last executing test programs: 4.212994737s ago: executing program 0 (id=1583): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 3.496277574s ago: executing program 1 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048090}, 0x8080) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.261383208s ago: executing program 0 (id=1591): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x4}, 0x8) 3.233866134s ago: executing program 1 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8a) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) 3.077755813s ago: executing program 1 (id=1594): accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 2.552263283s ago: executing program 2 (id=1597): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r2}) r4 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x200a7a) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_procfs(r3, &(0x7f0000000380)='net/connector\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) socketpair(0x11, 0x2, 0x2, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 2.276089706s ago: executing program 0 (id=1601): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xa, 0x110, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x101103, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.142572561s ago: executing program 2 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048090}, 0x8080) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.110671658s ago: executing program 1 (id=1604): unshare(0x22020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 2.108349158s ago: executing program 2 (id=1605): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8a) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) 2.076773764s ago: executing program 4 (id=1606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x11223344]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="0007040000080000000000000000000000000000000000000526000000000001"], 0x40) sendto$inet6(r3, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2.075527024s ago: executing program 4 (id=1607): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001540)={[{@utf8}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@fat=@check_normal}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@utf8}, {@numtail}, {@uni_xlate}, {@utf8no}, {}, {@shortname_winnt}, {@rodir}]}, 0xfd, 0x2bd, &(0x7f0000000600)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x14000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x9}}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 1.927721542s ago: executing program 2 (id=1609): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'ip6gretap0\x00', 0x100}) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00001a6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1a000000049b00000000007993c333", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x48) write(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r4, 0xc138fd0a, &(0x7f0000000300)) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0xe}, {0x0, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.918581024s ago: executing program 4 (id=1610): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc24", 0xdb}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e5", 0x49}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d", 0x36}, {&(0x7f0000000580)="fb411a9c85180744d674c3699fcb27d2e189", 0x12}, {&(0x7f0000000640)="1cc96615eecaacfeb350b8076b6c81828f6cdf330cb6539f08559aac557883119bb42271c062c2b26c2ad805621611135174ea1fda23d1b330", 0x39}], 0x7) write(r0, &(0x7f0000001e00)="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", 0x2ba) 1.236236834s ago: executing program 0 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.235978354s ago: executing program 2 (id=1612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 1.059545838s ago: executing program 4 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202003ff0100ff", @ANYRES32=0x0, @ANYBLOB="08000100ac141433080002000a"], 0x34}}, 0xea5bc50b6199d77e) 1.027101014s ago: executing program 4 (id=1614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002f80)={@multicast, @remote, @void, {@ipv6={0x86dd, @esp={0x4, 0x6, "824641", 0xd4b, 0x32, 0xff, @local, @empty, {[@dstopts={0x2, 0x68, '\x00', [@generic={0x9, 0x341, "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"}]}, @routing={0x0, 0x0, 0x1, 0xe7}, @hopopts={0x1}], {0x4d5, 0x6, @basic={0x0, 0x0, 0xf4, [@ipv6=@tipc_packet={0x2, 0x6, "48ade7", 0x10e, 0x6, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @remote}, {[@srh={0x2b, 0x4, 0x4, 0x2, 0x2, 0x0, 0x8001, [@empty, @empty]}, @srh={0x1, 0x10, 0x4, 0x8, 0x7, 0x40, 0x8000, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2]}, @routing={0x21, 0x4, 0x1, 0x4, 0x0, [@local, @local]}, @routing={0x0, 0x2, 0x2, 0x7, 0x0, [@mcast1]}], @payload_conn={{{0x1e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x2, 0xcf, 0x0, 0x1, 0x3, 0x4, 0x0, 0x7fff, 0x9, 0x0, 0x4e23, 0x4e21}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, @ipv6=@generic={0x8, 0x6, "d8c6ca", 0x259, 0x2e, 0x1, @empty, @private2, {[@fragment={0x73, 0x0, 0xff, 0x1, 0x0, 0x6, 0x64}, @fragment={0x2f, 0x0, 0x1, 0x1, 0x0, 0x9, 0x67}, @fragment={0x2, 0x0, 0xe7, 0x0, 0x0, 0x1c, 0x65}, @srh={0x11, 0xe, 0x4, 0x7, 0x8, 0x28, 0x8, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @empty, @local, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @fragment={0x3c, 0x0, 0x2, 0x1, 0x0, 0x9, 0x65}, @srh={0x33, 0x10, 0x4, 0x8, 0x8, 0x38, 0x4, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @empty, @local, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private1]}, @dstopts={0x1d, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @generic={0x9, 0x3, "95042f"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x96, 0x100, [0x60e, 0x5, 0x8001, 0xfffffffffffffff7]}}, @ra={0x5, 0x2, 0x100}]}, @routing={0x16, 0x8, 0x2, 0x8, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x2, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}, @fragment={0x2c, 0x0, 0x7f, 0x1, 0x0, 0x3, 0x68}], "ce224e3e6949d15a5bc4fc9e62f2ceed50cc626e3dba3f9ed4acb668e331989396465daf182f749668bc838804ab8090e1d4f8c0f104825b8a38e85060a79a0733fe96660f915e2ff8e445ea5121cf1d077b9e3401ced1036e41a882ea31be69d900eaa4ba3b4122e097cd8939bed32f44ed3b8efa33c33b406d132ab7ce82dcbd0fb9b3e531e1f3f577d2902109aff2f7"}}, @runt="cb05dd72c1048386c4911ed0c2457e97badee709e4e57396d385dcba2b0a0ab2bdf58b6b789394e7c7566e1b", @runt="23d002c144164ee861e42468e8ede2c66c7586c2d2bee2a39e880403ae2e478fa97398e18947ca99d371540c26e7c0e7615e3a4ab724a2a664b6a520", @ipv6=@udp={0x0, 0x6, "b5cc15", 0x186, 0x11, 0xff, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, {[@dstopts={0x32}, @fragment={0x6c, 0x0, 0x9, 0x1, 0x0, 0x2, 0x67}, @srh={0x5c, 0x6, 0x4, 0x3, 0x9, 0x0, 0x9, [@private0, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @local}]}, @fragment={0x21, 0x0, 0xb4, 0x0, 0x0, 0x5, 0x68}, @hopopts={0x87, 0x1, '\x00', [@padn, @pad1, @ra={0x5, 0x2, 0x2bc8}]}, @routing={0x32, 0x12, 0x2, 0x5c, 0x0, [@mcast2, @private2, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x21}, @empty, @private0, @dev={0xfe, 0x80, '\x00', 0x28}]}, @hopopts={0x33, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {0x4e21, 0x4e20, 0x56, 0x0, @wg=@data={0x4, 0x2, 0xfffffffffffffffe, "ad5da6a7b0752f644e48e8f128b959313508c5afa9e04daa055ca86af806cb1ea6d0dfd2a3fc32962c8652d0c00e8b2dbfd8f4009ca37677b34b38cab424"}}}}, @ipv4=@esp={{0x19, 0x4, 0x1, 0x0, 0x163, 0x66, 0x0, 0x9, 0x32, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x72, 0x3, 0x5, [{@broadcast, 0xa3ab}]}, @lsrr={0x83, 0xf, 0x84, [@broadcast, @broadcast, @private=0xa010100]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x9, [{@local, 0x5}]}, @rr={0x7, 0x13, 0x9e, [@broadcast, @rand_addr=0x64010102, @multicast1, @broadcast]}, @ssrr={0x89, 0xf, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}]}, @ra={0x94, 0x4, 0x1}]}}, {0x4d3, 0x4, @basic={0x0, 0x0, 0x0, [@ipv6=@icmpv6={0x0, 0x6, "69dd1b", 0xc2, 0x3a, 0xff, @empty, @local, {[@hopopts={0x29, 0x4, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0xf489}]}, @hopopts={0x3a, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x6d, [0x2, 0xe]}}, @jumbo={0xc2, 0x4, 0x2}]}, @dstopts={0x33, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x3, [0x9, 0x1, 0x9, 0x5]}}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}]}], @echo_request={0x80, 0x0, 0x0, 0x23c2, 0x5, "239e"}}}]}, "8afbce6c25bce0", 0x7}}, @ipv4=@esp={{0x1a, 0x4, 0x1, 0x3a, 0x28a, 0x68, 0x0, 0x1, 0x32, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x1c, 0xae, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast1, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}]}, @rr={0x7, 0x7, 0xc2, [@private=0xa010102]}, @timestamp={0x44, 0xc, 0x77, 0x0, 0xd, [0x7, 0x7f]}, @timestamp_addr={0x44, 0x24, 0x9d, 0x1, 0x4, [{@rand_addr=0x64010102, 0x1}, {@multicast1, 0x40}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}]}]}}, {0x4d3, 0xfff, @basic={0x0, 0x0, 0x409b, [@runt="8b8f7d153c0a828f5c0caa9aa5292842d2e0573998", @ipv4=@tcp={{0xa, 0x4, 0x3, 0x0, 0x68, 0x68, 0x0, 0x5, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0xb, [{@empty, 0x4}]}, @noop]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x4, 0x1, 0x0, 0xfff, {[@mss={0x2, 0x4, 0x8}, @fastopen={0x22, 0xe, "544449713691284a0876717a"}]}}, {"2f610ef414dfc8a63b9bb473a41d778590c87c87dec9e302"}}}, @ipv6=@generic={0x3, 0x6, 'v+X', 0x16e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @private1, {[@hopopts={0x6, 0x3, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @hopopts={0x88, 0x0, '\x00', [@pad1]}, @dstopts={0x2b, 0x9, '\x00', [@generic={0x9, 0x17, "b122b97687a8ecbc6da78d49c111f637441abb3ed8731d"}, @generic={0x4, 0xe, "b5bbc5544e559d6d7338a2f2570c"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0xff7f, [0x101, 0xfff]}}]}], "6347b6bde06cc9b5e4d951c082baa3b9a31b115e5ef5db943e8d27d8595a63dd0ee1bfdc259ceb071298aca57fa53ab4612079ccf76449a437e4f9b7b4ee19c6574d649119a76dc79aa51dd414a7e8a21c81f4c92024716d52fcfeb899f69decc4dc65d60e25f3a8f75c6b469453d076af82e12447a73589c9220954e4a888135a4edd0ebbc6df60c8d15ed3a0b2ffe62817d74310181bfafc3953430a575bbc567ea8d3d1a9aecd0bb5203813553853553a0ce12e419aef6d2ffd61580d02172602f878291da5cdbb91dd6d43fe10b9cb5695516cbd5429f529d1028a81"}}]}, "b2", 0x1}}, @runt="0310ca5c5b1881551815e99faa57495116b4eaf140807544193cd296b23254757d7fe9"]}}}}}}}, 0x0) 1.010052387s ago: executing program 2 (id=1615): r0 = syz_io_uring_setup(0xf04, &(0x7f0000000540)={0x0, 0x596a, 0x400, 0x3, 0x327}, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020600) syz_open_dev$evdev(0x0, 0x2, 0x862b01) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r5 = epoll_create1(0x80000) epoll_pwait2(r5, &(0x7f00000021c0)=[{}], 0x1, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r6}, './file1\x00'}) 996.33113ms ago: executing program 4 (id=1616): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000001000), 0x8}, 0x0, 0x1, 0x3, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 728.883551ms ago: executing program 1 (id=1618): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000000000000000000010400000020000000000000000000000104"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000004000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="bf160000000000007962580000000000150204000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000006c"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 708.078935ms ago: executing program 1 (id=1619): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f00000003c0)=@xdp, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/139}, {&(0x7f00000005c0)=""/97}, {&(0x7f0000000640)=""/46}], 0x0, &(0x7f00000006c0)=""/163}, 0x993}, {{&(0x7f0000000780)=@l2tp={0x2, 0x0, @multicast1}, 0x0, &(0x7f0000003500)=[{&(0x7f0000002000)=""/4096}, {&(0x7f0000003000)=""/136}, {&(0x7f00000030c0)=""/247}, {&(0x7f00000031c0)=""/132}, {&(0x7f0000003280)=""/53}, {&(0x7f00000032c0)=""/141}, {&(0x7f0000003380)=""/97}, {&(0x7f0000003400)=""/186, 0x1b}, {&(0x7f00000034c0)=""/53}], 0x0, &(0x7f00000035c0)=""/199}, 0x6}], 0xdbd4, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000ec0000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051413030076657468315f6d6163767461700000000900010073797a310000000058000000050a03000000000000000000010020000900030073797a31000000000900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050b0007"], 0xf4}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/fib_trie\x00') lseek(r4, 0x2000, 0x0) 304.313802ms ago: executing program 3 (id=1620): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000400)='naa.600140', 0xa) r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8a) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) 265.546619ms ago: executing program 3 (id=1621): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000940)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@resuid}, {@bsdgroups}, {@nombcache}, {@nojournal_checksum}, {@dax_never}, {@grpid}]}, 0x1, 0x440, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2k776+uXUJVHH0CgICIeSZOW0gMXEEgcQEKCQzmGJK1C0wY1QaJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXKpS0no7V3E9ux3TycuKk/H2nbmd1xZr7eHXtmxxtAzxpM/0ki9kfEnxHRX83WFxis/nd7aWHiztLCRBLl8jv/JJVyt5YWJvKi+ev25ZlSROGLJI42qXfuytUL4zMzU5ez/Mj8xQ9H5q5cfWH64vj5qfNTl8bOnDl1cvSl02MvdiTONK5bRz6ZPXb4jfeuvzVx9vr7v36f5PE3xNEhg+0OPl0ud7i67jpQk05KXWwI61KsdtPoq/T//ijGysnrj9c/72rjgC1VLpfLD7U+vFgG7mNJbOLF+UcIsAPlX/Tp/DfftmfkcW+4+Up1ApTGfTvbqkdKUcjK9DXMbztpMCLOLv77TbrF1tyHAACo82M6/nm+2fivELX3hf6fraEMRMQDEXEwIk5HxKGIeDCiUvbhiHikWSVJ6/obF0lWj38KNzYc3Bqk47+Xs7Wt+vFfPvqLgWKWO1CJvy85Nz0zdSJ7T4aib3eaH21Tx0+v/fFVq2O14790S+vPx4JZO26Udte/ZnJ8fnwzMde6+VnEkVKz+JPllYD09B2OiCMbrGP62e+OtTp29/jb6MA6U/nbiGeq538xGuLPJe3XJ0f+FzNTJ0byq2K1336/9vZyplh/bFPxd0B6/vc2vf6X4x9Iatdr59Zfx7W/vmw5p9no9b8rebdu38fj8/OXRyN2JW9WG127f6yh3NhK+TT+oePN+//BWHknjkZEehE/GhGPRcTjWdufiIgnSxHH28T/y6tPfbCx+He3+audkcY/ua7zv5LYFY17mieKF37+oa7SgbXGH9n5P1VJDWV71vL5t5Z2bexqBgAAgJ2nEBH7IykML6cLheHh6m/4D8XeYszOzT93bvajS5PVZwQGoq+Q3+nqr7kfOppN6/P8WEP+ZHbf+Ovinkp+eGJ25s799RN42HH2tej/qb+L3W4dsOU8rwW9S/+H3qX/Q+/S/6F3Nen/e7rRDmD7Nfv+/7QL7QC2X0P/t+wHPcT8H3qX/g+9S/+HnjS3J+7+kLyExKpEFO6JZkhsUaLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8V8AAAD//4sp5BA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 