last executing test programs: 1m14.068182323s ago: executing program 3 (id=4): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 1m13.984765986s ago: executing program 3 (id=8): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pidfd_send_signal(r3, 0x4, &(0x7f0000000440)={0x4, 0x0, 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000002c0)}) 1m13.875353748s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x1a2) write(r0, &(0x7f0000000100)='270', 0x3) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) memfd_create(&(0x7f0000000540)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000580), 0x3, 0x80000) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$setregset(0x4205, r1, 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250100000008000800", @ANYRES32, @ANYBLOB], 0x1c}}, 0x4000) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000030701020000000000000000010000006373a94ce37bd99bcc2fb6ee209176514707b28f4612d7f4da563a899ffba8b2e6f206c458a0b245bb433ab6591ce7"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, &(0x7f0000000440)) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r5, 0x0, 0x0) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) syz_clone(0x1000, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2) 1m13.010913969s ago: executing program 3 (id=28): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./mnt\x00', 0x844, &(0x7f0000000280)={[{@auto_da_alloc}, {@init_itable}, {@resgid}, {@init_itable}]}, 0x1, 0x253, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000640)) mknod$loop(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) link(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m12.816587614s ago: executing program 3 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000b00)='./proc_mnt\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone3(&(0x7f0000000040)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pread64(r1, &(0x7f0000000bc0)=""/4128, 0x1020, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000bc0)=ANY=[], 0xfedd) 1m12.756390846s ago: executing program 3 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x932, &(0x7f0000000640)) 57.565440826s ago: executing program 32 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x932, &(0x7f0000000640)) 29.427511062s ago: executing program 2 (id=914): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x379}, {&(0x7f0000000a00)="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", 0x1d7}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9a4b11948f01d4dde93ee9621c7c65b44f633588a23033917b3d7b4c4128ee1cde492b2f71429fba3f1ed9fd95be02e874ae502366b9c5d186277f7a20", 0xa5}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 29.411945002s ago: executing program 2 (id=915): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000080)=0x5) 29.380737633s ago: executing program 2 (id=916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004", 0x56}], 0x1) 29.380342673s ago: executing program 2 (id=917): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000051c0)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x1) getdents64(r1, 0x0, 0x22) 29.335073665s ago: executing program 2 (id=918): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000b00)='./proc_mnt\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone3(&(0x7f0000000040)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pread64(r1, &(0x7f0000000bc0)=""/4128, 0x1020, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000bc0)=ANY=[], 0xfedd) 29.334498224s ago: executing program 2 (id=919): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000048, &(0x7f0000000080)={[{@oldalloc}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000a00)="$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") r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x518282, 0x78e22799f4a46e8e) 14.319175851s ago: executing program 33 (id=919): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000048, &(0x7f0000000080)={[{@oldalloc}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000a00)="$eJzs3c1vG2UaAPDHdpMmaXb7satV25W2lbpS90ON86FVk929cAIOlRCVuIBUQuKGEieOYqc0UQ8p3HrggEAgIQ7c+Qu40BMVEuIMd8QBFUEJEiAhGc3YTvPl4KI0RpnfT5p4Zl5nnveN9byZeWfGE0BmnU1+5CIGI+LTiDjaWNz8hrONl7X7N6eSKRf1+uVvcun7kuXWW1u/dyQiViOiLyKefjzihdz2uNXlldnJcrm02Fwu1uYWitXllQvX5iZnSjOl+ZHxixMT48NjoxN71tbbr710+9IHT/a+/8Or9+6+/tGHSbUGm2Ub27GXGk3vieMb1h2KiP8/imBdUGi2p7/bFeE3ST6/P0XEuTT/j0Yh/TSBLKjX6/Wf64fbFa/WgQMrn+4D5/JDEdGYz+eHhhr78H+OgXy5Uq39+2plaX66sa98LHryV6+VS8PNY4Vj0ZNLlkfS+QfLo1uWxyLSfeA3Cv3p8tBUpTy9v10dsMWRZv73N/P/+0Ij/4GM2PmQv+1BAXCAGPKD7JL/kF3yH7JL/kN2yX/ILvkP2fXQ+V94NPUA9p///5Bd8h+yS/5DJj116VIy1Vv3v09fX16arVy/MF2qzg7NLU0NTVUWF4ZmKpWZ9J6duV/bXrlSWRj5TyzdKNZK1VqxurxyZa6yNF+7kt7Xf6XUsy+tAjpx/Mydz3MRsfrf/nRK9DbL5CocbPV6Lrp9DzLQHc7kQXYZ+oPscowP7PAVvZv0tStY2Pu6APsj3+0KAF1z/pTzf5BVxv8hu4z/Q3bZxweM/0P2GP+H7Bps8/yvP2x4dtdwRPwxIj4r9BxuPesLOAjyX+Ui8sn+//mjfx/cWtqb+7EQ0ZOeE3z5nctv3Zis1RZHkvXfpqcOkvW1t5vrR7vSAKBDrTxt5TEAkF1r929Otab9jPv1Y42LELbHP9Qcm+xLz1EOrOU2XauQ26NrF1ZvRcTJneLnms87b5z5GFgrbIt/ovmaa2wire+h9Lnp+xP/1Ib4f9sQ//Qu8Xofom5w0N1J+p/hnfIvn+Z0rOff5v5ncI+unWjf/+XX+79Cm/7vTIcxXnz3lS/bxr8VcXrH+K14fWmsrfGTup3vLHzu3nPP/KVdYf29xnZ2ir++gYgo1uYWitXllQvp98jNlOZHxi9OTIwPj41OFNMx6mJrpHq7/5385O5u7R94EL8/Ijpqf7Lun521P37668fPnt0l/j/O7fz5n9glflLRf3UY/7vRL55vV5bEn27z98/vEj9ZN9Zh/OqbT3iWOAD8jlSXV2Yny+XSohkzZsysz3S7ZwIetQdJ3+2aAAAAAAAAAAAAAJ3aj8uJu91GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICD4JcAAAD///3C05Q=") r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x518282, 0x78e22799f4a46e8e) 4.90114412s ago: executing program 4 (id=1214): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x2) 4.836608492s ago: executing program 4 (id=1219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001b40)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000001b80)) 4.756546624s ago: executing program 4 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) write(r0, &(0x7f0000000100)='270', 0x3) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) memfd_create(&(0x7f0000000540)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000580), 0x3, 0x80000) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$setregset(0x4205, r1, 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250100000008", @ANYRES32, @ANYBLOB], 0x1c}}, 0x4000) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000030701020000000000000000010000006373a94ce37bd99bcc2fb6ee209176514707b28f4612d7f4da563a899ffba8b2e6f206c458a0b245bb433ab6591ce7"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, &(0x7f0000000440)) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r5, 0x0, 