last executing test programs: 31.184124582s ago: executing program 0 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @remote}}}}, 0x0) 31.153417506s ago: executing program 3 (id=117): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 31.096395121s ago: executing program 0 (id=118): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800, &(0x7f0000000640), 0x25, 0x756, &(0x7f0000000680)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000e00)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000ec0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000004680)='./file0\x00', 0x16f) 31.041434217s ago: executing program 3 (id=122): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000011c0)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000001200)=0x3, 0x4) syz_emit_ethernet(0xe, &(0x7f0000001240)={@remote, @random="aab9ccddeeff", @void, {@generic={0x88f8}}}, 0x0) 31.00851027s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 30.963283105s ago: executing program 3 (id=124): socket(0x28, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x10, &(0x7f0000002340)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000007ac0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000007b00)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000007b40)='./bus\x00', &(0x7f0000007b80), 0x8, &(0x7f0000007bc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 30.950813216s ago: executing program 0 (id=125): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 30.859860705s ago: executing program 0 (id=130): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file3\x00', 0x4010, &(0x7f0000000140), 0x2, 0xbd8, &(0x7f0000000bc0)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 30.677875314s ago: executing program 0 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f00000002c0)={[0xfffffeffffffffff]}, 0x0, 0x8) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x61}]) rt_sigsuspend(&(0x7f00000003c0)={[0x5]}, 0x8) 30.139784869s ago: executing program 3 (id=140): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) 29.559938108s ago: executing program 0 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000480)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x7, 0x11, r2, 0x40000) 29.481720846s ago: executing program 32 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000480)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x7, 0x11, r2, 0x40000) 29.356922599s ago: executing program 3 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="b63ab78fbc", 0x5) read$rfkill(r0, &(0x7f0000000140), 0x8) 29.306927484s ago: executing program 33 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="b63ab78fbc", 0x5) read$rfkill(r0, &(0x7f0000000140), 0x8) 4.910837599s ago: executing program 5 (id=759): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000240)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 4.680372113s ago: executing program 5 (id=763): io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x8, 0x40}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0) close(0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.589603612s ago: executing program 2 (id=768): pselect6(0xfedc, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x10000000000000cf, 0x0, [{}]}) 4.571061404s ago: executing program 5 (id=770): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 4.489318202s ago: executing program 5 (id=772): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./bus\x00', 0x14552, &(0x7f00000007c0)=ANY=[], 0x7b, 0x121a, &(0x7f0000000800)="$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") creat(&(0x7f0000001a40)='./bus\x00', 0xe0) mount(&(0x7f0000001a80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001ac0)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f0000001b00)='./bus\x00', 0x107400, 0x121) read$msr(r0, &(0x7f0000001b40)=""/175, 0xfffffe51) 4.442300697s ago: executing program 2 (id=775): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x4, 0x1}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.354684566s ago: executing program 5 (id=776): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x2000000000000004) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000003c0)) 4.199855632s ago: executing program 2 (id=778): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d040}, 0x4048014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 4.178049664s ago: executing program 2 (id=779): r0 = io_uring_setup(0x1778, &(0x7f00000000c0)={0x0, 0x4, 0x3000}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) io_uring_enter(r0, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) 3.458081208s ago: executing program 1 (id=805): r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x99, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3", 0x0}, 0x50) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 3.445868249s ago: executing program 1 (id=806): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 3.43249103s ago: executing program 1 (id=807): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x18, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.418047172s ago: executing program 1 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='\x00', 0x9801) move_mount(r0, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x9) 3.403849743s ago: executing program 1 (id=810): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QnYjtX2MPC19t43L4knybzXXjdPMmySJEOSDEmSJEmmhCRJkpBMmZKQhMxJ5pBMIZnnKXOSHEmShIQk+7veOuc453T+/875zvl//t951++67uvZ69r32vfez+K5h+t9n/ebDoOr1KtasQ4zw78Ef33pDgApANAPALIAQAQAJbOWzJran0Fj93/tIOLf68FpV3oG4kqS+qdtUv+0Teqftkn90zapf9om9U/bpP5pm9RfiLRs2/Rc18iWdrd//fl/yq8v8vz//0Ny/k/bpP7/ac5k+Gf2lvr/J7kUQvjnMqT+aZvUP22T+qdtUv+0Teqftkn9hUjLrvTzZ9mu7Hal//0JIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEgbzofLDAD8qX2l5yWEEEIIIYQQQoh/n5D+Ss9ACCGEEEIIIYQQ//MQFGgwEEE6SA8pkAEywlWQCa6GzJAFEnANZIVrIRtcB9khB+SEXJAb8kBesEDggCGGfJAfknA9FIAboCAUgsJQBDwUhWJwIxSHm6AE3Awl4RYoBbdCaSgDZaEc3Abl4XaoAHdARbgTKkFlqAJV4S6oBndDdbgHasC9UBPug1pwP9SGB6AOPAh14SGoBw9DfXgEGkBDaASNocn/Vf4L0AVehK7QDbpDD+gJL0Ev6A19oC/0g5ehP7wCA+BVGAiDYDC8BkPgdRgKb8AwGA4j4E0YCaNgNIyBsTAOxsNbMAHehonwDkyCyTAFpsI0mA4z4F2YCbNgNrwHc+B9mAvzYD4sgIXwASyCxbAEPoSl8BEsg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yDj2E77ICdsAt2wx7YC5/APvgU9sNncAA+/yfzz/1NfkcEBFSo0KDBdJgOUzAFM2JGzISZMDNmxgQmMCtmxWyYDbNjdsyJOTE35sa8mBcJCRkZ82E+TGISC2ABLIgFsTAWRo8ei2ExLI43YQksgSWxJJbCUlgay2AZLIflsDyWxwpYAStiRayElbAKVsG78C68G6tjdayBNbAm1sRaWAtrY22sg3WwLtbFelgP62N9bIANsBE2wibYBJtiU2yGzbAFtsCW2BJbYStsja2xDbbBttgW22E7bI/tsQN2wI7YCTvhC/gCvogvYjespHpgT+yJvbAX9sG+2Bdfxv74Cr6Cr+JAHISD8TV8DV/HoXgWh+FwHIEjsLwahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/A9nIPv4/s4D+fhAlyIC3ERLsYluASX4jlchstxBa7EVbgaV+FaXIdrcQNuxA24GTfjVtyKH+PHuAN34C7chXtwD36Cn+Cn+CkOxAN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gCT+IpPI2n8AyewbN4Ds/jebyAF/AiXsRLeCn1P79KZZRR6VQ6laJSVEaVUWVSmVRmlVklVEJlVVlVNpVNZVfZVU6VU+VWuVVelVeRIsUqVvlUPpVUSVVAFVAFVUFVWBVWXnlVTBVTxVVxVUKVUCXVLaqUulWVVmVUc19OlVPlVQtfQd2hKqqKqpKqrKqoqqqqqqaqqeqquqqhaqiaqqaqpe5XtVUP7IMPqtTK1FODsL4ajA1UQ9VINVav46OqqRqKzVRz1UI9robjMGylmvrW6inVRo3GtuoZNQafVe3VOOygnlcdVSfVWb2guqhmvqvqpiZhD9VTTcVeqrfqo/qqmVhZpVasinpVDVSD1GD1mlqAr6uh6g01TA1XI9SbaqQapUarMWqsGqfGq7fUBPW2mqjeUZPUZDVFTVXT1HQ1I/WjVc1Ss9V7ao56X81V89R8tUAtVB+oRWqxWqI+VEvVR2qZWq5WqJVqlVqt1qi1ap1arzaojWpTBGqL2qq2qY/VdrVD7VS71G61R+1Vn6h96lO1X32mDqjP1UH1B3VIfaEOqy/VEfWVOqq+VsfUN+q4+ladUN+pk+qUOq2+V2fUD+qsOqfOqx/VBfWTuqh+VpdUUKBRK6210ZFOp9PrFJ1BZ9RX6Uz6ap1ZZ9EJfY3Oqq/V2fR1OrvOoXPqXDq3zqPzaqtJO8061vl0fp3U1+sC+gZdUBfShXUR7XVRXUzfqIvrm3QJfbMuqW/RpfSturQuo8vqcvo2XV7frivoO3RFfaeupCvrKrqqvktX03fr6voeXUPfq2vq+3Qtfb+urR/QdfSDuq5+SNfTD+v6+hHdQDfUjXRj3UQ/qpvqx3Qz3Vy30I/rlvoJ3Uo/qVvrp3Qb/bRuq5/R7fSzur1+TnfQz+uOupPurH/Wl3TQXXU33V330D31S7qX7q376L66n35Z99ev6AH6VT1QD9KD9Wt6iH5dD9Vv6GF6uB6h39Qj9Sg9Wo/RY/U4PV6/pSfot/VE/Y6epCfrKXqqnqan6z5/HGn2P5D/9t/JH/DL0bfqbfpjvV3v0Dv1Lr1b79F79V69T+/T+/V+fUAf0Af1QX1IH9KH9WF9RB/RR/VRfUwf08f1cX1Cn9An9Sn9o/5en9E/6LP6nD6nf9QX9AV98Y/vARg0ymhjTGTSmfQmxWQwGc1VJpO52mQ2WUzCXGOymmtNNnOdyW5ymJwml8lt8pi8xhoyzrCJTT6T3yTN9aaAucEUNIVMYVPEeFPUFDM3/sv5vze/JqaJaWqammammWlhWpiWpqVpZVqZ1qa1aWPamLamrWln2pn2pr3pYDqYjqaj6Ww6my6miwkA0N10Nz3NS6aX6W36mL6mn3nZ9Df9zQAzwAw0A81gM9gMMUPMUDPUDDPDzAgzwow0I81oM9qMNWPNeDPeTDATzEQz0Uwyk8wUM8VMM9PMDDPDzDQzzWwz28wxc8xcM9fMN/PNQrPQLDKLzBKzxCw1S80ys9wsNyvNSrParDZrzVqz3qw3G81Gs9lsNsvMn35Ac6fZaXab3Wav2Wv2mX1mv9lvDpgD5qA5aA6ZQ+awOWyOmCPmqDlqjplj5rg5bk6YE+akOWlOm9PmjDljzpqz5rw5by6YC+aiuWgumUupl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5oryRjShyEUdxlC/KHyWj66MC0Q1RwahQVDgqEvmoaFQsujEqHt0UlYhujkpGt0Sloluj0lGZqGxULrotKh/dHlWI7ogqRndGlaLKUZWoanRXVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgaRo2ixlGTf+v4IZzN8ZjvarvZ7raH7Wlfsr1sb9vH9rX97Mu2v33FDrCv2oF2kB1sX7ND7Ot2qH3DDrPD7Qj7ph1pR9nRdowda8fZ8fYtO8G+bSfad+wkO9lOsVPtNDvdzrDv2pl2lp1t37Nz7Pt2rp1n59sFdqH9wC6yi+0S+6Fdaj+yy+xyu8KutKvsarvGrrXr7Hq7wW60m+xmu8Vutdvsx3a73WF32l12t91j99pP7D77qd1vP7MH7Of2oP2DPWS/sIftl/aI/coetV/bY/Ybe9x+a0/Y7+xJe8qett/bM/YHe9aes+ftj/aC/cletD/bSzakXtynnt7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoK2WlbJSNslN2ykk5KTflpryUl1IxMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWUo9ad5Gt9PtdAfdQXfSnVSZKlNVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSAGlAjakRNqAk1pabUjJpRC2pBLakltaJW1JpaUxtqQ22pLbWjdtSe2lMH6kAdqSN1ps7UhbpQV+pK3ak79aSe1It6UR/qQ/2oH/Wn/jSABtBAGkiDaTANoSE0lIbSMBpOI+hNGkmjaDSNobE0jsbTeJpAE2giTaRJNImm0BSaRtNoBs2gmTSTZtNsmkNzaC7Npfk0nxbSQlpEi2gJLaGltJSW0TJaQStoFa2iNbSG1tE62kAbaBNtoi20hbbRNtpO22kn7aTdtJv20l7aR/toP+2nA3SADtJBOkSH6DAdpiN0hI7SUTpGx+g4HacTdIJO0kk8TafpDJ2hs3SWztN5ukA/0UX6mS5RoBSXwWV0V7lM7mqX2WVxKS5DNwD4c5zT5XK5XR6X11mX3eX4q5iccwVdIVfYFXHeFXXF3I2/iUv3KOPKunLuNlfe3e4quNLur+Nq7m5X3d3jarh7XVV311/FNd19rpZ72NV2j7g6rqGr6xq7eu5hV9894hq4hq6Ra+xauidcK/eka+2ecm3c07+JF7nFbp1b7za4jW6f+9Sddz+6Y+4bd8H95Lq6bq6fe9n1d6+4Ae5VN9AN+k08wr3pRrpRbrQb48a6cb+Jp7ipbpqb7ma4d91MN+s38UL3gZvjlri5bp6b7xb8EqfOaYn70C11H7llbrlb4Va6VW61W+PW/nmuK91mt8VtdXvdJ2672+F2ul1ut9vzS5y6jv3uM3fAfe6Ouq/dIfeFO+yOuyPuq1/i1PUdd9+6E+47d9Kdcqfd9+6M+8Gdded+WX/q2r93P7tLLjhgZMWaDUecjtNzCmfgjHwVZ+KrOTNn4QRfw1n5Ws7G13F2zsE5ORfn5jycly0TO2aOOR/n5yRfzwX4Bi7IhbgwF2HPRbkY38jF+SYuwTdzSb6FS/GtXJrLcFkux7dxeb6dK/AdXJHv5EpcmatwVb6Lq/HdXJ3v4Rp8L9fk+7gW38+1+QGuww9yXX6I6/HDXJ8f4QbckBtxY27Cj3JTfoybcXNuwY9zS36CW/GT3Jqf4jb8NLflZ7gdP8vt+TnuwM9zR+7EnfkF7sIvclfuxt25B/fkl7gX9+Y+3Jf78cvcn1/hAfwqD+RBPJhf4yH8Og/lN3gYD+cR/CaP5FE8msfwWB7H4/ktnsBv80R+hyfxZJ7CU3kaT+cZ/C7P5Fk8m9/jOfw+z+V5PJ8X8EL+gBfxYl7CH/JS/oiX8XJewSt5Fa/mNbyW1/F63sAbeRNv5i28lbfxx7ydd/BO3sW7eQ/v5U94H3/K+/kzPsCf80H+Ax/iL/gwf8lH+Cs+yl/zMf6Gj/O3fIK/45N8ik/z93yGf+CzfI7P8498gX/ii/wzX+LAEGOsYh2bOIrTxenjlDhDnDG+Ks4UXx1njrPEifiaOGt8bZwtvi7OHueIc8a54txxnjhvbGOKXcxxHOeL88fJ+Pq4QHxDXDAuFBeOi8Q+LhoXi2+Mi8c3xSXim+OS8S1xqfjWuHRcJi4bl4tvi8vHt8cV4jviivGdcaW4clwlrhrfFVeL746rx/fENeJ74xLxfXGt+P64dvxAXCd+MK4bPxTXix+O68ePxA3ihnGjuHHcJH40bho/FjeLm8ct4sfjlvETcav4ybh1/FTcJn76d/u7xz3invFL8UtxCPfo+ckFyYXJD5KLkouTS5IfJpcmP0ouSy5PrkiuTK5Krk6uSa5NrkuuT25IbkxuSm5ObkluTYZQNT149Mprb3zk0/n0PsVn8Bn9VT6Tv9pn9ll8wl/js/prfTZ/nc/uc/icPpfP7fP4vN568s6zj30+n98n/fW+gL/BF/SFfGFfxHtf1BfzjX0T38Q39Y/5Zr65b+Ef94/7J/wT/kn/pH/Kt/FP+7b+Gd/OP+vb++f8c/5539F38p39C76Lf9F39d18d9/d9/Q9fS/fy/fxfXw/38/39/39AD/AD/QD/WA/2A/xQ/xQP9QP88P8CD/Cj/Qj/Wg/2o/1Y/14P95P8BP8RD/RT/KT/BQ/xU/z0/wMP8PP9DP9bD/bz/Fz/Fw/18/38/1Cv9Av8ov8Er/EL/VL/TK/zK/wK/wqv8qv8Wv8Or/Ob/Ab/Ca/yW/xW/w2v81v99v9Tr/T7/a7/V6/1+/z+/x+v98f8Af8QX/QH/KH/GH/pT/iv/JH/df+mP/GH/ff+hP+O3/Sn/Kn/ff+jP/Bn/Xn/Hn/o7/gf/IX/c/+kg9+fOKtxITE24mJiXcSkxKTE1MSUxPTEtMTMxLvJmYmZiVmJ95LzEm8n5ibmJeYn1iQWJj4ILEosTixJPFhYmnio8SyxPLEisTKxKrE6kQIebbHIV/IH5Lh+lAg3BAKhkKhcCgSfCgaioUbQ/FwUygRbg4lwy2hVLg1lA5lQtnwSGgQGoZGoXFoEh4NTcNjoVloHlqEx0PL8ERoFZ4MrcNToU14OrQNz4R24dnQPjwXOoTnQ8fQKXQOL4Qu4cXQNXQL3UOP0DO8FHqF3qFP6Bv6hZdD//BKGBBeDQPDoDA4vBaGhNfD0PBGGBaGhxHhzTAyjAqjw5gwNowL48NbYUJ4O0wM74RJYXKYEqaGaWF6mBHeDTPDrDA7vBfmhPfD3DAvzA8LwsLwQVgUFocl4cOwNHwUloXlYUVYGVaF1WFNWBvWhfVhQ9gYNoXNYUvYGraFj8P2sCPsDLvC7rAn7A2fhH3h07A/fBYOhM/DwfCHcCh8EQ6HL8OR8FU4Gr4Ox8I34Xj4NpwI34WT4VQ4Hb4PZ8IP4Ww4F86HH8OF8FO4GH4Ol+R31oQQQggh/iH6d/p7/Bc56o/tngBw9Y5cR/62f1P2X9u90+dumQCAp7p1ePBPW6VK3bt3/+O+yzRE+ecBQOJyfjq4HC+HFvAEtIbmUPzP/Sl/cazeqtMF/u/GB4iStwBc+ovvNUjNzwh/O/5Nf3f9vdWoOf/t+Bqi5DyAgvkv52SAy/Hl8Uv8F+PnaPo742f4YjxAs7/IyQSX48vjF4PH4Glo/Vd7CiGEEEIIIYQQv+qtyrb7vfvb1Pvz3OZyTnq4HP+9+3MhhBBCCCGEEEL87/Jsp85PPtq6dfN20vifaoQsv77V/1vmIw1p/AONK/3JJIQQQgghhPh3u3zRf6VnIoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpF3/L75O7E/H+r2/NSiEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEL8p/o/AQAA//9EzkE1") mknod$loop(0x0, 0x0, 0x1) mknod(&(0x7f0000001580)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x3) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x315d030, 0x0, 0x40, 0x0, &(0x7f0000000100)) creat(&(0x7f0000002700)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20) 3.319161572s ago: executing program 1 (id=813): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x12, 0x5}) 3.317103682s ago: executing program 34 (id=813): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x12, 0x5}) 2.556782879s ago: executing program 4 (id=821): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs2\x00', &(0x7f0000000200), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x803, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.510534504s ago: executing program 6 (id=823): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\\\x00wG[\xa4\xf6\xd8U\xb0G=O\xf5\x96\x00\x00\x00\x00\x00', 0x0, r0) 2.466258449s ago: executing program 6 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x8000000, 0xe, 0x0, &(0x7f0000000340)="00000000000000fffffffe000000", 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.412425184s ago: executing program 4 (id=825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0xfffffffe, 0x56) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xffffbfc4, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xfffffbff, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 2.412261724s ago: executing program 4 (id=826): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nobh}]}, 0xfd, 0x244, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x101042, 0x0) r1 = open(&(0x7f0000000bc0)='./file1\x00', 0x14d142, 0x82) ftruncate(r1, 0x2007ffa) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000002c40)={0x17c04, 0xffffffffffffffff, 0x4f001, 0x100000004, 0x6}) 2.393555266s ago: executing program 7 (id=814): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000100)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) r3 = eventfd(0x3) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r3, 0x1) io_uring_enter(r0, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) 2.35501563s ago: executing program 6 (id=827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x6, 0x23, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x6, 0x8, &(0x7f0000001300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000001400)="63ed000061fb3e2ddf33c9c8b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.346366131s ago: executing program 6 (id=828): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0xbd72e000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x398) 2.342299151s ago: executing program 4 (id=829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 2.301466965s ago: executing program 6 (id=830): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100), 0x26, 0x763, &(0x7f0000000b80)="$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") setreuid(0xee01, 0xee01) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x21081e, &(0x7f0000000880)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x507, &(0x7f0000002b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000013c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.297892366s ago: executing program 4 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0xcb) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) write$FUSE_BMAP(r0, &(0x7f0000002d00)={0x18, 0x0, 0x0, {0xfffffffffffffff8}}, 0x18) 2.25189335s ago: executing program 4 (id=832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[], 0x0) 2.217609544s ago: executing program 7 (id=833): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 1.000333938s ago: executing program 2 (id=834): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 46.872515ms ago: executing program 5 (id=835): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000240)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 39.987136ms ago: executing program 6 (id=836): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setresuid(0x0, 0xee00, 0x0) write$binfmt_script(r0, &(0x7f0000000f80), 0x208e24b) 0s ago: executing program 2 (id=837): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) kernel console output (not intermixed with test programs): id=468 