: type=1400 audit(1788328675.109:1370): avc: denied { map } for pid=7300 comm="syz.2.1149" path="socket:[17345]" dev="sockfs" ino=17345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 218.853034][ T7332] FAULT_INJECTION: forcing a failure. [ 218.853034][ T7332] name failslab, interval 1, probability 0, space 0, times 0 [ 218.853130][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.0.1156 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.853176][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.853190][ T7332] Call Trace: [ 218.853197][ T7332] [ 218.853204][ T7332] __dump_stack+0x1d/0x30 [ 218.853237][ T7332] dump_stack_lvl+0x95/0xd0 [ 218.853268][ T7332] dump_stack+0x15/0x1b [ 218.853366][ T7332] should_fail_ex+0x262/0x280 [ 218.853396][ T7332] ? nci_hci_allocate+0x33/0x180 [ 218.853430][ T7332] should_failslab+0x8c/0xb0 [ 218.853498][ T7332] __kmalloc_cache_noprof+0x7a/0x400 [ 218.853538][ T7332] ? pm_runtime_init+0x166/0x170 [ 218.853634][ T7332] ? nci_hci_allocate+0x33/0x180 [ 218.853675][ T7332] ? mutex_init_generic+0x3e/0x50 [ 218.853715][ T7332] nci_hci_allocate+0x33/0x180 [ 218.853782][ T7332] nci_allocate_device+0x156/0x200 [ 218.853823][ T7332] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 218.853940][ T7332] virtual_ncidev_open+0x55/0x130 [ 218.853974][ T7332] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 218.854025][ T7332] misc_open+0x1df/0x220 [ 218.854055][ T7332] chrdev_open+0x2eb/0x3a0 [ 218.854114][ T7332] do_dentry_open+0x49f/0xa60 [ 218.854157][ T7332] ? __pfx_chrdev_open+0x10/0x10 [ 218.854264][ T7332] vfs_open+0x37/0x1e0 [ 218.854289][ T7332] path_openat+0xc01/0x10d0 [ 218.854463][ T7332] do_file_open+0x16c/0x290 [ 218.854557][ T7332] do_sys_openat2+0xa0/0x130 [ 218.854583][ T7332] __x64_sys_openat+0xf2/0x120 [ 218.854614][ T7332] x64_sys_call+0x1f72/0x2550 [ 218.854703][ T7332] do_syscall_64+0x112/0x360 [ 218.854768][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.854804][ T7332] RIP: 0033:0x7fb809d2e159 [ 218.854825][ T7332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.854917][ T7332] RSP: 002b:00007fb808787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.854946][ T7332] RAX: ffffffffffffffda RBX: 00007fb809fb5fa0 RCX: 00007fb809d2e159 [ 218.854966][ T7332] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 218.854985][ T7332] RBP: 00007fb809dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 218.855002][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.855018][ T7332] R13: 00007fb809fb6038 R14: 00007fb809fb5fa0 R15: 00007ffd8eb223f8 [ 218.855082][ T7332] [ 219.033669][ T29] audit: type=1400 audit(1788328675.419:1371): avc: denied { wake_alarm } for pid=7335 comm="syz.0.1157" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.137794][ T29] audit: type=1400 audit(1788328675.519:1372): avc: denied { bind } for pid=7335 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.333878][ T29] audit: type=1400 audit(1788328675.719:1373): avc: denied { create } for pid=7355 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 219.443168][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.443328][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.686873][ T7320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.714652][ T7376] SELinux: failed to load policy [ 221.864347][ T29] audit: type=1400 audit(1788328678.249:1374): avc: denied { setopt } for pid=7380 comm="syz.2.1170" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.874603][ T29] audit: type=1400 audit(1788328678.249:1375): avc: denied { connect } for pid=7389 comm="syz.4.1173" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.874904][ T29] audit: type=1400 audit(1788328678.249:1376): avc: denied { setopt } for pid=7380 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.907134][ T29] audit: type=1326 audit(1788328678.299:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.3.1171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb291d8e159 code=0x7ffc0000 [ 222.085368][ T7409] SELinux: failed to load policy [ 222.282551][ T7430] loop1: detected capacity change from 0 to 512 [ 222.284413][ T7430] ext4: Unknown parameter 'func' [ 222.359289][ T7434] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 222.359324][ T7434] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0 [ 222.416240][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1190'. [ 222.482411][ T7432] loop4: detected capacity change from 0 to 8192 [ 222.543845][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.543948][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.325947][ T7475] loop4: detected capacity change from 0 to 512 [ 223.507158][ T7479] loop4: detected capacity change from 0 to 512 [ 223.508281][ T7479] ext4: Unknown parameter 'func' [ 223.574076][ T7481] loop1: detected capacity change from 0 to 1764 [ 224.995545][ T7486] loop4: detected capacity change from 0 to 1764 [ 225.540288][ T7454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.357316][ T7503] loop3: detected capacity change from 0 to 512 [ 226.520324][ T7507] loop1: detected capacity change from 0 to 8192 [ 226.910533][ T7525] loop2: detected capacity change from 0 to 512 [ 226.952213][ T7525] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 227.011286][ T7534] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 227.113340][ T7525] loop2: detected capacity change from 0 to 128 [ 227.115375][ T7525] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.136349][ T7525] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.146545][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.146650][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.388479][ T7544] loop4: detected capacity change from 0 to 1764 [ 228.406837][ T7570] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 228.443684][ T7572] loop1: detected capacity change from 0 to 512 [ 228.854199][ T7578] loop2: detected capacity change from 0 to 512 [ 228.872425][ T7578] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1234: bg 0: block 5: invalid block bitmap [ 228.872458][ T7578] loop2: lost filesystem error report for type 5 error -117 [ 228.885022][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 228.885038][ C1] EXT4-fs (loop2): initial error at time 1788328685: ext4_validate_block_bitmap:436 [ 228.885057][ C1] EXT4-fs (loop2): last error at time 1788328685: ext4_validate_block_bitmap:436 [ 228.918212][ T7578] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 228.918259][ T7578] loop2: lost filesystem error report for type 5 error -117 [ 228.918397][ T7578] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1234: invalid indirect mapped block 3 (level 2) [ 228.918491][ T7578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 228.918699][ T7578] EXT4-fs (loop2): 1 orphan inode deleted [ 228.918774][ T7578] EXT4-fs (loop2): 1 truncate cleaned up [ 228.919400][ T7578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.938439][ T7580] loop4: detected capacity change from 0 to 1024 [ 228.950558][ T7580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.014802][ T7580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.027988][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 229.028006][ T29] audit: type=1400 audit(1788328685.399:1814): avc: denied { write } for pid=7577 comm="syz.2.1234" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.073769][ T29] audit: type=1400 audit(1788328685.459:1815): avc: denied { write } for pid=7579 comm="syz.4.1233" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.153414][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.217480][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.332321][ T7608] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 229.428894][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.429100][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.588083][ T7628] loop1: detected capacity change from 0 to 512 [ 229.813889][ T7629] loop4: detected capacity change from 0 to 1764 [ 229.891381][ T7628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.029221][ T29] audit: type=1400 audit(1788328686.409:1816): avc: denied { write } for pid=7627 comm="syz.1.1247" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.227179][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.392966][ T7637] loop3: detected capacity change from 0 to 512 [ 230.412503][ T7637] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 230.412585][ T7637] EXT4-fs (loop3): orphan cleanup on readonly fs [ 230.427554][ T7637] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 230.427578][ T7637] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 230.427661][ T7637] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1249: Failed to acquire dquot type 1 [ 230.427682][ T7637] loop3: lost filesystem error report for type 5 error -5 [ 230.446934][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 230.446955][ C1] EXT4-fs (loop3): initial error at time 1788328686: ext4_acquire_dquot:7069 [ 230.446974][ C1] EXT4-fs (loop3): last error at time 1788328686: ext4_acquire_dquot:7069 [ 230.490238][ T7637] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.1249: bg 0: block 40: padding at end of block bitmap is not set [ 230.490278][ T7637] loop3: lost filesystem error report for type 5 error -117 [ 230.504759][ T7637] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 230.504822][ T7637] loop3: lost filesystem error report for type 5 error -117 [ 230.522837][ T7637] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #16: comm syz.3.1249: data will be lost [ 230.522911][ T7637] EXT4-fs (loop3): 1 truncate cleaned up [ 230.552359][ T7637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.594428][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 230.607618][ T29] audit: type=1400 audit(1788328686.989:1817): avc: denied { nlmsg_read } for pid=7633 comm="syz.3.