0x0) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) syz_clone(0x1000, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2) 3.884219515s ago: executing program 5 (id=1240): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x21, 0x7ff, &(0x7f0000000d40)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) syz_clone3(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001a80)='ext4\x00', &(0x7f0000002440)='./file0\x00', 0x2200850, &(0x7f0000002480)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@auto_da_alloc}, {@dioread_nolock}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x5a6, &(0x7f0000002540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002b40)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000002b80)=""/33, 0x21) getdents(r0, 0xfffffffffffffffd, 0xbb) 3.776332148s ago: executing program 5 (id=1243): io_setup(0x0, &(0x7f0000004d00)) 3.775997148s ago: executing program 5 (id=1244): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) 2.784644852s ago: executing program 1 (id=1248): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.744763857s ago: executing program 6 (id=1252): syz_emit_ethernet(0x86, &(0x7f0000000480)={@random="591a1d9a2bdb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0xfffe, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd200200000000000000000000e6000000000200", "0b3d22b336986dfb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "4d4a720d2ca65f5f52861824ab642591"}}}}}}}, 0x0) 1.744520657s ago: executing program 5 (id=1253): bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0xe, 0xb, &(0x7f0000002a40)=@framed={{0x18, 0x8}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000002ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.744062477s ago: executing program 1 (id=1255): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000440), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x88) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x210000, &(0x7f0000000500)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x589, &(0x7f00000005c0)="$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") socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c80)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000000d40)="c7", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@local, 0x4e1f, 0x6, 0xffd, 0x3, 0x2, 0x0, 0x100, 0x3c}, {0x2, 0x52a, 0x7ff, 0x34297bf6, 0xa, 0x80044, 0x5, 0x9}, {0x6, 0x8, 0x9}, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x6c}, 0xa, @in6=@private0, 0x800034ff, 0x1, 0x0, 0x0, 0x81, 0x0, 0x1ff}}, 0xe8) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="47febbbbbbbbaaaaaaaaaabb1455a3f60980e68660000000004e1640fe7c9a15561e0800000000000000000000000000bbfe8000000000000015716e98d9f56dba6cc5437667a2606ce186ad69791fa686e5eb8be1985d132d72dca819825115be46a30217545b2c30d3c9ae2a7c676c6fd243ecdfc771b4e12961c5939e1e1267cea4af14fde3e2c022c6aec399204c095d8a025268506b2de757d4d0061995d9671fb8f93d3fef6ed798987475806933866ddbc2260cf20b7d33894af3d014e0f1d8d997c0f654b3e173bc1254a30fa964e4e6faf41c", @ANYRES64, @ANYRESOCT=r1, @ANYBLOB="70181000907800002002fe06e2d4c3d93e5bb3686e0f47360b80a2d4e4ff6855b84e9e50f4c6720493fb0be1774a56a3eb2877a36ac599bdc256ca05982331582579"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2b, "04e70787b64d173da181e6469a2100eca6aa0825476b045c4a935fa54f323c1829a007a40e24142b187c4a"}}) 1.743327187s ago: executing program 4 (id=1256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {@in6=@rand_addr=' \x01\x00', 0x204d2, 0x32}, @in6=@private0, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb}, {0x0, 0x1}, {}, 0x70bd2a, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 1.664205199s ago: executing program 5 (id=1257): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0800, &(0x7f00000000c0), 0x4, 0x470, &(0x7f0000001280)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f00000005c0)=[{0x6, 0x0, 0x4, 0x8}, {0x8, 0x4, 0xb, 0xbdc}]}) r0 = getpid() creat(&(0x7f0000000600)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000700)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7ffffffd}}, {@nombcache}, {@nogrpid}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000000780)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000d00)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x40c4) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000f40)='100', 0x3) r7 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) unshare(0x4c000680) 1.61429753s ago: executing program 6 (id=1258): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000100)={[{@errors_remount}, {@dioread_lock}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f00000005c0)="$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") pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x3, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000001a80)='syzkaller\x00', 0x5, 0x93, &(0x7f0000001ac0)=""/147}, 0x94) r2 = openat(r0, &(0x7f0000000a40)='.\x00', 0x0, 0x1c2) open_by_handle_at(r2, &(0x7f0000000a80)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.61406812s ago: executing program 4 (id=1259): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0), 0x4, 0xbaf, &(0x7f0000000200)="$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") chdir(&(0x7f0000000ec0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40242, 0x0) 476.430098ms ago: executing program 6 (id=1262): socket$inet(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @timestamp}}}}, 0x0) 472.033988ms ago: executing program 1 (id=1263): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10008, &(0x7f00000002c0)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000009bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f000000a080)='./file0\x00', 0x182) r0 = open$dir(&(0x7f000000a0c0)='./file0\x00', 0x800, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f000000b140)=@v2={0x2, @aes128, 0x3, '\x00', @b}) 469.270668ms ago: executing program 5 (id=1264): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000005300)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000005340), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000005380)={0x0, 0x58, &(0x7f00000053c0)={&(0x7f0000005400)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x4844) write$nci(r0, &(0x7f0000005440)=ANY=[@ANYBLOB="400003"], 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 424.713959ms ago: executing program 4 (id=1265): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xa) 389.09272ms ago: executing program 0 (id=1267): prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x20000400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 369.287471ms ago: executing program 0 (id=1268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000200)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x24008001) 