last executing test programs: 9.054969735s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000140)={'ip6gre0\x00', @random='\x00\x00\x00\b\x00'}) sendmmsg$unix(r4, &(0x7f0000000700), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000740)=0x2) recvmmsg(r3, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x2800091, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="d016c8d55cc9329d2e0101797fb5f52944f2b8694bae76ff77df23047285b916fba6b36c1b409890d28883acf4093105048a0c8cea76a257b7ee39a0fa772953b17ccd5d14328bcd8cd30f4cf0aa220eb9fcb0883de194766c39954634b5f9a0ca862e09200c5cf06ec1214c819ffadf5291b8ed1536d9145da9796ebeb922e3eea04914e29748eca2c90ffd65bace2ec8cb6808e9e719426ee9bb119acecbf8a735429439a2093d21aecabbdd15d44ddcf79b892ccb1b096880abd5988d69079281b4619ee58eaae0d054eaa813a0a1ee847cbef8563408ab7db29a8965f5a121b56175f4be4dfbf2e6da7e4b74b67f37ec6660227c655b67e0f1a41c18ae60ab4bf766c5460f296625113944f84df515da615e597357d29059cb92f354e88594b05de4328d59b0e0e099e996c126c6663c9751466f81e2059cd90aef508fa30a1b0cd6b0c1d9fc04a8831801d0c7ba813dc1e59614bf56c69ae20f1683889e7247a12b740a9656421981e0763c64e4ade9be51ff260d61fb3a8ad54bfe09225d3a8402f426fcd2243a4c246669dddec2bf5fd601dccfd57e680f0e869deffb3f91c6a12fd339a61bf2027566c590343154e79969abee74a57e0916438c58198a4816d31b2ee9d481fd2ea6264fa36185d7e025d245dc151fcb87c3502ef537695b244dccaf592c543565cccb52e177ecfa5a5adf612afe4b98edfaa1d2d4ad14ddf67ad5c33bc86967c305312b1df912286ad92e21fb025dc18c1f262f733eeaa0f17f437f41a2ea816cad63e736d6182b96da94b23dd86130a388b4b0b84554eb4ce851ce5610049ace33cf1282b21b771733baad9030dee46cd6209df098d04a131eafc8b2ed58c71461c50cadcc912ab0edd9eb090d36661df4653053608b6156d99298b7dfea7fe67ede7d040dac6ac66e78967eb3c05ddb469c90bc8e5a8f1c74088caa5ba98db4ffb9a8aca8f8f01a0383c349a5dfb139362a5f665abb5f5d07a5c59b5c35c7cb8bb53e6baaaa42352b09f443477dfa6bed6049339101ceecc3bd1b327fdf2ec8ed7d1e5cbd02d1630e34e6f2c7150f47ff9a974a88ac2e8f94fde99f4cad1554ca0f7520b0a5af672346f0cca349153c5b939a32b07ac78909bebdccdbd3b1ab3532c6d061c2665ee9d67887ec209d1cf5125989588c79a18b99e2ae30bf3bafeffd6b2ff032ba4b6f64b62abdf0f53feb4b7d722dfe13dddc79c9d6f655f01db1cf6d92057332a96d92069a4347235a08b6ae91417cee0fe37a339beaedcf50b3b68cf7b99d22b29d49137bbc7bc38ad6cf6e200e29b94077305293825c4476dc17634a3ecb1c75b289c8e270f68c9dcb8341471fef9a1b8e0d191a8cbe6192b0738f44144379b15d2db2269797c09c1789be60c9e52f452a5205c66782c91fd2573d27f65161a5eda08df1b0e7ee3d4e8b6c1a9b4fc87392e16e8c0dba1884adc52acc7cdd93c8f83feb5d44cab62b9856678eaaf9bb82825230c44ea177bb62ab36fcb8875bed5b4f9ad3eba65a75fc6428fe3abce7b42b992fa4dc218669e848f3d07553e6d381ecc3e1f9c9ac3650c1d11844cd29352132a07e9324b3fb70166977855669ec0cfe75cc34b8e21044e142ac7da564b1ececd3a985c4b3d0bdefec84a96c13c9a496b80cfc1a915804646fd14ca5e90b036c9f247f564af75ae851203c8640ecfa25c1837167c91b977a07fc1b88de3a257b3bb63a380bee62d7300dd84aa087f579172651f2db55f8e0c6efcf759a5343f5e59110177e3f7b948dcb0d33ab9ebec1d1b987c55d10bc6214cb81866dd5ae794ae89a3e9ceef6f73714138b69ccf6562a136bbff44eaf0d2b8587db3b9a6dbedb48930b9541e0d6c21239ec2ee78b77957742490c651cabdec8fe87731eaa77811ab31a6e47f21bc1e6000b20f6e9118bf7baeb6985047f937c7ca4e27ad16a8b108e0e1e7645c5e181bdf3354c7b11ff44c7a9600f8e0b4919f24cdf72abcacb509fe56418430bb1a46fe4044e886574c0ca22e1a9e316784510220d9e628744e9cb38c9805570935f0407f1596fb9965c1575963643d85a7f1e4f641d66c4fbb8d962857aea040d0d6f4e324bcc2c157efd5e9313a41069728ac75a84022814011420428f0c84d8808cf228379c5770a10dd4a2540ee9b49cf4c67423ce11545415cb3b3a271fad52979dfb205e765bbbdf27db6871373e5704aea7f8da0f71b6d2cd51a4c13e5140c9018d98c820e572df54a8accb9f378bf768325939913efdf90b69debc59d2d4195f2c60be37683201a157bdd25f365d35c97eb3d8579d98b1d270164b2f4b0f590f6cdbb9bcc8d0da4439b6cdad548c7a7976b89fabd64ee53f65c3bac50702a14d393bc1469db6f7fa5a607c6b09eb6157982fe7b70a50e2508bc9f2d6e6ed98f7f68e8a26683db2776f19422688d72c2d3c128c10382a81c970064dac4fdfd5873c711bdb902f70bb72c95b2db18ab3d4001f38a0d59a43b12f5002909513df9d90fe1abb35111ca57847f37b56242676fd2ca33b7bf0f858ccfc3c600af12235b26f488f94c6bbdee6d3b42f1cc9db75d8219b9a2c96f4ea153d3fa14517a1a5369c71f136c2a9ae234a85882d21b66354d08eadb2f68a5e932341596b44bea306f11a0a4ac5c2561c2540d025545a8735dbda092003709e8f4db40a744ae99f96750a036b0958a521202477b4d3eb94aada9a94045cdc70861a8d8fc08e79a960022f34231897f1a4816e998d0589146ce4b2426050d166424d7c3d5209f7814d824172aec43c4bd68f49855363917a71c7f91636f74bd0eeb4df24a846cb627ab8248b5400d3e2d8fe1297c6422cb5fae73be62c3015d4d4b5d40dd1206eb7228884ac609fbd255b12677ad5a535ec3bf2855ea4004ae625ceb787da5a2b17cf6de63a9890658e8f0fd497e029418752193344486d284059d1d7c13c8b170dc1a54db0192af587fdb94da913cfdefb2939c586f34ae3ec3d2fce5d08ba13de9bf027ff4fbfcb2cb2a20df6f5600a33c7d5026e5e6091fe904445ee23bcf156a7945136c4002a4b060085f36178f8909770847bba3ed7aa4ae35e76b77dd4782d73fa7f07e4b1851d51bac51bb8f6ab029a936e321c2401d061db416da765b6752b1c1b7562f2292315acb39b87d3763426dadf0b6097ad6221be9594ad73fe562b84c2e7113c8587bb6234b023bf421b1964fbda393f38a593c31a99679065f0bb2ed89d232b70355021def8327706e70a3f8efc42f048ef4de94e676e9d2c7bc618ee9b5778b90068f4405f0787682a5b7d1e641a5ad595ddbc2476b6b17ef86df5c474b8299a0ab5fe884bef5f172cf945224b5ddc24d7004ae2bcf26d6efa44f4fa9810f05c3430aa25812e31110a3e2ca2ef48189729ef0317e71895bda2106596351a3f77d1457361b7fe32ca77422e7eccb8ea3f8946a2ca0a031e2f2d0862bb3e64ecfaf4cf6b8c976de12848bb21ac75924245a95eab2509da5cfd9c1da5de34f473412611320096c82e9a924f343c1ee6008277d82020fd842669eb3e2945e96306b9cd869872687f421dd8f0c0891fc481c2a0154b23c229cc20444b4d8713722be4b9142c511f237cfd49a3fe8e296f8a6dbdb28e73e8f0b4c489287cee53388dc6d839d23db1f9e90ff475dd4ee5e728666edf8c9d872a6902204ee7d11e37fc32d4a7748267a26bab65335421f5898dfd50dfc2d0a9b9a7829fb1a5a6c2088337363f7a2088f2dfa9617fa299fbe2f6162aebb7847fad46017ff078c53354d7a8a7fe86e440299fe7d7d654ad045d5b9849a906b0ecce0cf46fc4f348a9c240e8f9d7efb699e9ff4868f28f560521502929c32d7447ab4b7c196fbb706c41bef4e8b655a185140d24d39f8c043fc5f304856cff55bd881ed52fe385f93d48320683fccc8299f514bdda70bae383c00e519c2bfc4ff03df76f91d270c86dd0499f145ada66dcb9d4cfbad8b97fa43873fb4695559af885daf12866be73f01c98ad836a652afbbb66e8ea6308884feae5efe796ce67ea24f83f3a7938c55f216daf22d0133cc0476d851b8449c10b5e6fa1c598c10de9f7085c66930cf24520fac24e71bebb0320c08e8cdf3fa2e8b2517285208de28e251f5b6f796d3ef0749bf67e1f2c178b0715705dfc0fdddf8d2a6c856323fd9af1a79855cc9ac9662df8664d483252a04ce639eeb4e73ea685e617e844b9aca90758f98c5ced2766f67e845ad3e8afa379bc56bb4512aab985d8e8e3ebcd3cb91ad2af343936c11e7e3dc549f9cdb754ef5296175e6252b22788bb4c25c7d785b82541c63c2bf84770ba032008b794bdd166402bb27fe65aaf15f2febf80e34038b771ed5fb7ed7417799a0d7895ec6226206c415da2dc59f09e1086a38b62ae2125522714a8f1ec56a4b376800937e62c42d030fb025789e1e30dc56df4d6658d67b1d0690b5d33364329b6f2e9e13166f5520064223661d08eb774dde4a6abb7e549b708ce92db767829ab585d3fdc773513d14dc8532618da09d60abcb341f50936bf45ce2d14dcc0ff14f9e58aa0069c0dcba9ee8f53f32b49450f18db0c47ce85ea935baa4729bd1d576364429e88b0b9792ff6e8095c0ca8701257685ce97a3b47340b45ff902d7fe66ad00e655902a98589e63a1f7916866f50a9ba8660e4c15b0aa60b14f21081923cdc61c085018d345592301a989ae3c64e7cff3f094e7fafe723eb2719a4fda9536005f84e5c8a107963f6b2681cff060dcd537481fb4f50c756df258bf7210c52252558c3df00c2e1f82cb1faa740de72d0f974de9cd4a2a1c37027d381f8689fd4d08f3a5c228a89e9b096a73189be0c8ce2660b571db8bed81252fa7d1122da07df6212a0d0adbf911d7dc16660bf7abf4764d4b7708d0912287493c8fddaea467cfaae7a24ba0907d98c847e8697d507cf82a86203a1d89c34b04db579ba03cb1cfbcdd65a652a36435c989b423de545f368bde41f33e76ee65ca5538bc89c29e36f725ad8385611ebd32afdb2e209676aff0df1577620524c6818e064cea1a349066c9ad27643494c91fb0af9c54ce88568197e8dea217df827981cf4b6affd2078fc5f09c5c292dc70000188e977901a20cafe90c3463a8274f02e65f8d3c42242c61813adb21a0807ad474347d429aadd7d05a63cedd93f9c6cfdc74996068dcbda1ec88621871e1f3dc67fb7e883150946ab498141775ec710413f0154f8ef088777997a5b9b3103f00a04b4ad3cb5018864c7e456b17d732274dce1c9b1a574a7a4e86b8f609c0a58a08e6acfc0ac0961604a8dc6663b0fcfae347881b7383577fb6267c30efe043e052a569eaa76d4e0168d6333bd11b9d5c1479a9b24216b9dd1b56dfc3a94ff37ae2a95844f6bd878a8191d078426c7932911acc89407709c1abd0165b0a53f93612574e77daf90d4f18566d1ed90764f19615c2a8e860d18d2f7bde00a865533418d070e175a09f237a63dd007916d9e80e8f2b985f6732274841aaa815afc8a769db6a18d4a832687731e54be2ffb182fd9802335ea2fde0a39fccf1ef3d8374fc416c5954697195acdafa90daf37c43b6fd218ee7b6365d1bcc3e5372ac6e30f474ccfa76c7004d7c860d13bc1bdfa121756d9d39478e18827a8dc8263771a62524eb2c32683117b47892fff88708b50082d3f9f50e66684ead47776fde241596c4005631e438d95b3213fd660f8824f27045d7e0c8974b0c44df4503bd2203681c159e389f5230d5ebf8025ae27c8348915dc014a1a539d", @ANYRES32], 0x55, 0x1be, &(0x7f0000001900)="$eJzsmDFv2lAUhc+zjS1XlejaLq1UJOhQY5u2KkMH1LFDK7Vq1Q1UXERrSgUegKn9A107d+6QGWXhfyRDkilDki1TpDh69jN+ITgRAiGk3G+4Pva7PB9f4CABgiBuLQf7p3tbxYLJ9V0UYIjrh2rao0j94/zZk5322+2/9snuePKmOrOdvuj9NQCTmopAnIdhGMrrBXH8ACXROdTT9U9gsISuQ8FHoT0wfBb6m6S7vN+yvrZ9z/rS9Ztc2Lw4vLi8VGb9Hf9maEr+mLTeH46+N3zf6y0vXnPb85ayZmck/moKXkn+5PcrmY2dzg8OFDhCV8DwXuiXMJLZxCORnv+Blu6vLvn8fH4rm9rGi/v5G3py2BSrGyvMNFnWeXfxRf+10KsYuDgy12t1VeK/CaxmwzQ/w38MRSmfNCk/ykHnZ7k/HD1tdxotr+X9cN3KC/uZbT93y1EQxTUrAqHBjPLpznR/Ncxl9OpMx6ARBD0nrtNzd2Ag6LnzEleP8k9B6XHsms35kYs+JvfYI34oqcB5GJNh40/mwxAEQRAEQRAEQRAEQRAEQVzLQzP+l/US1SuX3HdR90UAAAD//2C6a2w=") read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f0000003b00)='.