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 230.659740][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 230.717438][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.748290][ T7645] loop3: detected capacity change from 0 to 512 [ 230.778100][ T7645] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1251: bg 0: block 5: invalid block bitmap [ 230.778200][ T7645] loop3: lost filesystem error report for type 5 error -117 [ 230.790551][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 230.790572][ C1] EXT4-fs (loop3): initial error at time 1788328687: ext4_validate_block_bitmap:436 [ 230.790606][ C1] EXT4-fs (loop3): last error at time 1788328687: ext4_validate_block_bitmap:436 [ 230.825080][ T7645] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 230.825124][ T7645] loop3: lost filesystem error report for type 5 error -117 [ 230.834543][ T7645] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1251: invalid indirect mapped block 3 (level 2) [ 230.834667][ T7645] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 230.858748][ T7645] EXT4-fs (loop3): 1 orphan inode deleted [ 230.858772][ T7645] EXT4-fs (loop3): 1 truncate cleaned up [ 230.859181][ T7645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.917540][ T29] audit: type=1400 audit(1788328687.299:1818): avc: denied { write } for pid=7644 comm="syz.3.1251" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.195931][ T7643] loop1: detected capacity change from 0 to 8192 [ 231.449229][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.546056][ T7662] loop3: detected capacity change from 0 to 4096 [ 231.573975][ T7662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.621624][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.706843][ T7671] ext4: Unknown parameter 'func' [ 232.021175][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.021379][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.467571][ T7702] set_capacity_and_notify: 3 callbacks suppressed [ 232.467609][ T7702] loop1: detected capacity change from 0 to 1764 [ 233.341067][ T7704] loop4: detected capacity change from 0 to 512 [ 233.355699][ T7704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1266: bg 0: block 5: invalid block bitmap [ 233.355763][ T7704] loop4: lost filesystem error report for type 5 error -117 [ 233.368320][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 233.368348][ C1] EXT4-fs (loop4): initial error at time 1788328689: ext4_validate_block_bitmap:436 [ 233.368370][ C1] EXT4-fs (loop4): last error at time 1788328689: ext4_validate_block_bitmap:436 [ 233.404759][ T7704] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 233.404784][ T7704] loop4: lost filesystem error report for type 5 error -117 [ 233.413923][ T7704] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1266: invalid indirect mapped block 3 (level 2) [ 233.413968][ T7704] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.436586][ T7704] EXT4-fs (loop4): 1 orphan inode deleted [ 233.436610][ T7704] EXT4-fs (loop4): 1 truncate cleaned up [ 233.437121][ T7704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.529525][ T29] audit: type=1400 audit(1788328689.919:1819): avc: denied { write } for pid=7703 comm="syz.4.1266" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.572117][ T7665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.604015][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.687606][ T7710] loop4: detected capacity change from 0 to 4096 [ 234.691633][ T29] audit: type=1400 audit(1788328691.069:1820): avc: denied { connect } for pid=7713 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.695222][ T7714] capability: warning: `syz.2.1270' uses deprecated v2 capabilities in a way that may be insecure [ 234.725421][ T7714] loop2: detected capacity change from 0 to 512 [ 234.742888][ T7710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.773173][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.773249][ T7714] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.862392][ T7720] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 18: comm syz.2.1270: lblock 23 mapped to illegal pblock 18 (length 1) [ 234.983983][ T7712] loop1: detected capacity change from 0 to 8192 [ 235.092951][ T7723] FAULT_INJECTION: forcing a failure. [ 235.092951][ T7723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.092987][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.3.1272 Not tainted syzkaller #0 PREEMPT(lazy) [ 235.093058][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.093074][ T7723] Call Trace: [ 235.093082][ T7723] [ 235.093092][ T7723] __dump_stack+0x1d/0x30 [ 235.093142][ T7723] dump_stack_lvl+0x95/0xd0 [ 235.093172][ T7723] dump_stack+0x15/0x1b [ 235.093251][ T7723] should_fail_ex+0x262/0x280 [ 235.093308][ T7723] should_fail+0xb/0x20 [ 235.093331][ T7723] should_fail_usercopy+0x1a/0x20 [ 235.093363][ T7723] _copy_from_iter+0xcc/0xe70 [ 235.093394][ T7723] ? __alloc_skb+0x516/0x6f0 [ 235.093429][ T7723] ? __alloc_skb+0x209/0x6f0 [ 235.093467][ T7723] netlink_sendmsg+0x4a4/0x6f0 [ 235.093504][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.093596][ T7723] ____sys_sendmsg+0x532/0x580 [ 235.093642][ T7723] ___sys_sendmsg+0x195/0x1e0 [ 235.093740][ T7723] __x64_sys_sendmsg+0xd4/0x160 [ 235.093838][ T7723] x64_sys_call+0x22ab/0x2550 [ 235.093871][ T7723] do_syscall_64+0x112/0x360 [ 235.093918][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.093946][ T7723] RIP: 0033:0x7fb291d8e159 [ 235.093963][ T7723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.094182][ T7723] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.094212][ T7723] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 235.094231][ T7723] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 235.094249][ T7723] RBP: 00007fb2907e7090 R08: 0000000000000000 R09: 0000000000000000 [ 235.094267][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.094284][ T7723] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 235.094315][ T7723] [ 235.544356][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.620923][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.646388][ T7731] loop4: detected capacity change from 0 to 2048 [ 235.677529][ T7731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.677605][ T7731] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.701161][ T7731] EXT4-fs (loop4): shut down requested (2) [ 235.709018][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 235.709101][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 235.709258][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 235.710967][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 235.711188][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 235.711383][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 235.711437][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 235.711928][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 235.754415][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 235.754621][ T7731] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 235.784602][ T29] audit: type=1400 audit(1788328692.099:1821): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 235.784780][ T29] audit: type=1400 audit(1788328692.099:1822): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.784854][ T29] audit: type=1400 audit(1788328692.099:1823): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.784929][ T29] audit: type=1400 audit(1788328692.099:1824): avc: denied { add_name } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.785002][ T29] audit: type=1400 audit(1788328692.099:1825): avc: denied { create } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.785154][ T29] audit: type=1400 audit(1788328692.099:1826): avc: denied { append open } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.785308][ T29] audit: type=1400 audit(1788328692.099:1827): avc: denied { getattr } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.785402][ T29] audit: type=1400 audit(1788328692.099:1828): avc: denied { write } for pid=7730 comm="syz.4.1271" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.785465][ T29] audit: type=1400 audit(1788328692.099:1829): avc: denied { write } for pid=7730 comm="syz.4.1271" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.035389][ T7745] loop1: detected capacity change from 0 to 512 [ 236.057455][ T7733] FAULT_INJECTION: forcing a failure. [ 236.057455][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 236.057497][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.3.1276 Not tainted syzkaller #0 PREEMPT(lazy) [ 236.057528][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.057544][ T7733] Call Trace: [ 236.057584][ T7733] [ 236.057594][ T7733] __dump_stack+0x1d/0x30 [ 236.057622][ T7733] dump_stack_lvl+0x95/0xd0 [ 236.057643][ T7733] dump_stack+0x15/0x1b [ 236.057662][ T7733] should_fail_ex+0x262/0x280 [ 236.057732][ T7733] should_failslab+0x8c/0xb0 [ 236.057824][ T7733] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 236.058111][ T7733] ? sock_alloc_inode+0x36/0xf0 [ 236.058189][ T7733] ? sock_alloc_inode+0x36/0xf0 [ 236.058260][ T7733] ? selinux_socket_create+0xfd/0x180 [ 236.058392][ T7733] ? __pfx_sock_alloc_inode+0x10/0x10 [ 236.058463][ T7733] sock_alloc_inode+0x36/0xf0 [ 236.058574][ T7733] alloc_inode+0x40/0x170 [ 236.058685][ T7733] __sock_create+0x121/0x580 [ 236.058840][ T7733] ? __se_sys_setns+0xd08/0xff0 [ 236.058949][ T7733] __sys_socket+0xaf/0x180 [ 236.059034][ T7733] __x64_sys_socket+0x3f/0x50 [ 236.059130][ T7733] x64_sys_call+0x246e/0x2550 [ 236.059263][ T7733] do_syscall_64+0x112/0x360 [ 236.059374][ T7733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.059440][ T7733] RIP: 0033:0x7fb291d8e159 [ 236.059491][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.059550][ T7733] RSP: 002b:00007fb2907e6fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 236.059675][ T7733] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fb291d8e159 [ 236.059714][ T7733] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 236.059763][ T7733] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 