332.705982ms ago: executing program 6 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 271.921683ms ago: executing program 0 (id=1279): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000015c0)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000f40)={@multicast2, @loopback, 0x0, 0x4, [@remote, @remote, @local, @loopback]}, 0x20) 267.915193ms ago: executing program 1 (id=1270): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x300884c, &(0x7f0000000140)={[{@debug}]}, 0x3, 0x515, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file1\x00', 0xd42, 0x15) pwrite64(r0, &(0x7f0000001680)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='./file1\x00', 0x0, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000002800)={0x80, 0xfffffffffffffffa, 0x0, 0x3, 0x1, 0x0, [{0x6, 0x1, 0x104, '\x00', 0x304}]}) 259.403443ms ago: executing program 0 (id=1271): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x4, 0x4d1, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000f00)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 259.139954ms ago: executing program 6 (id=1272): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) fcntl$dupfd(r2, 0x0, r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b5952dbd7000ffdbdf250a0800ff", @ANYRES32=r5, @ANYBLOB="140002000000000000000000000000000000000114000100000000000000000000000000000000000800090002"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 193.943675ms ago: executing program 0 (id=1273): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000100)={[{@errors_remount}, {@dioread_lock}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f00000005c0)="$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") pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x3, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000001a80)='syzkaller\x00', 0x5, 0x93, &(0x7f0000001ac0)=""/147}, 0x94) r2 = openat(r0, &(0x7f0000000a40)='.\x00', 0x0, 0x1c2) open_by_handle_at(r2, &(0x7f0000000a80)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 181.227936ms ago: executing program 6 (id=1274): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000440), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x88) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x210000, &(0x7f0000000500)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x589, &(0x7f00000005c0)="$eJzs3V9rW+UfAPDvSdPu7++3DsZQL2SwCydz6dr6Z4LgvBQdDvR+hjYro+kymnSsdbDtwt14I0MQcSC+AO+9HL4BX8VAB0NG0QsRIic96dI1abssNdny+cDZnifnnDzPN8/5nj4nJyEBDK1j6T+5iJcj4usk4lDLunxkK4+tbbf66PpMuiRRr3/6RxJJ9lhz+yT7/0BWeSkifvky4mRuc7vV5ZX5YrlcWszqE7WFKxPV5ZVTlxaKc6W50uWp6ekzb01PvfvO2z2L9fXzf333yb0Pz3x1fPXbnx4cvpPE2TiYrWuN4xncbK0cK/6TlUbj7BMbTvagsUGS9LsDdGUky/PRSM8Bh2Iky3rgxXcjIurAkErkPwyp5jygeW3fo+vg58bDD9YugBqxj7XGn197byT2Nq6N9q8mG66M0uvd8R60n7bx8+9376RLbP0+xL6N1dF9PWgeGGI3b0XE6Xx+8/k/yc5/3TvdePN4a0+2MWx/f6Cf7qXznzfazf9y6/OfaDP/OdAmd7uxff7nHvSgmY7S+d97bee/66eu8ZGs9r/GnG80uXipXDodEf+PiBNR3/bWx5nV+/VO61rnf+mStt+cC2b9eJDfs3Gf2WKtGBFjXYa8wcNbEa/k28WfrI9/0mb809fj/A7bOFq6+2qnddvHv7vqP0a81nb8Hw9rsvX9yYnG8TDRPCo2+/P20V87td/v+NPx3791/ONJ6/3a6tO38cPev0ud1nV7/I8lnzXKzSS4VqzVFicjxpKPNz8+9XjfZr25fRr/ieNbn/82H/9nGxdjn+8w/ttHbnfcdBDGf/apxv/pC/c/+uL7Tu3vbPzfbJROZI9k57/2smNlpx181tcPAAAAAAAABkkuIg5Gkiusl3O5QmHt8x1HYn+uXKnWTl6sLF2ejcZ3ZcdjNNe8032o5fMQk9nnYZv1qSfq0xFxOCK+GdnXqBdmKuXZfgcPAAAAAAAAAAAAAAAAAAAAA+JAh+//p34b6XfvgF3X+GGDPf3uBdAP2/7kfy9+6QkYSNvmP/DCkv8wvOQ/DC/5D8NL/sPwkv8wvOQ/DC/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAD11/ty5dKmvPro+k9Znry4vzVeunpotVecLC0szhZnK4pXCXKUyVy4VZioL2z1fuVK5MjkVS9cmaqVqbaK6vHJhobJ0uXbh0kJxrnShNPqfRAUAAAAAAAAAAAAAAAAAAADPl+ryynyxXC4t9qCQj4hePM+gFd6PgejGbga4pqvd84MSxaaOZVENSn/6VriVvRDler1+Y8d79emEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABt/BsAAP//au4upw==") socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c80)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000000d40)="c7", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@local, 0x4e1f, 0x6, 0xffd, 0x3, 0x2, 0x0, 0x100, 0x3c}, {0x2, 0x52a, 0x7ff, 0x34297bf6, 0xa, 0x80044, 0x5, 0x9}, {0x6, 0x8, 0x9}, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x6c}, 0xa, @in6=@private0, 0x800034ff, 0x1, 0x0, 0x0, 0x81, 0x0, 0x1ff}}, 0xe8) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="47febbbbbbbbaaaaaaaaaabb1455a3f60980e68660000000004e1640fe7c9a15561e0800000000000000000000000000bbfe8000000000000015716e98d9f56dba6cc5437667a2606ce186ad69791fa686e5eb8be1985d132d72dca819825115be46a30217545b2c30d3c9ae2a7c676c6fd243ecdfc771b4e12961c5939e1e1267cea4af14fde3e2c022c6aec399204c095d8a025268506b2de757d4d0061995d9671fb8f93d3fef6ed798987475806933866ddbc2260cf20b7d33894af3d014e0f1d8d997c0f654b3e173bc1254a30fa964e4e6faf41c", @ANYRES64, @ANYRESOCT=r1, @ANYBLOB="70181000907800002002fe06e2d4c3d93e5bb3686e0f47360b80a2d4e4ff6855b84e9e50f4c6720493fb0be1774a56a3eb2877a36ac599bdc256ca05982331582579"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2b, "04e70787b64d173da181e6469a2100eca6aa0825476b045c4a935fa54f323c1829a007a40e24142b187c4a"}}) 106.589037ms ago: executing program 1 (id=1275): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) close(0x3) unshare(0x2040000) 65.854778ms ago: executing program 0 (id=1276): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) readlink(0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0xffffffffffffff6d, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000002c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x0) shutdown(r3, 0x1) 0s ago: executing program 1 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x3, 0xff) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0xe]}, 0x0, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4c1c, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0xf9, 0x0}}}}], 0x20}}], 0x1, 0x4000004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010028bd9d91fddbdf2500bd"], 0x1c}}, 0x20000080) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000}) socket$inet(0x2, 0x3, 0x1) kernel console output (not intermixed with test programs): 8 comm="syz.4.361" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.431605][ T29] audit: type=1400 audit(1792313551.700:356): avc: denied { add_name } for pid=4578 comm="syz.4.361" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.582775][ T4585] FAULT_INJECTION: forcing a failure. [ 56.582775][ T4585] name failslab, interval 1, probability 0, space 0, times 0 [ 56.582881][ T4585] CPU: 0 UID: 0 PID: 4585 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.582907][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.582924][ T4585] Call Trace: [ 56.582931][ T4585] [ 56.582938][ T4585] __dump_stack+0x1d/0x30 [ 56.582988][ T4585] dump_stack_lvl+0x95/0xd0 [ 56.583013][ T4585] dump_stack+0x15/0x1b [ 56.583051][ T4585] should_fail_ex+0x262/0x280 [ 56.583093][ T4585] ? do_getname+0x2e/0x1c0 [ 56.583123][ T4585] should_failslab+0x8c/0xb0 [ 56.583168][ T4585] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 56.583215][ T4585] ? do_getname+0x2e/0x1c0 [ 56.583247][ T4585] do_getname+0x2e/0x1c0 [ 56.583277][ T4585] getname_flags+0x1d/0x30 [ 56.583345][ T4585] do_sys_openat2+0x6c/0x130 [ 56.583393][ T4585] __x64_sys_openat+0xf2/0x120 [ 56.583421][ T4585] x64_sys_call+0x1f72/0x2550 [ 56.583481][ T4585] do_syscall_64+0x112/0x360 [ 56.583556][ T4585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.583588][ T4585] RIP: 0033:0x7f81db24ed8e [ 56.583611][ T4585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.583633][ T4585] RSP: 002b:00007f81d9ce6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.583658][ T4585] RAX: ffffffffffffffda RBX: 00007f81d9ce76c0 RCX: 00007f81db24ed8e [ 56.583751][ T4585] RDX: 0000000000000002 RSI: 00007f81d9ce6c00 RDI: ffffffffffffff9c [ 56.583771][ T4585] RBP: 00007f81db325ab8 R08: 0000000000000000 R09: 0000000000000000 [ 56.583789][ T4585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.583835][ T4585] R13: 00007f81db516038 R14: 00007f81db515fa0 R15: 00007ffe69485228 [ 56.583860][ T4585] [ 56.596995][ T4585] EXT4-fs: Ignoring removed oldalloc option [ 56.597022][ T4585] EXT4-fs: Ignoring removed nobh option [ 56.643990][ T4585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.644192][ T4585] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.657038][ T4585] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #2: comm syz.0.362: corrupted inode contents [ 56.657217][ T29] audit: type=1400 audit(1792313551.930:357): avc: denied { setattr } for pid=4584 comm="syz.0.362" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.660575][ T4585] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #2: comm syz.0.362: mark_inode_dirty error [ 56.661338][ T4585] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #2: comm syz.0.362: corrupted inode contents [ 56.664220][ T29] audit: type=1400 audit(1792313551.930:358): avc: denied { write } for pid=4584 comm="syz.0.362" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.665357][ T4585] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #2: comm syz.0.362: corrupted inode contents [ 56.668850][ T4585] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #2: comm syz.0.362: mark_inode_dirty error [ 56.669455][ T4585] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #2: comm syz.0.362: corrupted inode contents [ 56.671458][ T4585] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.362: mark_inode_dirty error [ 56.825185][ T4585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.956862][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.027822][ T4598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4598 comm=syz.2.368 [ 57.097253][ T4603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.097378][ T4603] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.128042][ T29] audit: type=1400 audit(1792313552.400:359): avc: denied { write } for pid=4602 comm="syz.5.370" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.132085][ T4603] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.370: bg 0: block 345: padding at end of block bitmap is not set [ 57.259801][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.282805][ T4620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.284173][ T4620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.304257][ T4620] FAULT_INJECTION: forcing a failure. [ 57.304257][ T4620] name fail_futex, interval 1, probability 0, space 0, times 0 [ 57.304293][ T4620] CPU: 0 UID: 0 PID: 4620 Comm: syz.4.376 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.304327][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 57.304342][ T4620] Call Trace: [ 57.304349][ T4620] [ 57.304363][ T4620] __dump_stack+0x1d/0x30 [ 57.304428][ T4620] dump_stack_lvl+0x95/0xd0 [ 57.304463][ T4620] dump_stack+0x15/0x1b [ 57.304486][ T4620] should_fail_ex+0x262/0x280 [ 57.304523][ T4620] should_fail+0xb/0x20 [ 57.304548][ T4620] get_futex_key+0x12d/0xb10 [ 57.304625][ T4620] ? xas_init_marks+0x2ff/0x320 [ 57.304657][ T4620] futex_wait_setup+0x49/0x3e0 [ 57.304680][ T4620] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 57.304718][ T4620] ? hrtimer_active+0xe4/0x110 [ 57.304826][ T4620] __futex_wait+0xa9/0x260 [ 57.304874][ T4620] ? __pfx_futex_wake_mark+0x10/0x10 [ 57.304899][ T4620] futex_wait+0x98/0x1c0 [ 57.304925][ T4620] do_futex+0x391/0x460 [ 57.304986][ T4620] __se_sys_futex+0x2f6/0x370 [ 57.305073][ T4620] __x64_sys_futex+0x78/0x90 [ 57.305204][ T4620] x64_sys_call+0x22e2/0x2550 [ 57.305232][ T4620] do_syscall_64+0x112/0x360 [ 57.305261][ T4620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.305303][ T4620] RIP: 0033:0x7f00b6cce559 [ 57.305319][ T4620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.305339][ T4620] RSP: 002b:00007f00b57270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 57.305362][ T4620] RAX: ffffffffffffffda RBX: 00007f00b6f55fa8 RCX: 00007f00b6cce559 [ 57.305402][ T4620] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f00b6f55fa8 [ 57.305416][ T4620] RBP: 00007f00b6f55fa0 R08: 0000000000000000 R09: 0000000000000000 [ 57.305443][ T4620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.305457][ T4620] R13: 00007f00b6f56038 R14: 00007ffcde4b55d0 R15: 00007ffcde4b56b8 [ 57.305478][ T4620] [ 57.596852][ T29] audit: type=1400 audit(1792313552.870:360): avc: denied { write } for pid=4624 comm="syz.1.377" name="functions" dev="configfs" ino=5987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.597975][ T29] audit: type=1400 audit(1792313552.870:361): avc: denied { write } for pid=4624 comm="syz.1.377" name="header" dev="configfs" ino=8663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.598466][ T29] audit: type=1400 audit(1792313552.870:362): avc: denied { write } for pid=4624 comm="syz.1.377" name="hs" dev="configfs" ino=8671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.679449][ T4627] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 57.679486][ T4627] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.683434][ T4627] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.378: invalid indirect mapped block 32768 (level 2) [ 57.683537][ T4627] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 57.684871][ T4627] EXT4-fs (loop1): 1 orphan inode deleted [ 57.684925][ T4627] EXT4-fs (loop1): 1 truncate cleaned up [ 57.685876][ T4627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.749100][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.834477][ T4634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4634 comm=syz.1.381 [ 57.905377][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.951865][ T4648] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 57.951949][ T4648] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.971491][ T4646] EXT4-fs: Ignoring removed bh option [ 57.998342][ T4646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.089861][ T4648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.113396][ T4648] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.388: corrupted in-inode xattr: bad e_name length [ 58.162840][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.189285][ T4663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.195171][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.290434][ T4667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4667 comm=syz.2.394 [ 58.804354][ T4679] set_capacity_and_notify: 6 callbacks suppressed [ 58.804404][ T4679] loop2: detected capacity change from 0 to 256 [ 58.829548][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.015087][ T4699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4699 comm=syz.5.407 [ 59.078967][ T4705] loop2: detected capacity change from 0 to 4096 [ 59.081705][ T4705] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.081760][ T4705] EXT4-fs: Ignoring removed orlov option [ 59.104505][ T4707] loop1: detected capacity change from 0 to 1024 [ 59.106341][ T4707] EXT4-fs: Ignoring removed bh option [ 59.113630][ T4705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.144272][ T4707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.167457][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.171227][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.171343][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.767551][ T4727] bridge0: port 3(syz_tun) entered blocking state [ 59.767661][ T4727] bridge0: port 3(syz_tun) entered disabled state [ 59.768709][ T4727] syz_tun: entered allmulticast mode [ 59.774184][ T4727] syz_tun: entered promiscuous mode [ 59.776015][ T4727] bridge0: port 3(syz_tun) entered blocking state [ 59.776113][ T4727] bridge0: port 3(syz_tun) entered forwarding state [ 59.919703][ T4739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4739 comm=syz.4.423 [ 59.968428][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.999869][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.000102][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.030155][ T4751] FAULT_INJECTION: forcing a failure. [ 60.030155][ T4751] name failslab, interval 1, probability 0, space 0, times 0 [ 60.030237][ T4751] CPU: 0 UID: 0 PID: 4751 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.030269][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.030336][ T4751] Call Trace: [ 60.030344][ T4751] [ 60.030354][ T4751] __dump_stack+0x1d/0x30 [ 60.030386][ T4751] dump_stack_lvl+0x95/0xd0 [ 60.030415][ T4751] dump_stack+0x15/0x1b [ 60.030441][ T4751] should_fail_ex+0x262/0x280 [ 60.030518][ T4751] ? skb_clone+0x151/0x1f0 [ 60.030551][ T4751] should_failslab+0x8c/0xb0 [ 60.030592][ T4751] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 60.030679][ T4751] ? skb_clone+0x151/0x1f0 [ 60.030722][ T4751] skb_clone+0x151/0x1f0 [ 60.030760][ T4751] __netlink_deliver_tap+0x2be/0x510 [ 60.030846][ T4751] netlink_unicast+0x712/0x740 [ 60.030902][ T4751] netlink_sendmsg+0x5be/0x6f0 [ 60.030953][ T4751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.030985][ T4751] __sys_sendto+0x411/0x470 [ 60.031025][ T4751] __x64_sys_sendto+0x76/0x90 [ 60.031138][ T4751] x64_sys_call+0x200c/0x2550 [ 60.031174][ T4751] do_syscall_64+0x112/0x360 [ 60.031218][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.031260][ T4751] RIP: 0033:0x7fefb5d3ed8e [ 60.031283][ T4751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.031309][ T4751] RSP: 002b:00007fefb47d5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 60.031337][ T4751] RAX: ffffffffffffffda RBX: 00007fefb47d76c0 RCX: 00007fefb5d3ed8e [ 60.031356][ T4751] RDX: 000000000000001c RSI: 00007fefb47d6000 RDI: 0000000000000004 [ 60.031391][ T4751] RBP: 0000000000000000 R08: 00007fefb47d5f04 R09: 000000000000000c [ 60.031405][ T4751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 60.031419][ T4751] R13: 00007fefb47d5f58 R14: 00007fefb47d6000 R15: 0000000000000000 [ 60.031439][ T4751] [ 60.652558][ T4782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4782 comm=syz.1.441 [ 60.830149][ T4788] loop1: detected capacity change from 0 to 512 [ 60.831337][ T4788] EXT4-fs: Ignoring removed nobh option [ 60.844930][ T4788] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.845780][ T4788] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.442: EA inode 11 has unexpected i_nlink=2 ref_count=18446744069414584320 [ 60.845878][ T4788] loop1: lost filesystem error report for type 5 error -117 [ 60.846446][ T4788] EXT4-fs (loop1): Remounting filesystem read-only [ 60.846528][ T4788] EXT4-fs (loop1): 1 orphan inode deleted [ 60.847419][ T4788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.129817][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.158061][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 61.158080][ T29] audit: type=1400 audit(1792313556.430:395): avc: denied { read } for pid=4802 comm="syz.1.449" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.212704][ T4810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.212854][ T4810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.247012][ T4805] loop1: detected capacity change from 0 to 1024 [ 61.251540][ T4805] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 61.251732][ T4805] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.252220][ T4805] EXT4-fs error (device loop1): ext4_get_journal_inode:5937: inode #32: comm syz.1.449: iget: special inode unallocated [ 61.252479][ T4805] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 61.252979][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 61.253035][ C1] EXT4-fs (loop1): initial error at time 1792313556: ext4_get_journal_inode:5937: inode 32 [ 61.253117][ C1] EXT4-fs (loop1): last error at time 1792313556: ext4_get_journal_inode:5937: inode 32 [ 61.254496][ T4805] EXT4-fs (loop1): Remounting filesystem read-only [ 61.254659][ T4805] EXT4-fs (loop1): no journal found [ 61.254697][ T4805] EXT4-fs (loop1): can't get journal size [ 61.256550][ T4805] EXT4-fs (loop1): filesystem is read-only [ 61.259596][ T4805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.359694][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.375358][ T4816] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4816 comm=syz.2.452 [ 61.504204][ T4825] loop2: detected capacity change from 0 to 2048 [ 61.524263][ T4825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.552456][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.579962][ T4831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.580177][ T4831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.718168][ T29] audit: type=1400 audit(1792313556.990:396): avc: denied { write } for pid=4834 comm="syz.4.459" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 61.919812][ T4848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4848 comm=syz.5.465 [ 62.028249][ T4853] loop5: detected capacity change from 0 to 2048 [ 62.040947][ T4853] EXT4-fs warning (device loop5): read_mmp_block:110: Error -117 while reading MMP block 320 [ 62.122055][ T4860] netlink: 'syz.2.470': attribute type 4 has an invalid length. [ 62.122132][ T4860] netlink: 17 bytes leftover after parsing attributes in process `syz.2.470'. [ 62.268481][ T4872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.268589][ T4872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.302580][ T4874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4874 comm=syz.2.477 [ 62.426070][ T4885] loop0: detected capacity change from 0 to 764 [ 62.443788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 62.508661][ T29] audit: type=1400 audit(1792313557.780:397): avc: denied { write } for pid=4888 comm="syz.0.483" name="functions" dev="configfs" ino=5987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.521927][ T4887] loop2: detected capacity change from 0 to 4096 [ 62.546573][ T4887] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.546624][ T4887] EXT4-fs: test_dummy_encryption option not supported [ 62.785314][ T4905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4905 comm=syz.4.490 [ 62.863440][ T4913] loop4: detected capacity change from 0 to 764                                                                                                                                                   [ 63.912052][ T29] audit: type=1400 audit(1792313559.180:403): avc: denied { read write } for pid=4987 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 63.912215][ T29] audit: type=1400 audit(1792313559.180:404): avc: denied { open } for pid=4987 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 63.913556][ T4989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.913922][ T4989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.974775][ T4989] FAULT_INJECTION: forcing a failure. [ 63.974775][ T4989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.974880][ T4989] CPU: 1 UID: 0 PID: 4989 Comm: syz.1.527 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.974910][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.974922][ T4989] Call Trace: [ 63.974928][ T4989] [ 63.974936][ T4989] __dump_stack+0x1d/0x30 syzkaller syzk[ 63.974966][ T4989] dump_stack_lvl+0x95/0xd0 [ 63.975061][ T4989] dump_stack+0x15/0x1b aller login: [ 63.975082][ T4989] should_fail_ex+0x262/0x280 [ 63.975125][ T4989] should_fail+0xb/0x20 [ 63.975229][ T4989] should_fail_usercopy+0x1a/0x20 [ 63.975266][ T4989] _copy_from_user+0x1c/0xb0 [ 63.975355][ T4989] __sys_sendto+0x1b5/0x470 [ 63.975386][ T4989] __x64_sys_sendto+0x76/0x90 [ 63.975410][ T4989] x64_sys_call+0x200c/0x2550 [ 63.975441][ T4989] do_syscall_64+0x112/0x360 [ 63.975525][ T4989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.975555][ T4989] RIP: 0033:0x7fefb5d3ed8e [ 63.975577][ T4989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.975611][ T4989] RSP: 002b:00007fefb47d5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 63.975686][ T4989] RAX: ffffffffffffffda RBX: 00007fefb47d76c0 RCX: 00007fefb5d3ed8e [ 63.975727][ T4989] RDX: 000000000000001c RSI: 00007fefb47d6000 RDI: 0000000000000004 [ 63.975746][ T4989] RBP: 0000000000000000 R08: 00007fefb47d5f04 R09: 000000000000000c [ 63.975764][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 63.975780][ T4989] R13: 00007fefb47d5f58 R14: 00007fefb47d6000 R15: 0000000000000000 [ 63.975847][ T4989] [ 64.267205][ T5013] loop0: detected capacity change from 0 to 1024 [ 64.267672][ T5013] EXT4-fs: Ignoring removed bh option [ 64.290444][ T5013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.312989][ T5014] loop4: detected capacity change from 0 to 8192 [ 64.367612][ T5018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5018 comm=syz.4.538 [ 64.500350][ T5033] loop4: detected capacity change from 0 to 512 [ 64.500857][ T5033] EXT4-fs: Ignoring removed i_version option [ 64.501270][ T5033] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 64.556145][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.557197][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.632297][ T5045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5045 comm=syz.2.549 [ 64.681239][ T5050] loop2: detected capacity change from 0 to 256 [ 64.691859][ T5050] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.710873][ T5050] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.778560][ T5062] netlink: 104 bytes leftover after parsing attributes in process `syz.5.555'. [ 64.874996][ T5078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.875143][ T5078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.902565][ T5078] FAULT_INJECTION: forcing a failure. [ 64.902565][ T5078] name fail_futex, interval 1, probability 0, space 0, times 0 [ 64.902602][ T5078] CPU: 0 UID: 0 PID: 5078 Comm: syz.2.558 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.902636][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.902649][ T5078] Call Trace: [ 64.902656][ T5078] [ 64.902673][ T5078] __dump_stack+0x1d/0x30 [ 64.902755][ T5078] dump_stack_lvl+0x95/0xd0 [ 64.902788][ T5078] dump_stack+0x15/0x1b [ 64.902893][ T5078] should_fail_ex+0x262/0x280 [ 64.902930][ T5078] should_fail+0xb/0x20 [ 64.903035][ T5078] get_futex_key+0x12d/0xb10 [ 64.903089][ T5078] futex_wake+0x89/0x400 [ 64.903117][ T5078] ? handle_mm_fault+0x370d/0x3bb0 [ 64.903214][ T5078] do_futex+0x3f8/0x460 [ 64.903251][ T5078] __se_sys_futex+0x2f6/0x370 [ 64.903318][ T5078] __x64_sys_futex+0x78/0x90 [ 64.903350][ T5078] x64_sys_call+0x22e2/0x2550 [ 64.903416][ T5078] do_syscall_64+0x112/0x360 [ 64.903451][ T5078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.903539][ T5078] RIP: 0033:0x7f36cb37e559 [ 64.903555][ T5078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.903575][ T5078] RSP: 002b:00007f36c9dd70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 