\x00', &(0x7f0000003b40), 0x220a000, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003c00)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000001c0)=@arm64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000003cc0)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000003d00)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000040)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000080)=0x4, 0x4) bind$can_raw(r7, &(0x7f00000000c0), 0x10) unshare(0x4000080) 6.876735665s ago: executing program 2 (id=14): syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) read$msr(0xffffffffffffffff, &(0x7f0000000340)=""/141, 0x8d) syz_open_dev$usbmon(&(0x7f00000002c0), 0x7, 0x17bc00) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa04080, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f0000000f80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000064c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000006500)=0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000480)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000006540)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000006580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000065c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, &(0x7f0000000400)="0cadbb202efe40624dc52ba9bb337a38b8a7f5370b3b267db47972b7a7d6e2296e0f846f09d35aa7ef0d0cd019132b3480d524baa0a65766ba34cbcec9d10f4df21b37755c74a6a27f089f6bde2fafb45a91") connect$unix(r3, &(0x7f0000006600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x0, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000006700)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000006740)='9p\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'wg0\x00', {0x6}, 0x8}) 5.318680563s ago: executing program 3 (id=35): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0xfe, 0x1204, &(0x7f00000026c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) truncate(&(0x7f0000000740)='./file2\x00', 0xda) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x108) fsopen(&(0x7f0000000380)='ramfs\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.118157633s ago: executing program 3 (id=36): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$eJzs08FLbGUUAPBzp4bp9d5zHvGgRe3e8CCwhCQSciCRYXCjYmUuWgsuaiG4cDEo46zN/oHCVDA30t6laSAKuhJpJfMPKG1mETdG7zgQtal8ovx+i/nuPZx7vvPxnQnutVwUn1w/pYWI+OPvcp5FROHm7afOQ+FxfLH1ZWWyPj408Xl8lMRXEVF597pcEt2qSff7tFNn5FEcrx4MX+bj8MXJfmktl8V3chGLEfH1+Xrx0T81nf9vZ+bh2C7vFZcas9Xl+XIhqrVm/3Rn8mIwiVicygZr52p9rf3zxv+7f3uir/afOa3WmqXjgY2jdOzi+6cf5PePWx/+epXVc/N/4GH5tD1Sje79//C8flZvjb7cnOvrfT12F1ayi/89Wz/5redO+wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6u7fJeKxqz1eX58sxptdbsn36/8s63lW+++/jHwYXJtwencu2s5Db3Ly418tlbrVkqDGwcpWMX8XS2HXizk9d7ey1wh957HLHUnr/O/T6vn9Vboy835/p63zrbXVjJ4ulfPyy+4kYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHujEotpOjSRi0jil6QbTwvXayf0c7aOZfGRwmfJ6sHw5dazwxcn+6W18Sy+8yRLPF8vdqv13PYx+Jf+DAAA//84pm1S") sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x100000}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_adj\x00') writev(r4, &(0x7f0000000380)=[{&(0x7f00000003c0)='0', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.55224513s ago: executing program 4 (id=38): syz_clone(0x48000080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xfffffec1) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x100010, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000002c0)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) syz_open_pts(r1, 0x141601) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000004700)={0xb, 0x75, 0x1}, 0xb) 4.15775273s ago: executing program 3 (id=44): bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x12, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000016c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.903142576s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000d00)=""/4096, 0x1000) 3.810422355s ago: executing program 3 (id=49): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a010400000000000000000a000005e0"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.626739254s ago: executing program 4 (id=52): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) 3.626548674s ago: executing program 4 (id=53): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) openat(0xffffffffffffffff, 0x0, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.626347824s ago: executing program 3 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev={r2}, [@raid={0x0, 0x8, 0x0, 0x78, 'raid\x00', {'raid1', 0x20, '3 64 rebuild 0', 0x20, 0x1, [{0x20, @dev=@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}}]}}]}) 1.182654391s ago: executing program 0 (id=78): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000200)={0x4, 0xfffffffd, 0x2, 0x20, 0x100, &(0x7f0000000a00)="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"}) openat(0xffffffffffffff9c, &(0x7f00000011c0)='.\x00', 0x0, 0x0) 1.105289579s ago: executing program 0 (id=81): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x1, 0x8000000000000001}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 995.01209ms ago: executing program 0 (id=84): socket(0xa, 0x1, 0x2002) syz_open_dev$loop(0x0, 0x7, 0x103482) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc\x00', 0xf9) mount(0x0, &(0x7f0000000f80)='./proc\x00', &(0x7f0000000fc0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000001040)='27', 0x2) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x6, 0x88, 0x9c7}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10) 882.499541ms ago: executing program 0 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0xe0) write(r0, &(0x7f0000000140)='270', 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 815.013168ms ago: executing program 1 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000015c0)='./sys_sec\x00', &(0x7f0000001600)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000001680)=""/2, 0xfeec) write$tun(r0, &(0x7f00000016c0)=ANY=[], 0xffe) write$binfmt_script(r0, &(0x7f0000001700)={'#! ', './file1'}, 0xb) 814.843088ms ago: executing program 1 (id=89): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200030020000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c0100000435"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 814.749738ms ago: executing program 0 (id=90): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x883, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0xd410, 0x0, 0x0, @by_dev={r1}, [@writecache={0x0, 0x2050, 0x0, 0x70, 'writecache\x00', {0x73, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, '1024', 0x20, '1 metadata_only'}}]}) 609.582319ms ago: executing program 1 (id=91): capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001280)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) 575.902062ms ago: executing program 4 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000021c0)=""/136, 0xffffffffffffffa5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x19) write(r0, &(0x7f00000001c0)='27', 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000007000000040000000500009301000000010000000900839943a300000000000007000000d2000000030000000e0000000100a10de700000002000000ff7f0000363cffff050000000700000009"], &(0x7f0000000500)=""/3, 0x67, 0x3, 0x1, 0x1}, 0x28) 530.998857ms ago: executing program 1 (id=93): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) 530.750817ms ago: executing program 4 (id=94): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 530.650107ms ago: executing program 1 (id=95): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='3', 0x1) setsockopt$inet_buf(r0, 0x0, 0x33, &(0x7f0000000580)="48a4", 0x2) 530.537187ms ago: executing program 0 (id=96): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x1000040, &(0x7f0000000800), 0x1, 0x5a3, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x169c42, 0x15) pwrite64(r1, &(0x7f0000000e80)='2', 0xfdef, 0xe7c) write$P9_RREAD(r0, &(0x7f0000000000)={0xb, 0x75, 0x1}, 0xb) lseek(r0, 0x2, 0x4) 530.341307ms ago: executing program 4 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$FIONCLEX(r0, 0x5450) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='10', 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x20044860) 0s ago: executing program 1 (id=98): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000e40)={0x4, 0x0, 0x0, 0x210, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x48, 0x0, 0xd8, 'crypt\x00', {'aes:4-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '1', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '16'}, ' 0'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 18.167159][ T24] audit: type=1400 audit(1794222766.060:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.168210][ T271] cgroup: Unknown subsys name 'net' [ 18.171809][ T24] audit: type=1400 audit(1794222766.060:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.178026][ T24] audit: type=1400 audit(1794222766.070:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.178150][ T271] cgroup: Unknown subsys name 'devices' [ 18.244377][ T271] cgroup: Unknown subsys name 'hugetlb' [ 18.250049][ T271] cgroup: Unknown subsys name 'rlimit' [ 18.357478][ T24] audit: type=1400 audit(1794222766.250:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.380699][ T24] audit: type=1400 audit(1794222766.250:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.385985][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.405717][ T24] audit: type=1400 audit(1794222766.250:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.437291][ T24] audit: type=1400 audit(1794222766.310:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.463001][ T24] audit: type=1400 audit(1794222766.310:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.491294][ T24] audit: type=1400 audit(1794222766.380:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.517044][ T24] audit: type=1400 audit(1794222766.380:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.543287][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.450985][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.458568][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.466019][ T279] device bridge_slave_0 entered promiscuous mode [ 19.479040][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.486160][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.493534][ T279] device bridge_slave_1 entered promiscuous mode [ 19.516002][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.523077][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.530474][ T280] device bridge_slave_0 entered promiscuous mode [ 19.553523][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.560562][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.567969][ T280] device bridge_slave_1 entered promiscuous mode [ 