00007fb292015fa0 [ 236.059805][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.059872][ T7733] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 236.059924][ T7733] [ 236.078789][ T7733] socket: no more sockets [ 236.148018][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.317564][ T7747] loop2: detected capacity change from 0 to 512 [ 236.415070][ T7742] loop3: detected capacity change from 0 to 32768 [ 236.441483][ T7747] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1279: bg 0: block 5: invalid block bitmap [ 236.441560][ T7747] loop2: lost filesystem error report for type 5 error -117 [ 236.454212][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 236.454235][ C0] EXT4-fs (loop2): initial error at time 1788328692: ext4_validate_block_bitmap:436 [ 236.454260][ C0] EXT4-fs (loop2): last error at time 1788328692: ext4_validate_block_bitmap:436 [ 236.454442][ T7747] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 236.454462][ T7747] loop2: lost filesystem error report for type 5 error -117 [ 236.454627][ T7747] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1279: invalid indirect mapped block 3 (level 2) [ 236.454659][ T7747] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 236.454809][ T7747] EXT4-fs (loop2): 1 orphan inode deleted [ 236.454848][ T7747] EXT4-fs (loop2): 1 truncate cleaned up [ 236.472024][ T7747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.075414][ T7759] loop4: detected capacity change from 0 to 4096 [ 237.084221][ T7759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.131243][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.133342][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.204806][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.486371][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.537098][ T7773] loop4: detected capacity change from 0 to 8192 [ 237.986808][ T7779] loop3: detected capacity change from 0 to 8192 [ 238.202547][ T7786] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 238.451191][ T5176] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.462681][ T7802] FAULT_INJECTION: forcing a failure. [ 238.462681][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 238.462731][ T7802] CPU: 0 UID: 0 PID: 7802 Comm: syz.0.1292 Not tainted syzkaller #0 PREEMPT(lazy) [ 238.462756][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.462768][ T7802] Call Trace: [ 238.462774][ T7802] [ 238.462874][ T7802] __dump_stack+0x1d/0x30 [ 238.462964][ T7802] dump_stack_lvl+0x95/0xd0 [ 238.463043][ T7802] dump_stack+0x15/0x1b [ 238.463112][ T7802] should_fail_ex+0x262/0x280 [ 238.463187][ T7802] ? alloc_workqueue_va+0x133/0x1630 [ 238.463362][ T7802] should_failslab+0x8c/0xb0 [ 238.463449][ T7802] __kmalloc_cache_noprof+0x7a/0x400 [ 238.463549][ T7802] ? alloc_workqueue_va+0x133/0x1630 [ 238.463637][ T7802] alloc_workqueue_va+0x133/0x1630 [ 238.463758][ T7802] alloc_workqueue_noprof+0x84/0xb0 [ 238.463936][ T7802] nci_register_device+0x11e/0x510 [ 238.464119][ T7802] virtual_ncidev_open+0xca/0x130 [ 238.464210][ T7802] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 238.464354][ T7802] misc_open+0x1df/0x220 [ 238.464440][ T7802] chrdev_open+0x2eb/0x3a0 [ 238.464545][ T7802] do_dentry_open+0x49f/0xa60 [ 238.464611][ T7802] ? __pfx_chrdev_open+0x10/0x10 [ 238.464740][ T7802] vfs_open+0x37/0x1e0 [ 238.464795][ T7802] path_openat+0xc01/0x10d0 [ 238.464892][ T7802] do_file_open+0x16c/0x290 [ 238.465046][ T7802] do_sys_openat2+0xa0/0x130 [ 238.465132][ T7802] __x64_sys_openat+0xf2/0x120 [ 238.465200][ T7802] x64_sys_call+0x1f72/0x2550 [ 238.465289][ T7802] do_syscall_64+0x112/0x360 [ 238.465458][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.465535][ T7802] RIP: 0033:0x7fb809d2e159 [ 238.465638][ T7802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.465706][ T7802] RSP: 002b:00007fb808787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.465797][ T7802] RAX: ffffffffffffffda RBX: 00007fb809fb5fa0 RCX: 00007fb809d2e159 [ 238.465888][ T7802] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 238.465950][ T7802] RBP: 00007fb809dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 238.466007][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.466047][ T7802] R13: 00007fb809fb6038 R14: 00007fb809fb5fa0 R15: 00007ffd8eb223f8 [ 238.466113][ T7802] [ 238.741943][ T7804] loop3: detected capacity change from 0 to 512 [ 238.840223][ T7807] loop4: detected capacity change from 0 to 4096 [ 238.866195][ T7807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.906184][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.028821][ T7815] loop3: detected capacity change from 0 to 512 [ 239.036132][ T7815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1296: bg 0: block 5: invalid block bitmap [ 239.036178][ T7815] loop3: lost filesystem error report for type 5 error -117 [ 239.046354][ T7815] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 239.046413][ T7815] loop3: lost filesystem error report for type 5 error -117 [ 239.046777][ T7815] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1296: invalid indirect mapped block 3 (level 2) [ 239.046887][ T7815] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 239.047505][ T7815] EXT4-fs (loop3): 1 orphan inode deleted [ 239.047521][ T7815] EXT4-fs (loop3): 1 truncate cleaned up [ 239.049415][ T7815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.030917][ T7767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.060234][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.507868][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.738386][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 241.149570][ T7840] sch_tbf: peakrate 5120 is lower than or equals to rate 5120 ! [ 241.200582][ T7842] loop1: detected capacity change from 0 to 4096 [ 241.221675][ T7842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.254870][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.567029][ T7850] loop2: detected capacity change from 0 to 512 [ 241.586530][ T7850] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1307: bg 0: block 5: invalid block bitmap [ 241.599243][ T7850] loop2: lost filesystem error report for type 5 error -117 [ 241.600110][ T7850] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 241.600222][ T7850] loop2: lost filesystem error report for type 5 error -117 [ 241.608108][ T7850] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1307: invalid indirect mapped block 3 (level 2) [ 241.608258][ T7850] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.618837][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 241.618860][ C1] EXT4-fs (loop2): initial error at time 1788328697: ext4_validate_block_bitmap:436 [ 241.618895][ C1] EXT4-fs (loop2): last error at time 1788328697: ext4_free_branches:1023: inode 11 [ 241.620199][ T7850] EXT4-fs (loop2): 1 orphan inode deleted [ 241.620257][ T7850] EXT4-fs (loop2): 1 truncate cleaned up [ 241.709511][ T7850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.867880][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 241.874673][ T29] audit: type=1400 audit(1788328698.229:1847): avc: denied { write } for pid=7847 comm="syz.2.1307" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.989378][ T7854] loop1: detected capacity change from 0 to 512 [ 242.341794][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.341905][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.385335][ T29] audit: type=1400 audit(1788328698.769:1848): avc: denied { listen } for pid=7869 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.385709][ T29] audit: type=1400 audit(1788328698.769:1849): avc: denied { read } for pid=7869 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.435591][ T29] audit: type=1326 audit(1788328698.819:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.1.1312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f6e1e159 code=0x7ffc0000 [ 242.436152][ T29] audit: type=1326 audit(1788328698.819:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.1.1312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f6e1e159 code=0x7ffc0000 [ 242.436196][ T29] audit: type=1326 audit(1788328698.819:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.1.1312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f6e1e159 code=0x7ffc0000 [ 242.437224][ T29] audit: type=1326 audit(1788328698.819:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.1.1312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f39f6e1e159 code=0x7ffc0000 [ 242.437324][ T29] audit: type=1326 audit(1788328698.819:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.1.1312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f6e1e159 code=0x7ffc0000 [ 242.437457][ T29] audit: type=1326 audit(1788328698.819:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.1.1312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f6e1e159 code=0x7ffc0000 [ 242.439496][ T29] audit: type=1326 audit(1788328698.819:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.1.1312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f6e1e159 code=0x7ffc0000 [ 242.591311][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.651811][ T7879] syzkaller0: entered promiscuous mode [ 242.651838][ T7879] syzkaller0: entered allmulticast mode [ 242.780492][ T7886] loop1: detected capacity change from 0 to 8192 [ 242.903736][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 243.431586][ T7900] loop2: detected capacity change from 0 to 1764 [ 244.064975][ T7902] loop3: detected capacity change from 0 to 512 [ 244.368896][ T7912] loop1: detected capacity change from 0 to 4096 [ 244.431403][ T7920] 9p: Bad value for 'rfdno' [ 244.476775][ T7922] syzkaller0: entered promiscuous mode [ 244.476803][ T7922] syzkaller0: entered allmulticast mode [ 244.805008][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.812571][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.918341][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 