216.746548ms ago: executing program 0 (id=1622): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) statx(r0, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) 79.599585ms ago: executing program 0 (id=1623): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc24", 0xdb}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e5", 0x49}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d", 0x36}, {&(0x7f0000000580)="fb411a9c85180744d674c3699fcb27d2e189", 0x12}, {&(0x7f0000000640)="1cc96615eecaacfeb350b8076b6c81828f6cdf330cb6539f08559aac557883119bb42271c062c2b26c2ad805621611135174ea1fda23d1b330", 0x39}], 0x7) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789", 0x2ba) 79.403095ms ago: executing program 3 (id=1624): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="01000000ef01010100000000000000000000000008"], 0x60}}, 0x0) 78.663915ms ago: executing program 3 (id=1625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 62.483898ms ago: executing program 3 (id=1626): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb0100200000000000000068000000680000000a0000000400000002"], 0x0, 0x8a, 0x0, 0x1, 0x4}, 0x28) 0s ago: executing program 3 (id=1627): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) listxattr(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000009c00000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000030850000008a000000bca900000000000035090100000000009500500000000006bf9800000000000036080000020000008500000007000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") unlink(&(0x7f0000000280)='./file1/file2\x00') kernel console output (not intermixed with test programs): 000000-0000-0000-0000-000000000000. [ 57.453350][ T4112] loop3: detected capacity change from 0 to 256 [ 57.464571][ T4112] FAT-fs (loop3): codepage cp850 not found [ 57.480670][ T29] audit: type=1400 audit(1790972124.849:264): avc: denied { read } for pid=4114 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.677705][ T4120] loop2: detected capacity change from 0 to 2048 [ 57.702179][ T4120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.934772][ T29] audit: type=1400 audit(1790972125.299:265): avc: denied { bind } for pid=4119 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.564440][ T4133] loop3: detected capacity change from 0 to 512 [ 58.565579][ T29] audit: type=1400 audit(1790972125.929:266): avc: denied { remount } for pid=4131 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.659827][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.892485][ T3431] input: syz0 as /devices/virtual/misc/uhid/8005:057E:0306.0001/input/input5 [ 58.894345][ T3431] hid-generic 8005:057E:0306.0001: input,hidraw0: HID v0.03 Gamepad [syz0] on syz0 [ 58.929349][ T4140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.931085][ T4140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.045481][ T4141] fido_id[4141]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.228747][ T4147] loop4: detected capacity change from 0 to 256 [ 59.268743][ T4147] FAT-fs (loop4): codepage cp936 not found [ 60.033335][ T4166] size and base must be multiples of 4 kiB [ 60.033353][ T4166] CPU: 1 UID: 0 PID: 4166 Comm: syz.4.207 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.033376][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.033387][ T4166] Call Trace: [ 60.033393][ T4166] [ 60.033400][ T4166] __dump_stack+0x1d/0x30 [ 60.033429][ T4166] dump_stack_lvl+0x95/0xd0 [ 60.033493][ T4166] dump_stack+0x15/0x1b [ 60.033577][ T4166] mtrr_del+0xbf/0xd0 [ 60.033640][ T4166] mtrr_ioctl+0xb62/0xfb0 [ 60.033665][ T4166] ? __pfx_mtrr_ioctl+0x10/0x10 [ 60.033718][ T4166] ? proc_reg_unlocked_ioctl+0x1/0x1b0 [ 60.033809][ T4166] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 60.033834][ T4166] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 60.033934][ T4166] __se_sys_ioctl+0xce/0x140 [ 60.033969][ T4166] __x64_sys_ioctl+0x43/0x50 [ 60.034004][ T4166] x64_sys_call+0x239d/0x2550 [ 60.034112][ T4166] do_syscall_64+0x112/0x360 [ 60.034138][ T4166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.034164][ T4166] RIP: 0033:0x7f523682e159 [ 60.034248][ T4166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.034307][ T4166] RSP: 002b:00007f5235287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.034326][ T4166] RAX: ffffffffffffffda RBX: 00007f5236ab5fa0 RCX: 00007f523682e159 [ 60.034340][ T4166] RDX: 0000200000000040 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 60.034353][ T4166] RBP: 00007f52368c506b R08: 0000000000000000 R09: 0000000000000000 [ 60.034368][ T4166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.034398][ T4166] R13: 00007f5236ab6038 R14: 00007f5236ab5fa0 R15: 00007ffdc387cd48 [ 60.034419][ T4166] [ 60.112562][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 60.642824][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.659255][ T4192] bridge_slave_0 (unregistering): left allmulticast mode [ 60.659318][ T4192] bridge_slave_0 (unregistering): left promiscuous mode [ 60.659365][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.837428][ T4194] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 60.866645][ T4194] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 61.427857][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 61.427872][ T29] audit: type=1400 audit(1790972128.799:284): avc: denied { relabelfrom } for pid=4203 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.427895][ T29] audit: type=1400 audit(1790972128.799:285): avc: denied { relabelto } for pid=4203 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 62.111576][ T4215] netlink: 76 bytes leftover after parsing attributes in process `syz.1.228'. [ 62.111620][ T4215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 62.111633][ T4215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 62.443318][ T4228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'. [ 62.445231][ T4228] bond0: (slave bond_slave_0): Releasing backup interface [ 62.607430][ T4228] bond_slave_0: entered promiscuous mode [ 62.607835][ T4228] bond_slave_0: entered allmulticast mode [ 63.056960][ T29] audit: type=1400 audit(1790972130.429:286): avc: denied { block_suspend } for pid=4237 comm="syz.3.235" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.717954][ T29] audit: type=1400 audit(1790972131.059:287): avc: denied { read } for pid=4249 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.717983][ T29] audit: type=1400 audit(1790972131.059:288): avc: denied { read open } for pid=4249 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.718071][ T29] audit: type=1400 audit(1790972131.059:289): avc: denied { getattr } for pid=4249 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.363550][ T29] audit: type=1400 audit(1790972131.729:290): avc: denied { write } for pid=4245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.363660][ T29] audit: type=1400 audit(1790972131.729:291): avc: denied { add_name } for pid=4245 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.563209][ T29] audit: type=1400 audit(1790972131.929:292): avc: denied { write } for pid=4273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.563297][ T29] audit: type=1400 audit(1790972131.929:293): avc: denied { remove_name } for pid=4273 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.908397][ T4291] loop3: detected capacity change from 0 to 128 [ 64.918648][ T4291] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 64.918675][ T4291] FAT-fs (loop3): data area starts beyond volume (36 > 6) [ 64.918690][ T4291] FAT-fs (loop3): Can't find a valid FAT filesystem [ 65.307059][ T4294] loop3: detected capacity change from 0 to 512 [ 65.346811][ T4294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.371727][ T4294] EXT4-fs (loop3): 1 truncate cleaned up [ 65.372405][ T4294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.797525][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.856363][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 66.856378][ T29] audit: type=1400 audit(1790972134.219:304): avc: denied { mount } for pid=4334 comm="syz.0.264" name="/" dev="ramfs" ino=6509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 67.293941][ T29] audit: type=1400 audit(1790972134.659:305): avc: denied { perfmon } for pid=4349 comm="syz.0.268" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.318539][ T29] audit: type=1400 audit(1790972134.689:306): avc: denied { bpf } for pid=4349 comm="syz.0.268" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.592752][ T29] audit: type=1400 audit(1790972134.959:307): avc: denied { module_request } for pid=4357 comm="syz.0.272" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 67.856131][ T29] audit: type=1400 audit(1790972135.219:308): avc: denied { getopt } for pid=4372 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.093299][ T4383] FAULT_INJECTION: forcing a failure. [ 68.093299][ T4383] name fail_futex, interval 1, probability 0, space 0, times 1 [ 68.093346][ T4383] CPU: 0 UID: 0 PID: 4383 Comm: syz.3.281 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.093381][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.093398][ T4383] Call Trace: [ 68.093407][ T4383] [ 68.093416][ T4383] __dump_stack+0x1d/0x30 [ 68.093445][ T4383] dump_stack_lvl+0x95/0xd0 [ 68.093466][ T4383] dump_stack+0x15/0x1b [ 68.093485][ T4383] should_fail_ex+0x262/0x280 [ 68.093514][ T4383] should_fail+0xb/0x20 [ 68.093574][ T4383] get_futex_key+0x12d/0xb10 [ 68.093632][ T4383] ? mutex_unlock+0x4e/0x90 [ 68.093727][ T4383] futex_wake+0x89/0x400 [ 68.093750][ T4383] ? __sys_bpf+0x9e3/0xc30 [ 68.093781][ T4383] do_futex+0x3f8/0x460 [ 68.093816][ T4383] __se_sys_futex+0x2f6/0x370 [ 68.093892][ T4383] __x64_sys_futex+0x78/0x90 [ 68.093923][ T4383] x64_sys_call+0x22e2/0x2550 [ 68.093998][ T4383] do_syscall_64+0x112/0x360 [ 68.094144][ T4383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.094200][ T4383] RIP: 0033:0x7f00b36ae159 [ 68.094218][ T4383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.094238][ T4383] RSP: 002b:00007f00b21070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 68.094261][ T4383] RAX: ffffffffffffffda RBX: 00007f00b3935fa8 RCX: 00007f00b36ae159 [ 68.094277][ T4383] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f00b3935fac [ 68.094339][ T4383] RBP: 00007f00b3935fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 68.094352][ T4383] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 68.094366][ T4383] R13: 00007f00b3936038 R14: 00007ffee789d660 R15: 00007ffee789d748 [ 68.094393][ T4383] [ 68.204609][ T4386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.204722][ T4386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.857613][ T4395] FAULT_INJECTION: forcing a failure. [ 68.857613][ T4395] name failslab, interval 1, probability 0, space 0, times 0 [ 68.857646][ T4395] CPU: 1 UID: 0 PID: 4395 Comm: syz.3.286 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.857675][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.857743][ T4395] Call Trace: [ 68.857750][ T4395] [ 68.857759][ T4395] __dump_stack+0x1d/0x30 [ 68.857782][ T4395] dump_stack_lvl+0x95/0xd0 [ 68.857818][ T4395] dump_stack+0x15/0x1b [ 68.857907][ T4395] should_fail_ex+0x262/0x280 [ 68.857937][ T4395] ? security_file_alloc+0x32/0xf0 [ 68.857976][ T4395] should_failslab+0x8c/0xb0 [ 68.858037][ T4395] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 68.858069][ T4395] ? security_file_alloc+0x32/0xf0 [ 68.858180][ T4395] security_file_alloc+0x32/0xf0 [ 68.858211][ T4395] init_file+0x5b/0x1b0 [ 68.858231][ T4395] alloc_empty_file+0x85/0x1e0 [ 68.858274][ T4395] alloc_file_pseudo+0x92/0x120 [ 68.858297][ T4395] anon_inode_getfd+0xbf/0x190 [ 68.858321][ T4395] bpf_map_new_fd+0x52/0x70 [ 68.858358][ T4395] map_create+0x43c/0xfe0 [ 68.858465][ T4395] __sys_bpf+0x99a/0xc30 [ 68.858495][ T4395] ? do_futex+0x370/0x460 [ 68.858535][ T4395] __x64_sys_bpf+0x69/0x80 [ 68.858609][ T4395] x64_sys_call+0xf26/0x2550 [ 68.858633][ T4395] do_syscall_64+0x112/0x360 [ 68.858661][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.858755][ T4395] RIP: 0033:0x7f00b36ae159 [ 68.858798][ T4395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.858815][ T4395] RSP: 002b:00007f00b2107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.858833][ T4395] RAX: ffffffffffffffda RBX: 00007f00b3935fa0 RCX: 00007f00b36ae159 [ 68.858847][ T4395] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 68.858863][ T4395] RBP: 00007f00b374506b R08: 0000000000000000 R09: 0000000000000000 [ 68.858878][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.858894][ T4395] R13: 00007f00b3936038 R14: 00007f00b3935fa0 R15: 00007ffee789d748 [ 68.858953][ T4395] [ 68.944426][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.944521][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.162596][ T4402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.169544][ T4402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.219435][ T4406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'. [ 69.219687][ T4406] Zero length message leads to an empty skb [ 69.538132][ T29] audit: type=1400 audit(1790972136.909:309): avc: denied { ioctl } for pid=4416 comm="syz.3.296" path="socket:[6626]" dev="sockfs" ino=6626 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.538409][ T29] audit: type=1400 audit(1790972136.909:310): avc: denied { write } for pid=4416 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.562247][ T29] audit: type=1400 audit(1790972136.929:311): avc: denied { create } for pid=4418 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.722704][ T29] audit: type=1400 audit(1790972137.089:312): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.735964][ T4425] loop3: detected capacity change from 0 to 128 [ 69.738861][ T4425] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 69.738886][ T4425] FAT-fs (loop3): data area starts beyond volume (36 > 6) [ 69.738900][ T4425] FAT-fs (loop3): Can't find a valid FAT filesystem [ 70.372155][ T4438] loop2: detected capacity change from 0 to 512 [ 70.372700][ T4438] EXT4-fs: test_dummy_encryption option not supported [ 