19.602938][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.609983][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.617779][ T281] device bridge_slave_0 entered promiscuous mode [ 19.627074][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.634149][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.641397][ T281] device bridge_slave_1 entered promiscuous mode [ 19.653144][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.660191][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.667601][ T282] device bridge_slave_0 entered promiscuous mode [ 19.695808][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.702908][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.710285][ T282] device bridge_slave_1 entered promiscuous mode [ 19.781714][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.788845][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.796302][ T283] device bridge_slave_0 entered promiscuous mode [ 19.804394][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.811424][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.818845][ T283] device bridge_slave_1 entered promiscuous mode [ 19.844305][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.851348][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.858718][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.865738][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.932097][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.939179][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.946440][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.953460][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.987811][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.994893][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.002139][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.009171][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.023053][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.030790][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.038133][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.045855][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.053201][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.060330][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.067526][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.076414][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.084548][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.091560][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.107662][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.141539][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.151004][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.158568][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.166345][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.174521][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.181528][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.188944][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.197160][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.204388][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.211733][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.219961][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.226992][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.234468][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.242339][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.250329][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.258275][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.266402][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.273426][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.280757][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.288968][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.296010][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.303410][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.311330][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.319384][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.327660][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.335832][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.342865][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.357823][ T280] device veth0_vlan entered promiscuous mode [ 20.364684][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.373386][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.381293][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.389044][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.396647][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.404234][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.418500][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.430069][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.445359][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.453691][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.462065][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.469112][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.476933][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.485147][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.501493][ T281] device veth0_vlan entered promiscuous mode [ 20.510884][ T280] device veth1_macvtap entered promiscuous mode [ 20.520558][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.529000][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.537325][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.545389][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.552806][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.561086][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.568116][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.575713][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.583870][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.590895][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.598317][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.606337][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.614526][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.634731][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.643170][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.651433][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.660387][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.668755][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.677321][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.692646][ T279] device veth0_vlan entered promiscuous mode [ 20.692804][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 20.699823][ T281] device veth1_macvtap entered promiscuous mode [ 20.716718][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.717901][ T282] device veth0_vlan entered promiscuous mode [ 20.739760][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.747831][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.756513][ T302] FAT-fs (loop4): Unrecognized mount option "shortna" or missing value [ 20.756517][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.756681][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.780772][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.788896][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.797390][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.805786][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.813829][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.821649][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.830017][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.838508][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.846021][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.853467][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.860779][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.870769][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.878999][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.894752][ T283] device veth0_vlan entered promiscuous mode [ 20.904954][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.913951][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.922172][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.930961][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.940081][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.948045][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.956092][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.964298][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.973361][ T279] device veth1_macvtap entered promiscuous mode [ 20.983210][ T302] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 20.987263][ T282] device veth1_macvtap entered promiscuous mode [ 20.996501][ T302] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 21.008694][ T283] device veth1_macvtap entered promiscuous mode [ 21.020693][ T302] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.5: invalid indirect mapped block 2304 (level 1) [ 21.023214][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.034535][ T302] EXT4-fs (loop4): Remounting filesystem read-only [ 21.034604][ T302] EXT4-fs (loop4): 1 truncate cleaned up [ 21.034614][ T302] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 21.048080][ T302] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 13: comm syz.4.5: bad entry in directory: rec_len % 4 != 0 - offset=76, inode=16, rec_len=15, size=1024 fake=0 [ 21.057589][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.064659][ T302] EXT4-fs (loop4): Remounting filesystem read-only [ 