comm="syz.1.65" path="/13/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.212046][ T438] syz.0.53 (438) used greatest stack depth: 22056 bytes left [ 29.249381][ T471] loop3: detected capacity change from 0 to 256 [ 29.261112][ T28] audit: type=1400 audit(1792758648.239:178): avc: denied { read write } for pid=472 comm="syz.0.66" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.291848][ T471] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d) [ 29.305897][ T28] audit: type=1400 audit(1792758648.239:179): avc: denied { open } for pid=472 comm="syz.0.66" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.330038][ T28] audit: type=1400 audit(1792758648.289:180): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 29.353068][ T471] exFAT-fs (loop3): error, invalid size(size(2048) > aligned(18374686479671623680) [ 29.353068][ T471] [ 29.365365][ T28] audit: type=1400 audit(1792758648.339:181): avc: denied { write } for pid=470 comm="syz.3.67" name="file1" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.390378][ T471] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 29.400130][ T471] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881331c04f0 iblock : 8, err : -5) [ 29.410335][ T28] audit: type=1400 audit(1792758648.339:182): avc: denied { open } for pid=470 comm="syz.3.67" name="file1" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.433266][ T471] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 29.444615][ T476] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 29.454317][ T28] audit: type=1400 audit(1792758648.379:183): avc: denied { read } for pid=470 comm="syz.3.67" name="file1" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.498655][ T478] loop3: detected capacity change from 0 to 512 [ 29.505176][ T28] audit: type=1400 audit(1792758648.469:184): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.549165][ T28] audit: type=1326 audit(1792758648.529:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=479 comm="syz.0.69" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ec919f559 code=0x0 [ 29.588218][ T478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.597781][ T478] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.634387][ T28] audit: type=1400 audit(1792758648.619:186): avc: denied { ioctl } for pid=477 comm="syz.3.70" path="/10/file1/file2" dev="loop3" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.676350][ T286] EXT4-fs (loop3): unmounting filesystem. [ 29.862094][ T501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.77'. [ 29.891405][ T501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.77'. [ 30.013878][ T534] netlink: 104 bytes leftover after parsing attributes in process `syz.1.91'. [ 30.046372][ T542] capability: warning: `syz.2.93' uses deprecated v2 capabilities in a way that may be insecure [ 30.059559][ T540] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 30.074368][ T540] EXT4-fs error (device loop1): ext4_get_journal_inode:5749: inode #32: comm syz.1.94: iget: special inode unallocated [ 30.087719][ T540] EXT4-fs (loop1): no journal found [ 30.093025][ T540] EXT4-fs (loop1): can't get journal size [ 30.116135][ T540] EXT4-fs (loop1): filesystem is read-only [ 30.134167][ T540] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.148876][ T540] EXT4-fs (loop1): shut down requested (0) [ 30.169803][ T287] EXT4-fs (loop1): unmounting filesystem. [ 30.222130][ T556] overlayfs: fs on './proc' does not support file handles, falling back to index=off,nfs_export=off. [ 30.234461][ T556] overlayfs: maximum fs stacking depth exceeded [ 30.311740][ T566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.320782][ T566] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.334125][ T566] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 3: comm syz.3.104: lblock 8 mapped to illegal pblock 3 (length 26) [ 30.383782][ T286] EXT4-fs (loop3): unmounting filesystem. [ 30.395303][ T581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.110'. [ 30.406073][ T581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.110'. [ 30.456835][ T585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 30.472138][ T583] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x20200bb1, utbl_chksum : 0xe619d30d) [ 30.484421][ T585] System zones: 1-3, 19-19, 35-36 [ 30.490046][ T585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.512255][ T583] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 30.519300][ T585] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.520102][ T583] exFAT-fs (loop4): Filesystem has been set read-only [ 30.597515][ T289] EXT4-fs (loop2): unmounting filesystem. [ 30.619335][ T598] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.630788][ T598] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.669748][ T598] fs-verity: sha512 using implementation "sha512-avx2" [ 30.708295][ T290] EXT4-fs (loop0): unmounting filesystem. [ 30.719982][ T598] syz.0.118 (598) used greatest stack depth: 21536 bytes left [ 30.805977][ T626] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.129: missing EA_INODE flag [ 30.829611][ T626] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.129: error while reading EA inode 2 err=-117 [ 30.849930][ T626] EXT4-fs (loop2): 1 orphan inode deleted [ 30.870143][ T626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.883280][ T628] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.892350][ T295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.928165][ T615] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 30.938709][ T289] EXT4-fs (loop2): unmounting filesystem. [ 30.944673][ T615] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.953558][ T615] F2FS-fs (loop3): fault_type options not supported [ 30.961478][ T615] F2FS-fs (loop3): fault_injection options not supported [ 30.969161][ T615] F2FS-fs (loop3): Image doesn't support compression [ 30.977733][ T290] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /22/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.000134][ T290] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.019968][ T615] F2FS-fs (loop3): invalid crc value [ 31.020129][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.037767][ T290] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /22/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.060291][ T290] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.082585][ T637] mmap: syz.2.131 (637) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.095456][ T615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.114260][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.127094][ T295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.143681][ T290] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /22/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.165397][ T295] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 31.176140][ T290] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.196394][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.208507][ T295] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.218049][ T290] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /22/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.250699][ T290] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.254125][ T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.279270][ T615] F2FS-fs (loop3): Start checkpoint disabled! [ 31.285673][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.298403][ T615] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 31.306214][ T295] usb 5-1: Product: syz [ 31.310519][ T295] usb 5-1: Manufacturer: syz [ 31.314441][ T290] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /22/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.324960][ T295] usb 5-1: SerialNumber: syz [ 31.344350][ T615] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 31.353365][ T295] cdc_mbim 5-1:1.0: skipping garbage [ 31.357126][ T615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 31.375652][ T290] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.423748][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.436676][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.448946][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.471112][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.483657][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.497872][ T290] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.515887][ T286] F2FS-fs (loop3): access invalid blkaddr:4043309056 [ 31.522997][ T286] CPU: 1 PID: 286 Comm: syz-executor Not tainted syzkaller #0 [ 31.530524][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.540606][ T286] Call Trace: [ 31.543920][ T286] [ 31.546872][ T286] __dump_stack+0x21/0x24 [ 31.551226][ T286] dump_stack_lvl+0x110/0x170 [ 31.555921][ T286] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.560979][ T286] dump_stack+0x15/0x24 [ 31.561862][ T600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 31.565191][ T286] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 31.577905][ T286] f2fs_is_valid_blkaddr+0x23/0x30 [ 31.583053][ T286] f2fs_map_blocks+0xcb3/0x4600 [ 31.587940][ T286] ? kasan_save_alloc_info+0x1f/0x30 [ 31.593264][ T286] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 31.598586][ T286] ? __cfi_mempool_alloc+0x10/0x10 [ 31.603733][ T286] ? bio_associate_blkg_from_css+0x960/0xb10 [ 31.609749][ T286] ? xas_start+0x31d/0x3e0 [ 31.614201][ T286] ? xa_load+0xad/0xd0 [ 31.618313][ T286] f2fs_mpage_readpages+0xa46/0x1b20 [ 31.623653][ T286] ? f2fs_i_blocks_write+0x1f0/0x1f0 [ 31.628986][ T286] ? cgroup_rstat_updated+0xf0/0x360 [ 31.634336][ T286] ? xas_nomem+0x6b/0x1f0 [ 31.638689][ T286] f2fs_readahead+0xfc/0x240 [ 31.643302][ T286] ? __cfi_f2fs_readahead+0x10/0x10 [ 31.648543][ T286] read_pages+0x1bf/0xe10 [ 31.652890][ T286] ? page_cache_ra_unbounded+0x850/0x850 [ 31.658552][ T286] ? filemap_add_folio+0x113/0x260 [ 31.663675][ T286] page_cache_ra_unbounded+0x6ff/0x850 [ 31.669167][ T286] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 31.675250][ T286] page_cache_ra_order+0xb0c/0xe50 [ 31.680389][ T286] ? __switch_to+0x56f/0x1070 [ 31.685091][ T286] ? __cfi_page_cache_ra_order+0x10/0x10 [ 31.690747][ T286] ? __kasan_check_write+0x14/0x20 [ 31.695884][ T286] ? finish_task_switch+0x209/0x7c0 [ 31.701111][ T286] ondemand_readahead+0x821/0xdb0 [ 31.706159][ T286] ? page_cache_sync_ra+0x3d0/0x3d0 [ 31.711377][ T286] page_cache_sync_ra+0x35b/0x3d0 [ 31.716417][ T286] f2fs_readdir+0x473/0x990 [ 31.720935][ T286] ? cgroup_rstat_updated+0xf0/0x360 [ 31.726239][ T286] ? __cfi_f2fs_readdir+0x10/0x10 [ 31.731271][ T286] ? handle_mm_fault+0x18d8/0x26b0 [ 31.736401][ T286] ? down_read_killable+0xbc/0x110 [ 31.741529][ T286] ? __cfi_down_read_killable+0x10/0x10 [ 31.747094][ T286] ? security_file_permission+0x94/0xb0 [ 31.752663][ T286] iterate_dir+0x26d/0x610 [ 31.757115][ T286] ? __cfi_f2fs_readdir+0x10/0x10 [ 31.762246][ T286] __se_sys_getdents64+0xf2/0x250 [ 31.767283][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 31.772491][ T286] ? __cfi_filldir64+0x10/0x10 [ 31.777276][ T286] ? fpregs_restore_userregs+0x128/0x260 [ 31.782925][ T286] __x64_sys_getdents64+0x7b/0x90 [ 31.787961][ T286] x64_sys_call+0x15c/0x9a0 [ 31.792483][ T286] do_syscall_64+0x4c/0xa0 [ 31.796909][ T286] ? clear_bhb_loop+0x30/0x80 [ 31.801597][ T286] ? clear_bhb_loop+0x30/0x80 [ 31.806295][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.812201][ T286] RIP: 0033:0x7fe8f45c7ef3 [ 31.816629][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 31.836348][ T286] RSP: 002b:00007ffec4b11558 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 31.844791][ T286] RAX: ffffffffffffffda RBX: 000055556673c910 RCX: 00007fe8f45c7ef3 [ 31.852782][ T286] RDX: 0000000000008000 RSI: 000055556673c940 RDI: 0000000000000005 [ 31.860767][ T286] RBP: 000055556673c940 R08: 00007fe8f47f9e20 R09: 0000000000000001 [ 31.868758][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556673c914 [ 31.876746][ T286] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffec4b13800 [ 31.884754][ T286] [ 31.920234][ T286] syz-executor: attempt to access beyond end of device [ 31.920234][ T286] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 31.958966][ T286] syz-executor: attempt to access beyond end of device [ 31.958966][ T286] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 31.983290][ T481] EXT4-fs (loop0): unmounting filesystem. [ 32.015270][ T10] kworker/u4:1: attempt to access beyond end of device [ 32.015270][ T10] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 32.061778][ T659] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.070588][ T659] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 32.089399][ T659] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 32.102039][ T659] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=89 [ 32.314034][ T600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 32.334792][ T295] cdc_mbim 5-1:1.0: setting rx_max = 16384 [ 32.356991][ T677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 32.432146][ T673] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.448976][ T673] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.464588][ T673] device bridge_slave_0 entered promiscuous mode [ 32.474757][ T673] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.491734][ T673] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.508949][ T673] device bridge_slave_1 entered promiscuous mode [ 32.536552][ T295] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 32.555687][ T295] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, ce:31:3b:6b:da:d0 [ 32.581909][ T295] usb 5-1: USB disconnect, device number 2 [ 32.588084][ T295] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 32.624432][ T690] set_capacity_and_notify: 10 callbacks suppressed [ 32.624449][ T690] loop2: detected capacity change from 0 to 1024 [ 32.677775][ T690] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.715070][ T690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.727657][ T690] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 32.763555][ T289] EXT4-fs (loop2): unmounting filesystem. [ 32.782963][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.803266][ T685] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.814392][ T698] loop2: detected capacity change from 0 to 256 [ 32.822337][ T685] device bridge_slave_0 entered promiscuous mode [ 32.843898][ T10] device bridge_slave_1 left promiscuous mode [ 32.852293][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.863601][ T698] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 32.864690][ T684] loop1: detected capacity change from 0 to 40427 [ 32.882321][ T10] device bridge_slave_0 left promiscuous mode [ 32.896881][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.911197][ T684] F2FS-fs (loop1): invalid crc value [ 32.920453][ T684] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.935939][ T10] device veth1_macvtap left promiscuous mode [ 32.942024][ T10] device veth0_vlan left promiscuous mode [ 32.969852][ T684] F2FS-fs (loop1): Start checkpoint disabled! [ 32.978209][ T684] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 32.985972][ T684] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 33.099361][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.107009][ T396] kworker/u4:4: attempt to access beyond end of device [ 33.107009][ T396] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 33.121990][ T685] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.144015][ T685] device bridge_slave_1 entered promiscuous mode [ 33.251647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.264911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.298147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.324431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.342871][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.350009][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.377618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.411951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.425204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.443785][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.450908][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.480064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.489617][ T719] loop2: detected capacity change from 0 to 40427 [ 33.496605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.506025][ T719] F2FS-fs (loop2): invalid crc value [ 33.513031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.530793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.571813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.581092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.582633][ T719] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.607222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.616074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.635132][ T673] device veth0_vlan entered promiscuous mode [ 33.655648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.666912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.679408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.687044][ T719] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.695188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.702852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.711460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.719939][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.727040][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.735035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.743465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.751863][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.758948][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.774623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.782622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.790902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.812809][ T685] device veth0_vlan entered promiscuous mode [ 33.821575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.839749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.848599][ T289] syz-executor: attempt to access beyond end of device [ 33.848599][ T289] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 33.863815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.871627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.888667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.904595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.921484][ T673] device veth1_macvtap entered promiscuous mode [ 33.943005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.953988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.978965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.001757][ T685] device veth1_macvtap entered promiscuous mode [ 34.019439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.035381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.052689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.080175][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 34.080191][ T28] audit: type=1400 audit(1792758653.059:293): avc: denied { mounton } for pid=673 comm="syz-executor" path="/root/syzkaller.kBIoee/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.114445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.124448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.163906][ T715] loop4: detected capacity change from 0 to 131072 [ 34.241759][ T715] F2FS-fs (loop4): Test dummy encryption mode enabled [ 34.267907][ T715] F2FS-fs (loop4): invalid crc value [ 34.279215][ T28] audit: type=1400 audit(1792758653.259:294): avc: denied { create } for pid=739 comm="syz.6.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.317685][ T28] audit: type=1400 audit(1792758653.269:295): avc: denied { write } for pid=739 comm="syz.6.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.339395][ T715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.365693][ T10] device bridge_slave_1 left promiscuous mode [ 34.371899][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.388767][ T10] device bridge_slave_0 left promiscuous mode [ 34.395103][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.405025][ T28] audit: type=1400 audit(1792758653.379:296): avc: denied { create } for pid=746 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.424440][ T10] device veth1_macvtap left promiscuous mode [ 34.431015][ T10] device veth0_vlan left promiscuous mode [ 34.431912][ T28] audit: type=1400 audit(1792758653.409:297): avc: denied { bind } for pid=746 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.451993][ T715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.456070][ T295] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 34.493168][ T715] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 34.608598][ T758] FAULT_INJECTION: forcing a failure. [ 34.608598][ T758] name failslab, interval 1, probability 0, space 0, times 0 [ 34.625824][ T758] CPU: 1 PID: 758 Comm: syz.2.178 Not tainted syzkaller #0 [ 34.633083][ T758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.643163][ T758] Call Trace: [ 34.646470][ T758] [ 34.649427][ T758] __dump_stack+0x21/0x24 [ 34.653795][ T758] dump_stack_lvl+0x110/0x170 [ 34.658506][ T758] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.663662][ T758] dump_stack+0x15/0x24 [ 34.667852][ T758] should_fail_ex+0x3bf/0x510 [ 34.672561][ T758] __should_failslab+0xac/0xf0 [ 34.677361][ T758] should_failslab+0x9/0x20 [ 34.681890][ T758] __kmem_cache_alloc_node+0x3d/0x2d0 [ 34.687296][ T758] ? call_usermodehelper_setup+0x8e/0x210 [ 34.693048][ T758] ? call_usermodehelper_setup+0x8e/0x210 [ 34.698816][ T758] kmalloc_trace+0x29/0xb0 [ 34.703268][ T758] call_usermodehelper_setup+0x8e/0x210 [ 34.708841][ T758] ? __cfi_free_modprobe_argv+0x10/0x10 [ 34.714415][ T758] __request_module+0x391/0x910 [ 34.719299][ T758] ? __cfi___request_module+0x10/0x10 [ 34.724708][ T758] get_fs_type+0x181/0x4e0 [ 34.729155][ T758] __se_sys_fsopen+0x89/0x2f0 [ 34.733859][ T758] __x64_sys_fsopen+0x5b/0x70 [ 34.738561][ T758] x64_sys_call+0x537/0x9a0 [ 34.740768][ T295] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 34.743101][ T758] do_syscall_64+0x4c/0xa0 [ 34.755539][ T758] ? clear_bhb_loop+0x30/0x80 [ 34.760257][ T758] ? clear_bhb_loop+0x30/0x80 [ 34.764966][ T758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.770889][ T758] RIP: 0033:0x7f11a079f559 [ 34.771723][ T295] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.775322][ T758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.775341][ T758] RSP: 002b:00007f11a16a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 34.813476][ T758] RAX: ffffffffffffffda RBX: 00007f11a0a25fa0 RCX: 00007f11a079f559 [ 34.814110][ T295] usb 6-1: config 1 has no interface number 0 [ 34.821488][ T758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000540 [ 34.821504][ T758] RBP: 00007f11a0836b20 R08: 0000000000000000 R09: 0000000000000000 [ 34.821518][ T758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.848350][ T295] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 34.851542][ T758] R13: 00007f11a0a26038 R14: 00007f11a0a25fa0 R15: 00007ffc27954398 [ 34.870440][ T758] [ 34.873413][ T295] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 34.882471][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 34.895359][ T295] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 34.905560][ T295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.913640][ T295] usb 6-1: Product: syz [ 34.928068][ T295] usb 6-1: Manufacturer: syz [ 34.932729][ T295] usb 6-1: SerialNumber: syz [ 35.004155][ T491] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.065277][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.076688][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.086768][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.110885][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.120726][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.137170][ T24] usb 7-1: config 0 descriptor?? [ 35.178597][ T733] loop5: detected capacity change from 0 to 4096 [ 35.215469][ T491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.228588][ T295] snd-usb-audio: probe of 6-1:1.1 failed with error -90 [ 35.244959][ T295] usb 6-1: USB disconnect, device number 2 [ 35.250889][ T491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.265020][ T491] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.278034][ T491] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.287153][ T491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.297973][ T491] usb 2-1: config 0 descriptor?? [ 35.371582][ T28] audit: type=1400 audit(1792758654.349:298): avc: denied { mount } for pid=785 comm="syz.4.189" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.401180][ T28] audit: type=1400 audit(1792758654.379:299): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.430056][ T788] loop4: detected capacity change from 0 to 512 [ 35.458742][ T788] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.467935][ T788] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.489519][ T288] EXT4-fs (loop4): unmounting filesystem. [ 35.518092][ T793] loop4: detected capacity change from 0 to 2048 [ 35.550812][ T24] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 35.561683][ T793] Alternate GPT is invalid, using primary GPT. [ 35.568326][ T793] loop4: p1 p2 p3 [ 35.572303][ T24] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 35.581423][ T797] loop2: detected capacity change from 0 to 256 [ 35.593823][ T797] exfat: Deprecated parameter 'utf8' [ 35.599252][ T797] exfat: Deprecated parameter 'namecase' [ 35.622091][ T797] exfat: Deprecated parameter 'namecase' [ 35.632894][ T797] exfat: Deprecated parameter 'namecase' [ 35.673992][ T797] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 35.691527][ T801] process 'syz.4.194' launched './file0' with NULL argv: empty string added [ 35.701967][ T28] audit: type=1400 audit(1792758654.689:300): avc: denied { execute } for pid=800 comm="syz.4.194" name="file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.702334][ T801] Invalid argument reading file caps for ./file0 [ 35.735520][ T491] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 35.761578][ T491] plantronics 0003:047F:FFFF.0002: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 35.803569][ T28] audit: type=1400 audit(1792758654.689:301): avc: denied { execute_no_trans } for pid=800 comm="syz.4.194" path="/33/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.832216][ T806] xt_hashlimit: size too large, truncated to 1048576 [ 35.894852][ T815] loop5: detected capacity change from 0 to 512 [ 35.910171][ T815] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.926758][ T817] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.947224][ T817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.957697][ T815] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a00ec018, mo2=0002] [ 35.965833][ T815] System zones: 0-2, 18-18, 34-35 [ 35.972034][ T817] EXT4-fs (loop2): 1 truncate cleaned up [ 35.978912][ T815] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 35.984681][ T817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.996609][ T815] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.023548][ T673] EXT4-fs (loop5): unmounting filesystem. [ 36.113205][ T289] EXT4-fs (loop2): unmounting filesystem. [ 36.159103][ T827] exfat: Deprecated parameter 'utf8' [ 36.178750][ T827] exfat: Deprecated parameter 'namecase' [ 36.191125][ T827] exfat: Deprecated parameter 'namecase' [ 36.207009][ T827] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 36.237169][ T28] audit: type=1400 audit(1792758655.219:302): avc: denied { append } for pid=826 comm="syz.2.204" path="/64/bus/memory.events.local" dev="loop2" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.297701][ T830] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 36.335028][ T834] exfat: Deprecated parameter 'utf8' [ 36.350225][ T834] exfat: Deprecated parameter 'namecase' [ 36.362903][ T834] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 36.693194][ T866] F2FS-fs (loop4): heap/no_heap options were deprecated [ 36.721427][ T866] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.771972][ T866] F2FS-fs (loop4): Start checkpoint disabled! [ 36.778769][ T866] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 36.786318][ T866] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 36.957897][ T40] usb 2-1: USB disconnect, device number 2 [ 36.972780][ T8] kworker/u4:0: attempt to access beyond end of device [ 36.972780][ T8] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 36.989207][ T8] kworker/u4:0: attempt to access beyond end of device [ 36.989207][ T8] loop4: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 37.043003][ T875] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.057201][ T875] overlayfs: failed to look up (tracing) for ino (-66) [ 37.129157][ T888] input: syz0 as /devices/virtual/input/input6 [ 37.153536][ T890] tap0: tun_chr_ioctl cmd 1074025681 [ 37.159290][ T890] tap0: tun_chr_ioctl cmd 2148045848 [ 37.331537][ T894] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 37.338844][ T894] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 37.374204][ T894] F2FS-fs (loop5): invalid crc value [ 37.399241][ T894] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 37.458811][ T894] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 37.480465][ T894] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 37.492073][ T914] binder: 913:914 ioctl c0306201 0 returned -14 [ 37.500228][ T914] binder: 913:914 ioctl 400c620e 200000000340 returned -22 [ 37.561548][ T673] syz-executor: attempt to access beyond end of device [ 37.561548][ T673] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.686765][ T937] FAULT_INJECTION: forcing a failure. [ 37.686765][ T937] name failslab, interval 1, probability 0, space 0, times 0 [ 37.708505][ T937] CPU: 0 PID: 937 Comm: syz.4.251 Not tainted syzkaller #0 [ 37.715776][ T937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.725868][ T937] Call Trace: [ 37.729175][ T937] [ 37.732136][ T937] __dump_stack+0x21/0x24 [ 37.736496][ T937] dump_stack_lvl+0x110/0x170 [ 37.741202][ T937] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.746270][ T937] dump_stack+0x15/0x24 [ 37.750591][ T937] should_fail_ex+0x3bf/0x510 [ 37.755342][ T937] ? lease_alloc+0x2a/0x340 [ 37.759928][ T937] __should_failslab+0xac/0xf0 [ 37.764739][ T937] should_failslab+0x9/0x20 [ 37.765192][ T24] usb 7-1: USB disconnect, device number 2 [ 37.769271][ T937] kmem_cache_alloc+0x3b/0x320 [ 37.779874][ T937] ? __cfi_futex_wake+0x10/0x10 [ 37.784762][ T937] lease_alloc+0x2a/0x340 [ 37.789131][ T937] ? fcntl_setlease+0x91/0x330 [ 37.793935][ T937] fcntl_setlease+0x120/0x330 [ 37.798651][ T937] ? __cfi_fcntl_setlease+0x10/0x10 [ 37.803886][ T937] ? vfs_write+0xa51/0xd00 [ 37.808341][ T937] ? do_futex+0x2e2/0x430 [ 37.812714][ T937] do_fcntl+0x115/0x1110 [ 37.816997][ T937] ? __kasan_check_write+0x14/0x20 [ 37.822141][ T937] ? kill_fasync+0x210/0x210 [ 37.826816][ T937] ? __fget_files+0x2d1/0x330 [ 37.831532][ T937] ? security_file_fcntl+0x95/0xc0 [ 37.836769][ T937] __se_sys_fcntl+0xdf/0x1b0 [ 37.841398][ T937] __x64_sys_fcntl+0x7b/0x90 [ 37.846024][ T937] x64_sys_call+0x1a9/0x9a0 [ 37.850568][ T937] do_syscall_64+0x4c/0xa0 [ 37.855016][ T937] ? clear_bhb_loop+0x30/0x80 [ 37.859731][ T937] ? clear_bhb_loop+0x30/0x80 [ 37.864447][ T937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.870378][ T937] RIP: 0033:0x7fe32299f559 [ 37.874837][ T937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.894485][ T937] RSP: 002b:00007fe323852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 37.902937][ T937] RAX: ffffffffffffffda RBX: 00007fe322c25fa0 RCX: 00007fe32299f559 [ 37.910953][ T937] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 37.918968][ T937] RBP: 00007fe322a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 37.926979][ T937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.934986][ T937] R13: 00007fe322c26038 R14: 00007fe322c25fa0 R15: 00007ffdd3b73e38 [ 37.942974][ T937] [ 37.963880][ T956] set_capacity_and_notify: 5 callbacks suppressed [ 37.963896][ T956] loop5: detected capacity change from 0 to 512 [ 37.979850][ T956] EXT4-fs: Ignoring removed bh option [ 37.990139][ T957] loop1: detected capacity change from 0 to 512 [ 38.004396][ T956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.036547][ T956] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 38.045666][ T956] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.072595][ T673] EXT4-fs (loop5): unmounting filesystem. [ 38.142664][ T977] input: syz1 as /devices/virtual/input/input7 [ 38.204739][ T989] netlink: 'syz.5.274': attribute type 4 has an invalid length. [ 38.247821][ T991] raw_sendmsg: syz.5.275 forgot to set AF_INET. Fix it! [ 38.284140][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.424615][ T996] loop2: detected capacity change from 0 to 8192 [ 38.436312][ T996] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.444303][ T491] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.466248][ T24] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.480996][ T24] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.495091][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 38.503115][ T998] input: syz1 as /devices/virtual/input/input8 [ 38.506049][ T24] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 38.519210][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.531014][ T604] udevd[604]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 38.534200][ T767] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 38.543867][ T24] usb 5-1: config 0 descriptor?? [ 38.657280][ T491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.668354][ T491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.678345][ T491] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.691712][ T491] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.703593][ T491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.720673][ T491] usb 2-1: config 0 descriptor?? [ 38.726401][ T1010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 38.745613][ T767] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 38.755486][ T767] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 38.769979][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.778447][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.779574][ T767] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 38.788875][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.795741][ T767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.806119][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.812330][ T767] usb 6-1: Product: syz [ 38.823569][ T767] usb 6-1: Manufacturer: syz [ 38.828403][ T767] usb 6-1: SerialNumber: syz [ 38.838533][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.847275][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.855696][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.865536][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.928115][ T1010] syz.6.283 (1010) used greatest stack depth: 20960 bytes left [ 38.970082][ T24] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:06A3:0CD0.0003/input/input9 [ 39.030179][ T1025] loop6: detected capacity change from 0 to 512 [ 39.043122][ T767] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 39.066470][ T24] saitek 0003:06A3:0CD0.