70.495094][ T4441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.303'. [ 70.763742][ T4444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.776474][ T4444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.934834][ T29] audit: type=1400 audit(1790972138.259:313): avc: denied { write } for pid=4447 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.992075][ T4451] FAULT_INJECTION: forcing a failure. [ 70.992075][ T4451] name failslab, interval 1, probability 0, space 0, times 0 [ 70.992204][ T4451] CPU: 1 UID: 0 PID: 4451 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.992251][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.992266][ T4451] Call Trace: [ 70.992275][ T4451] [ 70.992283][ T4451] __dump_stack+0x1d/0x30 [ 70.992374][ T4451] dump_stack_lvl+0x95/0xd0 [ 70.992457][ T4451] dump_stack+0x15/0x1b [ 70.992535][ T4451] should_fail_ex+0x262/0x280 [ 70.992559][ T4451] ? tcp_sendmsg_fastopen+0x15b/0x510 [ 70.992580][ T4451] should_failslab+0x8c/0xb0 [ 70.992608][ T4451] __kmalloc_cache_noprof+0x7a/0x400 [ 70.992695][ T4451] ? tcp_sendmsg_fastopen+0x15b/0x510 [ 70.992723][ T4451] ? avc_has_perm+0x101/0x190 [ 70.992747][ T4451] tcp_sendmsg_fastopen+0x15b/0x510 [ 70.992806][ T4451] tcp_sendmsg_locked+0x2775/0x2ad0 [ 70.992830][ T4451] ? tcp_sendmsg_locked+0x1e1/0x2ad0 [ 70.992851][ T4451] ? selinux_netlbl_socket_connect+0x114/0x130 [ 70.992887][ T4451] ? selinux_socket_sendmsg+0x3d9/0x410 [ 70.992950][ T4451] ? __pfx_tcp_sendmsg+0x10/0x10 [ 70.992969][ T4451] tcp_sendmsg+0x2f/0x50 [ 70.993019][ T4451] inet6_sendmsg+0x76/0xd0 [ 70.993042][ T4451] ? __pfx_inet6_sendmsg+0x10/0x10 [ 70.993131][ T4451] ____sys_sendmsg+0x390/0x580 [ 70.993180][ T4451] ___sys_sendmsg+0x195/0x1e0 [ 70.993281][ T4451] __sys_sendmmsg+0x185/0x320 [ 70.993308][ T4451] __x64_sys_sendmmsg+0x57/0x70 [ 70.993328][ T4451] x64_sys_call+0x1fb4/0x2550 [ 70.993373][ T4451] do_syscall_64+0x112/0x360 [ 70.993465][ T4451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.993485][ T4451] RIP: 0033:0x7fe27463e159 [ 70.993517][ T4451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.993533][ T4451] RSP: 002b:00007fe273097028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.993551][ T4451] RAX: ffffffffffffffda RBX: 00007fe2748c5fa0 RCX: 00007fe27463e159 [ 70.993564][ T4451] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 70.993656][ T4451] RBP: 00007fe2746d506b R08: 0000000000000000 R09: 0000000000000000 [ 70.993669][ T4451] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000000 [ 70.993681][ T4451] R13: 00007fe2748c6038 R14: 00007fe2748c5fa0 R15: 00007ffc9ad523f8 [ 70.993699][ T4451] [ 71.450722][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 71.952267][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 71.952281][ T29] audit: type=1400 audit(1790972139.319:320): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.995366][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.314'. [ 72.553270][ T29] audit: type=1400 audit(1790972139.919:321): avc: denied { getopt } for pid=4483 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.621990][ T29] audit: type=1400 audit(1790972139.989:322): avc: denied { setopt } for pid=4485 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.622751][ T29] audit: type=1400 audit(1790972139.989:323): avc: denied { bind } for pid=4485 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.622887][ T29] audit: type=1400 audit(1790972139.989:324): avc: denied { name_bind } for pid=4485 comm="syz.0.319" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 72.622989][ T29] audit: type=1400 audit(1790972139.989:325): avc: denied { node_bind } for pid=4485 comm="syz.0.319" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 72.857884][ T29] audit: type=1400 audit(1790972140.229:326): avc: denied { allowed } for pid=4491 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.469665][ T4507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.327'. [ 74.047444][ T4512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.329'. [ 74.129263][ T4513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.126394][ T4518] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 75.306766][ T4520] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 75.508944][ T4527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.509011][ T4527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.589816][ T29] audit: type=1400 audit(1790972142.959:327): avc: denied { write } for pid=4522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.654366][ T29] audit: type=1400 audit(1790972143.019:328): avc: denied { write } for pid=4538 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.765306][ T4527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.765405][ T4527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.766435][ T4527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.766544][ T4527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.086462][ T4544] FAULT_INJECTION: forcing a failure. [ 76.086462][ T4544] name failslab, interval 1, probability 0, space 0, times 0 [ 76.086490][ T4544] CPU: 1 UID: 0 PID: 4544 Comm: syz.3.334 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.086523][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.086540][ T4544] Call Trace: [ 76.086547][ T4544] [ 76.086626][ T4544] __dump_stack+0x1d/0x30 [ 76.086720][ T4544] dump_stack_lvl+0x95/0xd0 [ 76.086746][ T4544] dump_stack+0x15/0x1b [ 76.086831][ T4544] should_fail_ex+0x262/0x280 [ 76.086936][ T4544] ? sk_prot_alloc+0x3f/0x180 [ 76.086958][ T4544] should_failslab+0x8c/0xb0 [ 76.086988][ T4544] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 76.087066][ T4544] ? sk_prot_alloc+0x3f/0x180 [ 76.087088][ T4544] sk_prot_alloc+0x3f/0x180 [ 76.087110][ T4544] sk_alloc+0x34/0x3e0 [ 76.087135][ T4544] unix_create1+0xa1/0x400 [ 76.087160][ T4544] unix_create+0xf6/0x130 [ 76.087212][ T4544] __sock_create+0x2e5/0x580 [ 76.087245][ T4544] p9_fd_create_unix+0x154/0x300 [ 76.087270][ T4544] p9_client_create+0x22d/0x760 [ 76.087359][ T4544] ? v9fs_get_tree+0x49/0x5e0 [ 76.087386][ T4544] ? should_failslab+0x8c/0xb0 [ 76.087474][ T4544] v9fs_session_init+0x38/0x510 [ 76.087496][ T4544] v9fs_get_tree+0x5c/0x5e0 [ 76.087524][ T4544] vfs_get_tree+0x57/0x1d0 [ 76.087593][ T4544] do_new_mount+0x288/0x8d0 [ 76.087617][ T4544] path_mount+0x4ad/0xb90 [ 76.087639][ T4544] __se_sys_mount+0x28c/0x2e0 [ 76.087715][ T4544] __x64_sys_mount+0x67/0x80 [ 76.087737][ T4544] x64_sys_call+0xc3b/0x2550 [ 76.087762][ T4544] do_syscall_64+0x112/0x360 [ 76.087786][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.087877][ T4544] RIP: 0033:0x7f00b36ae159 [ 76.087943][ T4544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.088009][ T4544] RSP: 002b:00007f00b2107028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.088027][ T4544] RAX: ffffffffffffffda RBX: 00007f00b3935fa0 RCX: 00007f00b36ae159 [ 76.088041][ T4544] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000040 [ 76.088054][ T4544] RBP: 00007f00b374506b R08: 0000200000000280 R09: 0000000000000000 [ 76.088069][ T4544] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.088083][ T4544] R13: 00007f00b3936038 R14: 00007f00b3935fa0 R15: 00007ffee789d748 [ 76.088103][ T4544] [ 76.110794][ T29] audit: type=1400 audit(1790972143.449:329): avc: denied { mounton } for pid=4543 comm="syz.3.334" path="/71/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 76.251608][ T4544] 9pnet_fd: p9_fd_create_unix (4544): problem creating socket [ 76.304053][ T4547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.335'. [ 76.356854][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'. [ 76.413832][ T4554] loop2: detected capacity change from 0 to 512 [ 76.423814][ T4554] EXT4-fs: Ignoring removed nobh option [ 76.438311][ T4554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.438466][ T4554] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.443978][ T4554] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.339: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.447105][ T4554] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.339: corrupted inode contents [ 76.447240][ T4554] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.339: mark_inode_dirty error [ 76.447451][ T4554] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.339: corrupted inode contents [ 76.447576][ T4554] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.339: mark_inode_dirty error [ 76.485321][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.538693][ T4564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.543031][ T4564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.544273][ T4564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.544353][ T4564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.169830][ T4573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.201210][ T4575] netlink: 'syz.3.343': attribute type 1 has an invalid length. [ 78.249169][ T4575] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 78.254226][ T4575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 78.337968][ T4582] loop3: detected capacity change from 0 to 512 [ 78.339849][ T4582] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.344: bg 0: block 5: invalid block bitmap [ 78.339920][ T4582] loop3: lost filesystem error report for type 5 error -117 [ 78.340084][ T4582] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 78.340100][ T4582] loop3: lost filesystem error report for type 5 error -117 [ 78.340309][ T4582] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.344: invalid indirect mapped block 3 (level 2) [ 78.340335][ T4582] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.340471][ T4582] EXT4-fs (loop3): 1 orphan inode deleted [ 78.340488][ T4582] EXT4-fs (loop3): 1 truncate cleaned up [ 78.340867][ T4582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.466594][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 78.466610][ T29] audit: type=1400 audit(1790972145.829:333): avc: denied { write } for pid=4568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.516940][ T29] audit: type=1400 audit(1790972145.889:334): avc: denied { write } for pid=4587 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.554452][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.278660][ T29] audit: type=1400 audit(1790972146.649:335): avc: denied { connect } for pid=4596 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.278903][ T29] audit: type=1400 audit(1790972146.649:336): avc: denied { read } for pid=4596 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.336671][ T29] audit: type=1400 audit(1790972146.699:337): avc: denied { write } for pid=4596 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.342686][ T29] audit: type=1400 audit(1790972146.709:338): avc: denied { write } for pid=4600 comm="syz.4.349" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.343140][ T11] kernel write not supported for file /cpu/0/msr (pid: 11 comm: kworker/0:1) [ 79.425319][ T4607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.350'. [ 79.516489][ T4614] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 79.596708][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 79.788025][ T4629] syz.4.359 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.888137][ T4636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.362'. [ 79.942811][ T4640] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 79.972124][ T4640] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 79.989975][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 80.248669][ T4658] loop4: detected capacity change from 0 to 1024 [ 80.264268][ T4658] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 80.278469][ T4658] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 80.279679][ T4658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.342016][ T29] audit: type=1400 audit(1790972147.649:339): avc: denied { remount } for pid=4650 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.380790][ T4658] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 80.468080][ T29] audit: type=1400 audit(1790972147.839:340): avc: denied { read } for pid=4653 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.683804][ T4669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'. [ 80.689067][ T4667] FAULT_INJECTION: forcing a failure. [ 80.689067][ T4667] name failslab, interval 1, probability 0, space 0, times 0 [ 80.689108][ T4667] CPU: 0 UID: 0 PID: 4667 Comm: syz.3.374 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.689146][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.689159][ T4667] Call Trace: [ 80.689165][ T4667] [ 80.689173][ T4667] __dump_stack+0x1d/0x30 [ 80.689199][ T4667] dump_stack_lvl+0x95/0xd0 [ 80.689222][ T4667] dump_stack+0x15/0x1b [ 80.689261][ T4667] should_fail_ex+0x262/0x280 [ 80.689288][ T4667] should_failslab+0x8c/0xb0 [ 80.689394][ T4667] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 80.689432][ T4667] ? kstrdup_const+0x3e/0x50 [ 80.689460][ T4667] ? kstrdup_const+0x3e/0x50 [ 80.689515][ T4667] kstrdup+0x3e/0xd0 [ 80.689538][ T4667] kstrdup_const+0x3e/0x50 [ 80.689563][ T4667] kvasprintf_const+0x98/0x130 [ 80.689597][ T4667] kobject_set_name_vargs+0x44/0xe0 [ 80.689633][ T4667] dev_set_name+0x83/0xb0 [ 80.689654][ T4667] ? hrtimer_setup+0x33/0xe0 [ 80.689676][ T4667] ? netdev_register_kobject+0x62/0x240 [ 80.689701][ T4667] ? device_initialize+0x20e/0x220 [ 80.689785][ T4667] netdev_register_kobject+0x7f/0x240 [ 80.689809][ T4667] register_netdevice+0xaf7/0x11a0 [ 80.689880][ T4667] ip6_tnl_create2+0x8a/0x290 [ 80.689945][ T4667] ip6_tnl_locate+0x3c6/0x490 [ 80.689985][ T4667] ip6_tnl_siocdevprivate+0x717/0xb40 [ 80.690051][ T4667] dev_ifsioc+0x8f5/0xfc0 [ 80.690180][ T4667] dev_ioctl+0x78c/0x960 [ 80.690210][ T4667] sock_ioctl+0x58f/0x610 [ 80.690239][ T4667] ? __pfx_sock_ioctl+0x10/0x10 [ 80.690266][ T4667] __se_sys_ioctl+0xce/0x140 [ 80.690319][ T4667] __x64_sys_ioctl+0x43/0x50 [ 80.690351][ T4667] x64_sys_call+0x239d/0x2550 [ 80.690377][ T4667] do_syscall_64+0x112/0x360 [ 80.690402][ T4667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.690452][ T4667] RIP: 0033:0x7f00b36ae159 [ 80.690469][ T4667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.690519][ T4667] RSP: 002b:00007f00b2107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.690540][ T4667] RAX: ffffffffffffffda RBX: 00007f00b3935fa0 RCX: 00007f00b36ae159 [ 80.690556][ T4667] RDX: 0000200000000400 RSI: 00000000000089f1 RDI: 0000000000000006 [ 80.690570][ T4667] RBP: 00007f00b374506b R08: 0000000000000000 R09: 0000000000000000 [ 80.690652][ T4667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.690676][ T4667] R13: 00007f00b3936038 R14: 00007f00b3935fa0 R15: 00007ffee789d748 [ 80.690711][ T4667] [ 80.908458][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.132427][ T4680] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 81.174826][ T4680] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 81.177525][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.293038][ T29] audit: type=1400 audit(1790972148.639:341): avc: denied { listen } for pid=4687 comm="syz.0.383" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.293066][ T29] audit: type=1400 audit(1790972148.639:342): avc: denied { accept } for pid=4687 comm="syz.0.383" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.986127][ T4698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.386'. [ 82.261447][ T4712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 82.284895][ T4714] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 82.301319][ T4717] xt_hashlimit: size too large, truncated to 1048576 [ 83.084025][ T4724] loop4: detected capacity change from 0 to 512 [ 83.084434][ T4724] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.198414][ T4739] syz.3.402 uses obsolete (PF_INET,SOCK_PACKET) [ 83.645036][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 83.683075][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 83.683092][ T29] audit: type=1400 audit(1790972151.049:347): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 83.943759][ T4765] xt_hashlimit: size too large, truncated to 1048576 [ 84.930632][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 85.568995][ T4782] batadv_slave_0: entered promiscuous mode [ 85.569392][ T4780] batadv_slave_0: left promiscuous mode [ 85.579761][ T4786] netlink: 'syz.4.407': attribute type 1 has an invalid length. [ 85.902463][ T29] audit: type=1400 audit(1790972153.179:348): avc: denied { bind } for pid=4808 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.902496][ T29] audit: type=1400 audit(1790972153.179:349): avc: denied { setopt } for pid=4808 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.946508][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 85.969446][ T4817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.969518][ T4817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.263112][ T4821] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 87.470061][ T4836] xt_hashlimit: size too large, truncated to 1048576 [ 87.748903][ T29] audit: type=1400 audit(1790972155.109:350): avc: denied { read append } for pid=4849 comm="syz.3.444" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.748945][ T29] audit: type=1400 audit(1790972155.109:351): avc: denied { open } for pid=4849 comm="syz.3.444" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.749048][ T29] audit: type=1400 audit(1790972155.109:352): avc: denied { ioctl } for pid=4849 comm="syz.3.444" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.852123][ T4859] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 87.854629][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 87.913064][ T4859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.445'. [ 87.945590][ T4864] loop2: detected capacity change from 0 to 512 [ 87.968974][ T4864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.151728][ T4879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.454'. [ 88.168027][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.514329][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 88.566227][ T4902] netlink: 'syz.4.461': attribute type 1 has an invalid length. [ 88.625841][ T4902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.461'. [ 89.056750][ T4913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.466'. [ 89.194646][ T4921] xt_hashlimit: size too large, truncated to 1048576 [ 89.435884][ T4927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 89.474737][ T29] audit: type=1400 audit(1790972156.839:353): avc: denied { name_connect } for pid=4928 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 89.573456][ T4932] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 89.597332][ T4932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 89.982200][ T4940] FAULT_INJECTION: forcing a failure. [ 89.982200][ T4940] name failslab, interval 1, probability 0, space 0, times 0 [ 89.982232][ T4940] CPU: 0 UID: 0 PID: 4940 Comm: syz.2.475 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.982257][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.982344][ T4940] Call Trace: [ 89.982350][ T4940] [ 89.982356][ T4940] __dump_stack+0x1d/0x30 [ 89.982384][ T4940] dump_stack_lvl+0x95/0xd0 [ 89.982409][ T4940] dump_stack+0x15/0x1b [ 89.982432][ T4940] should_fail_ex+0x262/0x280 [ 89.982510][ T4940] should_failslab+0x8c/0xb0 [ 89.982584][ T4940] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 89.982619][ T4940] ? kstrdup_const+0x3e/0x50 [ 89.982645][ T4940] ? kstrdup_const+0x3e/0x50 [ 89.982719][ T4940] kstrdup+0x3e/0xd0 [ 89.982745][ T4940] kstrdup_const+0x3e/0x50 [ 89.982771][ T4940] kvasprintf_const+0x98/0x130 [ 89.982802][ T4940] kobject_set_name_vargs+0x44/0xe0 [ 89.982835][ T4940] dev_set_name+0x83/0xb0 [ 89.982888][ T4940] ? hrtimer_setup+0x33/0xe0 [ 89.982933][ T4940] ? netdev_register_kobject+0x62/0x240 [ 89.982956][ T4940] ? device_initialize+0x20e/0x220 [ 89.983028][ T4940] netdev_register_kobject+0x7f/0x240 [ 89.983055][ T4940] register_netdevice+0xaf7/0x11a0 [ 89.983076][ T4940] ip6_tnl_create2+0x8a/0x290 [ 89.983158][ T4940] ip6_tnl_locate+0x3c6/0x490 [ 89.983187][ T4940] ip6_tnl_siocdevprivate+0x717/0xb40 [ 89.983291][ T4940] dev_ifsioc+0x8f5/0xfc0 [ 89.983316][ T4940] dev_ioctl+0x78c/0x960 [ 89.983346][ T4940] sock_ioctl+0x58f/0x610 [ 89.983378][ T4940] ? __pfx_sock_ioctl+0x10/0x10 [ 89.983421][ T4940] __se_sys_ioctl+0xce/0x140 [ 89.983450][ T4940] __x64_sys_ioctl+0x43/0x50 [ 89.983480][ T4940] x64_sys_call+0x239d/0x2550 [ 89.983546][ T4940] do_syscall_64+0x112/0x360 [ 89.983567][ T4940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.983588][ T4940] RIP: 0033:0x7fe27463e159 [ 89.983606][ T4940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.983670][ T4940] RSP: 002b:00007fe273097028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.983688][ T4940] RAX: ffffffffffffffda RBX: 00007fe2748c5fa0 RCX: 00007fe27463e159 [ 89.983701][ T4940] RDX: 0000200000000400 RSI: 00000000000089f1 RDI: 0000000000000004 [ 89.983766][ T4940] RBP: 00007fe2746d506b R08: 0000000000000000 R09: 0000000000000000 [ 89.983781][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.983793][ T4940] R13: 00007fe2748c6038 R14: 00007fe2748c5fa0 R15: 00007ffc9ad523f8 [ 89.983810][ T4940] [ 90.259351][ T4945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.478'. [ 90.379387][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 90.538842][ T4959] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 90.565624][ T4959] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 90.631910][ T4962] xt_hashlimit: size too large, truncated to 1048576 [ 91.359330][ T4988] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 92.108766][ T29] audit: type=1400 audit(1790972159.479:354): avc: denied { create } for pid=5011 comm="syz.1.504" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.108960][ T29] audit: type=1400 audit(1790972159.479:355): avc: denied { map } for pid=5011 comm="syz.1.504" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.109055][ T29] audit: type=1400 audit(1790972159.479:356): avc: denied { read write } for pid=5011 comm="syz.1.504" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.458981][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.459084][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.560455][ T5017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.563972][ T5017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.657533][ T42] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.657573][ T42] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.657613][ T42] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.657643][ T42] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.764218][ T5027] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 94.524481][ T4993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.573390][ T5048] loop2: detected capacity change from 0 to 512 [ 94.593233][ T5048] vfat: Unknown parameter 'ÿòÖ›”6GJRšòþ餂 „Õ.¦zQ\wFMx»7D7U çd~õôÿzGcxàEóÓb4ð'ûˆòIGà(äæ;Õeî7+Êž:‰!Y/Qš‘žÅ:|Ö¿Œ'ÊW—øMfº·_³€Zݤ8{•­Vƒ@ Ay©”v7®Û¾ý†Ñ?3±/Rëç 5?þ: !lÀõ\zú{0»oóéÙ-ôþ†a18446744073709551615' [ 94.647911][ T5054] xt_hashlimit: size too large, truncated to 1048576 [ 94.764788][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.764893][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.764941][ T5059] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 94.811188][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.811325][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.821195][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.821380][ T5066] FAULT_INJECTION: forcing a failure. [ 94.821380][ T5066] name failslab, interval 1, probability 0, space 0, times 0 [ 94.821455][ T5066] CPU: 1 UID: 0 PID: 5066 Comm: syz.2.520 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.821481][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.821495][ T5066] Call Trace: [ 94.821504][ T5066] [ 94.821512][ T5066] __dump_stack+0x1d/0x30 [ 94.821577][ T5066] dump_stack_lvl+0x95/0xd0 [ 94.821601][ T5066] dump_stack+0x15/0x1b [ 94.821720][ T5066] should_fail_ex+0x262/0x280 [ 94.821747][ T5066] ? kobject_uevent_env+0x1a8/0x560 [ 94.821783][ T5066] should_failslab+0x8c/0xb0 [ 94.821840][ T5066] __kmalloc_cache_noprof+0x7a/0x400 [ 94.821951][ T5066] ? rcu_segcblist_enqueue+0x9b/0xb0 [ 94.822046][ T5066] ? kobject_uevent_env+0x1a8/0x560 [ 94.822082][ T5066] kobject_uevent_env+0x1a8/0x560 [ 94.822117][ T5066] kobject_uevent+0x1d/0x30 [ 94.822174][ T5066] __kobject_del+0x88/0x190 [ 94.822283][ T5066] kobject_put+0x124/0x180 [ 94.822312][ T5066] bus_remove_driver+0x1b3/0x1d0 [ 94.822333][ T5066] driver_unregister+0x4e/0x80 [ 94.822367][ T5066] usb_gadget_register_driver_owner+0x192/0x1a0 [ 94.822474][ T5066] raw_ioctl+0xc5b/0x1df0 [ 94.822510][ T5066] ? ioctl_has_perm+0x273/0x2c0 [ 94.822581][ T5066] ? do_vfs_ioctl+0x848/0xe50 [ 94.822633][ T5066] ? selinux_file_ioctl+0x33c/0x3c0 [ 94.822657][ T5066] ? __fget_files+0x184/0x1c0 [ 94.822691][ T5066] ? __pfx_raw_ioctl+0x10/0x10 [ 94.822792][ T5066] __se_sys_ioctl+0xce/0x140 [ 94.822827][ T5066] __x64_sys_ioctl+0x43/0x50 [ 94.822860][ T5066] x64_sys_call+0x239d/0x2550 [ 94.822964][ T5066] do_syscall_64+0x112/0x360 [ 94.822990][ T5066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.823015][ T5066] RIP: 0033:0x7fe27463ddeb [ 94.823031][ T5066] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 94.823102][ T5066] RSP: 002b:00007fe273094f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.823123][ T5066] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe27463ddeb [ 94.823138][ T5066] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 94.823152][ T5066] RBP: 00007fe273095fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 94.823167][ T5066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.823180][ T5066] R13: 0000200000000140 R14: 0000000000000001 R15: 0000000000000868 [ 94.823200][ T5066] [ 94.840425][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.870498][ T5068] __nla_validate_parse: 6 callbacks suppressed [ 94.870517][ T5068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 95.071417][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.073392][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.157327][ T3686] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.157438][ T3686] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.157577][ T3686] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.268033][ T3686] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.418563][ T29] audit: type=1400 audit(1790972162.789:357): avc: denied { write } for pid=5074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.446841][ T29] audit: type=1400 audit(1790972162.819:358): avc: denied { write } for pid=5093 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.533654][ T5099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.526'. [ 96.121148][ T5115] loop3: detected capacity change from 0 to 256 [ 96.171189][ T5115] FAT-fs (loop3): IO charset cp950 not found [ 96.391928][ T5124] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 96.409851][ T29] audit: type=1400 audit(1790972163.779:359): avc: denied { write } for pid=5100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.417432][ T5124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 96.479268][ T29] audit: type=1400 audit(1790972163.849:360): avc: denied { write } for pid=5134 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.493744][ T5137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 96.550338][ T5144] xt_hashlimit: size too large, truncated to 1048576 [ 96.688078][ T29] audit: type=1400 audit(1790972164.059:361): avc: denied { write } for pid=5140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.732517][ T29] audit: type=1400 audit(1790972164.099:362): avc: denied { write } for pid=5159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.608674][ T29] audit: type=1400 audit(1790972164.979:363): avc: denied { block_suspend } for pid=5174 comm="syz.0.544" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.918008][ T5177] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 97.938351][ T5177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.545'. [ 98.016155][ T5184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.548'. [ 99.182640][ T5201] xt_hashlimit: size too large, truncated