244.924542][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 245.081197][ T7933] loop3: detected capacity change from 0 to 8192 [ 245.990610][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.990752][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.082192][ T7960] loop1: detected capacity change from 0 to 164 [ 246.097257][ T7960] iso9660: Unknown parameter ' [ 246.097257][ T7960] ' [ 246.340199][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 246.487723][ T7986] loop2: detected capacity change from 0 to 1764 [ 246.666643][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.681447][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.967930][ T7997] loop1: detected capacity change from 0 to 8192 [ 247.815483][ T8001] FAULT_INJECTION: forcing a failure. [ 247.815483][ T8001] name failslab, interval 1, probability 0, space 0, times 0 [ 247.815540][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.1.1350 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.815646][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.815670][ T8001] Call Trace: [ 247.815678][ T8001] [ 247.815688][ T8001] __dump_stack+0x1d/0x30 [ 247.815717][ T8001] dump_stack_lvl+0x95/0xd0 [ 247.815790][ T8001] dump_stack+0x15/0x1b [ 247.815816][ T8001] should_fail_ex+0x262/0x280 [ 247.815923][ T8001] ? nci_allocate_device+0x95/0x200 [ 247.815949][ T8001] should_failslab+0x8c/0xb0 [ 247.816015][ T8001] __kmalloc_cache_noprof+0x7a/0x400 [ 247.816122][ T8001] ? nci_allocate_device+0x95/0x200 [ 247.816146][ T8001] ? __kmalloc_cache_noprof+0x19b/0x400 [ 247.816217][ T8001] ? __pfx_virtual_nci_send+0x10/0x10 [ 247.816246][ T8001] nci_allocate_device+0x95/0x200 [ 247.816344][ T8001] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 247.816371][ T8001] virtual_ncidev_open+0x55/0x130 [ 247.816473][ T8001] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 247.816506][ T8001] misc_open+0x1df/0x220 [ 247.816527][ T8001] chrdev_open+0x2eb/0x3a0 [ 247.816627][ T8001] do_dentry_open+0x49f/0xa60 [ 247.816646][ T8001] ? __pfx_chrdev_open+0x10/0x10 [ 247.816677][ T8001] vfs_open+0x37/0x1e0 [ 247.816698][ T8001] path_openat+0xc01/0x10d0 [ 247.816749][ T8001] do_file_open+0x16c/0x290 [ 247.816798][ T8001] do_sys_openat2+0xa0/0x130 [ 247.816818][ T8001] __x64_sys_openat+0xf2/0x120 [ 247.816949][ T8001] x64_sys_call+0x1f72/0x2550 [ 247.816975][ T8001] do_syscall_64+0x112/0x360 [ 247.817000][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.817025][ T8001] RIP: 0033:0x7f39f6e1e159 [ 247.817044][ T8001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.817090][ T8001] RSP: 002b:00007f39f5877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.817108][ T8001] RAX: ffffffffffffffda RBX: 00007f39f70a5fa0 RCX: 00007f39f6e1e159 [ 247.817188][ T8001] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 247.817204][ T8001] RBP: 00007f39f6eb5024 R08: 0000000000000000 R09: 0000000000000000 [ 247.817216][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.817227][ T8001] R13: 00007f39f70a6038 R14: 00007f39f70a5fa0 R15: 00007fffacc051d8 [ 247.817245][ T8001] [ 248.103601][ T8007] loop1: detected capacity change from 0 to 512 [ 248.114091][ T8007] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1353: bg 0: block 5: invalid block bitmap [ 248.114151][ T8007] loop1: lost filesystem error report for type 5 error -117 [ 248.126512][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 248.126537][ C1] EXT4-fs (loop1): initial error at time 1788328704: ext4_validate_block_bitmap:436 [ 248.126565][ C1] EXT4-fs (loop1): last error at time 1788328704: ext4_validate_block_bitmap:436 [ 248.126876][ T8007] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 248.126942][ T8007] loop1: lost filesystem error report for type 5 error -117 [ 248.135198][ T8007] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1353: invalid indirect mapped block 3 (level 2) [ 248.135306][ T8007] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 248.135956][ T8007] EXT4-fs (loop1): 1 orphan inode deleted [ 248.136025][ T8007] EXT4-fs (loop1): 1 truncate cleaned up [ 248.136888][ T8007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.214123][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 248.214172][ T29] audit: type=1400 audit(1788328704.599:2416): avc: denied { write } for pid=8006 comm="syz.1.1353" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.347824][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 248.347868][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 248.967288][ T7962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.025585][ T8016] FAULT_INJECTION: forcing a failure. [ 249.025585][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 249.025618][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.4.1355 Not tainted syzkaller #0 PREEMPT(lazy) [ 249.025689][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.025701][ T8016] Call Trace: [ 249.025707][ T8016] [ 249.025760][ T8016] __dump_stack+0x1d/0x30 [ 249.025788][ T8016] dump_stack_lvl+0x95/0xd0 [ 249.025813][ T8016] dump_stack+0x15/0x1b [ 249.025833][ T8016] should_fail_ex+0x262/0x280 [ 249.025853][ T8016] ? nci_allocate_device+0x95/0x200 [ 249.025901][ T8016] should_failslab+0x8c/0xb0 [ 249.025944][ T8016] __kmalloc_cache_noprof+0x7a/0x400 [ 249.025971][ T8016] ? nci_allocate_device+0x95/0x200 [ 249.026066][ T8016] ? __kmalloc_cache_noprof+0x19b/0x400 [ 249.026094][ T8016] ? __pfx_virtual_nci_send+0x10/0x10 [ 249.026120][ T8016] nci_allocate_device+0x95/0x200 [ 249.026142][ T8016] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 249.026225][ T8016] virtual_ncidev_open+0x55/0x130 [ 249.026255][ T8016] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 249.026381][ T8016] misc_open+0x1df/0x220 [ 249.026410][ T8016] chrdev_open+0x2eb/0x3a0 [ 249.026472][ T8016] do_dentry_open+0x49f/0xa60 [ 249.026492][ T8016] ? __pfx_chrdev_open+0x10/0x10 [ 249.026522][ T8016] vfs_open+0x37/0x1e0 [ 249.026539][ T8016] path_openat+0xc01/0x10d0 [ 249.026583][ T8016] do_file_open+0x16c/0x290 [ 249.026622][ T8016] do_sys_openat2+0xa0/0x130 [ 249.026650][ T8016] __x64_sys_openat+0xf2/0x120 [ 249.026678][ T8016] x64_sys_call+0x1f72/0x2550 [ 249.026779][ T8016] do_syscall_64+0x112/0x360 [ 249.026817][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.026866][ T8016] RIP: 0033:0x7f931a5ee159 [ 249.026884][ T8016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.026925][ T8016] RSP: 002b:00007f9319047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.026950][ T8016] RAX: ffffffffffffffda RBX: 00007f931a875fa0 RCX: 00007f931a5ee159 [ 249.027043][ T8016] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 249.027125][ T8016] RBP: 00007f931a685024 R08: 0000000000000000 R09: 0000000000000000 [ 249.027138][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.027150][ T8016] R13: 00007f931a876038 R14: 00007f931a875fa0 R15: 00007ffd81c3b328 [ 249.027172][ T8016] [ 249.084455][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.126782][ T8017] loop3: detected capacity change from 0 to 512 [ 249.386856][ T8032] FAULT_INJECTION: forcing a failure. [ 249.386856][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 249.386931][ T8032] CPU: 0 UID: 0 PID: 8032 Comm: syz.1.1361 Not tainted syzkaller #0 PREEMPT(lazy) [ 249.386963][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.386980][ T8032] Call Trace: [ 249.386988][ T8032] [ 249.386996][ T8032] __dump_stack+0x1d/0x30 [ 249.387109][ T8032] dump_stack_lvl+0x95/0xd0 [ 249.387244][ T8032] dump_stack+0x15/0x1b [ 249.387359][ T8032] should_fail_ex+0x262/0x280 [ 249.387434][ T8032] ? nci_allocate_device+0x95/0x200 [ 249.387519][ T8032] should_failslab+0x8c/0xb0 [ 249.387689][ T8032] __kmalloc_cache_noprof+0x7a/0x400 [ 249.387808][ T8032] ? nci_allocate_device+0x95/0x200 [ 249.387897][ T8032] ? __kmalloc_cache_noprof+0x19b/0x400 [ 249.388035][ T8032] ? __pfx_virtual_nci_send+0x10/0x10 [ 249.388129][ T8032] nci_allocate_device+0x95/0x200 [ 249.388257][ T8032] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 249.388473][ T8032] virtual_ncidev_open+0x55/0x130 [ 249.388583][ T8032] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 249.388716][ T8032] misc_open+0x1df/0x220 [ 249.388796][ T8032] chrdev_open+0x2eb/0x3a0 [ 249.388984][ T8032] do_dentry_open+0x49f/0xa60 [ 249.389048][ T8032] ? __pfx_chrdev_open+0x10/0x10 [ 249.389243][ T8032] vfs_open+0x37/0x1e0 [ 249.389302][ T8032] path_openat+0xc01/0x10d0 [ 249.389413][ T8032] do_file_open+0x16c/0x290 [ 249.389529][ T8032] do_sys_openat2+0xa0/0x130 [ 249.389626][ T8032] __x64_sys_openat+0xf2/0x120 [ 249.389714][ T8032] x64_sys_call+0x1f72/0x2550 [ 249.389875][ T8032] do_syscall_64+0x112/0x360 [ 249.389988][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.390118][ T8032] RIP: 0033:0x7f39f6e1e159 [ 249.390176][ T8032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.390253][ T8032] RSP: 002b:00007f39f5877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.390347][ T8032] RAX: ffffffffffffffda RBX: 00007f39f70a5fa0 RCX: 00007f39f6e1e159 [ 249.390405][ T8032] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 249.390515][ T8032] RBP: 00007f39f6eb5024 R08: 0000000000000000 R09: 0000000000000000 [ 249.390565][ T8032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.390680][ T8032] R13: 00007f39f70a6038 R14: 00007f39f70a5fa0 R15: 00007fffacc051d8 [ 249.390829][ T8032] [ 249.628754][ T8035] FAULT_INJECTION: forcing a failure. [ 249.628754][ T8035] name failslab, interval 1, probability 0, space 0, times 0 [ 249.628845][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.1.1362 Not tainted syzkaller #0 PREEMPT(lazy) [ 249.628928][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.629023][ T8035] Call Trace: [ 249.629044][ T8035] [ 249.629081][ T8035] __dump_stack+0x1d/0x30 [ 249.629173][ T8035] dump_stack_lvl+0x95/0xd0 [ 249.629249][ T8035] dump_stack+0x15/0x1b [ 249.629320][ T8035] should_fail_ex+0x262/0x280 [ 249.629471][ T8035] ? security_inode_alloc+0x37/0x100 [ 249.629645][ T8035] should_failslab+0x8c/0xb0 [ 249.629822][ T8035] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 249.629917][ T8035] ? security_inode_alloc+0x37/0x100 [ 249.629996][ T8035] security_inode_alloc+0x37/0x100 [ 249.630072][ T8035] inode_init_always_gfp+0x495/0x4e0 [ 249.630107][ T8035] alloc_inode+0x58/0x170 [ 249.630214][ T8035] new_inode+0x1d/0xe0 [ 249.630279][ T8035] devpts_pty_new+0x60/0x320 [ 249.630407][ T8035] ? __list_add_valid_or_report+0x38/0xe0 [ 249.630506][ T8035] ptmx_open+0x17e/0x240 [ 249.630654][ T8035] chrdev_open+0x2eb/0x3a0 [ 249.630779][ T8035] do_dentry_open+0x49f/0xa60 [ 249.630869][ T8035] ? __pfx_chrdev_open+0x10/0x10 [ 249.631040][ T8035] ? may_open+0x1ee/0x350 [ 249.631262][ T8035] vfs_open+0x37/0x1e0 [ 249.631406][ T8035] path_openat+0xc01/0x10d0 [ 249.631504][ T8035] do_file_open+0x16c/0x290 [ 249.631645][ T8035] do_sys_openat2+0xa0/0x130 [ 249.631751][ T8035] __x64_sys_openat+0xf2/0x120 [ 249.631853][ T8035] x64_sys_call+0x1f72/0x2550 [ 249.631933][ T8035] do_syscall_64+0x112/0x360 [ 249.632026][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.632181][ T8035] RIP: 0033:0x7f39f6e1e159 [ 249.632228][ T8035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.632291][ T8035] RSP: 002b:00007f39f5877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.632411][ T8035] RAX: ffffffffffffffda RBX: 00007f39f70a5fa0 RCX: 00007f39f6e1e159 [ 249.632457][ T8035] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 249.632496][ T8035] RBP: 00007f39f6eb5024 R08: 0000000000000000 R09: 0000000000000000 [ 249.632541][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.632586][ T8035] R13: 00007f39f70a6038 R14: 00007f39f70a5fa0 R15: 00007fffacc051d8 [ 249.632638][ T8035] [ 249.916788][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.916934][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.982171][ T8029] loop4: detected capacity change from 0 to 8192 [ 250.025331][ T8021] loop2: detected capacity change from 0 to 8192 [ 250.069805][ T8057] loop3: detected capacity change from 0 to 512 [ 250.087534][ T8057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1367: bg 0: block 5: invalid block bitmap [ 250.087589][ T8057] loop3: lost filesystem error report for type 5 error -117 [ 250.087759][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 250.087782][ C0] EXT4-fs (loop3): initial error at time 1788328706: ext4_validate_block_bitmap:436 [ 250.087881][ C0] EXT4-fs (loop3): last error at time 1788328706: ext4_validate_block_bitmap:436 [ 250.089006][ T8057] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 250.089109][ T8057] loop3: lost filesystem error report for type 5 error -117 [ 250.092623][ T8057] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1367: invalid indirect mapped block 3 (level 2) [ 250.092717][ T8057] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 250.096018][ T8057] EXT4-fs (loop3): 1 orphan inode deleted [ 250.096081][ T8057] EXT4-fs (loop3): 1 truncate cleaned up [ 250.097064][ T8057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.224268][ T29] audit: type=1400 audit(1788328706.609:2417): avc: denied { write } for pid=8056 comm="syz.3.1367" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.248047][ T8035] loop1: detected capacity change from 0 to 32768 [ 250.351525][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.458431][ T8070] loop3: detected capacity change from 0 to 512 [ 250.526278][ T8078] FAULT_INJECTION: forcing a failure. [ 250.526278][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 250.526443][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.2.1372 Not tainted syzkaller #0 PREEMPT(lazy) [ 250.526561][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.526573][ T8078] Call Trace: [ 250.526579][ T8078] [ 250.526604][ T8078] __dump_stack+0x1d/0x30 [ 250.526686][ T8078] dump_stack_lvl+0x95/0xd0 [ 250.526746][ T8078] dump_stack+0x15/0x1b [ 250.526806][ T8078] should_fail_ex+0x262/0x280 [ 250.526885][ T8078] ? nfc_allocate_device+0xba/0x2e0 [ 250.526953][ T8078] should_failslab+0x8c/0xb0 [ 250.527031][ T8078] __kmalloc_cache_noprof+0x7a/0x400 [ 250.527113][ T8078] ? nfc_allocate_device+0xba/0x2e0 [ 250.527234][ T8078] ? nci_allocate_device+0x95/0x200 [ 250.527307][ T8078] ? __pfx_nci_transceive+0x10/0x10 [ 250.527380][ T8078] nfc_allocate_device+0xba/0x2e0 [ 250.527447][ T8078] nci_allocate_device+0x13b/0x200 [ 250.527614][ T8078] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 250.527735][ T8078] virtual_ncidev_open+0x55/0x130 [ 250.527835][ T8078] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 250.527956][ T8078] misc_open+0x1df/0x220 [ 250.528038][ T8078] chrdev_open+0x2eb/0x3a0 [ 250.528177][ T8078] do_dentry_open+0x49f/0xa60 [ 250.528236][ T8078] ? __pfx_chrdev_open+0x10/0x10 [ 250.528350][ T8078] vfs_open+0x37/0x1e0 [ 250.528413][ T8078] path_openat+0xc01/0x10d0 [ 250.528518][ T8078] do_file_open+0x16c/0x290 [ 250.528569][ T8078] do_sys_openat2+0xa0/0x130 [ 250.528591][ T8078] __x64_sys_openat+0xf2/0x120 [ 250.528649][ T8078] x64_sys_call+0x1f72/0x2550 [ 250.528778][ T8078] do_syscall_64+0x112/0x360 [ 250.528879][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.528954][ T8078] RIP: 0033:0x7f57dffce159 [ 250.529012][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.529140][ T8078] RSP: 002b:00007f57dea27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.529197][ T8078] RAX: ffffffffffffffda RBX: 00007f57e0255fa0 RCX: 00007f57dffce159 [ 250.529245][ T8078] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 250.529291][ T8078] RBP: 00007f57e0065024 R08: 0000000000000000 R09: 0000000000000000 [ 250.529344][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.529394][ T8078] R13: 00007f57e0256038 R14: 00007f57e0255fa0 R15: 00007fff42f19668 [ 250.529520][ T8078] [ 250.541650][ T8079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.541972][ T8079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.709852][ T8090] loop4: detected capacity change from 0 to 512 [ 250.902656][ T29] audit: type=1400 audit(1788328707.289:2418): avc: denied { ioctl } for pid=8101 comm="syz.3.1379" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 251.013061][ T8115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.013238][ T8115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.044606][ T8122] FAULT_INJECTION: forcing a failure. [ 251.044606][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 251.044643][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.0.1386 Not tainted syzkaller #0 PREEMPT(lazy) [ 251.044667][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.044685][ T8122] Call Trace: [ 251.044692][ T8122] [ 251.044701][ T8122] __dump_stack+0x1d/0x30 [ 251.044832][ T8122] dump_stack_lvl+0x95/0xd0 [ 251.044926][ T8122] dump_stack+0x15/0x1b [ 251.044991][ T8122] should_fail_ex+0x262/0x280 [ 251.045067][ T8122] ? nfc_allocate_device+0xba/0x2e0 [ 251.045129][ T8122] should_failslab+0x8c/0xb0 [ 251.045270][ T8122] __kmalloc_cache_noprof+0x7a/0x400 [ 251.045352][ T8122] ? nfc_allocate_device+0xba/0x2e0 [ 251.045511][ T8122] ? __pfx_nci_transceive+0x10/0x10 [ 251.045594][ T8122] nfc_allocate_device+0xba/0x2e0 [ 251.045725][ T8122] nci_allocate_device+0x13b/0x200 [ 251.045796][ T8122] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 251.045950][ T8122] virtual_ncidev_open+0x55/0x130 [ 251.046057][ T8122] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 251.046162][ T8122] misc_open+0x1df/0x220 [ 251.046204][ T8122] chrdev_open+0x2eb/0x3a0 [ 251.046320][ T8122] do_dentry_open+0x49f/0xa60 [ 251.046416][ T8122] ? __pfx_chrdev_open+0x10/0x10 [ 251.046514][ T8122] vfs_open+0x37/0x1e0 [ 251.046557][ T8122] path_openat+0xc01/0x10d0 [ 251.046637][ T8122] do_file_open+0x16c/0x290 [ 251.046769][ T8122] do_sys_openat2+0xa0/0x130 [ 251.046824][ T8122] __x64_sys_openat+0xf2/0x120 [ 251.046886][ T8122] x64_sys_call+0x1f72/0x2550 [ 251.046957][ T8122] do_syscall_64+0x112/0x360 [ 251.047083][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.047198][ T8122] RIP: 0033:0x7fb809d2e159 [ 251.047244][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.047297][ T8122] RSP: 002b:00007fb808787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.047357][ T8122] RAX: ffffffffffffffda RBX: 00007fb809fb5fa0 RCX: 00007fb809d2e159 [ 251.047394][ T8122] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 251.047467][ T8122] RBP: 00007fb809dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 251.047531][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.047566][ T8122] R13: 00007fb809fb6038 R14: 00007fb809fb5fa0 R15: 00007ffd8eb223f8 [ 251.047688][ T8122] [ 251.293382][ T8110] loop2: detected capacity change from 0 to 8192 [ 251.394595][ T29] audit: type=1400 audit(1788328707.779:2419): avc: denied { write } for pid=8133 comm="syz.0.1389" name="buffer_subbuf_size_kb" dev="tracefs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 251.423075][ T29] audit: type=1400 audit(1788328707.779:2420): avc: denied { open } for pid=8133 comm="syz.0.1389" path="/289/tracefs_dir/buffer_subbuf_size_kb" dev="tracefs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 252.183891][ T8163] FAULT_INJECTION: forcing a failure. [ 252.183891][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 252.183992][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.3.1397 Not tainted syzkaller #0 PREEMPT(lazy) [ 252.184023][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.184111][ T8163] Call Trace: [ 252.184120][ T8163] [ 252.184129][ T8163] __dump_stack+0x1d/0x30 [ 252.184159][ T8163] dump_stack_lvl+0x95/0xd0 [ 252.184184][ T8163] dump_stack+0x15/0x1b [ 252.184264][ T8163] should_fail_ex+0x262/0x280 [ 252.184290][ T8163] ? nfc_allocate_device+0xba/0x2e0 [ 252.184317][ T8163] should_failslab+0x8c/0xb0 [ 252.184496][ T8163] __kmalloc_cache_noprof+0x7a/0x400 [ 252.184607][ T8163] ? nfc_allocate_device+0xba/0x2e0 [ 252.184736][ T8163] ? __pfx_nci_transceive+0x10/0x10 [ 252.184943][ T8163] nfc_allocate_device+0xba/0x2e0 [ 252.185037][ T8163] nci_allocate_device+0x13b/0x200 [ 252.185104][ T8163] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 252.185219][ T8163] virtual_ncidev_open+0x55/0x130 [ 252.185334][ T8163] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 252.185465][ T8163] misc_open+0x1df/0x220 [ 252.185539][ T8163] chrdev_open+0x2eb/0x3a0 [ 252.185654][ T8163] do_dentry_open+0x49f/0xa60 [ 252.185775][ T8163] ? __pfx_chrdev_open+0x10/0x10 [ 252.185867][ T8163] vfs_open+0x37/0x1e0 [ 252.185921][ T8163] path_openat+0xc01/0x10d0 [ 252.186056][ T8163] do_file_open+0x16c/0x290 [ 252.186135][ T8163] do_sys_openat2+0xa0/0x130 [ 252.186214][ T8163] __x64_sys_openat+0xf2/0x120 [ 252.186336][ T8163] x64_sys_call+0x1f72/0x2550 [ 252.186497][ T8163] do_syscall_64+0x112/0x360 [ 252.186587][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.186637][ T8163] RIP: 0033:0x7fb291d8e159 [ 252.186745][ T8163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.186795][ T8163] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.186858][ T8163] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 252.186905][ T8163] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 252.186926][ T8163] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 0000000000000000 [ 252.187008][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.187045][ T8163] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 252.187111][ T8163] [ 252.244177][ T8165] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(36.39780378.133495060), cmd(2) [ 252.419898][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.420343][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.576257][ T8181] loop3: detected capacity change from 0 to 512 [ 252.688956][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.689123][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.850648][ T8199] ext4: Unknown parameter 'func' [ 252.945027][ T8204] FAULT_INJECTION: forcing a failure. [ 252.945027][ T8204] name failslab, interval 1, probability 0, space 0, times 0 [ 252.945084][ T8204] CPU: 1 UID: 0 PID: 8204 Comm: syz.3.1409 Not tainted syzkaller #0 PREEMPT(lazy) [ 252.945116][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.945156][ T8204] Call Trace: [ 252.945183][ T8204] [ 252.945220][ T8204] __dump_stack+0x1d/0x30 [ 252.945364][ T8204] dump_stack_lvl+0x95/0xd0 [ 252.945437][ T8204] dump_stack+0x15/0x1b [ 252.945504][ T8204] should_fail_ex+0x262/0x280 [ 252.945572][ T8204] should_failslab+0x8c/0xb0 [ 252.945738][ T8204] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 252.945842][ T8204] ? kvasprintf_const+0xb3/0x130 [ 252.945921][ T8204] ? kvasprintf_const+0xb3/0x130 [ 252.946015][ T8204] kvasprintf+0x8a/0x110 [ 252.946100][ T8204] kvasprintf_const+0xb3/0x130 [ 252.946188][ T8204] kobject_set_name_vargs+0x44/0xe0 [ 252.946387][ T8204] dev_set_name+0x83/0xb0 [ 252.946456][ T8204] ? nfc_allocate_device+0x110/0x2e0 [ 252.946535][ T8204] ? __pfx_nci_transceive+0x10/0x10 [ 252.946700][ T8204] nfc_allocate_device+0x12e/0x2e0 [ 252.946750][ T8204] nci_allocate_device+0x13b/0x200 [ 252.946864][ T8204] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 252.946952][ T8204] virtual_ncidev_open+0x55/0x130 [ 252.947122][ T8204] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 252.947203][ T8204] misc_open+0x1df/0x220 [ 252.947269][ T8204] chrdev_open+0x2eb/0x3a0 [ 252.947444][ T8204] do_dentry_open+0x49f/0xa60 [ 252.947508][ T8204] ? __pfx_chrdev_open+0x10/0x10 [ 252.947681][ T8204] vfs_open+0x37/0x1e0 [ 252.947745][ T8204] path_openat+0xc01/0x10d0 [ 252.947843][ T8204] do_file_open+0x16c/0x290 [ 252.948047][ T8204] do_sys_openat2+0xa0/0x130 [ 252.948144][ T8204] __x64_sys_openat+0xf2/0x120 [ 252.948255][ T8204] x64_sys_call+0x1f72/0x2550 [ 252.948352][ T8204] do_syscall_64+0x112/0x360 [ 252.948455][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.948609][ T8204] RIP: 0033:0x7fb291d8e159 [ 252.948666][ T8204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.948728][ T8204] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.948798][ T8204] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 252.948857][ T8204] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 252.948970][ T8204] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 0000000000000000 [ 252.949032][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.949091][ T8204] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 252.949184][ T8204] [ 253.033982][ T8210] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(36.39780378.133495060), cmd(2) [ 253.234280][ T8217] FAULT_INJECTION: forcing a failure. [ 253.234280][ T8217] name failslab, interval 1, probability 0, space 0, times 0 [ 253.234381][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.3.1413 Not tainted syzkaller #0 PREEMPT(lazy) [ 253.234448][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.234506][ T8217] Call Trace: [ 253.234527][ T8217] [ 253.234549][ T8217] __dump_stack+0x1d/0x30 [ 253.234667][ T8217] dump_stack_lvl+0x95/0xd0 [ 253.234735][ T8217] dump_stack+0x15/0x1b [ 253.234754][ T8217] should_fail_ex+0x262/0x280 [ 253.234774][ T8217] should_failslab+0x8c/0xb0 [ 253.234911][ T8217] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 253.234996][ T8217] ? alloc_inode+0x9a/0x170 [ 253.235082][ T8217] ? alloc_inode+0x9a/0x170 [ 253.235270][ T8217] alloc_inode+0x9a/0x170 [ 253.235360][ T8217] new_inode+0x1d/0xe0 [ 253.235411][ T8217] devpts_pty_new+0x60/0x320 [ 253.235484][ T8217] ? __list_add_valid_or_report+0x38/0xe0 [ 253.235641][ T8217] ptmx_open+0x17e/0x240 [ 253.235758][ T8217] chrdev_open+0x2eb/0x3a0 [ 253.235866][ T8217] do_dentry_open+0x49f/0xa60 [ 253.236008][ T8217] ? __pfx_chrdev_open+0x10/0x10 [ 253.236100][ T8217] ? may_open+0x1ee/0x350 [ 253.236185][ T8217] vfs_open+0x37/0x1e0 [ 253.236247][ T8217] path_openat+0xc01/0x10d0 [ 253.236346][ T8217] do_file_open+0x16c/0x290 [ 253.236449][ T8217] do_sys_openat2+0xa0/0x130 [ 253.236547][ T8217] __x64_sys_openat+0xf2/0x120 [ 253.236619][ T8217] x64_sys_call+0x1f72/0x2550 [ 253.236702][ T8217] do_syscall_64+0x112/0x360 [ 253.236821][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.236939][ T8217] RIP: 0033:0x7fb291d8e159 [ 253.236987][ T8217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.237048][ T8217] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.237113][ T8217] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 253.237211][ T8217] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 253.237263][ T8217] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 0000000000000000 [ 253.237318][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.237363][ T8217] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 253.237427][ T8217] [ 253.518843][ T8217] set_capacity_and_notify: 2 callbacks suppressed [ 253.518890][ T8217] loop3: detected capacity change from 0 to 32768 [ 255.415056][ T8174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.560563][ T8232] loop4: detected capacity change from 0 to 512 [ 255.564270][ T8232] ext4: Unknown parameter 'func' [ 255.691412][ T8238] FAULT_INJECTION: forcing a failure. [ 255.691412][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 255.691539][ T8238] CPU: 0 UID: 0 PID: 8238 Comm: syz.4.1420 Not tainted syzkaller #0 PREEMPT(lazy) [ 255.691568][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.691580][ T8238] Call Trace: [ 255.691586][ T8238] [ 255.691648][ T8238] __dump_stack+0x1d/0x30 [ 255.691701][ T8238] dump_stack_lvl+0x95/0xd0 [ 255.691781][ T8238] dump_stack+0x15/0x1b [ 255.691866][ T8238] should_fail_ex+0x262/0x280 [ 255.691992][ T8238] ? security_file_alloc+0x32/0xf0 [ 255.692071][ T8238] should_failslab+0x8c/0xb0 [ 255.692149][ T8238] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 255.692244][ T8238] ? security_file_alloc+0x32/0xf0 [ 255.692386][ T8238] security_file_alloc+0x32/0xf0 [ 255.692466][ T8238] init_file+0x5b/0x1b0 [ 255.692518][ T8238] alloc_empty_file+0x85/0x1e0 [ 255.692571][ T8238] path_openat+0x50/0x10d0 [ 255.692657][ T8238] do_file_open+0x16c/0x290 [ 255.692772][ T8238] do_sys_openat2+0xa0/0x130 [ 255.692834][ T8238] __x64_sys_openat+0xf2/0x120 [ 255.692897][ T8238] x64_sys_call+0x1f72/0x2550 [ 255.693049][ T8238] do_syscall_64+0x112/0x360 [ 255.693130][ T8238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.693300][ T8238] RIP: 0033:0x7f931a5ee159 [ 255.693355][ T8238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.693414][ T8238] RSP: 002b:00007f9319047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 255.693479][ T8238] RAX: ffffffffffffffda RBX: 00007f931a875fa0 RCX: 00007f931a5ee159 [ 255.693525][ T8238] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 255.693565][ T8238] RBP: 00007f931a685024 R08: 0000000000000000 R09: 0000000000000000 [ 255.693653][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.693692][ T8238] R13: 00007f931a876038 R14: 00007f931a875fa0 R15: 00007ffd81c3b328 [ 255.693787][ T8238] [ 255.708237][ T8226] loop2: detected capacity change from 0 to 512 [ 255.866328][ T8241] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.39780378.133495060), cmd(2) [ 255.990893][ T8243] FAULT_INJECTION: forcing a failure. [ 255.990893][ T8243] name failslab, interval 1, probability 0, space 0, times 0 [ 255.990953][ T8243] CPU: 0 UID: 0 PID: 8243 Comm: syz.2.1422 Not tainted syzkaller #0 PREEMPT(lazy) [ 255.991009][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.991060][ T8243] Call Trace: [ 255.991085][ T8243] [ 255.991111][ T8243] __dump_stack+0x1d/0x30 [ 255.991251][ T8243] dump_stack_lvl+0x95/0xd0 [ 255.991311][ T8243] dump_stack+0x15/0x1b [ 255.991423][ T8243] should_fail_ex+0x262/0x280 [ 255.991486][ T8243] should_failslab+0x8c/0xb0 [ 255.991567][ T8243] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 255.991655][ T8243] ? sock_alloc_inode+0x36/0xf0 [ 255.991795][ T8243] ? sock_alloc_inode+0x36/0xf0 [ 255.991935][ T8243] ? selinux_socket_create+0xfd/0x180 [ 255.992013][ T8243] ? __pfx_sock_alloc_inode+0x10/0x10 [ 255.992075][ T8243] sock_alloc_inode+0x36/0xf0 [ 255.992208][ T8243] alloc_inode+0x40/0x170 [ 255.992303][ T8243] __sock_create+0x121/0x580 [ 255.992366][ T8243] ? __se_sys_futex+0x2f6/0x370 [ 255.992507][ T8243] ? xfd_validate_state+0x45/0xf0 [ 255.992608][ T8243] __sys_socket+0xaf/0x180 [ 255.992679][ T8243] __x64_sys_socket+0x3f/0x50 [ 255.992743][ T8243] x64_sys_call+0x246e/0x2550 [ 255.992859][ T8243] do_syscall_64+0x112/0x360 [ 255.992939][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.992982][ T8243] RIP: 0033:0x7f57dffce159 [ 255.993027][ T8243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.993079][ T8243] RSP: 002b:00007f57dea27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 255.993154][ T8243] RAX: ffffffffffffffda RBX: 00007f57e0255fa0 RCX: 00007f57dffce159 [ 255.993239][ T8243] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 255.993274][ T8243] RBP: 00007f57e0065024 R08: 0000000000000000 R09: 0000000000000000 [ 255.993317][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.993351][ T8243] R13: 00007f57e0256038 R14: 00007f57e0255fa0 R15: 00007fff42f19668 [ 255.993446][ T8243] [ 256.004898][ T8243] socket: no more sockets [ 256.232371][ T8253] loop2: detected capacity change from 0 to 512 [ 256.235152][ T8253] ext4: Unknown parameter 'func' [ 256.293939][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.299346][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.464846][ T89] Bluetooth: hci0: Frame reassembly failed (-84) [ 256.582326][ T8274] loop4: detected capacity change from 0 to 512 [ 256.595056][ T8274] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1429: bg 0: block 5: invalid block bitmap [ 256.595144][ T8274] loop4: lost filesystem error report for type 5 error -117 [ 256.597453][ T8274] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 256.597507][ T8274] loop4: lost filesystem error report for type 5 error -117 [ 256.597844][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 256.597895][ C0] EXT4-fs (loop4): initial error at time 1788328712: ext4_validate_block_bitmap:436 [ 256.598043][ C0] EXT4-fs (loop4): last error at time 1788328712: ext4_mb_clear_bb:6680 [ 256.598907][ T8274] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1429: invalid indirect mapped block 3 (level 2) [ 256.599115][ T8274] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.600318][ T8274] EXT4-fs (loop4): 1 orphan inode deleted [ 256.600372][ T8274] EXT4-fs (loop4): 1 truncate cleaned up [ 256.601496][ T8274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.701619][ T29] audit: type=1400 audit(1788328713.079:2421): avc: denied { write } for pid=8273 comm="syz.4.1429" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.728442][ T8278] loop3: detected capacity change from 0 to 512 [ 256.728736][ T8278] ext4: Unknown parameter 'func' [ 256.806629][ T8280] FAULT_INJECTION: forcing a failure. [ 256.806629][ T8280] name failslab, interval 1, probability 0, space 0, times 0 [ 256.806673][ T8280] CPU: 0 UID: 0 PID: 8280 Comm: syz.3.1431 Not tainted syzkaller #0 PREEMPT(lazy) [ 256.806708][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.806726][ T8280] Call Trace: [ 256.806735][ T8280] [ 256.806744][ T8280] __dump_stack+0x1d/0x30 [ 256.806778][ T8280] dump_stack_lvl+0x95/0xd0 [ 256.806889][ T8280] dump_stack+0x15/0x1b [ 256.806947][ T8280] should_fail_ex+0x262/0x280 [ 256.806970][ T8280] ? security_file_alloc+0x32/0xf0 [ 256.807049][ T8280] should_failslab+0x8c/0xb0 [ 256.807087][ T8280] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 256.807116][ T8280] ? security_file_alloc+0x32/0xf0 [ 256.807153][ T8280] security_file_alloc+0x32/0xf0 [ 256.807203][ T8280] init_file+0x5b/0x1b0 [ 256.807222][ T8280] alloc_empty_file+0x85/0x1e0 [ 256.807254][ T8280] path_openat+0x50/0x10d0 [ 256.807348][ T8280] do_file_open+0x16c/0x290 [ 256.807387][ T8280] do_sys_openat2+0xa0/0x130 [ 256.807410][ T8280] __x64_sys_openat+0xf2/0x120 [ 256.807439][ T8280] x64_sys_call+0x1f72/0x2550 [ 256.807522][ T8280] do_syscall_64+0x112/0x360 [ 256.807570][ T8280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.807640][ T8280] RIP: 0033:0x7fb291d8e159 [ 256.807737][ T8280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.807764][ T8280] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.807855][ T8280] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 256.807933][ T8280] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 256.807994][ T8280] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 0000000000000000 [ 256.808037][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.808080][ T8280] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 256.808144][ T8280] [ 256.846297][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.005587][ T8283] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.39780378.133495060), cmd(2) [ 257.059929][ T8284] loop4: detected capacity change from 0 to 512 [ 257.085749][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.086024][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.124343][ T8291] FAULT_INJECTION: forcing a failure. [ 257.124343][ T8291] name failslab, interval 1, probability 0, space 0, times 0 [ 257.124386][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.3.1435 Not tainted syzkaller #0 PREEMPT(lazy) [ 257.124422][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.124502][ T8291] Call Trace: [ 257.124512][ T8291] [ 257.124522][ T8291] __dump_stack+0x1d/0x30 [ 257.124569][ T8291] dump_stack_lvl+0x95/0xd0 [ 257.124594][ T8291] dump_stack+0x15/0x1b [ 257.124701][ T8291] should_fail_ex+0x262/0x280 [ 257.124784][ T8291] should_failslab+0x8c/0xb0 [ 257.124825][ T8291] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 257.124860][ T8291] ? sock_alloc_inode+0x36/0xf0 [ 257.124884][ T8291] ? sock_alloc_inode+0x36/0xf0 [ 257.124946][ T8291] ? selinux_socket_create+0xfd/0x180 [ 257.124986][ T8291] ? __pfx_sock_alloc_inode+0x10/0x10 [ 257.125067][ T8291] sock_alloc_inode+0x36/0xf0 [ 257.125162][ T8291] alloc_inode+0x40/0x170 [ 257.125195][ T8291] __sock_create+0x121/0x580 [ 257.125216][ T8291] ? __se_sys_futex+0x2f6/0x370 [ 257.125292][ T8291] ? xfd_validate_state+0x45/0xf0 [ 257.125326][ T8291] __sys_socket+0xaf/0x180 [ 257.125349][ T8291] __x64_sys_socket+0x3f/0x50 [ 257.125423][ T8291] x64_sys_call+0x246e/0x2550 [ 257.125447][ T8291] do_syscall_64+0x112/0x360 [ 257.125482][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.125554][ T8291] RIP: 0033:0x7fb291d8e159 [ 257.125573][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.125597][ T8291] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 257.125622][ T8291] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 257.125647][ T8291] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 257.125660][ T8291] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 0000000000000000 [ 257.125718][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.125745][ T8291] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 257.125807][ T8291] [ 257.170031][ T8291] socket: no more sockets [ 257.494520][ T8300] loop4: detected capacity change from 0 to 512 [ 257.779464][ T8306] loop3: detected capacity change from 0 to 1764 [ 258.364631][ T8310] loop2: detected capacity change from 0 to 4096 [ 258.379304][ T8310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.450945][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.517882][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 258.524081][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 258.533151][ T8315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1442: bg 0: block 5: invalid block bitmap [ 258.533188][ T8315] loop4: lost filesystem error report for type 5 error -117 [ 258.545656][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 258.545676][ C1] EXT4-fs (loop4): initial error at time 1788328714: ext4_validate_block_bitmap:436 [ 258.545703][ C1] EXT4-fs (loop4): last error at time 1788328714: ext4_validate_block_bitmap:436 [ 258.580382][ T8315] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 258.580413][ T8315] loop4: lost filesystem error report for type 5 error -117 [ 258.589482][ T8315] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1442: invalid indirect mapped block 3 (level 2) [ 258.589513][ T8315] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 258.610380][ T8315] EXT4-fs (loop4): 1 orphan inode deleted [ 258.610404][ T8315] EXT4-fs (loop4): 1 truncate cleaned up [ 258.610810][ T8315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.665959][ T29] audit: type=1400 audit(1788328715.049:2422): avc: denied { write } for pid=8314 comm="syz.4.1442" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.310428][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.310727][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.363099][ T8325] FAULT_INJECTION: forcing a failure. [ 259.363099][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 259.363199][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.3.1443 Not tainted syzkaller #0 PREEMPT(lazy) [ 259.363228][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.363239][ T8325] Call Trace: [ 259.363245][ T8325] [ 259.363258][ T8325] __dump_stack+0x1d/0x30 [ 259.363281][ T8325] dump_stack_lvl+0x95/0xd0 [ 259.363471][ T8325] dump_stack+0x15/0x1b [ 259.363592][ T8325] should_fail_ex+0x262/0x280 [ 259.363673][ T8325] ? security_file_alloc+0x32/0xf0 [ 259.363750][ T8325] should_failslab+0x8c/0xb0 [ 259.363849][ T8325] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 259.363981][ T8325] ? security_file_alloc+0x32/0xf0 [ 259.364144][ T8325] security_file_alloc+0x32/0xf0 [ 259.364222][ T8325] init_file+0x5b/0x1b0 [ 259.364297][ T8325] alloc_empty_file+0x85/0x1e0 [ 259.364376][ T8325] path_openat+0x50/0x10d0 [ 259.364455][ T8325] do_file_open+0x16c/0x290 [ 259.364555][ T8325] do_sys_openat2+0xa0/0x130 [ 259.364619][ T8325] __x64_sys_openat+0xf2/0x120 [ 259.364680][ T8325] x64_sys_call+0x1f72/0x2550 [ 259.364820][ T8325] do_syscall_64+0x112/0x360 [ 259.365085][ T8325] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 259.365247][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.365310][ T8325] RIP: 0033:0x7fb291d8e159 [ 259.365362][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.365423][ T8325] RSP: 002b:00007fb2907e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.365483][ T8325] RAX: ffffffffffffffda RBX: 00007fb292015fa0 RCX: 00007fb291d8e159 [ 259.365571][ T8325] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 259.365612][ T8325] RBP: 00007fb291e25024 R08: 0000000000000000 R09: 0000000000000000 [ 259.365648][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.365684][ T8325] R13: 00007fb292016038 R14: 00007fb292015fa0 R15: 00007ffdec007848 [ 259.365784][ T8325] [ 259.437478][ T8326] set_capacity_and_notify: 1 callbacks suppressed [ 259.437609][ T8326] loop2: detected capacity change from 0 to 512 [ 259.440879][ T8326] ext4: Unknown parameter 'func' [ 259.451266][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.641136][ T8332] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.39780378.133495060), cmd(2) [ 259.728565][ T8335] FAULT_INJECTION: forcing a failure. [ 259.728565][ T8335] name failslab, interval 1, probability 0, space 0, times 0 [ 259.728703][ T8335] CPU: 0 UID: 0 PID: 8335 Comm: syz.2.1447 Not tainted syzkaller #0 PREEMPT(lazy) [ 259.728774][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.728828][ T8335] Call Trace: [ 259.728858][ T8335] [ 259.728891][ T8335] __dump_stack+0x1d/0x30 [ 259.728989][ T8335] dump_stack_lvl+0x95/0xd0 [ 259.729076][ T8335] dump_stack+0x15/0x1b [ 259.729154][ T8335] should_fail_ex+0x262/0x280 [ 259.729226][ T8335] ? security_inode_alloc+0x37/0x100 [ 259.729291][ T8335] should_failslab+0x8c/0xb0 [ 259.729420][ T8335] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 259.729492][ T8335] ? security_inode_alloc+0x37/0x100 [ 259.729515][ T8335] security_inode_alloc+0x37/0x100 [ 259.729614][ T8335] inode_init_always_gfp+0x495/0x4e0 [ 259.729759][ T8335] ? __pfx_sock_alloc_inode+0x10/0x10 [ 259.729828][ T8335] alloc_inode+0x58/0x170 [ 259.729979][ T8335] __sock_create+0x121/0x580 [ 259.730109][ T8335] ? xfd_validate_state+0x45/0xf0 [ 259.730180][ T8335] __sys_socket+0xaf/0x180 [ 259.730266][ T8335] __x64_sys_socket+0x3f/0x50 [ 259.730355][ T8335] x64_sys_call+0x246e/0x2550 [ 259.730432][ T8335] do_syscall_64+0x112/0x360 [ 259.730584][ T8335] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 259.730667][ T8335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.730802][ T8335] RIP: 0033:0x7f57dffce159 [ 259.730858][ T8335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.730914][ T8335] RSP: 002b:00007f57dea27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 259.730970][ T8335] RAX: ffffffffffffffda RBX: 00007f57e0255fa0 RCX: 00007f57dffce159 [ 259.731014][ T8335] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 259.731051][ T8335] RBP: 00007f57e0065024 R08: 0000000000000000 R09: 0000000000000000 [ 259.731184][ T8335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.731221][ T8335] R13: 00007f57e0256038 R14: 00007f57e0255fa0 R15: 00007fff42f19668 [ 259.731314][ T8335] [ 259.737563][ T8335] socket: no more sockets [ 259.804454][ T8340] loop4: detected capacity change from 0 to 128 [ 259.811149][ T8340] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.816453][ T8340] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.080195][ T8350] loop1: detected capacity change from 0 to 512 [ 260.201726][ T5176] Bluetooth: hci0: Frame reassembly failed (-84) [ 260.221722][ T8362] loop4: detected capacity change from 0 to 512 [ 260.228033][ T8362] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1455: bg 0: block 5: invalid block bitmap [ 260.228131][ T8362] loop4: lost filesystem error report for type 5 error -117 [ 260.231160][ T8362] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 260.231219][ T8362] loop4: lost filesystem error report for type 5 error -117 [ 260.231663][ T8362] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1455: invalid indirect mapped block 3 (level 2) [ 260.231759][ T8362] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 260.232735][ T8362] EXT4-fs (loop4): 1 orphan inode deleted [ 260.232800][ T8362] EXT4-fs (loop4): 1 truncate cleaned up [ 260.237068][ T8362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.334908][ T29] audit: type=1400 audit(1788328716.719:2423): avc: denied { write } for pid=8361 comm="syz.4.1455" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.383803][ T8365] loop2: detected capacity change from 0 to 1024 [ 260.398487][ T8365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.412338][ T8365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.431381][ T29] audit: type=1400 audit(1788328716.819:2424): avc: denied { write } for pid=8364 comm="syz.2.1456" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.459692][ T8371] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.39780352.133495060), cmd(2) [ 260.484041][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.515311][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.567349][ T29] audit: type=1400 audit(1788328716.949:2425): avc: denied { setattr } for pid=8381 comm="syz.0.1462" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.567937][ T29] audit: type=1400 audit(1788328716.949:2426): avc: denied { write } for pid=8381 comm="syz.0.1462" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.568368][ T29] audit: type=1400 audit(1788328716.959:2427): avc: denied { create } for pid=8381 comm="syz.0.1462" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 260.656651][ T8379] loop4: detected capacity change from 0 to 8192 [ 260.672468][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.672601][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.592173][ T8410] loop4: detected capacity change from 0 to 512 [ 261.594844][ T8410] ext4: Unknown parameter 'func' [ 261.626530][ T8412] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.39780352.133495060), cmd(2) [ 261.657493][ T8414] loop4: detected capacity change from 0 to 512 [ 261.665113][ T8414] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1470: bg 0: block 5: invalid block bitmap [ 261.665151][ T8414] loop4: lost filesystem error report for type 5 error -117 [ 261.668872][ T8414] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 261.668941][ T8414] loop4: lost filesystem error report for type 5 error -117 [ 261.669844][ T8414] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1470: invalid indirect mapped block 3 (level 2) [ 261.670015][ T8414] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.670954][ T8414] EXT4-fs (loop4): 1 orphan inode deleted [ 261.671006][ T8414] EXT4-fs (loop4): 1 truncate cleaned up [ 261.674174][ T8414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.760241][ T29] audit: type=1400 audit(1788328718.149:2428): avc: denied { write } for pid=8413 comm="syz.4.1470" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.267782][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 263.166738][ T8419] loop3: detected capacity change from 0 to 8192 [ 263.508362][ T8419] ================================================================== [ 263.508416][ T8419] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 263.508476][ T8419] [ 263.508483][ T8419] write to 0xffff88810078621c of 4 bytes by task 8421 on cpu 0: [ 263.508499][ T8419] xas_set_mark+0x12b/0x140 [ 263.508525][ T8419] __folio_start_writeback+0x16b/0x370 [ 263.508563][ T8419] __block_write_full_folio+0x526/0x8d0 [ 263.508594][ T8419] block_write_full_folio+0x2c1/0x2e0 [ 263.508633][ T8419] __mpage_writepages+0x722/0x1370 [ 263.508673][ T8419] fat_writepages+0x26/0x30 [ 263.508715][ T8419] do_writepages+0x1b9/0x300 [ 263.508751][ T8419] file_write_and_wait_range+0x178/0x2f0 [ 263.508797][ T8419] simple_fsync_noflush+0x42/0x120 [ 263.508837][ T8419] fat_file_fsync+0x7e/0x100 [ 263.508863][ T8419] vfs_fsync_range+0xc5/0xe0 [ 263.508882][ T8419] generic_file_write_iter+0x1a3/0x1f0 [ 263.508912][ T8419] iter_file_splice_write+0x6a0/0xa60 [ 263.508957][ T8419] direct_splice_actor+0x158/0x280 [ 263.509002][ T8419] splice_direct_to_actor+0x2f9/0x680 [ 263.509048][ T8419] do_splice_direct+0x119/0x1a0 [ 263.509085][ T8419] do_sendfile+0x37d/0x640 [ 263.509103][ T8419] __x64_sys_sendfile64+0x105/0x150 [ 263.509135][ T8419] x64_sys_call+0x1015/0x2550 [ 263.509182][ T8419] do_syscall_64+0x112/0x360 [ 263.509212][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.509232][ T8419] [ 263.509237][ T8419] read to 0xffff88810078621c of 4 bytes by task 8419 on cpu 1: [ 263.509253][ T8419] file_write_and_wait_range+0x130/0x2f0 [ 263.509290][ T8419] simple_fsync_noflush+0x42/0x120 [ 263.509334][ T8419] fat_file_fsync+0x7e/0x100 [ 263.509369][ T8419] vfs_fsync_range+0xc5/0xe0 [ 263.509395][ T8419] generic_file_write_iter+0x1a3/0x1f0 [ 263.509423][ T8419] iter_file_splice_write+0x6a0/0xa60 [ 263.509466][ T8419] direct_splice_actor+0x158/0x280 [ 263.509509][ T8419] splice_direct_to_actor+0x2f9/0x680 [ 263.509558][ T8419] do_splice_direct+0x119/0x1a0 [ 263.509600][ T8419] do_sendfile+0x37d/0x640 [ 263.509622][ T8419] __x64_sys_sendfile64+0x105/0x150 [ 263.509665][ T8419] x64_sys_call+0x1015/0x2550 [ 263.509699][ T8419] do_syscall_64+0x112/0x360 [ 263.509731][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.509752][ T8419] [ 263.509756][ T8419] value changed: 0x05000021 -> 0x00000021 [ 263.509767][ T8419] [ 263.509771][ T8419] Reported by Kernel Concurrency Sanitizer on: [ 263.509782][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: syz.3.1471 Not tainted syzkaller #0 PREEMPT(lazy) [ 263.509816][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.509833][ T8419] ================================================================== [ 263.671982][ T8387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.793158][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.