21.083206][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.104676][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.112336][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.120530][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.128648][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.147973][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.156602][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.165428][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.174129][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.182491][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.190930][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.199441][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.207741][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.216308][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.224599][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.232827][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.241253][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.086869][ T311] erofs: (device loop2): mounted with root inode @ nid 36. [ 23.112855][ C0] sched: RT throttling activated [ 23.117885][ T311] tipc: Started in network mode [ 23.127761][ T311] tipc: Own node identity 4, cluster identity 4711 [ 23.134421][ T311] tipc: 32-bit node address hash set to 4 [ 23.146430][ T5] tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 23.173027][ T24] kauditd_printk_skb: 57 callbacks suppressed [ 23.173036][ T24] audit: type=1400 audit(1794222771.070:131): avc: denied { create } for pid=334 comm="syz.4.8" dev="anon_inodefs" ino=14928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 23.212137][ T24] audit: type=1400 audit(1794222771.090:132): avc: denied { ioctl } for pid=334 comm="syz.4.8" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14928 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 23.227308][ T342] process 'syz.1.12' launched './file0' with NULL argv: empty string added [ 23.251882][ T24] audit: type=1400 audit(1794222771.140:133): avc: denied { create } for pid=343 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 23.273050][ T15] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 23.303264][ T24] audit: type=1400 audit(1794222771.200:134): avc: denied { mounton } for pid=341 comm="syz.1.12" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 23.485338][ T354] F2FS-fs (loop2): invalid crc value [ 23.493380][ T354] F2FS-fs (loop2): Found nat_bits in checkpoint [ 23.500260][ T24] audit: type=1400 audit(1794222771.390:135): avc: denied { mount } for pid=341 comm="syz.1.12" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 23.529378][ T354] F2FS-fs (loop2): Start checkpoint disabled! [ 23.537929][ T354] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 23.615277][ T24] audit: type=1400 audit(2000000000.000:136): avc: denied { create } for pid=370 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 23.661868][ T24] audit: type=1400 audit(2000000000.000:137): avc: denied { connect } for pid=370 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 23.681320][ T15] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 23.681411][ T24] audit: type=1400 audit(2000000000.020:138): avc: denied { ioctl } for pid=370 comm="syz.4.18" path="socket:[15901]" dev="sockfs" ino=15901 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 23.716462][ T15] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 23.716480][ T15] usb 1-1: config 0 interface 0 has no altsetting 0 [ 23.716504][ T15] usb 1-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00 [ 23.716513][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.732294][ T15] usb 1-1: config 0 descriptor?? [ 23.736520][ T24] audit: type=1400 audit(2000000000.030:139): avc: denied { prog_run } for pid=367 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.793567][ T318] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 23.796379][ T24] audit: type=1400 audit(2000000000.170:140): avc: denied { ioctl } for pid=352 comm="syz.2.14" path="socket:[14958]" dev="sockfs" ino=14958 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.800681][ T318] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 23.847081][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.944738][ T390] Zero length message leads to an empty skb [ 23.982962][ T5] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 24.204993][ T387] F2FS-fs (loop1): invalid crc value [ 24.212000][ T387] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.239952][ T387] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.343039][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 24.354102][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 24.365473][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 24.444662][ T411] syz.1.23 (411): /proc/410/oom_adj is deprecated, please use /proc/410/oom_score_adj instead. [ 24.504545][ T413] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue [ 24.504874][ T15] input: HID 046d:c29b as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C29B.0001/input/input4 [ 24.517028][ T413] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.530151][ T15] logitech 0003:046D:C29B.0001: input,hidraw0: USB HID v80.00 Joystick [HID 046d:c29b] on usb-dummy_hcd.0-1/input0 [ 24.550999][ T5] usb 5-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice= 0.40 [ 24.560393][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.568679][ T5] usb 5-1: Product: syz [ 24.572959][ T15] logitech 0003:046D:C29B.0001: missing HID_OUTPUT_REPORT 0 [ 24.580268][ T5] usb 5-1: Manufacturer: syz [ 24.584933][ T5] usb 5-1: SerialNumber: syz [ 24.594500][ T15] logitech: probe of 0003:046D:C29B.0001 failed with error -1 [ 24.903163][ T441] ====================================================== [ 24.903163][ T441] WARNING: the mand mount option is being deprecated and [ 24.903163][ T441] will be removed in v5.15! [ 24.903163][ T441] ====================================================== [ 24.943147][ T5] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 24.951174][ T5] usb 5-1: USB disconnect, device number 2 [ 24.965686][ T441] attempt to access beyond end of device [ 24.965686][ T441] loop3: rw=0, want=57848, limit=8192 [ 24.976760][ T441] Buffer I/O error on dev loop3, logical block 57847, async page read [ 24.985233][ T441] attempt to access beyond end of device [ 24.985233][ T441] loop3: rw=0, want=57848, limit=8192 [ 24.996313][ T441] Buffer I/O error on dev loop3, logical block 57847, async page read [ 25.004713][ T441] attempt to access beyond end of device [ 25.004713][ T441] loop3: rw=0, want=57848, limit=8192 [ 25.016068][ T441] Buffer I/O error on dev loop3, logical block 57847, async page read [ 25.026233][ T443] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 25.034076][ T443] FAT-fs (loop3): Filesystem has been set read-only [ 25.615838][ T447] loop3: p1 < > p4 [ 25.620422][ T447] loop3: p4 size 722688 extends beyond EOD, truncated [ 25.751018][ T462] FAULT_INJECTION: forcing a failure. [ 25.751018][ T462] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 25.779582][ T462] CPU: 1 PID: 462 Comm: syz.1.42 Not tainted syzkaller #0 [ 25.786696][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 25.796753][ T462] Call Trace: [ 25.800047][ T462] __dump_stack+0x21/0x24 [ 25.804364][ T462] dump_stack_lvl+0x1a7/0x208 [ 25.809128][ T462] ? show_regs_print_info+0x18/0x18 [ 25.814318][ T462] ? do_syscall_64+0x31/0x40 [ 25.818899][ T462] dump_stack+0x15/0x1c [ 25.823047][ T462] should_fail+0x3ab/0x500 [ 25.827455][ T462] should_fail_alloc_page+0x4f/0x60 [ 25.832729][ T462] __alloc_pages_nodemask+0x11a/0x640 [ 25.838090][ T462] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 25.843632][ T462] ? __kmalloc+0x19f/0x330 [ 25.848028][ T462] ? __vmalloc_node_range+0x294/0x7a0 [ 25.853373][ T462] __vmalloc_node_range+0x388/0x7a0 [ 25.858551][ T462] bpf_map_area_alloc+0xd5/0xe0 [ 25.863381][ T462] ? prealloc_elems_and_freelist+0x8a/0x1e0 [ 25.869250][ T462] prealloc_elems_and_freelist+0x8a/0x1e0 [ 25.874955][ T462] stack_map_alloc+0x4f9/0x6b0 [ 25.879698][ T462] ? bpf_stackmap_copy+0x240/0x240 [ 25.884787][ T462] map_create+0x3dd/0x1f50 [ 25.889179][ T462] __se_sys_bpf+0x24b/0x740 [ 25.893655][ T462] ? __x64_sys_bpf+0x90/0x90 [ 25.898222][ T462] ? __kasan_check_read+0x11/0x20 [ 25.903222][ T462] __x64_sys_bpf+0x7b/0x90 [ 25.907616][ T462] do_syscall_64+0x31/0x40 [ 25.912033][ T462] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.917902][ T462] RIP: 0033:0x7f815b097b19 [ 25.922296][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.941876][ T462] RSP: 002b:00007f8159aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 25.950273][ T462] RAX: ffffffffffffffda RBX: 00007f815b31dfa0 RCX: 00007f815b097b19 [ 25.958219][ T462] RDX: 0000000000000050 RSI: 0000200000000cc0 RDI: 0000000000000000 [ 25.966165][ T462] RBP: 00007f815b12fb70 R08: 0000000000000000 R09: 0000000000000000 [ 25.974113][ T462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.982057][ T462] R13: 00007f815b31e038 R14: 00007f815b31dfa0 R15: 00007ffdab77a3b8 [ 25.990824][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 25.998646][ T385] Bluetooth: hci0: sending frame failed (-49) [ 26.045931][ T94] loop3: p1 < > p4 [ 26.051107][ T94] loop3: p4 size 722688 extends beyond EOD, truncated [ 26.064263][ T464] FAULT_INJECTION: forcing a failure. [ 26.064263][ T464] name fail_futex, interval 1, probability 0, space 0, times 1 [ 26.080451][ T464] CPU: 0 PID: 464 Comm: syz.1.43 Not tainted syzkaller #0 [ 26.087564][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 26.097669][ T464] Call Trace: [ 26.100964][ T464] __dump_stack+0x21/0x24 [ 26.105292][ T464] dump_stack_lvl+0x1a7/0x208 [ 26.109970][ T464] ? thaw_kernel_threads+0x220/0x220 [ 26.115244][ T464] ? show_regs_print_info+0x18/0x18 [ 26.120420][ T464] ? rtnl_unlock+0xe/0x10 [ 26.124726][ T464] ? ip_rt_ioctl+0x73e/0xfa0 [ 26.129297][ T464] dump_stack+0x15/0x1c [ 26.133432][ T464] should_fail+0x3ab/0x500 [ 26.137861][ T464] get_futex_key+0x13f/0xc30 [ 26.142428][ T464] ? futex_wait_restart+0x240/0x240 [ 26.147616][ T464] ? __kasan_check_write+0x14/0x20 [ 26.152705][ T464] futex_wake+0x11c/0x570 [ 26.157015][ T464] ? inet_shutdown+0x390/0x390 [ 26.161777][ T464] ? futex_wait+0x6f0/0x6f0 [ 26.166260][ T464] do_futex+0xfad/0x1270 [ 26.170482][ T464] ? sock_do_ioctl+0x163/0x380 [ 26.175219][ T464] ? sock_show_fdinfo+0xa0/0xa0 [ 26.180042][ T464] ? alloc_file+0x82/0x580 [ 26.184439][ T464] ? memcpy+0x56/0x70 [ 26.188396][ T464] ? futex_exit_release+0x1e0/0x1e0 [ 26.193576][ T464] ? selinux_file_ioctl+0x3ad/0x4c0 [ 26.198750][ T464] __se_sys_futex+0x2ba/0x370 [ 26.203418][ T464] ? __x64_sys_futex+0x100/0x100 [ 26.208330][ T464] ? fput_many+0x15a/0x1a0 [ 26.212721][ T464] __x64_sys_futex+0xe5/0x100 [ 26.217376][ T464] do_syscall_64+0x31/0x40 [ 26.221855][ T464] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.227739][ T464] RIP: 0033:0x7f815b097b19 [ 26.232144][ T464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.251730][ T464] RSP: 002b:00007f8159aef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 26.260127][ T464] RAX: ffffffffffffffda RBX: 00007f815b31dfa8 RCX: 00007f815b097b19 [ 26.268076][ T464] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f815b31dfac [ 26.276027][ T464] RBP: 00007f815b31dfa0 R08: 0001cb002a8aaa40 R09: 0000000000000000 [ 26.284075][ T464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.292024][ T464] R13: 00007f815b31e038 R14: 00007ffdab77a2d0 R15: 00007ffdab77a3b8 [ 26.335591][ T470] SELinux: (dev overlay, type overlay) has no security xattr handler [ 26.343137][ T361] udevd[361]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 26.355422][ T374] udevd[374]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 26.381958][ T476] xt_hashlimit: size too large, truncated to 1048576 [ 26.388694][ T333] usb 1-1: USB disconnect, device number 2 [ 26.490316][ T480] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue [ 26.513149][ T480] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.604863][ T489] FAULT_INJECTION: forcing a failure. [ 26.604863][ T489] name failslab, interval 1, probability 0, space 0, times 1 [ 26.617961][ T489] CPU: 0 PID: 489 Comm: syz.3.54 Not tainted syzkaller #0 [ 26.625069][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 26.635108][ T489] Call Trace: [ 26.638373][ T489] __dump_stack+0x21/0x24 [ 26.642672][ T489] dump_stack_lvl+0x1a7/0x208 [ 26.647323][ T489] ? thaw_kernel_threads+0x220/0x220 [ 26.652587][ T489] ? selinux_genfs_get_sid+0x20b/0x250 [ 26.658034][ T489] ? show_regs_print_info+0x18/0x18 [ 26.663218][ T489] dump_stack+0x15/0x1c [ 26.667352][ T489] should_fail+0x3ab/0x500 [ 26.671751][ T489] ? __kernfs_new_node+0xa6/0x670 [ 26.676758][ T489] __should_failslab+0xa4/0xe0 [ 26.681652][ T489] should_failslab+0x9/0x20 [ 26.686136][ T489] __kmalloc_track_caller+0x5f/0x310 [ 26.691426][ T489] kstrdup_const+0x55/0x90 [ 26.695822][ T489] __kernfs_new_node+0xa6/0x670 [ 26.700646][ T489] ? kernfs_new_node+0x260/0x260 [ 26.705569][ T489] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 26.711027][ T489] ? _raw_spin_lock+0xf0/0xf0 [ 26.715685][ T489] ? stack_trace_save+0xa6/0xf0 [ 26.720515][ T489] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 26.726318][ T489] kernfs_new_node+0x150/0x260 [ 26.731057][ T489] kernfs_create_dir_ns+0x47/0x130 [ 26.736143][ T489] sysfs_create_dir_ns+0x128/0x290 [ 26.741231][ T489] ? __kasan_check_write+0x14/0x20 [ 26.746314][ T489] ? _raw_spin_lock+0x94/0xf0 [ 26.750963][ T489] ? sysfs_warn_dup+0xa0/0xa0 [ 26.755615][ T489] kobject_add_internal+0x774/0xde0 [ 26.760793][ T489] kobject_add+0x165/0x230 [ 26.765208][ T489] ? _raw_spin_lock+0x94/0xf0 [ 26.769880][ T489] ? kobject_init+0x1d0/0x1d0 [ 26.774556][ T489] ? __kasan_check_write+0x14/0x20 [ 26.779665][ T489] ? get_device_parent+0x2a1/0x410 [ 26.784788][ T489] device_add+0x3d8/0xc00 [ 26.789103][ T489] __device_add_disk+0x6c7/0x1010 [ 26.794124][ T489] device_add_disk_no_queue_reg+0x21/0x30 [ 26.799834][ T489] dm_create+0x992/0xdd0 [ 26.804052][ T489] dev_create+0x12e/0x2c0 [ 26.808355][ T489] ? list_devices+0x570/0x570 [ 26.813007][ T489] ? __kasan_check_write+0x14/0x20 [ 26.818108][ T489] ? _copy_from_user+0x95/0xd0 [ 26.822849][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 26.827334][ T489] ? list_devices+0x570/0x570 [ 26.832012][ T489] ? dm_poll+0x120/0x120 [ 26.836241][ T489] ? security_file_ioctl+0x84/0xa0 [ 26.841327][ T489] ? dm_poll+0x120/0x120 [ 26.845545][ T489] __se_sys_ioctl+0x121/0x1a0 [ 26.850194][ T489] __x64_sys_ioctl+0x7b/0x90 [ 26.854786][ T489] do_syscall_64+0x31/0x40 [ 26.859186][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.865050][ T489] RIP: 0033:0x7fd29178cb19 [ 26.869533][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.889177][ T489] RSP: 002b:00007fd2901e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.897658][ T489] RAX: ffffffffffffffda RBX: 00007fd291a12fa0 RCX: 00007fd29178cb19 [ 26.905650][ T489] RDX: 0000200000000840 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 26.913602][ T489] RBP: 00007fd291824b70 R08: 0000000000000000 R09: 0000000000000000 [ 26.921580][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.929551][ T489] R13: 00007fd291a13038 R14: 00007fd291a12fa0 R15: 00007ffdcf704f88 [ 26.940981][ T489] kobject_add_internal failed for dm-0 (error: -12 parent: block) [ 26.948927][ T489] ------------[ cut here ]------------ [ 26.954653][ T489] WARNING: CPU: 1 PID: 489 at fs/sysfs/file.c:332 sysfs_create_files+0x227/0x360 [ 26.963855][ T489] Modules linked in: [ 26.967790][ T489] CPU: 0 PID: 489 Comm: syz.3.54 Not tainted syzkaller #0 [ 26.974980][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 26.985120][ T489] RIP: 0010:sysfs_create_files+0x227/0x360 [ 26.991168][ T489] Code: 4d 89 ef 49 89 fd 48 89 c7 e8 c5 41 d7 ff 4c 89 ef 4d 89 fd e9 2f ff ff ff e8 15 b4 9c ff 31 c0 e9 f4 00 00 00 e8 09 b4 9c ff <0f> 0b 41 c6 44 1d 06 f8 41 c6 44 1d 04 f8 c7 44 24 1c ea ff ff ff [ 27.011114][ T489] RSP: 0018:ffffc900014a79a0 EFLAGS: 00010283 [ 27.017419][ T489] RAX: ffffffff81c803df RBX: dffffc0000000000 RCX: 0000000000080000 [ 27.025747][ T489] RDX: ffffc90003142000 RSI: 0000000000056f75 RDI: 0000000000056f76 [ 27.033995][ T489] RBP: ffffc900014a7a68 R08: ffff888109a2c63b R09: 1ffff110213458c7 [ 27.042650][ T489] R10: dffffc0000000000 R11: ffffed10213458c8 R12: ffffffff853fc3c0 [ 27.050845][ T489] R13: 1ffff92000294f3c R14: ffff888111a7f098 R15: ffff888111a7f068 [ 27.059019][ T489] FS: 00007fd2901e46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.068162][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.078089][ T489] CR2: 0000200000002000 CR3: 000000012f806000 CR4: 00000000003506a0 [ 27.086194][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.094242][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.102335][ T489] Call Trace: [ 27.103052][ T333] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.113285][ T489] ? device_add+0x78f/0xc00 [ 27.117856][ T489] ? sysfs_create_file_ns+0x1b0/0x1b0 [ 27.123383][ T489] ? __kasan_check_write+0x14/0x20 [ 27.128595][ T489] ? kobject_get+0xd3/0x120 [ 27.133238][ T489] __device_add_disk+0xb5f/0x1010 [ 27.138373][ T489] device_add_disk_no_queue_reg+0x21/0x30 [ 27.144254][ T489] dm_create+0x992/0xdd0 [ 27.148557][ T489] dev_create+0x12e/0x2c0 [ 27.153533][ T489] ? list_devices+0x570/0x570 [ 27.158345][ T489] ? __kasan_check_write+0x14/0x20 [ 27.163805][ T489] ? _copy_from_user+0x95/0xd0 [ 27.168711][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 27.173383][ T489] ? list_devices+0x570/0x570 [ 27.178382][ T489] ? dm_poll+0x120/0x120 [ 27.182682][ T489] ? security_file_ioctl+0x84/0xa0 [ 27.187874][ T489] ? dm_poll+0x120/0x120 [ 27.192180][ T489] __se_sys_ioctl+0x121/0x1a0 [ 27.196952][ T489] __x64_sys_ioctl+0x7b/0x90 [ 27.201609][ T489] do_syscall_64+0x31/0x40 [ 27.206170][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.212088][ T489] RIP: 0033:0x7fd29178cb19 [ 27.216542][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.236388][ T489] RSP: 002b:00007fd2901e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.244926][ T489] RAX: ffffffffffffffda RBX: 00007fd291a12fa0 RCX: 00007fd29178cb19 [ 27.252981][ T489] RDX: 0000200000000840 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 27.261009][ T489] RBP: 00007fd291824b70 R08: 0000000000000000 R09: 0000000000000000 [ 27.269032][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.277081][ T489] R13: 00007fd291a13038 R14: 00007fd291a12fa0 R15: 00007ffdcf704f88 [ 27.285108][ T489] ---[ end trace 8f006f6e0c291733 ]--- [ 27.290605][ T489] ------------[ cut here ]------------ [ 27.296106][ T489] kernfs: can not remove 'events', no directory [ 27.302523][ T489] WARNING: CPU: 1 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 27.312305][ T489] Modules linked in: [ 27.316750][ T489] CPU: 1 PID: 489 Comm: syz.3.54 Tainted: G W syzkaller #0 [ 27.325325][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 27.335493][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 27.341863][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 27.361553][ T489] RSP: 0018:ffffc900014a7968 EFLAGS: 00010246 [ 27.367820][ T489] RAX: c4a80e10ab1ec000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 27.376013][ T489] RDX: ffffc90003142000 RSI: 000000000007ffff RDI: 0000000000080000 [ 27.384076][ T489] RBP: ffffc900014a7990 R08: ffff8881f7152fff R09: 1ffff1103ee2a5ff [ 27.392274][ T489] R10: dffffc0000000000 R11: ffffed103ee2a600 R12: 0000000000000000 [ 27.400763][ T489] R13: 0000000000000000 R14: ffffffff853fc3a0 R15: 0000000000000000 [ 27.408942][ T489] FS: 00007fd2901e46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.418239][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.425386][ T489] CR2: 0000200000015030 CR3: 000000012f806000 CR4: 00000000003506a0 [ 27.433465][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.441750][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.449883][ T489] Call Trace: [ 27.453459][ T489] sysfs_create_files+0x2d8/0x360 [ 27.462675][ T489] ? device_add+0x78f/0xc00 [ 27.467459][ T489] ? sysfs_create_file_ns+0x1b0/0x1b0 [ 27.472845][ T489] ? __kasan_check_write+0x14/0x20 [ 27.473530][ T333] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 27.601737][ T489] ? kobject_get+0xd3/0x120 [ 27.606323][ T489] __device_add_disk+0xb5f/0x1010 [ 27.609198][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.619730][ T489] device_add_disk_no_queue_reg+0x21/0x30 [ 27.626024][ T489] dm_create+0x992/0xdd0 [ 27.633152][ T333] usb 5-1: config 0 descriptor?? [ 27.639409][ T489] dev_create+0x12e/0x2c0 [ 27.643817][ T489] ? list_devices+0x570/0x570 [ 27.643828][ T489] ? __kasan_check_write+0x14/0x20 [ 27.643836][ T489] ? _copy_from_user+0x95/0xd0 [ 27.643846][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 27.643855][ T489] ? list_devices+0x570/0x570 [ 27.643863][ T489] ? dm_poll+0x120/0x120 [ 27.643893][ T489] ? security_file_ioctl+0x84/0xa0 [ 27.643904][ T489] ? dm_poll+0x120/0x120 [ 27.643917][ T489] __se_sys_ioctl+0x121/0x1a0 [ 27.643929][ T489] __x64_sys_ioctl+0x7b/0x90 [ 27.643943][ T489] do_syscall_64+0x31/0x40 [ 27.643957][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.643969][ T489] RIP: 0033:0x7fd29178cb19 [ 27.643981][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.643991][ T489] RSP: 002b:00007fd2901e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.644012][ T489] RAX: ffffffffffffffda RBX: 00007fd291a12fa0 RCX: 00007fd29178cb19 [ 27.644023][ T489] RDX: 0000200000000840 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 27.644035][ T489] RBP: 00007fd291824b70 R08: 0000000000000000 R09: 0000000000000000 [ 27.644041][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.644048][ T489] R13: 00007fd291a13038 R14: 00007fd291a12fa0 R15: 00007ffdcf704f88 [ 27.644057][ T489] ---[ end trace 8f006f6e0c291734 ]--- [ 27.644063][ T489] dm-0: failed to create sysfs files for events [ 27.653050][ T489] ------------[ cut here ]------------ [ 27.791426][ T489] kernfs: can not remove 'events', no directory [ 27.798036][ T489] WARNING: CPU: 0 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 27.807947][ T489] Modules linked in: [ 27.811937][ T489] CPU: 1 PID: 489 Comm: syz.3.54 Tainted: G W syzkaller #0 [ 27.820546][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 27.830677][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 27.837080][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 27.856754][ T489] RSP: 0018:ffffc900014a7a10 EFLAGS: 00010246 [ 27.862953][ T489] RAX: c4a80e10ab1ec000 RBX: 0000000000000001 RCX: 0000000000080000 [ 27.871212][ T489] RDX: ffffc90003142000 RSI: 000000000007ffff RDI: 0000000000080000 [ 27.879623][ T489] RBP: ffffc900014a7a38 R08: ffff8881f7052fff R09: 1ffff1103ee0a5ff [ 27.887821][ T489] R10: dffffc0000000000 R11: ffffed103ee0a600 R12: 0000000000000000 [ 27.895997][ T489] R13: ffffffff8674f000 R14: ffffffff853fc3a0 R15: 0000000000000000 [ 27.904144][ T489] FS: 00007fd2901e46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.913635][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.925610][ T489] CR2: 00007f7820eb2d58 CR3: 000000012f806000 CR4: 00000000003506a0 [ 27.933784][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.941992][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.950169][ T489] Call Trace: [ 27.957717][ T489] sysfs_remove_files+0xa4/0x100 [ 27.962716][ T489] del_gendisk+0x254/0xa10 [ 27.967456][ T489] cleanup_mapped_device+0x16c/0x270 [ 27.972821][ T489] dm_create+0xb03/0xdd0 [ 27.977286][ T489] dev_create+0x12e/0x2c0 [ 27.981713][ T489] ? list_devices+0x570/0x570 [ 27.986725][ T489] ? __kasan_check_write+0x14/0x20 [ 27.991879][ T489] ? _copy_from_user+0x95/0xd0 [ 27.996751][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 28.001306][ T489] ? list_devices+0x570/0x570 [ 28.006035][ T489] ? dm_poll+0x120/0x120 [ 28.010323][ T489] ? security_file_ioctl+0x84/0xa0 [ 28.015472][ T489] ? dm_poll+0x120/0x120 [ 28.019727][ T489] __se_sys_ioctl+0x121/0x1a0 [ 28.024423][ T489] __x64_sys_ioctl+0x7b/0x90 [ 28.029033][ T489] do_syscall_64+0x31/0x40 [ 28.033714][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.039614][ T489] RIP: 0033:0x7fd29178cb19 [ 28.043106][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 28.044066][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.044073][ T489] RSP: 002b:00007fd2901e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.044084][ T489] RAX: ffffffffffffffda RBX: 00007fd291a12fa0 RCX: 00007fd29178cb19 [ 28.044089][ T489] RDX: 0000200000000840 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 28.044094][ T489] RBP: 00007fd291824b70 R08: 0000000000000000 R09: 0000000000000000 [ 28.044100][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.044106][ T489] R13: 00007fd291a13038 R14: 00007fd291a12fa0 R15: 00007ffdcf704f88 [ 28.044119][ T489] ---[ end trace 8f006f6e0c291735 ]--- [ 28.050626][ T385] Bluetooth: hci0: sending frame failed (-49) [ 28.069885][ T489] ------------[ cut here ]------------ [ 28.135475][ T489] kernfs: can not remove 'events_async', no directory [ 28.142354][ T489] WARNING: CPU: 0 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 28.152229][ T489] Modules linked in: [ 28.156238][ T489] CPU: 0 PID: 489 Comm: syz.3.54 Tainted: G W syzkaller #0 [ 28.164820][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.174932][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 28.181281][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 28.201272][ T489] RSP: 0018:ffffc900014a7a10 EFLAGS: 00010246 [ 28.207754][ T489] RAX: c4a80e10ab1ec000 RBX: 0000000000000002 RCX: 0000000000080000 [ 28.215818][ T489] RDX: ffffc90003142000 RSI: 000000000007ffff RDI: 0000000000080000 [ 28.223875][ T489] RBP: ffffc900014a7a38 R08: ffff8881f7052fff R09: 1ffff1103ee0a5ff [ 28.231846][ T489] R10: dffffc0000000000 R11: ffffed103ee0a600 R12: 0000000000000000 [ 28.239915][ T489] R13: ffffffff8674f000 R14: ffffffff853fc480 R15: 0000000000000000 [ 28.248039][ T489] FS: 00007fd2901e46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.250996][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 28.251006][ T24] audit: type=1400 audit(2000000004.620:182): avc: denied { write } for pid=513 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.257015][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.289041][ T489] CR2: 0000000000000000 CR3: 000000012f806000 CR4: 00000000003506a0 [ 28.297087][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.305112][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.313169][ T489] Call Trace: [ 28.315233][ T24] audit: type=1400 audit(2000000004.690:183): avc: denied { block_suspend } for pid=517 comm="syz.1.64" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.316548][ T489] sysfs_remove_files+0xa4/0x100 [ 28.342497][ T489] del_gendisk+0x254/0xa10 [ 28.346988][ T489] cleanup_mapped_device+0x16c/0x270 [ 28.352335][ T489] dm_create+0xb03/0xdd0 [ 28.356800][ T489] dev_create+0x12e/0x2c0 [ 28.361208][ T489] ? list_devices+0x570/0x570 [ 28.365988][ T489] ? __kasan_check_write+0x14/0x20 [ 28.371164][ T489] ? _copy_from_user+0x95/0xd0 [ 28.376033][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 28.380589][ T489] ? list_devices+0x570/0x570 [ 28.385323][ T489] ? dm_poll+0x120/0x120 [ 28.389619][ T489] ? security_file_ioctl+0x84/0xa0 [ 28.394817][ T489] ? dm_poll+0x120/0x120 [ 28.399216][ T489] __se_sys_ioctl+0x121/0x1a0 [ 28.404096][ T489] __x64_sys_ioctl+0x7b/0x90 [ 28.408752][ T489] do_syscall_64+0x31/0x40 [ 28.413246][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.419193][ T489] RIP: 0033:0x7fd29178cb19 [ 28.423738][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.443434][ T489] RSP: 002b:00007fd2901e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.451893][ T489] RAX: ffffffffffffffda RBX: 00007fd291a12fa0 RCX: 00007fd29178cb19 [ 28.459953][ T489] RDX: 0000200000000840 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 28.468045][ T489] RBP: 00007fd291824b70 R08: 0000000000000000 R09: 0000000000000000 [ 28.476347][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.476513][ T24] audit: type=1326 audit(2000000004.850:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b097b19 code=0x7ffc0000 [ 28.484567][ T489] R13: 00007fd291a13038 R14: 00007fd291a12fa0 R15: 00007ffdcf704f88 [ 28.511025][ T24] audit: type=1326 audit(2000000004.890:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b097b19 code=0x7ffc0000 [ 28.541904][ T489] ---[ end trace 8f006f6e0c291736 ]--- [ 28.547611][ T489] ------------[ cut here ]------------ [ 28.554305][ T489] kernfs: can not remove 'events_poll_msecs', no directory [ 28.561583][ T489] WARNING: CPU: 1 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 28.561758][ T24] audit: type=1326 audit(2000000004.890:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f815b097882 code=0x7ffc0000 [ 28.571456][ T489] Modules linked in: [ 28.596697][ T24] audit: type=1326 audit(2000000004.890:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f815b097917 code=0x7ffc0000 [ 28.599800][ T489] CPU: 1 PID: 489 Comm: syz.3.54 Tainted: G W syzkaller #0 [ 28.599805][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.599826][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 28.599841][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 28.624453][ T24] audit: type=1326 audit(2000000004.890:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f815b054811 code=0x7ffc0000 [ 28.633123][ T489] RSP: 0018:ffffc900014a7a10 EFLAGS: 00010246 [ 28.643188][ T24] audit: type=1326 audit(2000000004.890:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f815b098909 code=0x7ffc0000 [ 28.649387][ T489] [ 28.675003][ T24] audit: type=1326 audit(2000000004.890:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f815b05487b code=0x7ffc0000 [ 28.701042][ T489] RAX: c4a80e10ab1ec000 RBX: 0000000000000003 RCX: 0000000000080000 [ 28.724584][ T24] audit: type=1326 audit(2000000004.890:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815b097b19 code=0x7ffc0000 [ 28.728193][ T489] RDX: ffffc90003142000 RSI: 000000000007ffff RDI: 0000000000080000 [ 28.755912][ T529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 28.759002][ T489] RBP: ffffc900014a7a38 R08: ffff8881f7127493 R09: 1ffff1103ee24e92 [ 28.783620][ T529] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.792994][ T489] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: 0000000000000000 [ 28.826502][ T489] R13: ffffffff8674f000 