to 1048576 [ 100.004840][ T5211] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 100.029128][ T5211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 100.171061][ T5219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.560'. [ 100.363272][ T5226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.384397][ T5226] loop4: detected capacity change from 0 to 512 [ 100.469302][ T5226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.469451][ T5226] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.489095][ T29] audit: type=1400 audit(1790972167.839:364): avc: denied { write } for pid=5215 comm="syz.4.559" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.417592][ T5244] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 101.451185][ T5244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.568'. [ 101.813314][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.298958][ T29] audit: type=1400 audit(1790972169.669:365): avc: denied { mount } for pid=5267 comm="syz.2.578" name="/" dev="autofs" ino=9865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 102.471382][ T5277] mmap: syz.3.581 (5277) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.578123][ T29] audit: type=1400 audit(1790972169.929:366): avc: denied { name_bind } for pid=5265 comm="syz.4.577" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 103.435189][ T5301] loop4: detected capacity change from 0 to 512 [ 103.444218][ T5301] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 103.446922][ T5301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 103.447107][ T5301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.447196][ T5301] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.590: bad orphan inode 267 [ 103.447219][ T5301] loop4: lost filesystem error report for type 5 error -117 [ 103.447464][ T5301] EXT4-fs (loop4): Remounting filesystem read-only [ 103.447894][ T5301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 103.469701][ T5301] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.590: dx entry: limit 0 != root limit 125 [ 103.469732][ T5301] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.590: Corrupt directory, running e2fsck is recommended [ 103.534214][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 104.185170][ T5323] loop2: detected capacity change from 0 to 1024 [ 104.288403][ T5323] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 104.289430][ T5323] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 104.289792][ T5323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.297030][ T5321] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 105.191018][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.318451][ T5384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.319006][ T5384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.717458][ T5395] loop2: detected capacity change from 0 to 128 [ 108.644279][ T5447] loop4: detected capacity change from 0 to 256 [ 108.710109][ T5447] FAT-fs (loop4): IO charset cp950 not found [ 108.887655][ T5463] loop3: detected capacity change from 0 to 256 [ 108.904373][ T5463] FAT-fs (loop3): codepage cp850 not found [ 108.930258][ T5468] loop3: detected capacity change from 0 to 512 [ 108.930584][ T5468] EXT4-fs: Ignoring removed nobh option [ 108.944071][ T5468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.944157][ T5468] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.945715][ T29] audit: type=1400 audit(1790972176.309:367): avc: denied { setattr } for pid=5467 comm="syz.3.649" path="/124/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.948583][ T5468] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.649: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 108.972736][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.488498][ T5496] loop3: detected capacity change from 0 to 1024 [ 109.512078][ T5496] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 109.513607][ T5496] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 109.514760][ T5496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.527489][ T5496] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.070067][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.651691][ T5547] loop3: detected capacity change from 0 to 1024 [ 110.939529][ T5547] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 110.940198][ T5547] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 110.940548][ T5547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.997882][ T5540] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.215290][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.238140][ T29] audit: type=1400 audit(1790972178.609:368): avc: denied { ioctl } for pid=5552 comm="syz.4.683" path="socket:[11293]" dev="sockfs" ino=11293 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.288739][ T5559] loop2: detected capacity change from 0 to 512 [ 111.298060][ T5559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 111.298092][ T5559] System zones: 1-12 [ 111.299829][ T5559] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.685: missing EA_INODE flag [ 111.299854][ T5559] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 111.300851][ T5559] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.685: error while reading EA inode 12 err=-117 [ 111.300879][ T5559] loop2: lost filesystem error report for type 5 error -117 [ 111.300977][ T5559] EXT4-fs (loop2): 1 orphan inode deleted [ 111.301309][ T5559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.556704][ T29] audit: type=1400 audit(1790972178.909:369): avc: denied { write } for pid=5557 comm="syz.2.685" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.556818][ T29] audit: type=1400 audit(1790972178.909:370): avc: denied { add_name } for pid=5557 comm="syz.2.685" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.595488][ T5579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'. [ 112.311787][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.431672][ T29] audit: type=1400 audit(1790972179.799:371): avc: denied { setopt } for pid=5590 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.479663][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 112.482966][ T5591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.152331][ T5620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.706'. [ 113.950994][ T5644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.617438][ T5716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.625503][ T5716] loop2: detected capacity change from 0 to 512 [ 116.958228][ T5716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.958442][ T5716] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.961379][ T29] audit: type=1400 audit(1790972184.329:372): avc: denied { write } for pid=5702 comm="syz.2.739" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.961403][ T29] audit: type=1400 audit(1790972184.329:373): avc: denied { remove_name } for pid=5702 comm="syz.2.739" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.107723][ T29] audit: type=1400 audit(1790972184.479:374): avc: denied { mount } for pid=5718 comm="syz.1.744" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 118.346232][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.418520][ T5746] loop3: detected capacity change from 0 to 128 [ 118.469289][ T5746] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.469421][ T5746] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.619156][ T29] audit: type=1400 audit(1790972185.899:375): avc: denied { write } for pid=5745 comm="syz.3.755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.619268][ T29] audit: type=1400 audit(1790972185.899:376): avc: denied { create } for pid=5745 comm="syz.3.755" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.619445][ T29] audit: type=1400 audit(1790972185.899:377): avc: denied { write open } for pid=5745 comm="syz.3.755" path="/147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.619589][ T29] audit: type=1400 audit(1790972185.899:378): avc: denied { write } for pid=5745 comm="syz.3.755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.619615][ T29] audit: type=1400 audit(1790972185.899:379): avc: denied { create } for pid=5745 comm="syz.3.755" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 118.619783][ T29] audit: type=1400 audit(1790972185.899:380): avc: denied { write } for pid=5745 comm="syz.3.755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.619927][ T29] audit: type=1400 audit(1790972185.909:381): avc: denied { write } for pid=5745 comm="syz.3.755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.761194][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.484456][ T5783] Illegal XDP return value 4294967262 on prog (id 50) dev syz_tun, expect packet loss! [ 119.893612][ T5806] loop3: detected capacity change from 0 to 8192 [ 120.204852][ T5821] loop3: detected capacity change from 0 to 512 [ 120.215806][ T5821] EXT4-fs: Ignoring removed oldalloc option [ 120.225630][ T5821] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.782: Parent and EA inode have the same ino 15 [ 120.225737][ T5821] loop3: lost filesystem error report for type 5 error -117 [ 120.225865][ T5821] EXT4-fs (loop3): Remounting filesystem read-only [ 120.225891][ T5821] EXT4-fs (loop3): 1 orphan inode deleted [ 120.226890][ T5821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.320190][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.564113][ T5839] loop3: detected capacity change from 0 to 1024 [ 120.687679][ T5839] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 120.688439][ T5839] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 120.689209][ T5839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.924171][ T5839] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 121.250257][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.330838][ T5858] capability: warning: `syz.2.795' uses deprecated v2 capabilities in a way that may be insecure [ 121.412369][ T5864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.797'. [ 121.452919][ T5861] loop3: detected capacity change from 0 to 512 [ 121.512432][ T5861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.512576][ T5861] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.580566][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.420112][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 122.420170][ T29] audit: type=1400 audit(1790972189.419:465): avc: denied { shutdown } for pid=5888 comm="syz.1.805" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.030043][ T5924] loop2: detected capacity change from 0 to 128 [ 123.045642][ T5924] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.045774][ T5924] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.146641][ T29] audit: type=1400 audit(1790972190.469:466): avc: denied { write } for pid=5923 comm="syz.2.814" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.146761][ T29] audit: type=1400 audit(1790972190.479:467): avc: denied { write } for pid=5923 comm="syz.2.814" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.146811][ T29] audit: type=1400 audit(1790972190.479:468): avc: denied { write } for pid=5923 comm="syz.2.814" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.146837][ T29] audit: type=1400 audit(1790972190.479:469): avc: denied { write } for pid=5923 comm="syz.2.814" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.150308][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.013178][ T29] audit: type=1400 audit(1790972191.379:470): avc: denied { getopt } for pid=5960 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.610529][ T5975] loop3: detected capacity change from 0 to 256 [ 124.649773][ T5975] FAT-fs (loop3): IO charset cp950 not found [ 125.133388][ T3701] IPVS: starting estimator thread 0... [ 125.246993][ T6008] IPVS: using max 2400 ests per chain, 120000 per kthread [ 126.386840][ T6051] loop4: detected capacity change from 0 to 512 [ 126.605620][ T6051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.605758][ T6051] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.656601][ T29] audit: type=1400 audit(1790972193.979:471): avc: denied { write } for pid=6034 comm="syz.4.857" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.851951][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.262566][ T6085] loop3: detected capacity change from 0 to 1024 [ 128.399551][ T6085] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 128.402728][ T6085] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 128.403376][ T6085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.437141][ T6085] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.509812][ T6094] ip6gretap0: entered promiscuous mode [ 128.771767][ T29] audit: type=1400 audit(1790972196.139:472): avc: denied { read write } for pid=6091 comm="syz.4.880" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 128.771835][ T29] audit: type=1400 audit(1790972196.139:473): avc: denied { open } for pid=6091 comm="syz.4.880" path="/167/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 128.771894][ T29] audit: type=1400 audit(1790972196.139:474): avc: denied { ioctl } for pid=6091 comm="syz.4.880" path="/167/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 129.202029][ T29] audit: type=1400 audit(1790972196.439:475): avc: denied { allowed } for pid=6091 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.253026][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.288133][ T6105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.296130][ T6105] loop2: detected capacity change from 0 to 512 [ 129.379245][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.379502][ T6105] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.383283][ T29] audit: type=1400 audit(1790972196.749:476): avc: denied { write } for pid=6092 comm="syz.2.879" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.102303][ T6126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.265270][ T6126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.228355][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.250220][ T6137] loop2: detected capacity change from 0 to 512 [ 131.259537][ T6137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.259674][ T6137] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.262064][ T29] audit: type=1400 audit(1790972198.629:477): avc: denied { write } for pid=6136 comm="syz.2.894" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.698793][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.708521][ T6126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.791820][ T6150] netlink: 48 bytes leftover after parsing attributes in process `syz.2.895'. [ 131.815804][ T6126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.858133][ T313] IPVS: starting estimator thread 0... [ 132.080095][ T6157] IPVS: using max 2592 ests per chain, 129600 per kthread [ 132.259582][ T3699] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.260585][ T3699] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.260617][ T3699] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.260677][ T3699] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.488582][ T29] audit: type=1400 audit(1790972200.859:478): avc: denied { setopt } for pid=6216 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.203433][ T29] audit: type=1400 audit(1790972201.569:479): avc: denied { search } for pid=6237 comm="syz.2.932" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.203461][ T29] audit: type=1400 audit(1790972201.569:480): avc: denied { search } for pid=6237 comm="syz.2.932" name="usb_gadget" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.203515][ T29] audit: type=1400 audit(1790972201.569:481): avc: denied { write search } for pid=6237 comm="syz.2.932" name="usb_gadget" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.203544][ T29] audit: type=1400 audit(1790972201.569:482): avc: denied { add_name } for pid=6237 comm="syz.2.932" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.203566][ T29] audit: type=1400 audit(1790972201.569:483): avc: denied { create } for pid=6237 comm="syz.2.932" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 134.203586][ T29] audit: type=1400 audit(1790972201.569:484): avc: denied { search } for pid=6237 comm="syz.2.932" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.203645][ T29] audit: type=1400 audit(1790972201.569:485): avc: denied { search } for pid=6237 comm="syz.2.932" name="usb_gadget" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.203699][ T29] audit: type=1400 audit(1790972201.569:486): avc: denied { search } for pid=6237 comm="syz.2.932" name="g1" dev="configfs" ino=12438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.203722][ T29] audit: type=1400 audit(1790972201.569:487): avc: denied { search } for pid=6237 comm="syz.2.932" name="functions" dev="configfs" ino=12439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.203744][ T29] audit: type=1400 audit(1790972201.569:488): avc: denied { write search } for pid=6237 comm="syz.2.932" name="functions" dev="configfs" ino=12439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.347910][ T6253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.370910][ T6253] loop3: detected capacity change from 0 to 512 [ 134.521023][ T6253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.521213][ T6253] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.768900][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.037923][ T6327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.045883][ T6327] loop3: detected capacity change from 0 to 512 [ 137.109077][ T6327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.109210][ T6327] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.454218][ T6339] loop2: detected capacity change from 0 to 256 [ 137.485455][ T6339] FAT-fs (loop2): IO charset cp950 not found [ 138.817629][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.057544][ T6370] FAULT_INJECTION: forcing a failure. [ 139.057544][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 139.057588][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.2.981 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.057685][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.057700][ T6370] Call Trace: [ 139.057707][ T6370] [ 139.057716][ T6370] __dump_stack+0x1d/0x30 [ 139.057745][ T6370] dump_stack_lvl+0x95/0xd0 [ 139.057771][ T6370] dump_stack+0x15/0x1b [ 139.057832][ T6370] should_fail_ex+0x262/0x280 [ 139.057860][ T6370] ? alloc_empty_file+0x70/0x1e0 [ 139.057883][ T6370] should_failslab+0x8c/0xb0 [ 139.057913][ T6370] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 139.057984][ T6370] ? alloc_empty_file+0x70/0x1e0 [ 139.058007][ T6370] alloc_empty_file+0x70/0x1e0 [ 139.058079][ T6370] alloc_file_pseudo+0x92/0x120 [ 139.058105][ T6370] anon_inode_getfile_fmode+0xa5/0x140 [ 139.058133][ T6370] do_eventfd+0xf1/0x1b0 [ 139.058228][ T6370] __x64_sys_eventfd2+0x2d/0x40 [ 139.058259][ T6370] x64_sys_call+0x17ed/0x2550 [ 139.058332][ T6370] do_syscall_64+0x112/0x360 [ 139.058358][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.058384][ T6370] RIP: 0033:0x7fe27463e159 [ 139.058398][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.058445][ T6370] RSP: 002b:00007fe273097028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 139.058467][ T6370] RAX: ffffffffffffffda RBX: 00007fe2748c5fa0 RCX: 00007fe27463e159 [ 139.058480][ T6370] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 00000000fffffffe [ 139.058492][ T6370] RBP: 00007fe2746d506b R08: 0000000000000000 R09: 0000000000000000 [ 139.058504][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.058529][ T6370] R13: 00007fe2748c6038 R14: 00007fe2748c5fa0 R15: 00007ffc9ad523f8 [ 139.058550][ T6370] [ 139.867822][ T6381] loop2: detected capacity change from 0 to 256 [ 139.891318][ T6381] FAT-fs (loop2): IO charset cp950 not found [ 139.932321][ T6389] FAULT_INJECTION: forcing a failure. [ 139.932321][ T6389] name fail_futex, interval 1, probability 0, space 0, times 0 [ 139.932365][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.2.987 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.932438][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.932452][ T6389] Call Trace: [ 139.932461][ T6389] [ 139.932469][ T6389] __dump_stack+0x1d/0x30 [ 139.932570][ T6389] dump_stack_lvl+0x95/0xd0 [ 139.932596][ T6389] dump_stack+0x15/0x1b [ 139.932645][ T6389] should_fail_ex+0x262/0x280 [ 139.932672][ T6389] should_fail+0xb/0x20 [ 139.932777][ T6389] get_futex_key+0x12d/0xb10 [ 139.932807][ T6389] ? btf_new_fd+0x3a6/0x6a0 [ 139.932828][ T6389] futex_wake+0x89/0x400 [ 139.932846][ T6389] ? __sys_bpf+0xbce/0xc30 [ 139.932975][ T6389] do_futex+0x3f8/0x460 [ 139.933006][ T6389] __se_sys_futex+0x2f6/0x370 [ 139.933036][ T6389] __x64_sys_futex+0x78/0x90 [ 139.933159][ T6389] x64_sys_call+0x22e2/0x2550 [ 139.933227][ T6389] do_syscall_64+0x112/0x360 [ 139.933312][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.933338][ T6389] RIP: 0033:0x7fe27463e159 [ 139.933356][ T6389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.933376][ T6389] RSP: 002b:00007fe2730970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.933520][ T6389] RAX: ffffffffffffffda RBX: 00007fe2748c5fa8 RCX: 00007fe27463e159 [ 139.933534][ T6389] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe2748c5fac [ 139.933547][ T6389] RBP: 00007fe2748c5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 139.933562][ T6389] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 139.933610][ T6389] R13: 00007fe2748c6038 R14: 00007ffc9ad52310 R15: 00007ffc9ad523f8 [ 139.933627][ T6389] [ 140.140026][ T6402] loop4: detected capacity change from 0 to 128 [ 140.169246][ T6402] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.203571][ T6407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.232352][ T6402] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.243249][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 140.244837][ T29] audit: type=1400 audit(1790972207.599:510): avc: denied { write } for pid=6401 comm="syz.4.993" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.244911][ T29] audit: type=1400 audit(1790972207.599:511): avc: denied { write } for pid=6401 comm="syz.4.993" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.249538][ T29] audit: type=1400 audit(1790972207.619:512): avc: denied { write } for pid=6401 comm="syz.4.993" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.253188][ T29] audit: type=1400 audit(1790972207.619:513): avc: denied { write } for pid=6401 comm="syz.4.993" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.361402][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.424682][ T6415] FAULT_INJECTION: forcing a failure. [ 140.424682][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 140.425099][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: syz.2.999 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.425200][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.425217][ T6415] Call Trace: [ 140.425225][ T6415] [ 140.425234][ T6415] __dump_stack+0x1d/0x30 [ 140.425296][ T6415] dump_stack_lvl+0x95/0xd0 [ 140.425317][ T6415] dump_stack+0x15/0x1b [ 140.425392][ T6415] should_fail_ex+0x262/0x280 [ 140.425422][ T6415] ? rand_initialize_disk+0x31/0x80 [ 140.425448][ T6415] should_failslab+0x8c/0xb0 [ 140.425550][ T6415] __kmalloc_cache_noprof+0x7a/0x400 [ 140.425614][ T6415] ? blkcg_init_disk+0x21d/0x230 [ 140.425637][ T6415] ? rand_initialize_disk+0x31/0x80 [ 140.425666][ T6415] rand_initialize_disk+0x31/0x80 [ 140.425784][ T6415] __alloc_disk_node+0x257/0x340 [ 140.425806][ T6415] __blk_alloc_disk+0x68/0xd0 [ 140.425858][ T6415] dm_create+0x36d/0x850 [ 140.425890][ T6415] dev_create+0x141/0x290 [ 140.425918][ T6415] dm_ctl_ioctl+0x80b/0xad0 [ 140.426015][ T6415] ? __pfx_dev_create+0x10/0x10 [ 140.426044][ T6415] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 140.426107][ T6415] __se_sys_ioctl+0xce/0x140 [ 140.426184][ T6415] __x64_sys_ioctl+0x43/0x50 [ 140.426212][ T6415] x64_sys_call+0x239d/0x2550 [ 140.426257][ T6415] do_syscall_64+0x112/0x360 [ 140.426285][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.426360][ T6415] RIP: 0033:0x7fe27463e159 [ 140.426408][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.426429][ T6415] RSP: 002b:00007fe273097028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.426463][ T6415] RAX: ffffffffffffffda RBX: 00007fe2748c5fa0 RCX: 00007fe27463e159 [ 140.426480][ T6415] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 140.426496][ T6415] RBP: 00007fe2746d506b R08: 0000000000000000 R09: 0000000000000000 [ 140.426509][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.426521][ T6415] R13: 00007fe2748c6038 R14: 00007fe2748c5fa0 R15: 00007ffc9ad523f8 [ 140.426539][ T6415] [ 141.903129][ T6443] loop4: detected capacity change from 0 to 128 [ 141.925283][ T6443] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.939851][ T6443] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.981280][ T29] audit: type=1400 audit(1790972209.349:514): avc: denied { write } for pid=6441 comm="syz.4.1008" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.984846][ T29] audit: type=1400 audit(1790972209.349:515): avc: denied { write } for pid=6441 comm="syz.4.1008" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.033726][ T29] audit: type=1400 audit(1790972209.399:516): avc: denied { write } for pid=6441 comm="syz.4.1008" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.034332][ T29] audit: type=1400 audit(1790972209.399:517): avc: denied { write } for pid=6441 comm="syz.4.1008" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.095830][ T29] audit: type=1400 audit(1790972209.459:518): avc: denied { mount } for pid=6447 comm="syz.2.1009" name="/" dev="rpc_pipefs" ino=13512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 142.130217][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.175208][ T6456] loop4: detected capacity change from 0 to 128 [ 142.262323][ T6466] bridge0: port 3(syz_tun) entered blocking state [ 142.262361][ T6466] bridge0: port 3(syz_tun) entered disabled state [ 142.262454][ T6466] syz_tun: entered allmulticast mode [ 142.262919][ T6466] syz_tun: entered promiscuous mode [ 142.263125][ T6466] bridge0: port 3(syz_tun) entered blocking state [ 142.263156][ T6466] bridge0: port 3(syz_tun) entered forwarding state [ 142.269662][ T6466] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 142.322955][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'. [ 142.558934][ T6488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.565986][ T6488] loop4: detected capacity change from 0 to 512 [ 142.649826][ T6488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.650095][ T6488] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.653136][ T29] audit: type=1400 audit(1790972210.019:519): avc: denied { write } for pid=6469 comm="syz.4.1020" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.129251][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1033'. [ 143.507220][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1045'. [ 144.426336][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.450006][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.450186][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.522487][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.524429][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.573264][ T3686] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.573357][ T3686] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.573386][ T3686] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.573540][ T3686] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.429113][ T6581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.436552][ T6581] loop2: detected capacity change from 0 to 512 [ 145.560335][ T6581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.560466][ T6581] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.591221][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 145.591240][ T29] audit: type=1400 audit(1790972212.959:523): avc: denied { write } for pid=6574 comm="syz.2.1064" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.284842][ T29] audit: type=1400 audit(1790972213.259:524): avc: denied { create } for pid=6583 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.284890][ T29] audit: type=1400 audit(1790972213.259:525): avc: denied { write } for pid=6583 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.842796][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1082'. [ 147.340987][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.368865][ T6644] loop2: detected capacity change from 0 to 128 [ 147.451040][ T6650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'. [ 147.493692][ T29] audit: type=1400 audit(1790972214.859:526): avc: denied { create } for pid=6654 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.530948][ T29] audit: type=1400 audit(1790972214.899:527): avc: denied { name_bind } for pid=6659 comm="syz.3.1099" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 147.580214][ T29] audit: type=1400 audit(1790972214.949:528): avc: denied { execute } for pid=6649 comm="syz.2.1094" path="/175/file1" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.968966][ T29] audit: type=1400 audit(1790972215.339:529): avc: denied { create } for pid=6679 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.306736][ T29] audit: type=1400 audit(1790972215.669:530): avc: denied { create } for pid=6704 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 148.308256][ T29] audit: type=1400 audit(1790972215.679:531): avc: denied { ioctl } for pid=6704 comm="syz.2.1117" path="socket:[13842]" dev="sockfs" ino=13842 ioctlcmd=0x6150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 148.997226][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1128'. [ 149.615631][ T29] audit: type=1400 audit(1790972216.929:532): avc: denied { bind } for pid=6746 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.819757][ T6753] loop3: detected capacity change from 0 to 128 [ 149.860073][ T6753] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.860230][ T6753] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.922483][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.248440][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 150.370718][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.370831][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.494109][ T6789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1150'. [ 150.518279][ T6791] loop3: detected capacity change from 0 to 128 [ 150.573358][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.573431][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.633007][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 150.633023][ T29] audit: type=1326 audit(1790972217.999:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.633116][ T29] audit: type=1326 audit(1790972217.999:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.633145][ T29] audit: type=1326 audit(1790972217.999:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.633233][ T29] audit: type=1326 audit(1790972217.999:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.633339][ T29] audit: type=1326 audit(1790972217.999:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.687595][ T29] audit: type=1326 audit(1790972218.039:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.687752][ T29] audit: type=1326 audit(1790972218.039:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.687807][ T29] audit: type=1326 audit(1790972218.049:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.687834][ T29] audit: type=1326 audit(1790972218.049:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 150.906999][ T6804] FAULT_INJECTION: forcing a failure. [ 150.906999][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 150.907054][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.3.1156 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.907082][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.907097][ T6804] Call Trace: [ 150.907104][ T6804] [ 150.907113][ T6804] __dump_stack+0x1d/0x30 [ 150.907141][ T6804] dump_stack_lvl+0x95/0xd0 [ 150.907231][ T6804] dump_stack+0x15/0x1b [ 150.907291][ T6804] should_fail_ex+0x262/0x280 [ 150.907315][ T6804] ? alloc_workqueue_va+0x133/0x1630 [ 150.907343][ T6804] should_failslab+0x8c/0xb0 [ 150.907406][ T6804] __kmalloc_cache_noprof+0x7a/0x400 [ 150.907443][ T6804] ? alloc_workqueue_va+0x133/0x1630 [ 150.907523][ T6804] alloc_workqueue_va+0x133/0x1630 [ 150.907553][ T6804] alloc_workqueue_noprof+0x84/0xb0 [ 150.907710][ T6804] dm_create+0x6d3/0x850 [ 150.907728][ T6804] dev_create+0x141/0x290 [ 150.907759][ T6804] dm_ctl_ioctl+0x80b/0xad0 [ 150.907843][ T6804] ? __pfx_dev_create+0x10/0x10 [ 150.907875][ T6804] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 150.907973][ T6804] __se_sys_ioctl+0xce/0x140 [ 150.908009][ T6804] __x64_sys_ioctl+0x43/0x50 [ 150.908070][ T6804] x64_sys_call+0x239d/0x2550 [ 150.908095][ T6804] do_syscall_64+0x112/0x360 [ 150.908122][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.908199][ T6804] RIP: 0033:0x7f00b36ae159 [ 150.908242][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.908260][ T6804] RSP: 002b:00007f00b2107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.908279][ T6804] RAX: ffffffffffffffda RBX: 00007f00b3935fa0 RCX: 00007f00b36ae159 [ 150.908342][ T6804] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 150.908358][ T6804] RBP: 00007f00b374506b R08: 0000000000000000 R09: 0000000000000000 [ 150.908372][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.908386][ T6804] R13: 00007f00b3936038 R14: 00007f00b3935fa0 R15: 00007ffee789d748 [ 150.908412][ T6804] [ 150.992358][ T6812] loop3: detected capacity change from 0 to 128 [ 150.995971][ T6812] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.996101][ T6812] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.005388][ T29] audit: type=1400 audit(1790972218.369:550): avc: denied { write } for pid=6811 comm="syz.3.1160" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.049427][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.239438][ T6830] loop2: detected capacity change from 0 to 256 [ 151.275773][ T6830] FAT-fs (loop2): IO charset cp950 not found [ 151.616240][ T6877] ip6gretap0: entered promiscuous mode [ 151.778524][ T6881] FAULT_INJECTION: forcing a failure. [ 151.778524][ T6881] name failslab, interval 1, probability 0, space 0, times 0 [ 151.778584][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: syz.4.1170 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.778622][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.778635][ T6881] Call Trace: [ 151.778643][ T6881] [ 151.778653][ T6881] __dump_stack+0x1d/0x30 [ 151.778680][ T6881] dump_stack_lvl+0x95/0xd0 [ 151.778764][ T6881] dump_stack+0x15/0x1b [ 151.778795][ T6881] should_fail_ex+0x262/0x280 [ 151.778825][ T6881] ? alloc_workqueue_va+0x804/0x1630 [ 151.778853][ T6881] should_failslab+0x8c/0xb0 [ 151.778923][ T6881] kmem_cache_alloc_node_noprof+0x82/0x400 [ 151.778958][ T6881] ? alloc_workqueue_va+0x804/0x1630 [ 151.778987][ T6881] alloc_workqueue_va+0x804/0x1630 [ 151.779055][ T6881] alloc_workqueue_noprof+0x84/0xb0 [ 151.779101][ T6881] dm_create+0x6d3/0x850 [ 151.779156][ T6881] dev_create+0x141/0x290 [ 151.779183][ T6881] dm_ctl_ioctl+0x80b/0xad0 [ 151.779206][ T6881] ? __pfx_dev_create+0x10/0x10 [ 151.779272][ T6881] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 151.779298][ T6881] __se_sys_ioctl+0xce/0x140 [ 151.779360][ T6881] __x64_sys_ioctl+0x43/0x50 [ 151.779393][ T6881] x64_sys_call+0x239d/0x2550 [ 151.779422][ T6881] do_syscall_64+0x112/0x360 [ 151.779449][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.779520][ T6881] RIP: 0033:0x7f523682e159 [ 151.779564][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.779582][ T6881] RSP: 002b:00007f5235287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.779601][ T6881] RAX: ffffffffffffffda RBX: 00007f5236ab5fa0 RCX: 00007f523682e159 [ 151.779615][ T6881] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 151.779631][ T6881] RBP: 00007f52368c506b R08: 0000000000000000 R09: 0000000000000000 [ 151.779646][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.779685][ T6881] R13: 00007f5236ab6038 R14: 00007f5236ab5fa0 R15: 00007ffdc387cd48 [ 151.779706][ T6881] [ 152.052141][ T6886] FAULT_INJECTION: forcing a failure. [ 152.052141][ T6886] name fail_futex, interval 1, probability 0, space 0, times 0 [ 152.052172][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.4.1171 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.052236][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.052251][ T6886] Call Trace: [ 152.052258][ T6886] [ 152.052267][ T6886] __dump_stack+0x1d/0x30 [ 152.052328][ T6886] dump_stack_lvl+0x95/0xd0 [ 152.052350][ T6886] dump_stack+0x15/0x1b [ 152.052375][ T6886] should_fail_ex+0x262/0x280 [ 152.052403][ T6886] should_fail+0xb/0x20 [ 152.052425][ T6886] get_futex_key+0x12d/0xb10 [ 152.052451][ T6886] ? tick_program_event+0x79/0xc0 [ 152.052556][ T6886] ? _raw_spin_unlock+0x9/0x30 [ 152.052582][ T6886] futex_wake+0x89/0x400 [ 152.052604][ T6886] do_futex+0x3f8/0x460 [ 152.052666][ T6886] __se_sys_futex+0x2f6/0x370 [ 152.052724][ T6886] __x64_sys_futex+0x78/0x90 [ 152.052758][ T6886] x64_sys_call+0x22e2/0x2550 [ 152.052813][ T6886] do_syscall_64+0x112/0x360 [ 152.052845][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.052878][ T6886] RIP: 0033:0x7f523682e159 [ 152.052896][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.052913][ T6886] RSP: 002b:00007f52352870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.052932][ T6886] RAX: ffffffffffffffda RBX: 00007f5236ab5fa8 RCX: 00007f523682e159 [ 152.053019][ T6886] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5236ab5fac [ 152.053034][ T6886] RBP: 00007f5236ab5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 152.053049][ T6886] R10: 0000000000000066 R11: 0000000000000246 R12: 0000000000000000 [ 152.053061][ T6886] R13: 00007f5236ab6038 R14: 00007ffdc387cc60 R15: 00007ffdc387cd48 [ 152.053078][ T6886] [ 152.213913][ T6890] loop4: detected capacity change from 0 to 128 [ 152.234212][ T6890] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.241717][ T6890] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.309899][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.474815][ T6919] loop4: detected capacity change from 0 to 1764 [ 152.490973][ T6919] isofs_fill_super: get root inode failed [ 153.476564][ T6982] loop4: detected capacity change from 0 to 128 [ 153.485988][ T6982] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.486219][ T6982] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.558445][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.591652][ T6990] loop4: detected capacity change from 0 to 256 [ 153.619001][ T6990] FAT-fs (loop4): IO charset cp950 not found [ 154.272930][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1210'. [ 156.573872][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1223'. [ 157.693803][ T7137] loop2: detected capacity change from 0 to 512 [ 157.710227][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.710429][ T7137] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.713413][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 157.713425][ T29] audit: type=1400 audit(1790972225.079:679): avc: denied { write } for pid=7130 comm="syz.2.1234" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.147779][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1247'. [ 159.020919][ T7173] xt_hashlimit: size too large, truncated to 1048576 [ 159.259263][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.320013][ T29] audit: type=1400 audit(1790972226.689:680): avc: denied { write } for pid=7185 comm="syz.3.1255" name="p_chmask" dev="configfs" ino=14816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 159.320552][ T29] audit: type=1400 audit(1790972226.689:681): avc: denied { open } for pid=7185 comm="syz.3.1255" path="/232/config/usb_gadget/g1/functions/uac1.usb0/p_chmask" dev="configfs" ino=14816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 159.828503][ T29] audit: type=1400 audit(1790972227.189:682): avc: denied { write } for pid=7190 comm="syz.3.1256" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.284105][ T7208] syz.4.1253 (7208) used greatest stack depth: 9560 bytes left [ 160.893748][ T7226] loop2: detected capacity change from 0 to 512 [ 160.950303][ T7226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.950544][ T7226] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.955097][ T29] audit: type=1400 audit(1790972228.319:683): avc: denied { write } for pid=7215 comm="syz.2.1264" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.351544][ T29] audit: type=1326 audit(1790972228.719:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7239 comm="syz.4.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523682e159 code=0x7ffc0000 [ 161.351831][ T29] audit: type=1326 audit(1790972228.719:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7239 comm="syz.4.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523682e159 code=0x7ffc0000 [ 161.351860][ T29] audit: type=1326 audit(1790972228.719:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7239 comm="syz.4.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523682e159 code=0x7ffc0000 [ 161.352953][ T29] audit: type=1326 audit(1790972228.719:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7239 comm="syz.4.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f523682e159 code=0x7ffc0000 [ 161.468394][ T29] audit: type=1326 audit(1790972228.839:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7239 comm="syz.4.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52367ee98e code=0x7ffc0000 [ 161.560902][ T7249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.549266][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.653721][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.653805][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.839172][ T7294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.847012][ T7294] loop2: detected capacity change from 0 to 512 [ 162.885696][ T7294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.885773][ T7294] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.003590][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 163.005666][ T29] audit: type=1400 audit(1790972230.369:714): avc: denied { write } for pid=7279 comm="syz.2.1286" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.266718][ T29] audit: type=1326 audit(1790972231.639:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.1.1306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f580d06e159 code=0x0 [ 164.498920][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.511251][ T29] audit: type=1326 audit(1790972231.879:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.3.