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.4-1/input0 [ 39.088071][ T1025] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 39.106894][ T1025] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.133475][ T1025] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.290: Allocating blocks 44-108 which overlap fs metadata [ 39.150506][ T491] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 39.159576][ T491] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 39.168613][ T491] plantronics 0003:047F:FFFF.0004: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 39.191014][ T685] EXT4-fs (loop6): unmounting filesystem. [ 39.210882][ T871] usb 5-1: USB disconnect, device number 3 [ 39.237553][ T1032] fido_id[1032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 39.279414][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 39.279430][ T28] audit: type=1400 audit(1792758914.265:331): avc: denied { read write } for pid=992 comm="syz.5.276" name="lp0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 39.313068][ T28] audit: type=1400 audit(1792758914.265:332): avc: denied { open } for pid=992 comm="syz.5.276" path="/dev/usb/lp0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 39.357878][ T491] usb 2-1: USB disconnect, device number 3 [ 39.479949][ T1042] loop2: detected capacity change from 0 to 40427 [ 39.488173][ T1042] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 39.494789][ T295] usb 6-1: USB disconnect, device number 3 [ 39.505921][ T295] usblp0: removed [ 39.507952][ T1042] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 39.519959][ T1042] F2FS-fs (loop2): invalid crc value [ 39.543616][ T1042] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 39.548081][ T1052] loop6: detected capacity change from 0 to 512 [ 39.576884][ T1052] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 39.589387][ T1052] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 39.598626][ T1042] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 39.598659][ T1052] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.605741][ T1042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.638150][ T685] EXT4-fs (loop6): unmounting filesystem. [ 39.652845][ T1042] syz.2.295: attempt to access beyond end of device [ 39.652845][ T1042] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 39.743786][ T1065] loop2: detected capacity change from 0 to 256 [ 39.762557][ T1065] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 39.908984][ T1076] loop1: detected capacity change from 0 to 1024 [ 39.924795][ T1076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.931474][ T1076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.939246][ T1076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.954169][ T994] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 39.966130][ T1076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.977357][ T1076] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.007562][ T1076] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.308: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.033927][ T1076] EXT4-fs (loop1): Remounting filesystem read-only [ 40.042133][ T1076] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.308: bg 0: block 112: padding at end of block bitmap is not set [ 40.057779][ T1076] EXT4-fs (loop1): Remounting filesystem read-only [ 40.074453][ T287] EXT4-fs (loop1): unmounting filesystem. [ 40.152484][ T1098] kernel profiling enabled (shift: 2) [ 40.159152][ T994] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.169412][ T28] audit: type=1400 audit(1792758915.155:333): avc: denied { getopt } for pid=1091 comm="syz.1.314" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.198597][ T994] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.213009][ T994] usb 7-1: config 1 has no interface number 0 [ 40.222548][ T994] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 40.245548][ T994] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 40.261997][ T994] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.283790][ T994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.297384][ T994] usb 7-1: Product: syz [ 40.304863][ T994] usb 7-1: Manufacturer: syz [ 40.312824][ T994] usb 7-1: SerialNumber: syz [ 40.363226][ T28] audit: type=1400 audit(1792758915.345:334): avc: denied { set_context_mgr } for pid=1105 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 40.401034][ T28] audit: type=1400 audit(1792758915.375:335): avc: denied { write } for pid=1105 comm="syz.1.320" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.457475][ T1114] loop1: detected capacity change from 0 to 128 [ 40.480369][ T28] audit: type=1400 audit(1792758915.465:336): avc: denied { mount } for pid=1113 comm="syz.1.324" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.741294][ T28] audit: type=1400 audit(1792758915.725:337): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.784252][ T1126] loop1: detected capacity change from 0 to 512 [ 40.798268][ T1126] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.807494][ T871] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.815752][ T1126] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.850640][ T287] EXT4-fs (loop1): unmounting filesystem. [ 40.978007][ T1138] ip_tables: iptables: counters copy to user failed while replacing table [ 41.015227][ T871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.025513][ T871] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 41.035639][ T871] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.049642][ T871] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 41.059829][ T871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.071864][ T871] pl2303 3-1:1.0: required endpoints missing [ 41.078742][ T871] pl2303 3-1:1.1: required endpoints missing [ 41.279108][ T1146] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 41.286439][ T1146] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.294948][ T1146] F2FS-fs (loop1): heap/no_heap options were deprecated [ 41.302535][ T1146] F2FS-fs (loop1): invalid crc value [ 41.309279][ T1146] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 41.338791][ T994] cdc_ncm 7-1:1.1: bind() failure [ 41.350166][ T1146] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 41.357506][ T1146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.359407][ T994] usb 7-1: USB disconnect, device number 3 [ 41.384779][ T28] audit: type=1400 audit(1792758916.375:338): avc: denied { remount } for pid=1145 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.413963][ T1146] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 41.423184][ T1151] f2fs_ckpt-7:1: attempt to access beyond end of device [ 41.423184][ T1151] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.468514][ T1153] EXT4-fs: Ignoring removed nobh option [ 41.504531][ T1153] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.341: invalid indirect mapped block 256 (level 2) [ 41.528002][ T1153] EXT4-fs (loop5): 2 truncates cleaned up [ 41.533804][ T1153] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 41.544728][ T28] audit: type=1400 audit(1792758916.535:339): avc: denied { remount } for pid=1157 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.574757][ T702] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.585399][ T1153] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.341: bg 0: block 5: invalid block bitmap [ 41.589328][ T1158] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 41.608179][ T1153] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 484 with error 28 [ 41.632597][ T1153] EXT4-fs (loop5): This should not happen!! Data will be lost [ 41.632597][ T1153] [ 41.642842][ T1153] EXT4-fs (loop5): Total free blocks count 0 [ 41.649260][ T1153] EXT4-fs (loop5): Free/Dirty block details [ 41.656206][ T1163] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.660481][ T1153] EXT4-fs (loop5): free_blocks=0 [ 41.673530][ T1153] EXT4-fs (loop5): dirty_blocks=485 [ 41.680216][ T1153] EXT4-fs (loop5): Block reservation details [ 41.686421][ T1153] EXT4-fs (loop5): i_reserved_data_blocks=485 [ 41.737029][ T1168] EXT4-fs: Ignoring removed nobh option [ 41.758367][ T1168] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 41.772357][ T1168] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.792031][ T994] usb 3-1: USB disconnect, device number 2 [ 41.803725][ T1168] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.346: corrupted inode contents [ 41.819004][ T1168] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.346: mark_inode_dirty error [ 41.834192][ T1168] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.346: corrupted inode contents [ 41.866507][ T1168] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.346: mark_inode_dirty error [ 41.914701][ T28] audit: type=1400 audit(1792758916.905:340): avc: denied { read } for pid=1179 comm="syz.4.350" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 41.967740][ T673] EXT4-fs (loop5): unmounting filesystem. [ 42.253595][ T1186] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 42.264184][ T1186] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.283148][ T1186] F2FS-fs (loop4): invalid crc value [ 42.321013][ T1186] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.393068][ T1226] FAULT_INJECTION: forcing a failure. [ 42.393068][ T1226] name failslab, interval 1, probability 0, space 0, times 0 [ 42.433641][ T1186] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.443756][ T1186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.453758][ T1226] CPU: 1 PID: 1226 Comm: syz.2.369 Not tainted syzkaller #0 [ 42.461105][ T1226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.471191][ T1226] Call Trace: [ 42.474504][ T1226] [ 42.477472][ T1226] __dump_stack+0x21/0x24 [ 42.481890][ T1226] dump_stack_lvl+0x110/0x170 [ 42.486600][ T1226] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.491669][ T1226] dump_stack+0x15/0x24 [ 42.495854][ T1226] should_fail_ex+0x3bf/0x510 [ 42.500580][ T1226] __should_failslab+0xac/0xf0 [ 42.505386][ T1226] should_failslab+0x9/0x20 [ 42.509931][ T1226] __kmem_cache_alloc_node+0x3d/0x2d0 [ 42.515346][ T1226] ? security_prepare_creds+0x4e/0x150 [ 42.520848][ T1226] ? security_prepare_creds+0x4e/0x150 [ 42.526345][ T1226] __kmalloc+0xa4/0x1e0 [ 42.530546][ T1226] security_prepare_creds+0x4e/0x150 [ 42.535873][ T1226] prepare_creds+0x428/0x610 [ 42.540506][ T1226] lookup_user_key+0x2b5/0x1150 [ 42.545411][ T1226] ? __cfi_lookup_user_key+0x10/0x10 [ 42.550747][ T1226] ? do_futex+0x2e2/0x430 [ 42.555118][ T1226] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 42.561329][ T1226] ? __kasan_check_write+0x14/0x20 [ 42.566481][ T1226] __se_sys_add_key+0x311/0x410 [ 42.571389][ T1226] ? __x64_sys_add_key+0xd0/0xd0 [ 42.576371][ T1226] ? xfd_validate_state+0x70/0x150 [ 42.581586][ T1226] ? __kasan_check_write+0x14/0x20 [ 42.586744][ T1226] ? fpregs_restore_userregs+0x128/0x260 [ 42.592421][ T1226] __x64_sys_add_key+0xbf/0xd0 [ 42.597221][ T1226] x64_sys_call+0x6aa/0x9a0 [ 42.601769][ T1226] do_syscall_64+0x4c/0xa0 [ 42.606218][ T1226] ? clear_bhb_loop+0x30/0x80 [ 42.610948][ T1226] ? clear_bhb_loop+0x30/0x80 [ 42.615677][ T1226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.621618][ T1226] RIP: 0033:0x7f11a079f559 [ 42.626072][ T1226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.645706][ T1226] RSP: 002b:00007f11a16a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 42.654167][ T1226] RAX: ffffffffffffffda RBX: 00007f11a0a25fa0 RCX: 00007f11a079f559 [ 42.662173][ T1226] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000200000000000 [ 42.670183][ T1226] RBP: 00007f11a0836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 42.678192][ T1226] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 42.686198][ T1226] R13: 00007f11a0a26038 R14: 00007f11a0a25fa0 R15: 00007ffc27954398 [ 42.694528][ T1226] [ 42.703326][ T1233] WARNING! power/level is deprecated; use power/control instead [ 42.842471][ T1162] F2FS-fs (loop1): invalid crc value [ 42.878622][ T1162] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.970630][ T1162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 43.388286][ T1267] FAULT_INJECTION: forcing a failure. [ 43.388286][ T1267] name failslab, interval 1, probability 0, space 0, times 0 [ 43.402754][ T1267] CPU: 0 PID: 1267 Comm: syz.1.381 Not tainted syzkaller #0 [ 43.410092][ T1267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.420202][ T1267] Call Trace: [ 43.423514][ T1267] [ 43.426476][ T1267] __dump_stack+0x21/0x24 [ 43.430865][ T1267] dump_stack_lvl+0x110/0x170 [ 43.435586][ T1267] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.440662][ T1267] dump_stack+0x15/0x24 [ 43.444874][ T1267] should_fail_ex+0x3bf/0x510 [ 43.449595][ T1267] ? vm_area_dup+0x65/0x280 [ 43.454141][ T1267] __should_failslab+0xac/0xf0 [ 43.458945][ T1267] should_failslab+0x9/0x20 [ 43.463496][ T1267] kmem_cache_alloc+0x3b/0x320 [ 43.468330][ T1267] vm_area_dup+0x65/0x280 [ 43.472708][ T1267] __split_vma+0x1c6/0x980 [ 43.477226][ T1267] ? futex_wake+0x5fa/0x8e0 [ 43.481776][ T1267] split_vma+0x7c/0xd0 [ 43.485980][ T1267] mlock_fixup+0x7a9/0x8a0 [ 43.490446][ T1267] apply_vma_lock_flags+0x219/0x370 [ 43.495706][ T1267] ? do_mlock+0x670/0x670 [ 43.500075][ T1267] ? do_futex+0x2bf/0x430 [ 43.504443][ T1267] ? __cfi_do_futex+0x10/0x10 [ 43.509154][ T1267] ? __kasan_check_write+0x14/0x20 [ 43.514309][ T1267] do_mlock+0x4d3/0x670 [ 43.518513][ T1267] ? __se_sys_futex+0x136/0x310 [ 43.523417][ T1267] ? lru_gen_add_folio+0x880/0x880 [ 43.528569][ T1267] ? xfd_validate_state+0x70/0x150 [ 43.533726][ T1267] ? fpregs_restore_userregs+0x128/0x260 [ 43.539400][ T1267] __x64_sys_mlock2+0xb1/0xd0 [ 43.544140][ T1267] x64_sys_call+0x530/0x9a0 [ 43.548678][ T1267] do_syscall_64+0x4c/0xa0 [ 43.553119][ T1267] ? clear_bhb_loop+0x30/0x80 [ 43.557835][ T1267] ? clear_bhb_loop+0x30/0x80 [ 43.562550][ T1267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.568926][ T1267] RIP: 0033:0x7f9bbb19f559 [ 43.573391][ T1267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.593035][ T1267] RSP: 002b:00007f9bbc090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 43.601497][ T1267] RAX: ffffffffffffffda RBX: 00007f9bbb425fa0 RCX: 00007f9bbb19f559 [ 43.609501][ T1267] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 43.617507][ T1267] RBP: 00007f9bbb236b20 R08: 0000000000000000 R09: 0000000000000000 [ 43.625510][ T1267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.633516][ T1267] R13: 00007f9bbb426038 R14: 00007f9bbb425fa0 R15: 00007ffdc325a8d8 [ 43.641525][ T1267] [ 43.713876][ T1277] set_capacity_and_notify: 7 callbacks suppressed [ 43.713895][ T1277] loop6: detected capacity change from 0 to 512 [ 43.729917][ T1249] loop2: detected capacity change from 0 to 131072 [ 43.744898][ T1249] F2FS-fs (loop2): Invalid log sectorsize (0) [ 43.755411][ T1249] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 43.789162][ T1249] F2FS-fs (loop2): invalid crc value [ 43.805943][ T1249] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.825155][ T1277] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 43.844502][ T1277] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.888669][ T1249] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 43.897141][ T1249] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.941962][ T685] EXT4-fs (loop6): unmounting filesystem. [ 43.959474][ T1291] loop4: detected capacity change from 0 to 1024 [ 43.983857][ T1295] loop5: detected capacity change from 0 to 128 [ 44.005349][ T1295] EXT4-fs (loop5): Test dummy encryption mode enabled [ 44.016530][ T1291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.029657][ T1295] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 44.038686][ T1295] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.058686][ T1295] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 44.102908][ T288] EXT4-fs (loop4): unmounting filesystem. [ 44.138706][ T673] EXT4-fs (loop5): unmounting filesystem. [ 44.341832][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 44.341848][ T28] audit: type=1400 audit(1792758919.325:367): avc: denied { write } for pid=1319 comm="syz.5.405" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.397271][ T1325] FAULT_INJECTION: forcing a failure. [ 44.397271][ T1325] name failslab, interval 1, probability 0, space 0, times 0 [ 44.429616][ T1325] CPU: 0 PID: 1325 Comm: syz.5.407 Not tainted syzkaller #0 [ 44.436978][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.447078][ T1325] Call Trace: [ 44.450392][ T1325] [ 44.453355][ T1325] __dump_stack+0x21/0x24 [ 44.457725][ T1325] dump_stack_lvl+0x110/0x170 [ 44.462587][ T1325] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.467649][ T1325] ? lockref_put_return+0x152/0x1d0 [ 44.472890][ T1325] dump_stack+0x15/0x24 [ 44.477135][ T1325] should_fail_ex+0x3bf/0x510 [ 44.481861][ T1325] __should_failslab+0xac/0xf0 [ 44.486677][ T1325] should_failslab+0x9/0x20 [ 44.491229][ T1325] __kmem_cache_alloc_node+0x3d/0x2d0 [ 44.496645][ T1325] ? debugfs_file_get+0x111/0x450 [ 44.501709][ T1325] ? debugfs_file_get+0x111/0x450 [ 44.506773][ T1325] kmalloc_trace+0x29/0xb0 [ 44.511237][ T1325] debugfs_file_get+0x111/0x450 [ 44.516142][ T1325] ? __cfi_debugfs_file_get+0x10/0x10 [ 44.521522][ T1325] ? lockref_get+0x12d/0x1c0 [ 44.526119][ T1325] full_proxy_open+0x4d/0x820 [ 44.530803][ T1325] do_dentry_open+0x885/0x11f0 [ 44.535587][ T1325] ? __cfi_full_proxy_open+0x10/0x10 [ 44.540879][ T1325] vfs_open+0x73/0x80 [ 44.544889][ T1325] path_openat+0x2699/0x2f30 [ 44.549517][ T1325] ? slab_post_alloc_hook+0x4f/0x2d0 [ 44.554856][ T1325] ? kmem_cache_alloc+0x166/0x320 [ 44.559893][ T1325] ? getname_flags+0xba/0x510 [ 44.564576][ T1325] ? do_sys_openat2+0xeb/0x820 [ 44.569376][ T1325] ? do_filp_open+0x420/0x420 [ 44.574079][ T1325] do_filp_open+0x1ee/0x420 [ 44.578618][ T1325] ? __cfi_do_filp_open+0x10/0x10 [ 44.583700][ T1325] ? alloc_fd+0x4c1/0x570 [ 44.588119][ T1325] do_sys_openat2+0x15e/0x820 [ 44.592854][ T1325] ? __se_sys_futex+0x136/0x310 [ 44.597750][ T1325] ? do_sys_open+0xe0/0xe0 [ 44.602215][ T1325] ? __this_cpu_preempt_check+0x13/0x20 [ 44.607865][ T1325] ? xfd_validate_state+0x70/0x150 [ 44.613032][ T1325] __x64_sys_openat+0x136/0x160 [ 44.613255][ T1329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 44.617929][ T1325] x64_sys_call+0x783/0x9a0 [ 44.617958][ T1325] do_syscall_64+0x4c/0xa0 [ 44.617979][ T1325] ? clear_bhb_loop+0x30/0x80 [ 44.640477][ T1325] ? clear_bhb_loop+0x30/0x80 [ 44.645262][ T1325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.651202][ T1325] RIP: 0033:0x7fe02a79f559 [ 44.655650][ T1325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.675360][ T1325] RSP: 002b:00007fe02b6b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 44.683880][ T1325] RAX: ffffffffffffffda RBX: 00007fe02aa25fa0 RCX: 00007fe02a79f559 [ 44.691915][ T1325] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 44.699922][ T1325] RBP: 00007fe02a836b20 R08: 0000000000000000 R09: 0000000000000000 [ 44.707937][ T1325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.716045][ T1325] R13: 00007fe02aa26038 R14: 00007fe02aa25fa0 R15: 00007ffc1ad45e88 [ 44.724063][ T1325] [ 44.751489][ T1305] loop6: detected capacity change from 0 to 40427 [ 44.774277][ T1338] FAULT_INJECTION: forcing a failure. [ 44.774277][ T1338] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.791488][ T1305] F2FS-fs (loop6): fault_injection options not supported [ 44.801924][ T1305] F2FS-fs (loop6): fault_type options not supported [ 44.809731][ T1338] CPU: 0 PID: 1338 Comm: syz.2.413 Not tainted syzkaller #0 [ 44.817078][ T1338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.827175][ T1338] Call Trace: [ 44.830542][ T1338] [ 44.833506][ T1338] __dump_stack+0x21/0x24 [ 44.837880][ T1338] dump_stack_lvl+0x110/0x170 [ 44.842601][ T1338] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.847662][ T1338] dump_stack+0x15/0x24 [ 44.851854][ T1338] should_fail_ex+0x3bf/0x510 [ 44.856578][ T1338] should_fail+0xb/0x10 [ 44.858436][ T1305] F2FS-fs (loop6): invalid crc value [ 44.860862][ T1338] should_fail_usercopy+0x1a/0x20 [ 44.871231][ T1338] strncpy_from_user+0x24/0x2c0 [ 44.876132][ T1338] ? kmem_cache_alloc+0x166/0x320 [ 44.881209][ T1338] ? getname_flags+0xba/0x510 [ 44.885934][ T1338] getname_flags+0xf5/0x510 [ 44.890502][ T1338] __se_sys_newlstat+0x102/0x3f0 [ 44.895484][ T1338] ? __x64_sys_newlstat+0x70/0x70 [ 44.900614][ T1338] ? do_futex+0x2bf/0x430 [ 44.904991][ T1338] ? __cfi_do_futex+0x10/0x10 [ 44.909714][ T1338] ? fpregs_restore_userregs+0x128/0x260 [ 44.915380][ T1338] __x64_sys_newlstat+0x5b/0x70 [ 44.917777][ T1305] F2FS-fs (loop6): Found nat_bits in checkpoint [ 44.920288][ T1338] x64_sys_call+0x393/0x9a0 [ 44.931058][ T1338] do_syscall_64+0x4c/0xa0 [ 44.935518][ T1338] ? clear_bhb_loop+0x30/0x80 [ 44.940237][ T1338] ? clear_bhb_loop+0x30/0x80 [ 44.944948][ T1338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.950883][ T1338] RIP: 0033:0x7f11a079f559 [ 44.955328][ T1338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.974974][ T1338] RSP: 002b:00007f11a16a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 44.983483][ T1338] RAX: ffffffffffffffda RBX: 00007f11a0a25fa0 RCX: 00007f11a079f559 [ 44.991510][ T1338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.999515][ T1338] RBP: 00007f11a0836b20 R08: 0000000000000000 R09: 0000000000000000 [ 45.007521][ T1338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.014001][ T1305] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 45.015560][ T1338] R13: 00007f11a0a26038 R14: 00007f11a0a25fa0 R15: 00007ffc27954398 [ 45.015586][ T1338] [ 45.085062][ T28] audit: type=1326 audit(1792758920.075:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.119607][ T1350] netlink: 'syz.1.417': attribute type 2 has an invalid length. [ 45.153144][ T28] audit: type=1326 audit(1792758920.105:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.200728][ T28] audit: type=1326 audit(1792758920.105:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.274600][ T28] audit: type=1326 audit(1792758920.105:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.300591][ T1370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.347800][ T1374] loop2: detected capacity change from 0 to 2048 [ 45.364065][ T28] audit: type=1326 audit(1792758920.105:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.411992][ T28] audit: type=1326 audit(1792758920.105:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.457541][ T1374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.475456][ T1382] loop1: detected capacity change from 0 to 512 [ 45.485623][ T1382] EXT4-fs: Ignoring removed nobh option [ 45.494187][ T28] audit: type=1326 audit(1792758920.105:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.514377][ T1374] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.537209][ T1374] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 45.550078][ T1374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.550078][ T1374] [ 45.560274][ T1374] EXT4-fs (loop2): Total free blocks count 0 [ 45.566407][ T1374] EXT4-fs (loop2): Free/Dirty block details [ 45.572498][ T1374] EXT4-fs (loop2): free_blocks=2415919504 [ 45.578689][ T1374] EXT4-fs (loop2): dirty_blocks=32 [ 45.594270][ T1374] EXT4-fs (loop2): Block reservation details [ 45.600660][ T1374] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 45.602613][ T1358] loop4: detected capacity change from 0 to 40427 [ 45.623497][ T28] audit: type=1326 audit(1792758920.105:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.652429][ T1382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.654438][ T289] EXT4-fs (loop2): unmounting filesystem. [ 45.670668][ T1358] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 45.678557][ T1358] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 45.686889][ T28] audit: type=1326 audit(1792758920.105:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1347 comm="syz.2.416" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a079f559 code=0x7ffc0000 [ 45.701398][ T1382] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.713335][ T1358] F2FS-fs (loop4): invalid crc value [ 45.751053][ T295] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 45.762050][ T295] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.788865][ T1358] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.836202][ T1382] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.431: corrupted inode contents [ 45.868144][ T1382] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.431: mark_inode_dirty error [ 45.883364][ T1358] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 45.893239][ T1358] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.895067][ T1382] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.431: corrupted inode contents [ 45.944256][ T1398] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.431: corrupted inode contents [ 45.958452][ T1398] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.431: mark_inode_dirty error [ 45.974162][ T1398] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.431: corrupted inode contents [ 46.004271][ T1398] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.431: mark_inode_dirty error [ 46.033953][ T1398] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.431: corrupted inode contents [ 46.087749][ T1398] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.431: mark_inode_dirty error [ 46.118684][ T1382] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.431: corrupted inode contents [ 46.167009][ T287] EXT4-fs (loop1): unmounting filesystem. [ 46.217282][ T1415] loop6: detected capacity change from 0 to 256 [ 46.428844][ T1429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 46.618095][ T1417] loop1: detected capacity change from 0 to 40427 [ 46.657680][ T1417] F2FS-fs (loop1): invalid crc value [ 46.684772][ T1417] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.763099][ T1417] F2FS-fs (loop1): Start checkpoint disabled! [ 46.778663][ T1417] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 46.795904][ T1417] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 46.873046][ T1417] syz.1.441: attempt to access beyond end of device [ 46.873046][ T1417] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 46.899306][ T1417] syz.1.441: attempt to access beyond end of device [ 46.899306][ T1417] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.998244][ T43] kworker/u4:2: attempt to access beyond end of device [ 46.998244][ T43] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 47.105348][ T1455] trusted_key: device-mapper: crypt: Selected cipher does not support IVs [ 47.113986][ T1455] device-mapper: table: 252:0: crypt: Error decoding and setting key (-EINVAL) [ 47.133256][ T1455] device-mapper: ioctl: error adding target to table [ 47.389917][ T1473] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 47.462394][ T673] EXT4-fs (loop5): unmounting filesystem. [ 47.540219][ T1502] Illegal XDP return value 4290839864 on prog (id 63) dev N/A, expect packet loss! [ 47.548600][ T1504] FAULT_INJECTION: forcing a failure. [ 47.548600][ T1504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.563072][ T1504] CPU: 1 PID: 1504 Comm: syz.4.475 Not tainted syzkaller #0 [ 47.570478][ T1504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 47.580770][ T1504] Call Trace: [ 47.584079][ T1504] [ 47.587044][ T1504] __dump_stack+0x21/0x24 [ 47.591410][ T1504] dump_stack_lvl+0x110/0x170 [ 47.596116][ T1504] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.601172][ T1504] dump_stack+0x15/0x24 [ 47.605362][ T1504] should_fail_ex+0x3bf/0x510 [ 47.610083][ T1504] should_fail+0xb/0x10 [ 47.614275][ T1504] should_fail_usercopy+0x1a/0x20 [ 47.619338][ T1504] _copy_from_user+0x1e/0xc0 [ 47.623961][ T1504] strndup_user+0xb6/0x150 [ 47.628416][ T1504] __se_sys_mount+0xdf/0x390 [ 47.633038][ T1504] ? __this_cpu_preempt_check+0x13/0x20 [ 47.638604][ T1504] ? __x64_sys_mount+0xd0/0xd0 [ 47.643379][ T1504] ? __kasan_check_write+0x14/0x20 [ 47.648533][ T1504] ? fpregs_restore_userregs+0x128/0x260 [ 47.654181][ T1504] __x64_sys_mount+0xbf/0xd0 [ 47.658792][ T1504] x64_sys_call+0x65d/0x9a0 [ 47.663306][ T1504] do_syscall_64+0x4c/0xa0 [ 47.667722][ T1504] ? clear_bhb_loop+0x30/0x80 [ 47.672406][ T1504] ? clear_bhb_loop+0x30/0x80 [ 47.677087][ T1504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 47.683071][ T1504] RIP: 0033:0x7fe32299f559 [ 47.687488][ T1504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.707106][ T1504] RSP: 002b:00007fe323852028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.715554][ T1504] RAX: ffffffffffffffda RBX: 00007fe322c25fa0 RCX: 00007fe32299f559 [ 47.723529][ T1504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000c80 [ 47.731503][ T1504] RBP: 00007fe322a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 47.739477][ T1504] R10: 0000000000840024 R11: 0000000000000246 R12: 0000000000000000 [ 47.747455][ T1504] R13: 00007fe322c26038 R14: 00007fe322c25fa0 R15: 00007ffdd3b73e38 [ 47.755435][ T1504] [ 47.851017][ T1517] syz.4.481: attempt to access beyond end of device [ 47.851017][ T1517] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 47.867997][ T1517] syz.4.481: attempt to access beyond end of device [ 47.867997][ T1517] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 47.882760][ T1517] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 47.891313][ T491] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 47.899745][ T1517] syz.4.481: attempt to access beyond end of device [ 47.899745][ T1517] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 47.913301][ T1517] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 47.922590][ T1517] syz.4.481: attempt to access beyond end of device [ 47.922590][ T1517] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 47.936179][ T1517] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 47.944779][ T1517] syz.4.481: attempt to access beyond end of device [ 47.944779][ T1517] loop4: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 47.958938][ T1520] syz.4.481: attempt to access beyond end of device [ 47.958938][ T1520] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 47.972552][ T1520] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 48.101058][ T491] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.114304][ T491] usb 7-1: config 0 interface 0 has no altsetting 0 [ 48.126941][ T491] usb 7-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 48.136142][ T491] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.149523][ T491] usb 7-1: config 0 descriptor?? [ 48.246495][ T1539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.270189][ T288] EXT4-fs (loop4): unmounting filesystem. [ 48.358673][ T1558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'. [ 48.368313][ T1551] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.389702][ T1551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.424497][ T288] EXT4-fs (loop4): unmounting filesystem. [ 48.467325][ T1574] binder: 1573:1574 ioctl c0306201 0 returned -14 [ 48.483919][ T1576] Zero length message leads to an empty skb [ 48.559098][ T491] wacom 0003:056A:0016.0006: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 48.569744][ T491] wacom 0003:056A:0016.0006: hidraw0: USB HID v10.01 Device [HID 056a:0016] on usb-dummy_hcd.6-1/input0 [ 48.582045][ T491] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0016.0006/input/input11 [ 48.719325][ T1599] set_capacity_and_notify: 4 callbacks suppressed [ 48.719338][ T1599] loop2: detected capacity change from 0 to 128 [ 48.732674][ T1599] EXT4-fs: Ignoring removed nobh option [ 48.741595][ T1599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.751052][ T1599] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.775088][ T289] EXT4-fs (loop2): unmounting filesystem. [ 48.786258][ T994] usb 7-1: USB disconnect, device number 4 [ 48.815423][ T1604] binder: 1603:1604 ioctl c018620c 200000000000 returned -22 [ 48.839938][ T1606] FAULT_INJECTION: forcing a failure. [ 48.839938][ T1606] name failslab, interval 1, probability 0, space 0, times 0 [ 48.852769][ T1606] CPU: 0 PID: 1606 Comm: syz.2.517 Not tainted syzkaller #0 [ 48.860099][ T1606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 48.870238][ T1606] Call Trace: [ 48.873552][ T1606] [ 48.876536][ T1606] __dump_stack+0x21/0x24 [ 48.880907][ T1606] dump_stack_lvl+0x110/0x170 [ 48.885649][ T1606] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.890719][ T1606] dump_stack+0x15/0x24 [ 48.894900][ T1606] should_fail_ex+0x3bf/0x510 [ 48.899615][ T1606] __should_failslab+0xac/0xf0 [ 48.904427][ T1606] should_failslab+0x9/0x20 [ 48.909019][ T1606] slab_pre_alloc_hook+0x30/0x1d0 [ 48.914093][ T1606] ? __kasan_check_write+0x14/0x20 [ 48.919248][ T1606] kmem_cache_alloc_lru+0x49/0x280 [ 48.924430][ T1606] ? proc_alloc_inode+0x2a/0xc0 [ 48.929333][ T1606] proc_alloc_inode+0x2a/0xc0 [ 48.934061][ T1606] ? __cfi_proc_alloc_inode+0x10/0x10 [ 48.939480][ T1606] new_inode_pseudo+0x70/0x1f0 [ 48.944290][ T1606] new_inode+0x28/0x1e0 [ 48.948516][ T1606] proc_pid_make_inode+0x24/0x1c0 [ 48.953588][ T1606] proc_pident_instantiate+0x69/0x2b0 [ 48.959015][ T1606] proc_pident_lookup+0x1c7/0x270 [ 48.964084][ T1606] proc_tgid_base_lookup+0x2b/0x30 [ 48.969274][ T1606] __lookup_slow+0x2d5/0x410 [ 48.973910][ T1606] ? lookup_one_len+0x2e0/0x2e0 [ 48.978809][ T1606] ? down_read+0xa6/0xf0 [ 48.983112][ T1606] lookup_slow+0x57/0x70 [ 48.987416][ T1606] walk_component+0x2f5/0x430 [ 48.992317][ T1606] link_path_walk+0x6b1/0xeb0 [ 48.997045][ T1606] ? handle_lookup_down+0x130/0x130 [ 49.002297][ T1606] __filename_parentat+0x22d/0x650 [ 49.007461][ T1606] ? vfs_path_parent_lookup+0x60/0x60 [ 49.012901][ T1606] ? __cfi_proc_put_link+0x10/0x10 [ 49.018061][ T1606] ? __cfi_kfree_link+0x10/0x10 [ 49.022965][ T1606] do_unlinkat+0xeb/0x6c0 [ 49.027351][ T1606] ? __cfi_do_unlinkat+0x10/0x10 [ 49.032389][ T1606] ? getname_flags+0x205/0x510 [ 49.037235][ T1606] __x64_sys_unlink+0x49/0x50 [ 49.041962][ T1606] x64_sys_call+0x958/0x9a0 [ 49.046510][ T1606] do_syscall_64+0x4c/0xa0 [ 49.050968][ T1606] ? clear_bhb_loop+0x30/0x80 [ 49.055683][ T1606] ? clear_bhb_loop+0x30/0x80 [ 49.060409][ T1606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.066347][ T1606] RIP: 0033:0x7f11a079f559 [ 49.070794][ T1606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.090448][ T1606] RSP: 002b:00007f11a16a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 49.098930][ T1606] RAX: ffffffffffffffda RBX: 00007f11a0a25fa0 RCX: 00007f11a079f559 [ 49.106937][ T1606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 49.114950][ T1606] RBP: 00007f11a0836b20 R08: 0000000000000000 R09: 0000000000000000 [ 49.122977][ T1606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.130985][ T1606] R13: 00007f11a0a26038 R14: 00007f11a0a25fa0 R15: 00007ffc27954398 [ 49.139002][ T1606] [ 49.158764][ T1602] loop4: detected capacity change from 0 to 40427 [ 49.170770][ T1602] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 49.178085][ T1602] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 49.200379][ T1602] F2FS-fs (loop4): invalid crc value [ 49.214908][ T1602] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.241094][ T1622] loop2: detected capacity change from 0 to 512 [ 49.270757][ T1602] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 49.277924][ T1602] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 49.321450][ T1602] syz.4.516: attempt to access beyond end of device [ 49.321450][ T1602] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 49.359431][ T1637] FAULT_INJECTION: forcing a failure. [ 49.359431][ T1637] name fail_futex, interval 1, probability 0, space 0, times 1 [ 49.373205][ T1637] CPU: 1 PID: 1637 Comm: syz.6.530 Not tainted syzkaller #0 [ 49.380557][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 49.390671][ T1637] Call Trace: [ 49.393979][ T1637] [ 49.396941][ T1637] __dump_stack+0x21/0x24 [ 49.401320][ T1637] dump_stack_lvl+0x110/0x170 [ 49.406032][ T1637] ? __cfi_dump_stack_lvl+0x8/0x8 [ 49.411106][ T1637] dump_stack+0x15/0x24 [ 49.415294][ T1637] should_fail_ex+0x3bf/0x510 [ 49.420032][ T1637] should_fail+0xb/0x10 [ 49.424232][ T1637] get_futex_key+0x143/0xb10 [ 49.428869][ T1637] ? __cfi_get_futex_key+0x10/0x10 [ 49.434025][ T1637] futex_wake+0x150/0x8e0 [ 49.438396][ T1637] ? __cfi_futex_wake+0x10/0x10 [ 49.443280][ T1637] ? percpu_counter_add_batch+0x13c/0x160 [ 49.449031][ T1637] ? alloc_file+0x82/0x600 [ 49.453488][ T1637] ? __kasan_check_write+0x14/0x20 [ 49.458622][ T1637] ? alloc_file+0x48b/0x600 [ 49.463156][ T1637] do_futex+0x2bf/0x430 [ 49.467324][ T1637] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 49.472810][ T1637] ? __cfi_do_futex+0x10/0x10 [ 49.477527][ T1637] ? security_inode_init_security_anon+0x95/0xc0 [ 49.483888][ T1637] __se_sys_futex+0x136/0x310 [ 49.488596][ T1637] ? __x64_sys_futex+0x100/0x100 [ 49.493570][ T1637] __x64_sys_futex+0xe5/0x100 [ 49.498269][ T1637] x64_sys_call+0x7ec/0x9a0 [ 49.502805][ T1637] do_syscall_64+0x4c/0xa0 [ 49.507242][ T1637] ? clear_bhb_loop+0x30/0x80 [ 49.511943][ T1637] ? clear_bhb_loop+0x30/0x80 [ 49.516643][ T1637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.522554][ T1637] RIP: 0033:0x7f1063d9f559 [ 49.527007][ T1637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.546740][ T1637] RSP: 002b:00007f1064d3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.555183][ T1637] RAX: ffffffffffffffda RBX: 00007f1064025fa8 RCX: 00007f1063d9f559 [ 49.563183][ T1637] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1064025fac [ 49.571189][ T1637] RBP: 00007f1064025fa0 R08: 00138859731a712a R09: 0000000000000000 [ 49.579192][ T1637] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 49.587185][ T1637] R13: 00007f1064026038 R14: 00007fff99b2acf0 R15: 00007fff99b2add8 [ 49.595203][ T1637] [ 49.861351][ T1651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.536'. [ 49.886175][ T1651] bridge0: port 3(vlan2) entered blocking state [ 49.892488][ T1651] bridge0: port 3(vlan2) entered disabled state [ 49.904849][ T1651] device vlan2 entered promiscuous mode [ 49.910526][ T1651] device macsec0 entered promiscuous mode [ 49.910930][ T1655] loop2: detected capacity change from 0 to 2048 [ 49.945753][ T1655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.965962][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 49.965979][ T28] audit: type=1400 audit(1792758925.954:401): avc: denied { create } for pid=1653 comm="syz.2.537" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.017460][ T289] EXT4-fs (loop2): unmounting filesystem. [ 50.074488][ T28] audit: type=1400 audit(1792758925.954:402): avc: denied { unlink } for pid=1653 comm="syz.2.537" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.159004][ T1674] tipc: Started in network mode [ 50.163970][ T1674] tipc: Node identity ac14140f, cluster identity 4711 [ 50.179260][ T1674] tipc: New replicast peer: 255.255.255.255 [ 50.186499][ T1674] tipc: Enabled bearer , priority 10 [ 50.199376][ T1674] loop4: detected capacity change from 0 to 512 [ 50.208766][ T1674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 50.217923][ T1674] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.225298][ T1674] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #15: comm syz.4.545: iget: bad i_size value: 360287970189639690 [ 50.238867][ T1674] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.545: Bad quota inode: 15, type: 2 [ 50.260066][ T1674] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 50.275192][ T1674] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 50.282034][ T1674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.308329][ T1688] loop1: detected capacity change from 0 to 512 [ 50.340341][ T288] EXT4-fs (loop4): unmounting filesystem. [ 50.383323][ T1695] FAULT_INJECTION: forcing a failure. [ 50.383323][ T1695] name failslab, interval 1, probability 0, space 0, times 0 [ 50.401696][ T1688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.414091][ T1695] CPU: 1 PID: 1695 Comm: syz.4.552 Not tainted syzkaller #0 [ 50.421436][ T1695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 50.431528][ T1695] Call Trace: [ 50.434833][ T1695] [ 50.437811][ T1695] __dump_stack+0x21/0x24 [ 50.442177][ T1695] dump_stack_lvl+0x110/0x170 [ 50.446978][ T1695] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.452053][ T1695] ? __cfi_do_futex+0x10/0x10 [ 50.456761][ T1695] dump_stack+0x15/0x24 [ 50.460952][ T1695] should_fail_ex+0x3bf/0x510 [ 50.465676][ T1695] ? getname_flags+0xba/0x510 [ 50.470387][ T1695] __should_failslab+0xac/0xf0 [ 50.475190][ T1695] should_failslab+0x9/0x20 [ 50.479727][ T1695] kmem_cache_alloc+0x3b/0x320 [ 50.484535][ T1695] getname_flags+0xba/0x510 [ 50.489088][ T1695] __x64_sys_linkat+0xc0/0x100 [ 50.493890][ T1695] x64_sys_call+0x4e3/0x9a0 [ 50.498434][ T1695] do_syscall_64+0x4c/0xa0 [ 50.502877][ T1695] ? clear_bhb_loop+0x30/0x80 [ 50.507597][ T1695] ? clear_bhb_loop+0x30/0x80 [ 50.512315][ T1695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.518332][ T1695] RIP: 0033:0x7fe32299f559 [ 50.522777][ T1695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.542592][ T1695] RSP: 002b:00007fe323852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 50.551048][ T1695] RAX: ffffffffffffffda RBX: 00007fe322c25fa0 RCX: 00007fe32299f559 [ 50.559060][ T1695] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 50.567058][ T1695] RBP: 00007fe322a36b20 R08: 0000000000001800 R09: 0000000000000000 [ 50.575066][ T1695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.583066][ T1695] R13: 00007fe322c26038 R14: 00007fe322c25fa0 R15: 00007ffdd3b73e38 [ 50.591073][ T1695] [ 50.595720][ T1688] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.642547][ T287] EXT4-fs (loop1): unmounting filesystem. [ 50.651755][ T28] audit: type=1400 audit(1792758926.634:403): avc: denied { setopt } for pid=1700 comm="syz.6.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.710341][ T1706] loop5: detected capacity change from 0 to 512 [ 50.755666][ T1706] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 50.862203][ T1717] overlayfs: upper fs does not support tmpfile. [ 50.945729][ T1727] loop1: detected capacity change from 0 to 2048 [ 50.967621][ T1727] EXT4-fs: Ignoring removed oldalloc option [ 50.975209][ T1730] loop4: detected capacity change from 0 to 2048 [ 51.000920][ T1730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.014227][ T1730] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.045100][ T1727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.082578][ T28] audit: type=1400 audit(1792758927.064:404): avc: denied { append } for pid=1740 comm="syz.6.571" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 51.120363][ T288] EXT4-fs (loop4): unmounting filesystem. [ 51.190422][ T1727] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 51.214141][ T994] tipc: Node number set to 2886997007 [ 51.224776][ T287] EXT4-fs (loop1): unmounting filesystem. [ 51.261878][ T1759] loop1: detected capacity change from 0 to 128 [ 51.292123][ T1759] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.310081][ T1759] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.342745][ T1768] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 51.367883][ T1768] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.582: corrupted in-inode xattr [ 51.380517][ T287] EXT4-fs (loop1): unmounting filesystem. [ 51.399819][ T1768] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.582: couldn't read orphan inode 15 (err -117) [ 51.447106][ T1768] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 51.494631][ T28] audit: type=1400 audit(1792758927.484:405): avc: denied { read } for pid=1766 comm="syz.5.582" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.531873][ T1780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.587'. [ 51.548820][ T673] EXT4-fs (loop5): unmounting filesystem. [ 51.585234][ T28] audit: type=1400 audit(1792758927.574:406): avc: denied { write } for pid=1783 comm="syz.5.588" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.669571][ T1789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.686236][ T1789] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.738301][ T287] EXT4-fs (loop1): unmounting filesystem. [ 51.806797][ T1801] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 51.822705][ T1801] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 51.855379][ T28] audit: type=1400 audit(1792758927.844:407): avc: denied { rename } for pid=1798 comm="syz.1.594" name="file1" dev="loop1" ino=1048707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.935829][ T1810] device-mapper: ioctl: Invalid ioctl structure: name , dev ffffffff2d092905 [ 51.984299][ T1813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.136732][ T28] audit: type=1400 audit(1792758928.124:408): avc: denied { write } for pid=1831 comm="syz.5.610" name="/" dev="configfs" ino=12455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.151304][ T1802] F2FS-fs (loop4): invalid crc value [ 52.207099][ T28] audit: type=1400 audit(1792758928.194:409): avc: denied { create } for pid=1840 comm="syz.6.614" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 52.233912][ T1802] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.264247][ T28] audit: type=1400 audit(1792758928.254:410): avc: denied { write } for pid=1845 comm="syz.6.615" path="socket:[22439]" dev="sockfs" ino=22439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.312477][ T1802] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 52.349015][ T1802] syz.4.596: attempt to access beyond end of device [ 52.349015][ T1802] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.408597][ T1859] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 52.432810][ T1859] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.485040][ T685] EXT4-fs (loop6): unmounting filesystem. [ 52.527967][ T1875] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.545533][ T1875] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.585403][ T43] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.796239][ T1895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.817179][ T288] EXT4-fs (loop4): unmounting filesystem. [ 52.860754][ T1901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.869502][ T1901] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.883627][ T1901] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.638: lblock 0 mapped to illegal pblock 0 (length 6) [ 52.907946][ T288] EXT4-fs (loop4): unmounting filesystem. [ 53.071214][ T1913] 9pnet: p9_errstr2errno: server reported unknown error @c [ 53.094457][ T1915] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.132250][ T1919] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.151699][ T1919] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.179226][ T8] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.244098][ T294] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 53.368748][ T1939] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 53.452759][ T294] usb 5-1: unable to get BOS descriptor or descriptor too short [ 53.470203][ T294] usb 5-1: not running at top speed; connect to a high speed hub [ 53.494673][ T294] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 53.509679][ T1950] ip_tables: iptables: counters copy to user failed while replacing table [ 53.525584][ T294] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 53.544922][ T294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.562027][ T294] usb 5-1: Product: syz [ 53.576358][ T294] usb 5-1: Manufacturer: syz [ 53.585809][ T294] usb 5-1: SerialNumber: syz [ 53.643175][ T1967] capability: warning: `syz.6.669' uses 32-bit capabilities (legacy support in use) [ 53.735280][ T1977] set_capacity_and_notify: 12 callbacks suppressed [ 53.735302][ T1977] loop6: detected capacity change from 0 to 4096 [ 53.765584][ T1977] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 53.793252][ T1986] loop5: detected capacity change from 0 to 1024 [ 53.802957][ T294] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.807046][ T1986] EXT4-fs: Ignoring removed bh option [ 53.818859][ T1977] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #15: comm syz.6.673: corrupted inode contents [ 53.830735][ T1986] EXT4-fs: Ignoring removed bh option [ 53.837690][ T1977] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #15: comm syz.6.673: mark_inode_dirty error [ 53.849841][ T1977] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #15: comm syz.6.673: corrupted inode contents [ 53.857067][ T1986] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 53.863193][ T1977] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.673: mark_inode_dirty error [ 53.872474][ T994] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 53.883412][ T1977] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #15: comm syz.6.673: corrupted inode contents [ 53.901661][ T1977] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.673: mark_inode_dirty error [ 53.914218][ T1977] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #15: comm syz.6.673: corrupted inode contents [ 53.934220][ T1977] EXT4-fs error (device loop6): ext4_truncate:4327: inode #15: comm syz.6.673: mark_inode_dirty error [ 53.936444][ T1986] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 53.951793][ T1977] EXT4-fs error (device loop6) in ext4_setattr:5697: Corrupt filesystem [ 53.975495][ T673] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /128/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.986413][ T1991] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #15: comm syz.6.673: corrupted inode contents [ 54.001824][ T673] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /128/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 54.032143][ T294] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 54.043266][ T673] EXT4-fs (loop5): unmounting filesystem. [ 54.049098][ T294] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 54.069019][ T294] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 54.075968][ T685] EXT4-fs (loop6): unmounting filesystem. [ 54.087198][ T294] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 54.096376][ T294] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 54.104304][ T294] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 54.114780][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.125816][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.142511][ T994] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 54.153820][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.167816][ T994] usb 3-1: config 0 descriptor?? [ 54.181180][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 54.205919][ T2011] loop1: detected capacity change from 0 to 512 [ 54.226109][ T2011] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.687: corrupted inode contents [ 54.239284][ T2011] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 54.251473][ T2011] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.687: corrupted inode contents [ 54.266344][ T2011] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.687: mark_inode_dirty error [ 54.278611][ T2011] EXT4-fs (loop1): 1 orphan inode deleted [ 54.578689][ T994] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 54.586213][ T994] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 54.593650][ T994] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 54.602146][ T994] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 54.610049][ T994] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 54.618518][ T994] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 54.644312][ T294] usb 5-1: USB disconnect, device number 4 [ 54.679451][ T2041] loop1: detected capacity change from 0 to 256 [ 54.686368][ T2041] exfat: Deprecated parameter 'namecase' [ 54.692196][ T2041] exfat: Deprecated parameter 'namecase' [ 54.701027][ T2041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x30eb9dbf, utbl_chksum : 0xe619d30d) [ 54.874500][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.936339][ T2052] loop5: detected capacity change from 0 to 256 [ 55.019002][ T2054] loop5: detected capacity change from 0 to 8192 [ 55.089615][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 55.089633][ T28] audit: type=1400 audit(1792758931.073:432): avc: denied { ioctl } for pid=2057 comm="syz.5.708" path="socket:[23973]" dev="sockfs" ino=23973 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.131385][ T2060] loop5: detected capacity change from 0 to 512 [ 55.150480][ T2060] EXT4-fs (loop5): 1 orphan inode deleted [ 55.172388][ T2063] loop4: detected capacity change from 0 to 128 [ 55.180839][ T994] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 5: -71 [ 55.190331][ T994] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense calibration info: -71 [ 55.200403][ T994] playstation 0003:054C:0DF2.0007: Failed to get calibration data from DualSense [ 55.209723][ T994] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 55.221110][ T994] playstation: probe of 0003:054C:0DF2.0007 failed with error -71 [ 55.235117][ T994] usb 3-1: USB disconnect, device number 3 [ 55.278036][ T2064] fido_id[2064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 55.335090][ T2075] input: syz0 as /devices/virtual/input/input14 [ 55.492467][ T2100] loop4: detected capacity change from 0 to 256 [ 55.516720][ T2100] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 55.652412][ T28] audit: type=1400 audit(1792758931.632:433): avc: denied { getopt } for pid=2118 comm="syz.6.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.706956][ T28] audit: type=1400 audit(1792758931.692:434): avc: denied { bind } for pid=2124 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.760233][ T28] audit: type=1400 audit(1792758931.742:435): avc: denied { remount } for pid=2132 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 55.821187][ T28] audit: type=1400 audit(1792758931.782:436): avc: denied { read } for pid=2134 comm="syz.6.742" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 55.850729][ T28] audit: type=1400 audit(1792758931.782:437): avc: denied { open } for pid=2134 comm="syz.6.742" path="/100/dev/cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 55.927902][ T28] audit: type=1400 audit(1792758931.912:438): avc: denied { getopt } for pid=2136 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.023854][ T2154] FAULT_INJECTION: forcing a failure. [ 56.023854][ T2154] name failslab, interval 1, probability 0, space 0, times 0 [ 56.042362][ T2154] CPU: 1 PID: 2154 Comm: syz.6.750 Not tainted syzkaller #0 [ 56.049743][ T2154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.059921][ T2154] Call Trace: [ 56.063782][ T2154] [ 56.066764][ T2154] __dump_stack+0x21/0x24 [ 56.071156][ T2154] dump_stack_lvl+0x110/0x170 [ 56.075870][ T2154] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.080931][ T2154] ? __cfi_folio_add_lru+0x10/0x10 [ 56.086093][ T2154] dump_stack+0x15/0x24 [ 56.090281][ T2154] should_fail_ex+0x3bf/0x510 [ 56.094997][ T2154] ? getname_flags+0xba/0x510 [ 56.099714][ T2154] __should_failslab+0xac/0xf0 [ 56.104528][ T2154] should_failslab+0x9/0x20 [ 56.109063][ T2154] kmem_cache_alloc+0x3b/0x320 [ 56.113861][ T2154] getname_flags+0xba/0x510 [ 56.118397][ T2154] getname+0x19/0x20 [ 56.122336][ T2154] do_sys_openat2+0xeb/0x820 [ 56.126975][ T2154] ? do_sys_open+0xe0/0xe0 [ 56.131441][ T2154] ? do_user_addr_fault+0x9a5/0x1030 [ 56.136786][ T2154] __x64_sys_openat+0x136/0x160 [ 56.141677][ T2154] x64_sys_call+0x783/0x9a0 [ 56.146237][ T2154] do_syscall_64+0x4c/0xa0 [ 56.150674][ T2154] ? clear_bhb_loop+0x30/0x80 [ 56.155381][ T2154] ? clear_bhb_loop+0x30/0x80 [ 56.160096][ T2154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.166049][ T2154] RIP: 0033:0x7f1063d5fd8e [ 56.170500][ T2154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.190136][ T2154] RSP: 002b:00007f1064d37ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.198592][ T2154] RAX: ffffffffffffffda RBX: 00007f1064d3a6c0 RCX: 00007f1063d5fd8e [ 56.206594][ T2154] RDX: 0000000000000002 RSI: 00007f1063e35eb2 RDI: ffffffffffffff9c [ 56.214593][ T2154] RBP: 00007f1063e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 56.222600][ T2154] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000007b [ 56.230606][ T2154] R13: 0000200000000080 R14: 0000000000000005 R15: 00007fff99b2add8 [ 56.238615][ T2154] [ 56.395552][ T2173] FAULT_INJECTION: forcing a failure. [ 56.395552][ T2173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.427547][ T2173] CPU: 0 PID: 2173 Comm: syz.5.758 Not tainted syzkaller #0 [ 56.434900][ T2173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.444985][ T2173] Call Trace: [ 56.448283][ T2173] [ 56.451234][ T2173] __dump_stack+0x21/0x24 [ 56.455594][ T2173] dump_stack_lvl+0x110/0x170 [ 56.460299][ T2173] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.465347][ T2173] dump_stack+0x15/0x24 [ 56.469522][ T2173] should_fail_ex+0x3bf/0x510 [ 56.474229][ T2173] should_fail+0xb/0x10 [ 56.478445][ T2173] should_fail_usercopy+0x1a/0x20 [ 56.483497][ T2173] _copy_to_user+0x1e/0x90 [ 56.487938][ T2173] simple_read_from_buffer+0xe9/0x160 [ 56.493336][ T2173] proc_fail_nth_read+0x1a6/0x220 [ 56.498392][ T2173] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.503961][ T2173] ? security_file_permission+0x94/0xb0 [ 56.509591][ T2173] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.515168][ T2173] vfs_read+0x286/0x930 [ 56.519348][ T2173] ? __cfi_vfs_read+0x10/0x10 [ 56.524043][ T2173] ? __kasan_check_write+0x14/0x20 [ 56.529184][ T2173] ? mutex_lock+0x93/0x1b0 [ 56.533634][ T2173] ? __cfi_mutex_lock+0x10/0x10 [ 56.538548][ T2173] ? __fdget_pos+0x2cd/0x380 [ 56.543171][ T2173] ? ksys_read+0x70/0x260 [ 56.547518][ T2173] ksys_read+0x14a/0x260 [ 56.551772][ T2173] ? __cfi_ksys_read+0x10/0x10 [ 56.556564][ T2173] ? fpregs_restore_userregs+0x128/0x260 [ 56.562215][ T2173] __x64_sys_read+0x7b/0x90 [ 56.566740][ T2173] x64_sys_call+0x2f/0x9a0 [ 56.571178][ T2173] do_syscall_64+0x4c/0xa0 [ 56.575626][ T2173] ? clear_bhb_loop+0x30/0x80 [ 56.580325][ T2173] ? clear_bhb_loop+0x30/0x80 [ 56.585025][ T2173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.590941][ T2173] RIP: 0033:0x7fe02a79f559 [ 56.595375][ T2173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.615011][ T2173] RSP: 002b:00007fe02b6b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.623531][ T2173] RAX: ffffffffffffffda RBX: 00007fe02aa25fa0 RCX: 00007fe02a79f559 [ 56.631511][ T2173] RDX: 0000000000002020 RSI: 0000200000001400 RDI: 0000000000000003 [ 56.639491][ T2173] RBP: 00007fe02a836b20 R08: 0000000000000000 R09: 0000000000000000 [ 56.647472][ T2173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.655448][ T2173] R13: 00007fe02aa26038 R14: 00007fe02aa25fa0 R15: 00007ffc1ad45e88 [ 56.663433][ T2173] [ 56.675091][ T2166] loop1: detected capacity change from 0 to 40427 [ 56.691954][ T2166] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 56.699989][ T2166] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 56.724237][ T2166] F2FS-fs (loop1): invalid crc value [ 56.746210][ T2166] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.793338][ T2178] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.759: iget: bad i_size value: 38620345925642 [ 56.807687][ T2178] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.759: couldn't read orphan inode 15 (err -117) [ 56.820038][ T2166] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 56.834241][ T2166] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.854134][ T2178] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.759: bg 0: block 5: invalid block bitmap [ 56.866677][ T2178] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.882578][ T2178] EXT4-fs (loop5): This should not happen!! Data will be lost [ 56.882578][ T2178] [ 56.895315][ T2178] EXT4-fs (loop5): Total free blocks count 0 [ 56.901507][ T2178] EXT4-fs (loop5): Free/Dirty block details [ 56.907577][ T2178] EXT4-fs (loop5): free_blocks=0 [ 56.912546][ T2178] EXT4-fs (loop5): dirty_blocks=1 [ 56.917688][ T2178] EXT4-fs (loop5): Block reservation details [ 56.923742][ T2178] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 57.028207][ T2195] device batadv_slave_0 entered promiscuous mode [ 57.038218][ T2194] device batadv_slave_0 left promiscuous mode [ 57.039181][ T2196] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.088006][ T2198] syz.1.755: attempt to access beyond end of device [ 57.088006][ T2198] loop1: rw=2049, sector=77824, nr_sectors = 4000 limit=40427 [ 57.105698][ T2204] syz.1.755: attempt to access beyond end of device [ 57.105698][ T2204] loop1: rw=2049, sector=81824, nr_sectors = 8 limit=40427 [ 57.144483][ T2198] syz.1.755: attempt to access beyond end of device [ 57.144483][ T2198] loop1: rw=2049, sector=81832, nr_sectors = 88 limit=40427 [ 57.230679][ T2198] syz.1.755: attempt to access beyond end of device [ 57.230679][ T2198] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 57.299547][ T673] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 57.332379][ T2198] syz.1.755: attempt to access beyond end of device [ 57.332379][ T2198] loop1: rw=2049, sector=57344, nr_sectors = 1872 limit=40427 [ 57.348631][ T673] FAT-fs (loop5): Filesystem has been set read-only [ 57.371920][ T2222] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.386155][ T28] audit: type=1400 audit(1792758933.372:439): avc: denied { create } for pid=2221 comm="syz.6.777" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 57.413881][ T28] audit: type=1400 audit(1792758933.392:440): avc: denied { rename } for pid=2221 comm="syz.6.777" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.413909][ T2222] EXT4-fs error (device loop6): ext4_get_first_dir_block:3594: inode #12: comm syz.6.777: directory missing '.' [ 57.459936][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.492836][ T28] audit: type=1400 audit(1792758933.472:441): avc: denied { read } for pid=2230 comm="syz.2.779" path="socket:[24426]" dev="sockfs" ino=24426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.518203][ T287] syz-executor: attempt to access beyond end of device [ 57.518203][ T287] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 57.540506][ T2233] netlink: 8 bytes leftover after parsing attributes in process `syz.6.780'. [ 57.552792][ T2233] bridge0: port 4(vlan3) entered blocking state [ 57.559378][ T2233] bridge0: port 4(vlan3) entered disabled state [ 57.566560][ T2233] device vlan3 entered promiscuous mode [ 57.572190][ T2233] device gretap0 entered promiscuous mode [ 57.622155][ T2238] EXT4-fs: Ignoring removed nobh option [ 57.636486][ T2238] EXT4-fs (loop6): orphan cleanup on readonly fs [ 57.645416][ T2238] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.6.783: corrupted xattr block 95 [ 57.658070][ T2238] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 57.671431][ T2238] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.783: bg 0: block 7: invalid block bitmap [ 57.684005][ T2238] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 57.699769][ T2238] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2918: inode #11: comm syz.6.783: corrupted xattr block 95 [ 57.712717][ T2238] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 57.722249][ T2238] EXT4-fs (loop6): 1 orphan inode deleted [ 58.456756][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.465278][ T2310] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.473569][ T2310] device bridge_slave_0 entered promiscuous mode [ 58.483424][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.490697][ T2310] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.498413][ T2310] device bridge_slave_1 entered promiscuous mode [ 58.543801][ T2315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.570071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 58.579568][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.589115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 