R14: ffffffff853fc4e0 R15: 0000000000000000 [ 28.834555][ T489] FS: 00007fd2901e46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.843516][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.850093][ T489] CR2: 00007f99fa7c2000 CR3: 000000012f806000 CR4: 00000000003506a0 [ 28.858081][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.866070][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.874053][ T489] Call Trace: [ 28.877336][ T489] sysfs_remove_files+0xa4/0x100 [ 28.882251][ T489] del_gendisk+0x254/0xa10 [ 28.886683][ T489] cleanup_mapped_device+0x16c/0x270 [ 28.891964][ T489] dm_create+0xb03/0xdd0 [ 28.896213][ T489] dev_create+0x12e/0x2c0 [ 28.900541][ T489] ? list_devices+0x570/0x570 [ 28.905224][ T489] ? __kasan_check_write+0x14/0x20 [ 28.910333][ T489] ? _copy_from_user+0x95/0xd0 [ 28.915133][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 28.919657][ T489] ? list_devices+0x570/0x570 [ 28.924383][ T489] ? dm_poll+0x120/0x120 [ 28.928655][ T489] ? security_file_ioctl+0x84/0xa0 [ 28.933826][ T489] ? dm_poll+0x120/0x120 [ 28.938062][ T489] __se_sys_ioctl+0x121/0x1a0 [ 28.942719][ T489] __x64_sys_ioctl+0x7b/0x90 [ 28.947348][ T489] do_syscall_64+0x31/0x40 [ 28.951762][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.957668][ T489] RIP: 0033:0x7fd29178cb19 [ 28.962081][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.981747][ T489] RSP: 002b:00007fd2901e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.991188][ T489] RAX: ffffffffffffffda RBX: 00007fd291a12fa0 RCX: 00007fd29178cb19 [ 28.999478][ T489] RDX: 0000200000000840 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 29.007748][ T489] RBP: 00007fd291824b70 R08: 0000000000000000 R09: 0000000000000000 [ 29.016322][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.024499][ T489] R13: 00007fd291a13038 R14: 00007fd291a12fa0 R15: 00007ffdcf704f88 [ 29.039731][ T489] ---[ end trace 8f006f6e0c291737 ]--- [ 29.046581][ T489] ------------[ cut here ]------------ [ 29.048678][ T548] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue [ 29.052095][ T489] kernfs: can not remove 'bdi', no directory [ 29.068099][ T548] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.081592][ T489] WARNING: CPU: 1 PID: 489 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 29.098265][ T489] Modules linked in: [ 29.102514][ T489] CPU: 0 PID: 489 Comm: syz.3.54 Tainted: G W syzkaller #0 [ 29.111375][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.121723][ T489] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 29.128336][ T489] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 7c 13 9d ff 48 c7 c7 80 39 2b 85 4c 89 f6 e8 ed 96 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 5e 13 9d ff 41 be fe ff ff ff 48 [ 29.148463][ T489] RSP: 0018:ffffc900014a7a30 EFLAGS: 00010246 [ 29.154847][ T489] RAX: c4a80e10ab1ec000 RBX: ffffffff853fbdc0 RCX: 0000000000080000 [ 29.163120][ T489] RDX: ffffc90003142000 RSI: 000000000007ffff RDI: 0000000000080000 [ 29.171225][ T489] RBP: ffffc900014a7a58 R08: ffff8881f7127493 R09: 1ffff1103ee24e92 [ 29.179287][ T489] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: 0000000000000000 [ 29.179465][ T565] FAULT_INJECTION: forcing a failure. [ 29.179465][ T565] name failslab, interval 1, probability 0, space 0, times 0 [ 29.187387][ T489] R13: 1ffff1102234fe8f R14: ffffffff853fbdc0 R15: 0000000000000000 [ 29.200639][ T565] CPU: 1 PID: 565 Comm: syz.0.84 Tainted: G W syzkaller #0 [ 29.208204][ T489] FS: 00007fd2901e46c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.216337][ T565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.216341][ T565] Call Trace: [ 29.216356][ T565] __dump_stack+0x21/0x24 [ 29.216363][ T565] dump_stack_lvl+0x1a7/0x208 [ 29.216372][ T565] ? show_regs_print_info+0x18/0x18 [ 29.216381][ T565] dump_stack+0x15/0x1c [ 29.216390][ T565] should_fail+0x3ab/0x500 [ 29.216401][ T565] ? netlink_ack+0x35c/0xb30 [ 29.216411][ T565] __should_failslab+0xa4/0xe0 [ 29.216420][ T565] should_failslab+0x9/0x20 [ 29.216427][ T565] __kmalloc_track_caller+0x5f/0x310 [ 29.216438][ T565] ? kmem_cache_alloc+0x15a/0x2d0 [ 29.216447][ T565] ? __alloc_skb+0x9e/0x520 [ 29.216456][ T565] ? netlink_ack+0x35c/0xb30 [ 29.216464][ T565] __alloc_skb+0xdc/0x520 [ 29.216471][ T565] netlink_ack+0x35c/0xb30 [ 29.216483][ T565] ? selinux_nlmsg_lookup+0x391/0x430 [ 29.216498][ T565] ? netlink_dump+0xd80/0xd80 [ 29.225569][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.235452][ T565] netlink_rcv_skb+0x267/0x430 [ 29.235464][ T565] ? rtnetlink_bind+0x80/0x80 [ 29.235480][ T565] ? netlink_ack+0xb30/0xb30 [ 29.238819][ T489] CR2: 000055556d056908 CR3: 000000012f806000 CR4: 00000000003506b0 [ 29.243050][ T565] ? __netlink_lookup+0x387/0x3b0 [ 29.243059][ T565] rtnetlink_rcv+0x1c/0x20 [ 29.243067][ T565] netlink_unicast+0x86c/0xa30 [ 29.243076][ T565] netlink_sendmsg+0x949/0xb70 [ 29.243087][ T565] ? schedule_preempt_disabled+0x20/0x20 [ 29.243095][ T565] ? netlink_getsockopt+0x530/0x530 [ 29.243105][ T565] ? security_socket_sendmsg+0x82/0xa0 [ 29.243112][ T565] ? netlink_getsockopt+0x530/0x530 [ 29.243121][ T565] ____sys_sendmsg+0x5be/0x8f0 [ 29.243131][ T565] ? __sys_sendmsg_sock+0x40/0x40 [ 29.243142][ T565] ? import_iovec+0x7c/0xb0 [ 29.243150][ T565] ___sys_sendmsg+0x236/0x2e0 [ 29.243159][ T565] ? __sys_sendmsg+0x280/0x280 [ 29.243169][ T565] ? alloc_file+0x82/0x580 [ 29.243180][ T565] ? __fdget+0x1a1/0x230 [ 29.243189][ T565] __x64_sys_sendmsg+0x201/0x2d0 [ 29.243199][ T565] ? __kasan_check_write+0x14/0x20 [ 29.243208][ T565] ? ___sys_sendmsg+0x2e0/0x2e0 [ 29.243225][ T565] ? __kasan_check_read+0x11/0x20 [ 29.249376][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.253066][ T565] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 29.253077][ T565] do_syscall_64+0x31/0x40 [ 29.253092][ T565] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.257431][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.261611][ T565] RIP: 0033:0x7f782247bb19 [ 29.261621][ T565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.261633][ T565] RSP: 002b:00007f7820ed3028 EFLAGS: 00000246 [ 29.266440][ T489] Call Trace: [ 29.270955][ T565] ORIG_RAX: 000000000000002e [ 29.275630][ T489] sysfs_remove_link+0x50/0x60 [ 29.280721][ T565] RAX: ffffffffffffffda RBX: 00007f7822701fa0 RCX: 00007f782247bb19 [ 29.280727][ T565] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 29.280733][ T565] RBP: 00007f7822513b70 R08: 0000000000000000 R09: 0000000000000000 [ 29.280745][ T565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.285995][ T489] del_gendisk+0x3f8/0xa10 [ 29.290224][ T565] R13: 00007f7822702038 R14: 00007f7822701fa0 R15: 00007ffeab3dd498 [ 29.294997][ T489] cleanup_mapped_device+0x16c/0x270 [ 29.329549][ T569] capability: warning: `syz.1.87' uses 32-bit capabilities (legacy support in use) [ 29.330375][ T489] dm_create+0xb03/0xdd0 [ 29.573337][ T489] dev_create+0x12e/0x2c0 [ 29.577692][ T489] ? list_devices+0x570/0x570 [ 29.582485][ T489] ? __kasan_check_write+0x14/0x20 [ 29.588163][ T489] ? _copy_from_user+0x95/0xd0 [ 29.593572][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 29.598416][ T489] ? list_devices+0x570/0x570 [ 29.602723][ T328] usb 5-1: USB disconnect, device number 3 [ 29.603125][ T489] ? dm_poll+0x120/0x120 [ 29.603145][ T489] ? security_file_ioctl+0x84/0xa0 [ 29.618406][ T577] device-mapper: table: 253:1: writecache: unknown target type [ 29.631795][ T489] ? dm_poll+0x120/0x120 [ 29.634706][ T577] device-mapper: ioctl: error adding target to table [ 29.636613][ T489] __se_sys_ioctl+0x121/0x1a0 [ 29.647692][ T489] __x64_sys_ioctl+0x7b/0x90 [ 29.652332][ T489] do_syscall_64+0x31/0x40 [ 29.656817][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.663494][ T489] RIP: 0033:0x7fd29178cb19 [ 29.669053][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.674824][ T589] FAULT_INJECTION: forcing a failure. [ 29.674824][ T589] name fail_futex, interval 1, probability 0, space 0, times 0 [ 29.688813][ T489] RSP: 002b:00007fd2901e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.712985][ T489] RAX: ffffffffffffffda RBX: 00007fd291a12fa0 RCX: 00007fd29178cb19 [ 29.714222][ T589] CPU: 1 PID: 589 Comm: syz.1.95 Tainted: G W syzkaller #0 [ 29.721209][ T592] FAULT_INJECTION: forcing a failure. [ 29.721209][ T592] name failslab, interval 1, probability 0, space 0, times 0 [ 29.729474][ T589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.729478][ T589] Call Trace: [ 29.729496][ T589] __dump_stack+0x21/0x24 [ 29.729504][ T589] dump_stack_lvl+0x1a7/0x208 [ 29.729514][ T589] ? thaw_kernel_threads+0x220/0x220 [ 29.729521][ T589] ? show_regs_print_info+0x18/0x18 [ 29.729531][ T589] ? __kasan_check_read+0x11/0x20 [ 29.729541][ T589] ? futex_wait_queue_me+0x2ea/0x510 [ 29.729550][ T589] dump_stack+0x15/0x1c [ 29.729559][ T589] should_fail+0x3ab/0x500 [ 29.729577][ T589] get_futex_key+0x13f/0xc30 [ 29.742752][ T489] RDX: 0000200000000840 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 29.752178][ T589] ? futex_wait_restart+0x240/0x240 [ 29.752189][ T589] futex_wake+0x11c/0x570 [ 29.752204][ T589] ? avc_has_perm+0x27f/0x3d0 [ 29.755694][ T489] RBP: 00007fd291824b70 R08: 0000000000000000 R09: 0000000000000000 [ 29.759768][ T589] ? futex_wait+0x6f0/0x6f0 [ 29.759782][ T589] do_futex+0xfad/0x1270 [ 29.771887][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.774873][ T589] ? selinux_socket_setsockopt+0x282/0x360 [ 29.774881][ T589] ? selinux_socket_getsockopt+0x340/0x340 [ 29.774894][ T589] ? futex_exit_release+0x1e0/0x1e0 [ 29.774907][ T589] ? raw_setsockopt+0xea/0x180 [ 29.774916][ T589] __se_sys_futex+0x2ba/0x370 [ 29.774931][ T589] ? __x64_sys_futex+0x100/0x100 [ 29.787971][ T489] R13: 00007fd291a13038 R14: 00007fd291a12fa0 R15: 00007ffdcf704f88 [ 29.789319][ T589] __x64_sys_futex+0xe5/0x100 [ 29.789335][ T589] do_syscall_64+0x31/0x40 [ 29.800347][ T489] ---[ end trace 8f006f6e0c291738 ]--- [ 29.806235][ T589] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.806244][ T589] RIP: 0033:0x7f815b097b19 [ 