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 164.512847][ T29] audit: type=1326 audit(1790972231.879:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.3.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 164.513024][ T29] audit: type=1326 audit(1790972231.879:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.3.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 164.514481][ T29] audit: type=1326 audit(1790972231.879:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.3.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 164.514513][ T29] audit: type=1326 audit(1790972231.879:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.3.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 164.656476][ T29] audit: type=1326 audit(1790972232.019:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.3.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 164.656589][ T29] audit: type=1326 audit(1790972232.019:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.3.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 164.671092][ T29] audit: type=1326 audit(1790972232.039:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.3.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f00b36ae159 code=0x7ffc0000 [ 165.908040][ T7420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1336'. [ 166.769964][ T3686] IPVS: starting estimator thread 0... [ 166.876555][ T7473] IPVS: using max 2400 ests per chain, 120000 per kthread [ 166.932598][ T7494] netlink: 476 bytes leftover after parsing attributes in process `syz.0.1365'. [ 167.412854][ T7542] ip6gretap0: entered promiscuous mode [ 167.484424][ T7544] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.0.0), cmd(10) [ 167.847307][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 167.847336][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 167.850997][ T7549] gretap1: entered allmulticast mode [ 168.810349][ T7596] loop3: detected capacity change from 0 to 512 [ 168.822887][ T7596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.824408][ T7596] EXT4-fs (loop3): 1 truncate cleaned up [ 168.825803][ T7596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.856621][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 168.856639][ T29] audit: type=1400 audit(1790972236.159:739): avc: denied { setopt } for pid=7588 comm="syz.4.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.897800][ T7600] ip_tables: iptables: counters copy to user failed while replacing table [ 168.906176][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.075253][ T7610] ip6gretap0: entered promiscuous mode [ 169.299866][ T7613] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.0.0), cmd(10) [ 169.560310][ T7617] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 170.084413][ T29] audit: type=1400 audit(1790972237.449:740): avc: denied { read write } for pid=7632 comm="syz.2.1418" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 170.084611][ T29] audit: type=1400 audit(1790972237.449:741): avc: denied { open } for pid=7632 comm="syz.2.1418" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 170.291630][ T7643] ip6gretap0: entered promiscuous mode [ 170.835353][ T7655] loop3: detected capacity change from 0 to 256 [ 170.870217][ T7655] FAT-fs (loop3): IO charset cp950 not found [ 170.897108][ T7660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1430'. [ 170.999964][ T7672] loop3: detected capacity change from 0 to 512 [ 171.018152][ T7672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.018214][ T7672] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.060471][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.771426][ T7589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.793260][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.793419][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.799401][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1443'. [ 172.038516][ T7726] loop3: detected capacity change from 0 to 512 [ 172.039259][ T7726] EXT4-fs: Ignoring removed oldalloc option [ 172.040574][ T7726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.042349][ T7726] EXT4-fs (loop3): 1 orphan inode deleted [ 172.042436][ T7726] EXT4-fs (loop3): 1 truncate cleaned up [ 172.042834][ T7726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.435887][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1455'. [ 172.622052][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.714811][ T29] audit: type=1400 audit(1790972240.079:742): avc: denied { write } for pid=7739 comm="syz.3.1459" name="functions" dev="configfs" ino=12439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.840700][ T29] audit: type=1400 audit(1790972240.209:743): avc: denied { write } for pid=7739 comm="syz.3.1459" name="target" dev="configfs" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.842911][ T29] audit: type=1400 audit(1790972240.209:744): avc: denied { write } for pid=7739 comm="syz.3.1459" name="usb_gadget" dev="configfs" ino=16796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.845810][ T29] audit: type=1400 audit(1790972240.209:745): avc: denied { write } for pid=7739 comm="syz.3.1459" name="naa.6001405c935d7912" dev="configfs" ino=16798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.144734][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.145441][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.498658][ T29] audit: type=1400 audit(1790972240.869:746): avc: denied { mounton } for pid=7774 comm="syz.4.1472" path="/271/file0" dev="tmpfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.572076][ T7779] usb usb8: usbfs: process 7779 (syz.4.1474) did not claim interface 0 before use [ 173.572350][ T7779] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 174.003101][ T7802] netlink: 'syz.1.1483': attribute type 11 has an invalid length. [ 174.055456][ T29] audit: type=1400 audit(1790972241.419:747): avc: denied { create } for pid=7811 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 174.086873][ T7816] loop3: detected capacity change from 0 to 512 [ 174.201966][ T7814] netlink: 964 bytes leftover after parsing attributes in process `syz.1.1487'. [ 174.217270][ T7816] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1486: iget: bad i_size value: 38620345925642 [ 174.217364][ T7816] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.217661][ T7816] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1486: couldn't read orphan inode 15 (err -117) [ 174.217707][ T7816] loop3: lost filesystem error report for type 5 error -117 [ 174.218751][ T7816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.364321][ T29] audit: type=1400 audit(1790972241.589:748): avc: denied { write } for pid=7812 comm="syz.3.1486" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.387992][ T29] audit: type=1400 audit(1790972241.759:749): avc: denied { read } for pid=7812 comm="syz.3.1486" path="/283/file0/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.436291][ T29] audit: type=1400 audit(1790972241.799:750): avc: denied { ioctl } for pid=7812 comm="syz.3.1486" path="/283/file0/cpuset.effective_mems" dev="loop3" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.467603][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.882696][ T29] audit: type=1326 audit(1790972243.249:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.0.1521" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac004e159 code=0x7ffc0000 [ 175.882822][ T29] audit: type=1326 audit(1790972243.249:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.0.1521" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac004e159 code=0x7ffc0000 [ 175.882918][ T29] audit: type=1326 audit(1790972243.249:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.0.1521" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac004e159 code=0x7ffc0000 [ 175.883640][ T29] audit: type=1326 audit(1790972243.249:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.0.1521" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcac004e159 code=0x7ffc0000 [ 175.912869][ T29] audit: type=1326 audit(1790972243.279:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.0.1521" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac004e159 code=0x7ffc0000 [ 175.912904][ T29] audit: type=1326 audit(1790972243.279:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.0.1521" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac004e159 code=0x7ffc0000 [ 176.195568][ T7973] loop4: detected capacity change from 0 to 256 [ 176.228751][ T7973] FAT-fs (loop4): IO charset cp950 not found [ 176.333778][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.333881][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.947205][ T8005] loop3: detected capacity change from 0 to 256 [ 176.962929][ T8005] FAT-fs (loop3): IO charset cp950 not found [ 178.037659][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'. [ 178.493155][ T8071] loop4: detected capacity change from 0 to 256 [ 178.594107][ T8071] FAT-fs (loop4): IO charset cp950 not found [ 178.979371][ T8085] loop4: detected capacity change from 0 to 128 [ 179.005645][ T8085] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.030108][ T8085] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.076592][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 179.076609][ T29] audit: type=1400 audit(1790972246.439:767): avc: denied { write } for pid=8082 comm="syz.4.1589" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.083963][ T29] audit: type=1400 audit(1790972246.449:768): avc: denied { write } for pid=8082 comm="syz.4.1589" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 179.083994][ T29] audit: type=1400 audit(1790972246.449:769): avc: denied { add_name } for pid=8082 comm="syz.4.1589" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 179.181425][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.586638][ T29] audit: type=1326 audit(1790972246.929:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27463e159 code=0x7ffc0000 [ 179.586680][ T29] audit: type=1326 audit(1790972246.929:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27463e159 code=0x7ffc0000 [ 179.586773][ T29] audit: type=1326 audit(1790972246.929:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27463e159 code=0x7ffc0000 [ 179.586806][ T29] audit: type=1326 audit(1790972246.929:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe27463e159 code=0x7ffc0000 [ 179.586838][ T29] audit: type=1326 audit(1790972246.929:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27463e159 code=0x7ffc0000 [ 179.721344][ T29] audit: type=1326 audit(1790972247.099:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2745fe98e code=0x7ffc0000 [ 179.746578][ T29] audit: type=1326 audit(1790972247.099:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27463e159 code=0x7ffc0000 [ 180.153280][ T8126] loop3: detected capacity change from 0 to 512 [ 180.313168][ T8138] loop4: detected capacity change from 0 to 256 [ 180.360482][ T8126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.360612][ T8126] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.401076][ T8138] FAT-fs (loop4): IO charset cp950 not found [ 180.430428][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.328999][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 181.875761][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1619'. [ 182.171074][ T8189] loop3: detected capacity change from 0 to 512 [ 182.223810][ T8189] EXT4-fs: dax option not supported [ 182.233633][ T8191] ./dev/sda1: Can't lookup blockdev [ 182.278163][ T8194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1624'. [ 182.463746][ T3385] ================================================================== [ 182.463775][ T3385] BUG: KCSAN: data-race in kick_pool_pick / wq_worker_running [ 182.463803][ T3385] [ 182.463808][ T3385] read-write to 0xffff888237d2b0a4 of 4 bytes by task 5061 on cpu 1: [ 182.463823][ T3385] wq_worker_running+0x9c/0x120 [ 182.463840][ T3385] synchronize_rcu_expedited+0x5f8/0x770 [ 182.463865][ T3385] try_check_zero+0x189/0x260 [ 182.463885][ T3385] process_srcu+0x1ea/0xd90 [ 182.463909][ T3385] process_scheduled_works+0x56a/0xa50 [ 182.463935][ T3385] worker_thread+0x569/0x750 [ 182.463961][ T3385] kthread+0x223/0x270 [ 182.463979][ T3385] ret_from_fork+0x146/0x330 [ 182.464005][ T3385] ret_from_fork_asm+0x1a/0x30 [ 182.464027][ T3385] [ 182.464032][ T3385] read to 0xffff888237d2b0a4 of 4 bytes by task 3385 on cpu 0: [ 182.464046][ T3385] kick_pool_pick+0x5f/0x310 [ 182.464069][ T3385] __queue_work+0x90a/0xbc0 [ 182.464084][ T3385] queue_work_on+0xa9/0x140 [ 182.464099][ T3385] wg_packet_encrypt_worker+0xcff/0xe90 [ 182.464118][ T3385] process_scheduled_works+0x56a/0xa50 [ 182.464144][ T3385] worker_thread+0x569/0x750 [ 182.464170][ T3385] kthread+0x223/0x270 [ 182.464187][ T3385] ret_from_fork+0x146/0x330 [ 182.464212][ T3385] ret_from_fork_asm+0x1a/0x30 [ 182.464234][ T3385] [ 182.464237][ T3385] value changed: 0x00000000 -> 0x00000001 [ 182.464247][ T3385] [ 182.464251][ T3385] Reported by Kernel Concurrency Sanitizer on: [ 182.464261][ T3385] CPU: 0 UID: 0 PID: 3385 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 182.464284][ T3385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.464297][ T3385] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 182.464317][ T3385] ================================================================== [ 182.569886][ T8206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.578231][ T8206] loop3: detected capacity change from 0 to 512 [ 182.608117][ T8206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.608255][ T8206] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.206550][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.