58.597571][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.606147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.614857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.623328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.631782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.673585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.681136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.690364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.699021][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.707445][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.714528][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.725283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.732999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.741683][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.749979][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.757063][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.772844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.781527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.806571][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.824726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.839171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.854688][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.880968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.894822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.913888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.922762][ T2310] device veth0_vlan entered promiscuous mode [ 58.942779][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.952922][ T2310] device veth1_macvtap entered promiscuous mode [ 58.973934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.988135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.006773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.021492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.055562][ T396] device bridge_slave_1 left promiscuous mode [ 59.061887][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.074486][ T396] device bridge_slave_0 left promiscuous mode [ 59.082833][ T2326] set_capacity_and_notify: 5 callbacks suppressed [ 59.082853][ T2326] loop6: detected capacity change from 0 to 16 [ 59.095919][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.104952][ T396] device veth1_macvtap left promiscuous mode [ 59.111028][ T396] device veth0_vlan left promiscuous mode [ 59.122975][ T2326] erofs: (device loop6): mounted with root inode @ nid 36. [ 59.236524][ T2336] loop4: detected capacity change from 0 to 128 [ 59.243351][ T2336] EXT4-fs: Ignoring removed nobh option [ 59.265605][ T2336] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.366875][ T2347] loop6: detected capacity change from 0 to 2048 [ 59.439694][ T2347] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.614019][ C0] sched: RT throttling activated [ 60.622120][ T2227] Bluetooth: hci0: command 0x1003 tx timeout [ 60.624124][ T397] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.640529][ T2226] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 61.619267][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 61.619284][ T28] audit: type=1400 audit(1792758937.602:443): avc: denied { bind } for pid=2359 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.623912][ T28] audit: type=1400 audit(1792758937.632:444): avc: denied { listen } for pid=2359 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.643665][ T28] audit: type=1400 audit(1792758937.632:445): avc: denied { connect } for pid=2359 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.664093][ C0] ================================================================== [ 62.672207][ C0] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0 [ 62.679280][ C0] Write of size 8 at addr ffff888116588a00 by task kworker/0:3/491 [ 62.687205][ C0] [ 62.689545][ C0] CPU: 0 PID: 491 Comm: kworker/0:3 Not tainted syzkaller #0 [ 62.696934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.707013][ C0] Workqueue: mld mld_ifc_work [ 62.717080][ C0] Call Trace: [ 62.720397][ C0] [ 62.723263][ C0] __dump_stack+0x21/0x24 [ 62.727625][ C0] dump_stack_lvl+0x110/0x170 [ 62.732333][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.737397][ C0] ? __run_timers+0x341/0x9b0 [ 62.742124][ C0] print_address_description+0x71/0x200 [ 62.747725][ C0] print_report+0x4a/0x60 [ 62.752093][ C0] kasan_report+0x122/0x150 [ 62.756653][ C0] ? __run_timers+0x341/0x9b0 [ 62.761390][ C0] __asan_report_store8_noabort+0x17/0x20 [ 62.767141][ C0] __run_timers+0x341/0x9b0 [ 62.771684][ C0] ? sched_clock_cpu+0x6e/0x260 [ 62.776558][ C0] ? calc_index+0x200/0x200 [ 62.781101][ C0] run_timer_softirq+0x6a/0xf0 [ 62.785889][ C0] handle_softirqs+0x1dd/0x5f0 [ 62.790681][ C0] __do_softirq+0xb/0xd [ 62.794866][ C0] do_softirq+0xdc/0x130 [ 62.799131][ C0] [ 62.802100][ C0] [ 62.805070][ C0] ? __cfi_do_softirq+0x10/0x10 [ 62.809949][ C0] __local_bh_enable_ip+0x75/0x80 [ 62.815020][ C0] ip6t_do_table+0x13a7/0x1560 [ 62.819822][ C0] ? ip6t_do_table+0x1c7/0x1560 [ 62.824699][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 62.829836][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 62.835061][ C0] ? ip6t_do_table+0x13a7/0x1560 [ 62.840025][ C0] ip6table_mangle_hook+0x262/0x7b0 [ 62.845251][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 62.850999][ C0] nf_hook_slow+0xca/0x200 [ 62.855440][ C0] ip6_output+0x3be/0x410 [ 62.859805][ C0] ? __cfi_ip6_output+0x10/0x10 [ 62.864687][ C0] ? __cfi_ip6_finish_output+0x10/0x10 [ 62.870199][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 62.875338][ C0] mld_sendpack+0x7ce/0xda0 [ 62.879910][ C0] ? add_grec+0x13f0/0x13f0 [ 62.884439][ C0] ? __cfi_dst_output+0x10/0x10 [ 62.889320][ C0] ? add_grec+0x10b/0x13f0 [ 62.893763][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 62.898636][ C0] mld_ifc_work+0x83b/0xc20 [ 62.903162][ C0] ? try_to_wake_up+0x622/0x1250 [ 62.908124][ C0] process_one_work+0x717/0xc30 [ 62.913008][ C0] worker_thread+0xa4d/0x11d0 [ 62.917710][ C0] kthread+0x281/0x320 [ 62.921811][ C0] ? __cfi_worker_thread+0x10/0x10 [ 62.926954][ C0] ? __cfi_kthread+0x10/0x10 [ 62.931574][ C0] ret_from_fork+0x1f/0x30 [ 62.936014][ C0] [ 62.939048][ C0] [ 62.941467][ C0] Allocated by task 2226: [ 62.945796][ C0] kasan_set_track+0x4b/0x70 [ 62.950409][ C0] kasan_save_alloc_info+0x1f/0x30 [ 62.955538][ C0] __kasan_kmalloc+0x95/0xb0 [ 62.960153][ C0] __kmalloc+0xb4/0x1e0 [ 62.964325][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 62.969382][ C0] hci_uart_tty_ioctl+0x3c4/0xa70 [ 62.974430][ C0] tty_ioctl+0x8ef/0xc60 [ 62.978704][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 62.983439][ C0] __x64_sys_ioctl+0x7b/0x90 [ 62.988048][ C0] x64_sys_call+0x58b/0x9a0 [ 62.992578][ C0] do_syscall_64+0x4c/0xa0 [ 62.997201][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.003136][ C0] [ 63.005482][ C0] Freed by task 2225: [ 63.009477][ C0] kasan_set_track+0x4b/0x70 [ 63.014117][ C0] kasan_save_free_info+0x2b/0x40 [ 63.019159][ C0] ____kasan_slab_free+0x132/0x180 [ 63.024301][ C0] __kasan_slab_free+0x11/0x20 [ 63.029088][ C0] slab_free_freelist_hook+0xc2/0x190 [ 63.034478][ C0] __kmem_cache_free+0xb7/0x1b0 [ 63.039361][ C0] kfree+0x6f/0xf0 [ 63.043101][ C0] hci_release_dev+0x12a3/0x13b0 [ 63.048060][ C0] bt_host_release+0x82/0x90 [ 63.052674][ C0] device_release+0xa4/0x1d0 [ 63.057317][ C0] kobject_put+0x19d/0x280 [ 63.061765][ C0] put_device+0x1f/0x30 [ 63.065968][ C0] hci_free_dev+0x1c/0x20 [ 63.070333][ C0] hci_uart_tty_close+0x2ec/0x330 [ 63.075391][ C0] tty_ldisc_kill+0x11b/0x220 [ 63.080101][ C0] tty_ldisc_release+0x1a5/0x200 [ 63.085071][ C0] tty_release_struct+0x29/0xe0 [ 63.089951][ C0] tty_release+0xbb7/0x11d0 [ 63.094479][ C0] __fput+0x1fd/0x8f0 [ 63.098487][ C0] ____fput+0x15/0x20 [ 63.102490][ C0] task_work_run+0x1e1/0x250 [ 63.107105][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 63.112335][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 63.122688][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 63.128198][ C0] do_syscall_64+0x58/0xa0 [ 63.132645][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.138591][ C0] [ 63.140935][ C0] Last potentially related work creation: [ 63.146671][ C0] kasan_save_stack+0x3a/0x60 [ 63.151406][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 63.156809][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 63.162667][ C0] insert_work+0x51/0x300 [ 63.167029][ C0] __queue_work+0x9d0/0xd50 [ 63.171558][ C0] queue_work_on+0xde/0x150 [ 63.176092][ C0] __hci_cmd_sync_sk+0xaa8/0xd80 [ 63.181048][ C0] hci_cmd_sync_status+0x53/0x120 [ 63.186094][ C0] hci_dev_cmd+0x642/0x740 [ 63.190539][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 63.195258][ C0] sock_do_ioctl+0x114/0x330 [ 63.199875][ C0] sock_ioctl+0x475/0x700 [ 63.204247][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 63.208948][ C0] __x64_sys_ioctl+0x7b/0x90 [ 63.213558][ C0] x64_sys_call+0x58b/0x9a0 [ 63.218088][ C0] do_syscall_64+0x4c/0xa0 [ 63.222519][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.228438][ C0] [ 63.230779][ C0] Second to last potentially related work creation: [ 63.237377][ C0] kasan_save_stack+0x3a/0x60 [ 63.242083][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 63.247481][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 63.253316][ C0] insert_work+0x51/0x300 [ 63.257663][ C0] __queue_work+0x9d0/0xd50 [ 63.262198][ C0] queue_work_on+0xde/0x150 [ 63.266738][ C0] hci_cmd_timeout+0x191/0x200 [ 63.271520][ C0] process_one_work+0x717/0xc30 [ 63.276410][ C0] worker_thread+0xa4d/0x11d0 [ 63.281131][ C0] kthread+0x281/0x320 [ 63.285225][ C0] ret_from_fork+0x1f/0x30 [ 63.289661][ C0] [ 63.292024][ C0] The buggy address belongs to the object at ffff888116588000 [ 63.292024][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 63.306125][ C0] The buggy address is located 2560 bytes inside of [ 63.306125][ C0] 8192-byte region [ffff888116588000, ffff88811658a000) [ 63.319693][ C0] [ 63.322033][ C0] The buggy address belongs to the physical page: [ 63.328458][ C0] page:ffffea0004596200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116588 [ 63.338739][ C0] head:ffffea0004596200 order:3 compound_mapcount:0 compound_pincount:0 [ 63.347083][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 63.353189][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 63.361793][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 63.370394][ C0] page dumped because: kasan: bad access detected [ 63.376829][ C0] page_owner tracks the page as allocated [ 63.382554][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 478, tgid 477 (syz.3.70), ts 29579636284, free_ts 29527420947 [ 63.404830][ C0] post_alloc_hook+0x1f5/0x210 [ 63.409629][ C0] prep_new_page+0x1c/0x110 [ 63.414162][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 63.419742][ C0] __alloc_pages+0x1fa/0x610 [ 63.424358][ C0] alloc_slab_page+0x6e/0xf0 [ 63.428968][ C0] new_slab+0x98/0x3e0 [ 63.433065][ C0] ___slab_alloc+0x70f/0xb70 [ 63.437681][ C0] __slab_alloc+0x5e/0xa0 [ 63.442029][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 63.447517][ C0] __kmalloc+0xa4/0x1e0 [ 63.451694][ C0] mb_cache_create+0x194/0x5b0 [ 63.456510][ C0] ext4_xattr_create_cache+0x13/0x20 [ 63.461822][ C0] ext4_fill_super+0x5470/0x73e0 [ 63.466785][ C0] get_tree_bdev+0x450/0x6a0 [ 63.471410][ C0] ext4_get_tree+0x1c/0x20 [ 63.475848][ C0] vfs_get_tree+0x9a/0x270 [ 63.480301][ C0] page last free stack trace: [ 63.484987][ C0] free_unref_page_prepare+0x81b/0x820 [ 63.490485][ C0] free_unref_page+0x93/0x530 [ 63.495188][ C0] __free_pages+0x67/0x100 [ 63.499648][ C0] __free_slab+0xc7/0x1a0 [ 63.504013][ C0] __unfreeze_partials+0x15a/0x190 [ 63.509145][ C0] put_cpu_partial+0xa9/0x100 [ 63.513860][ C0] __slab_free+0x1c4/0x280 [ 63.518295][ C0] ___cache_free+0xbf/0xd0 [ 63.522743][ C0] qlist_free_all+0xc6/0x140 [ 63.527359][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 63.532839][ C0] __kasan_slab_alloc+0x24/0x80 [ 63.537718][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 63.542859][ C0] kmem_cache_alloc+0x166/0x320 [ 63.547744][ C0] getname_flags+0xba/0x510 [ 63.552272][ C0] __x64_sys_unlink+0x3c/0x50 [ 63.556979][ C0] x64_sys_call+0x958/0x9a0 [ 63.561529][ C0] [ 63.563866][ C0] Memory state around the buggy address: [ 63.569508][ C0] ffff888116588900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.577626][ C0] ffff888116588980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.585708][ C0] >ffff888116588a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.593798][ C0] ^ [ 63.597878][ C0] ffff888116588a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.605960][ C0] ffff888116588b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.614029][ C0] ================================================================== [ 63.622097][ C0] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 63.628332][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 63.640065][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 63.648538][ C0] CPU: 0 PID: 491 Comm: kworker/0:3 Tainted: G B syzkaller #0 [ 63.657505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.667601][ C0] Workqueue: mld mld_ifc_work [ 63.672339][ C0] RIP: 0010:__queue_work+0x582/0xd50 [ 63.677667][ C0] Code: b4 00 00 00 e8 1f 57 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 8d ea b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 c0 f0 6e 00 49 8b 3e e8 28 e6 b9 03 [ 63.697325][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00010046 [ 63.703413][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811665bcc0 [ 63.711401][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 63.719399][ C0] RBP: ffffc90000007d28 R08: 0000000000000007 R09: 00000000fffffffb [ 63.727380][ C0] R10: dffffc0000000000 R11: ffffed1022cb1139 R12: ffff8881165889c8 [ 63.735366][ C0] R13: ffff88811337a000 R14: 0000000000000000 R15: 000000007fffffff [ 63.743349][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 63.752288][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.758885][ C0] CR2: 0000200000004000 CR3: 000000012a42a000 CR4: 00000000003506b0 [ 63.766874][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.774865][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 63.782846][ C0] Call Trace: [ 63.786139][ C0] [ 63.788994][ C0] delayed_work_timer_fn+0x61/0x80 [ 63.794124][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 63.799947][ C0] call_timer_fn+0x46/0x2a0 [ 63.804467][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 63.810311][ C0] __run_timers+0x672/0x9b0 [ 63.814856][ C0] ? calc_index+0x200/0x200 [ 63.819380][ C0] run_timer_softirq+0x6a/0xf0 [ 63.824164][ C0] handle_softirqs+0x1dd/0x5f0 [ 63.828938][ C0] __do_softirq+0xb/0xd [ 63.833104][ C0] do_softirq+0xdc/0x130 [ 63.837374][ C0] [ 63.840314][ C0] [ 63.843252][ C0] ? __cfi_do_softirq+0x10/0x10 [ 63.848119][ C0] __local_bh_enable_ip+0x75/0x80 [ 63.853179][ C0] ip6t_do_table+0x13a7/0x1560 [ 63.857963][ C0] ? ip6t_do_table+0x1c7/0x1560 [ 63.862850][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 63.867973][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 63.873184][ C0] ? ip6t_do_table+0x13a7/0x1560 [ 63.878164][ C0] ip6table_mangle_hook+0x262/0x7b0 [ 63.883388][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 63.889121][ C0] nf_hook_slow+0xca/0x200 [ 63.893548][ C0] ip6_output+0x3be/0x410 [ 63.897901][ C0] ? __cfi_ip6_output+0x10/0x10 [ 63.902772][ C0] ? __cfi_ip6_finish_output+0x10/0x10 [ 63.908246][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 63.913399][ C0] mld_sendpack+0x7ce/0xda0 [ 63.917954][ C0] ? add_grec+0x13f0/0x13f0 [ 63.922490][ C0] ? __cfi_dst_output+0x10/0x10 [ 63.927372][ C0] ? add_grec+0x10b/0x13f0 [ 63.931803][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 63.936673][ C0] mld_ifc_work+0x83b/0xc20 [ 63.941210][ C0] ? try_to_wake_up+0x622/0x1250 [ 63.946169][ C0] process_one_work+0x717/0xc30 [ 63.951042][ C0] worker_thread+0xa4d/0x11d0 [ 63.955737][ C0] kthread+0x281/0x320 [ 63.959824][ C0] ? __cfi_worker_thread+0x10/0x10 [ 63.964947][ C0] ? __cfi_kthread+0x10/0x10 [ 63.969552][ C0] ret_from_fork+0x1f/0x30 [ 63.973983][ C0] [ 63.977027][ C0] Modules linked in: [ 63.980935][ C0] ---[ end trace 0000000000000000 ]--- [ 63.986414][ C0] RIP: 0010:__queue_work+0x582/0xd50 [ 63.991733][ C0] Code: b4 00 00 00 e8 1f 57 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 8d ea b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 c0 f0 6e 00 49 8b 3e e8 28 e6 b9 03 [ 64.011528][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00010046 [ 64.017622][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811665bcc0 [ 64.025604][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 64.033675][ C0] RBP: ffffc90000007d28 R08: 0000000000000007 R09: 00000000fffffffb [ 64.041656][ C0] R10: dffffc0000000000 R11: ffffed1022cb1139 R12: ffff8881165889c8 [ 64.049643][ C0] R13: ffff88811337a000 R14: 0000000000000000 R15: 000000007fffffff [ 64.057630][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 64.066593][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.073185][ C0] CR2: 0000200000004000 CR3: 000000012a42a000 CR4: 00000000003506b0 [ 64.081172][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.089163][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 64.097189][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 64.104532][ C0] Kernel Offset: disabled [ 64.108856][ C0] Rebooting in 86400 seconds..