29.806253][ T589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.806259][ T589] RSP: 002b:00007f8159aef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 29.936753][ T589] RAX: ffffffffffffffda RBX: 00007f815b31dfa8 RCX: 00007f815b097b19 [ 29.944707][ T589] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f815b31dfac [ 29.952663][ T589] RBP: 00007f815b31dfa0 R08: 00258e46722916c0 R09: 0000000000000000 [ 29.960619][ T589] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 29.968580][ T589] R13: 00007f815b31e038 R14: 00007ffdab77a2d0 R15: 00007ffdab77a3b8 [ 29.976547][ T592] CPU: 0 PID: 592 Comm: syz.4.97 Tainted: G W syzkaller #0 [ 29.985037][ T592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.995175][ T592] Call Trace: [ 29.998443][ T592] __dump_stack+0x21/0x24 [ 30.002742][ T592] dump_stack_lvl+0x1a7/0x208 [ 30.007391][ T592] ? show_regs_print_info+0x18/0x18 [ 30.012561][ T592] ? kasan_unpoison+0x67/0x90 [ 30.017208][ T592] dump_stack+0x15/0x1c [ 30.021337][ T592] should_fail+0x3ab/0x500 [ 30.025726][ T592] ? netlink_trim+0x193/0x230 [ 30.030373][ T592] __should_failslab+0xa4/0xe0 [ 30.035111][ T592] should_failslab+0x9/0x20 [ 30.039587][ T592] __kmalloc_track_caller+0x5f/0x310 [ 30.044849][ T592] ? netlink_trim+0x193/0x230 [ 30.049504][ T592] pskb_expand_head+0x123/0x11c0 [ 30.054436][ T592] netlink_trim+0x193/0x230 [ 30.058912][ T592] netlink_broadcast_filtered+0x75/0x12c0 [ 30.064609][ T592] ? tc_chain_fill_node+0x494/0x790 [ 30.069779][ T592] ? __tcf_chain_get+0x417/0x610 [ 30.074703][ T592] netlink_broadcast+0x3a/0x50 [ 30.079469][ T592] rtnetlink_send+0x11a/0x170 [ 30.084123][ T592] __tcf_chain_get+0x4ef/0x610 [ 30.088860][ T592] tc_new_tfilter+0x9ff/0x1ab0 [ 30.093602][ T592] ? tcf_gate_entry_destructor+0x20/0x20 [ 30.099213][ T592] ? security_capable+0x87/0xb0 [ 30.104038][ T592] ? ns_capable+0x8c/0xf0 [ 30.108344][ T592] ? netlink_net_capable+0x125/0x160 [ 30.112922][ T328] Bluetooth: hci0: command 0x1009 tx timeout [ 30.113603][ T592] ? tcf_gate_entry_destructor+0x20/0x20 [ 30.113618][ T592] rtnetlink_rcv_msg+0x811/0xca0 [ 30.130112][ T592] ? unwind_get_return_address+0x4d/0x90 [ 30.135723][ T592] ? rtnetlink_bind+0x80/0x80 [ 30.140378][ T592] ? stack_trace_save+0xa6/0xf0 [ 30.145209][ T592] ? stack_trace_snprint+0xe0/0xe0 [ 30.150300][ T592] ? avc_has_perm+0x168/0x3d0 [ 30.154956][ T592] ? memcpy+0x56/0x70 [ 30.158918][ T592] ? avc_has_perm+0x27f/0x3d0 [ 30.163572][ T592] ? __kasan_slab_alloc+0xc9/0xe0 [ 30.168572][ T592] ? avc_has_perm_noaudit+0x3b0/0x3b0 [ 30.173931][ T592] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.179976][ T592] ? selinux_nlmsg_lookup+0x398/0x430 [ 30.185325][ T592] netlink_rcv_skb+0x1e9/0x430 [ 30.190066][ T592] ? rtnetlink_bind+0x80/0x80 [ 30.194767][ T592] ? netlink_ack+0xb30/0xb30 [ 30.199345][ T592] ? __netlink_lookup+0x387/0x3b0 [ 30.204354][ T592] rtnetlink_rcv+0x1c/0x20 [ 30.208764][ T592] netlink_unicast+0x86c/0xa30 [ 30.213512][ T592] netlink_sendmsg+0x949/0xb70 [ 30.218255][ T592] ? schedule_preempt_disabled+0x20/0x20 [ 30.223867][ T592] ? netlink_getsockopt+0x530/0x530 [ 30.229043][ T592] ? security_socket_sendmsg+0x82/0xa0 [ 30.234486][ T592] ? netlink_getsockopt+0x530/0x530 [ 30.239659][ T592] ____sys_sendmsg+0x5be/0x8f0 [ 30.244397][ T592] ? __sys_sendmsg_sock+0x40/0x40 [ 30.249396][ T592] ? import_iovec+0x7c/0xb0 [ 30.253877][ T592] ___sys_sendmsg+0x236/0x2e0 [ 30.258530][ T592] ? __sys_sendmsg+0x280/0x280 [ 30.263269][ T592] ? rw_verify_area+0x1c0/0x360 [ 30.268100][ T592] ? __fdget+0x1a1/0x230 [ 30.272316][ T592] __x64_sys_sendmsg+0x201/0x2d0 [ 30.277234][ T592] ? __kasan_check_write+0x14/0x20 [ 30.282318][ T592] ? ___sys_sendmsg+0x2e0/0x2e0 [ 30.287146][ T592] ? __kasan_check_read+0x11/0x20 [ 30.292146][ T592] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 30.297753][ T592] do_syscall_64+0x31/0x40 [ 30.302145][ T592] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.308018][ T592] RIP: 0033:0x7f482ebffb19 [ 30.312419][ T592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.332002][ T592] RSP: 002b:00007f482d657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.340478][ T592] RAX: ffffffffffffffda RBX: 00007f482ee85fa0 RCX: 00007f482ebffb19 [ 30.348427][ T592] RDX: 0000000020044860 RSI: 0000200000000300 RDI: 0000000000000004 [ 30.356375][ T592] RBP: 00007f482ec97b70 R08: 0000000000000000 R09: 0000000000000000 [ 30.364603][ T592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.372561][ T592] R13: 00007f482ee86038 R14: 00007f482ee85fa0 R15: 00007ffe77a62b68 [ 30.381802][ T489] general protection fault, probably for non-canonical address 0xdffffc000000001a: 0000 [#1] PREEMPT SMP KASAN [ 30.393518][ T489] KASAN: null-ptr-deref in range [0x00000000000000d0-0x00000000000000d7] [ 30.401909][ T489] CPU: 0 PID: 489 Comm: syz.3.54 Tainted: G W syzkaller #0 [ 30.410378][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 30.420420][ T489] RIP: 0010:device_del+0xe0/0xe60 [ 30.425417][ T489] Code: 42 80 3c 30 00 74 08 4c 89 ef e8 5b f4 ef fe 41 bf d0 00 00 00 4d 03 7d 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 b7 0c 00 00 45 0f b6 27 44 89 e6 83 e6 [ 30.445173][ T489] RSP: 0018:ffffc900014a7980 EFLAGS: 00010202 [ 30.451214][ T489] RAX: dffffc0000000000 RBX: ffff888111a7f108 RCX: ffffffff84823af2 [ 30.459173][ T489] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900014a7900 [ 30.467131][ T489] RBP: ffffc900014a7a78 R08: ffffc900014a7907 R09: 1ffff92000294f20 [ 30.475083][ T489] R10: dffffc0000000000 R11: fffff52000294f21 R12: ffff888111a7f068 [ 30.483031][ T489] R13: ffff888111a7f0d0 R14: 000000000000001a R15: 00000000000000d0 [ 30.490980][ T489] FS: 00007fd2901e46c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.499881][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.506440][ T489] CR2: 000055557eecf4e8 CR3: 000000012f806000 CR4: 00000000003506b0 [ 30.514387][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.522333][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.530364][ T489] Call Trace: [ 30.533633][ T489] ? __kasan_check_write+0x14/0x20 [ 30.538740][ T489] ? _raw_spin_lock_irq+0x95/0xf0 [ 30.543737][ T489] ? _raw_spin_lock_irqsave+0x130/0x130 [ 30.549257][ T489] ? kill_device+0xd0/0xd0 [ 30.553648][ T489] ? __kasan_check_write+0x14/0x20 [ 30.558732][ T489] ? pm_runtime_set_memalloc_noio+0x20d/0x260 [ 30.564771][ T489] del_gendisk+0x85d/0xa10 [ 30.569161][ T489] cleanup_mapped_device+0x16c/0x270 [ 30.574437][ T489] dm_create+0xb03/0xdd0 [ 30.578653][ T489] dev_create+0x12e/0x2c0 [ 30.582991][ T489] ? list_devices+0x570/0x570 [ 30.587658][ T489] ? __kasan_check_write+0x14/0x20 [ 30.592738][ T489] ? _copy_from_user+0x95/0xd0 [ 30.597474][ T489] dm_ctl_ioctl+0x8ee/0xca0 [ 30.601949][ T489] ? list_devices+0x570/0x570 [ 30.606600][ T489] ? dm_poll+0x120/0x120 [ 30.610819][ T489] ? security_file_ioctl+0x84/0xa0 [ 30.615905][ T489] ? dm_poll+0x120/0x120 [ 30.620122][ T489] __se_sys_ioctl+0x121/0x1a0 [ 30.624773][ T489] __x64_sys_ioctl+0x7b/0x90 [ 30.629338][ T489] do_syscall_64+0x31/0x40 [ 30.633731][ T489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.639596][ T489] RIP: 0033:0x7fd29178cb19 [ 30.643985][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.663567][ T489] RSP: 002b:00007fd2901e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.671951][ T489] RAX: ffffffffffffffda RBX: 00007fd291a12fa0 RCX: 00007fd29178cb19 [ 30.679985][ T489] RDX: 0000200000000840 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 30.687950][ T489] RBP: 00007fd291824b70 R08: 0000000000000000 R09: 0000000000000000 [ 30.695900][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.703847][ T489] R13: 00007fd291a13038 R14: 00007fd291a12fa0 R15: 00007ffdcf704f88 [ 30.711807][ T489] Modules linked in: [ 30.719150][ T489] ---[ end trace 8f006f6e0c291739 ]--- [ 30.724726][ T489] RIP: 0010:device_del+0xe0/0xe60 [ 30.730125][ T489] Code: 42 80 3c 30 00 74 08 4c 89 ef e8 5b f4 ef fe 41 bf d0 00 00 00 4d 03 7d 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 b7 0c 00 00 45 0f b6 27 44 89 e6 83 e6 [ 30.746296][ T591] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.751393][ T596] device-mapper: table: 253:2: crypt: Error decoding and setting key [ 30.758890][ T489] RSP: 0018:ffffc900014a7980 EFLAGS: 00010202 [ 30.766856][ T596] device-mapper: ioctl: error adding target to table [ 30.766988][ T489] [ 30.773213][ T591] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.779880][ T489] RAX: dffffc0000000000 RBX: ffff888111a7f108 RCX: ffffffff84823af2 [ 30.798066][ T591] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm syz.0.96: lblock 0 mapped to illegal pblock 0 (length 6) [ 30.800731][ T489] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900014a7900 [ 30.815562][ T591] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 30.821562][ T489] RBP: ffffc900014a7a78 R08: ffffc900014a7907 R09: 1ffff92000294f20 [ 30.834060][ T591] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.834060][ T591] [ 30.841970][ T489] R10: dffffc0000000000 R11: fffff52000294f21 R12: ffff888111a7f068 [ 30.859703][ T489] R13: ffff888111a7f0d0 R14: 000000000000001a R15: 00000000000000d0 [ 30.860347][ T591] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.96: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.867719][ T489] FS: 00007fd2901e46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.889910][ T489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.890545][ T7] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 30.911059][ T7] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 30.911481][ T489] CR2: 0000001b2e323ffc CR3: 000000012f806000 CR4: 00000000003506a0 [ 30.923563][ T7] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.923563][ T7] [ 30.941079][ T489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.941085][ T489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.941092][ T489] Kernel panic - not syncing: Fatal exception [ 30.941374][ T489] Kernel Offset: disabled [ 30.967593][ T489] Rebooting in 86400 seconds..