64.903603][ T5078] RAX: ffffffffffffffda RBX: 00007f36cb605fa8 RCX: 00007f36cb37e559 [ 64.903622][ T5078] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36cb605fac [ 64.903707][ T5078] RBP: 00007f36cb605fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 64.903783][ T5078] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 64.903802][ T5078] R13: 00007f36cb606038 R14: 00007fffa9b7dc30 R15: 00007fffa9b7dd18 [ 64.903829][ T5078] [ 65.111971][ T5019] syz.0.536 (5019) used greatest stack depth: 9768 bytes left [ 65.133901][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.180633][ T5093] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5093 comm=syz.1.563 [ 65.342165][ T5127] loop0: detected capacity change from 0 to 1024 [ 65.346568][ T5127] EXT4-fs: Ignoring removed bh option [ 65.357376][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 65.358050][ T5127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.691856][ T5162] loop2: detected capacity change from 0 to 512 [ 65.723293][ T5162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.723466][ T5162] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.758093][ T5162] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.580: corrupted xattr block 33: invalid ea_ino [ 65.759654][ T5162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 65.759712][ T5162] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.580: corrupted xattr block 33: invalid ea_ino [ 65.761605][ T5162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 65.761868][ T5162] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.580: corrupted xattr block 33: invalid ea_ino [ 65.762023][ T5162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 65.794309][ T5162] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.580: corrupted xattr block 33: invalid ea_ino [ 65.796614][ T5162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 65.797178][ T5162] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 65.880122][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.914280][ T5180] netlink: 'syz.1.584': attribute type 2 has an invalid length. [ 65.985845][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.985935][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.039130][ T5197] syz.1.591 uses obsolete (PF_INET,SOCK_PACKET) [ 66.203736][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.295352][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 66.295432][ T29] audit: type=1400 audit(1792313561.570:436): avc: denied { read } for pid=5230 comm="syz.0.606" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.295493][ T29] audit: type=1400 audit(1792313561.570:437): avc: denied { open } for pid=5230 comm="syz.0.606" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.298213][ T5229] FAULT_INJECTION: forcing a failure. [ 66.298213][ T5229] name failslab, interval 1, probability 0, space 0, times 0 [ 66.298237][ T5229] CPU: 1 UID: 0 PID: 5229 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.298342][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.298357][ T5229] Call Trace: [ 66.298365][ T5229] [ 66.298376][ T5229] __dump_stack+0x1d/0x30 [ 66.298433][ T5229] dump_stack_lvl+0x95/0xd0 [ 66.298514][ T5229] dump_stack+0x15/0x1b [ 66.298534][ T5229] should_fail_ex+0x262/0x280 [ 66.298569][ T5229] should_failslab+0x8c/0xb0 [ 66.298662][ T5229] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 66.298713][ T5229] ? kstrdup_const+0x3e/0x50 [ 66.298750][ T5229] ? kstrdup_const+0x3e/0x50 [ 66.298789][ T5229] kstrdup+0x3e/0xd0 [ 66.298888][ T5229] kstrdup_const+0x3e/0x50 [ 66.298953][ T5229] alloc_vfsmnt+0x132/0x380 [ 66.298994][ T5229] clone_mnt+0x30/0x610 [ 66.299024][ T5229] copy_tree+0x2d5/0x8a0 [ 66.299043][ T5229] copy_mnt_ns+0x1d2/0x720 [ 66.299113][ T5229] create_new_namespaces+0x7f/0x420 [ 66.299198][ T5229] unshare_nsproxy_namespaces+0x115/0x150 [ 66.299238][ T5229] ksys_unshare+0x3fd/0x6f0 [ 66.299264][ T5229] __x64_sys_unshare+0x1f/0x30 [ 66.299374][ T5229] x64_sys_call+0x1e33/0x2550 [ 66.299553][ T5229] do_syscall_64+0x112/0x360 [ 66.299583][ T5229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.299608][ T5229] RIP: 0033:0x7f36cb37e559 [ 66.299630][ T5229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.299656][ T5229] RSP: 002b:00007f36c9dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 66.299723][ T5229] RAX: ffffffffffffffda RBX: 00007f36cb605fa0 RCX: 00007f36cb37e559 [ 66.299744][ T5229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 66.299758][ T5229] RBP: 00007f36cb415ab8 R08: 0000000000000000 R09: 0000000000000000 [ 66.299770][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.299786][ T5229] R13: 00007f36cb606038 R14: 00007f36cb605fa0 R15: 00007fffa9b7dd18 [ 66.299805][ T5229] [ 66.502538][ T29] audit: type=1400 audit(1792313561.770:438): avc: denied { read write } for pid=5242 comm="syz.2.611" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 66.502721][ T29] audit: type=1400 audit(1792313561.770:439): avc: denied { open } for pid=5242 comm="syz.2.611" path="/138/proc/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 66.556887][ T5241] loop1: detected capacity change from 0 to 1024 [ 66.561377][ T5241] EXT4-fs: Ignoring removed bh option [ 66.600014][ T29] audit: type=1400 audit(1792313561.870:440): avc: denied { write } for pid=5240 comm="syz.1.610" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.820839][ T5265] loop0: detected capacity change from 0 to 512 [ 66.822115][ T5265] EXT4-fs: Ignoring removed bh option [ 66.822208][ T5265] ext4: Unknown parameter 'nouser_xattr' [ 66.886651][ T29] audit: type=1400 audit(1792313562.160:441): avc: denied { write } for pid=5268 comm="syz.0.622" name="c.1" dev="configfs" ino=5992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.886695][ T29] audit: type=1400 audit(1792313562.160:442): avc: denied { create } for pid=5268 comm="syz.0.622" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 66.886719][ T29] audit: type=1400 audit(1792313562.160:443): avc: denied { write } for pid=5268 comm="syz.0.622" name="c.1" dev="configfs" ino=5992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.887419][ T5269] UDC core: g1: couldn't find an available UDC or it's busy [ 66.998920][ T5275] selinux_netlink_send: 1 callbacks suppressed [ 66.998939][ T5275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5275 comm=syz.5.625 [ 66.999136][ T5271] loop2: detected capacity change from 0 to 4096 [ 67.000891][ T5271] EXT4-fs: test_dummy_encryption option not supported [ 67.053577][ T5273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.053691][ T5273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.102829][ T5277] loop5: detected capacity change from 0 to 8192 [ 67.218073][ T5288] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.280761][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.281629][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.301082][ T5286] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.423485][ T5304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5304 comm=syz.1.636 [ 67.549355][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.549531][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.580784][ T29] audit: type=1400 audit(1792313562.850:444): avc: denied { connect } for pid=5307 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.765542][ T5324] EXT4-fs: Ignoring removed bh option [ 67.783640][ T29] audit: type=1400 audit(1792313563.050:445): avc: denied { write } for pid=5323 comm="syz.1.645" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.848635][ T5332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5332 comm=syz.2.648 [ 67.935649][ T5340] EXT4-fs: test_dummy_encryption option not supported [ 67.980521][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.980727][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.140941][ T5354] EXT4-fs: Ignoring removed i_version option [ 68.141413][ T5354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.150787][ T5354] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.278673][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.278779][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.297413][ T5366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5366 comm=syz.5.660 [ 68.343340][ T5370] EXT4-fs: test_dummy_encryption option not supported [ 68.373853][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.664'. [ 68.373873][ T5372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.664'. [ 68.539983][ T5388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5388 comm=syz.0.672 [ 68.624378][ T5395] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 68.624404][ T5395] FAT-fs (loop0): Filesystem has been set read-only [ 68.748993][ T5413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.749211][ T5413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.749900][ T5415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5415 comm=syz.2.684 [ 68.791269][ T5413] FAULT_INJECTION: forcing a failure. [ 68.791269][ T5413] name failslab, interval 1, probability 0, space 0, times 0 [ 68.791297][ T5413] CPU: 1 UID: 0 PID: 5413 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.791321][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.791368][ T5413] Call Trace: [ 68.791377][ T5413] [ 68.791387][ T5413] __dump_stack+0x1d/0x30 [ 68.791419][ T5413] dump_stack_lvl+0x95/0xd0 [ 68.791446][ T5413] dump_stack+0x15/0x1b [ 68.791466][ T5413] should_fail_ex+0x262/0x280 [ 68.791544][ T5413] ? __alloc_skb+0x2e0/0x6f0 [ 68.791644][ T5413] should_failslab+0x8c/0xb0 [ 68.791676][ T5413] kmem_cache_alloc_node_noprof+0x82/0x400 [ 68.791720][ T5413] ? netlink_insert+0x7d5/0x950 [ 68.791775][ T5413] ? __alloc_skb+0x2e0/0x6f0 [ 68.791805][ T5413] __alloc_skb+0x2e0/0x6f0 [ 68.791827][ T5413] ? __alloc_skb+0x209/0x6f0 [ 68.791855][ T5413] netlink_alloc_large_skb+0xbf/0xf0 [ 68.791968][ T5413] netlink_sendmsg+0x40c/0x6f0 [ 68.792012][ T5413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.792124][ T5413] __sys_sendto+0x411/0x470 [ 68.792165][ T5413] __x64_sys_sendto+0x76/0x90 [ 68.792194][ T5413] x64_sys_call+0x200c/0x2550 [ 68.792260][ T5413] do_syscall_64+0x112/0x360 [ 68.792301][ T5413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.792327][ T5413] RIP: 0033:0x7f81db24ed8e [ 68.792343][ T5413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.792375][ T5413] RSP: 002b:00007f81d9ce5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 68.792399][ T5413] RAX: ffffffffffffffda RBX: 00007f81d9ce76c0 RCX: 00007f81db24ed8e [ 68.792413][ T5413] RDX: 000000000000001c RSI: 00007f81d9ce6000 RDI: 0000000000000004 [ 68.792425][ T5413] RBP: 0000000000000000 R08: 00007f81d9ce5f04 R09: 000000000000000c [ 68.792442][ T5413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 68.792459][ T5413] R13: 00007f81d9ce5f58 R14: 00007f81d9ce6000 R15: 0000000000000000 [ 68.792483][ T5413] [ 68.894444][ T5420] EXT4-fs: Ignoring removed bh option [ 69.013002][ T5428] EXT4-fs: Ignoring removed bh option [ 69.015919][ T5428] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 69.243365][ T5438] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.248440][ T5438] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.690: Directory block failed checksum [ 69.347152][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.347290][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.377346][ T5445] set_capacity_and_notify: 10 callbacks suppressed [ 69.377364][ T5445] loop4: detected capacity change from 0 to 128 [ 69.396886][ T5445] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.464430][ T5445] FAT-fs (loop4): error, parent dir link count too low (2) [ 69.464458][ T5445] FAT-fs (loop4): Filesystem has been set read-only [ 69.547151][ T5450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5450 comm=syz.0.695 [ 69.593394][ T3305] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.624969][ T5455] loop0: detected capacity change from 0 to 512 [ 69.644272][ T5455] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.697: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 69.644311][ T5455] loop0: lost filesystem error report for type 5 error -117 [ 69.645478][ T5455] EXT4-fs (loop0): 1 orphan inode deleted [ 69.669947][ T5455] EXT4-fs (loop0): shut down requested (0) [ 69.748005][ T5462] loop5: detected capacity change from 0 to 512 [ 69.764665][ T5462] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 69.764749][ T5462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.766119][ T5462] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 69.840819][ T5466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.840980][ T5466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.895645][ T5478] loop5: detected capacity change from 0 to 512 [ 69.912811][ T5478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 69.912840][ T5478] System zones: 1-12 [ 69.917013][ T5478] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.706: missing EA_INODE flag [ 69.917135][ T5478] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.926363][ T5478] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.706: error while reading EA inode 12 err=-117 [ 69.926480][ T5478] loop5: lost filesystem error report for type 5 error -117 [ 69.927617][ T5478] EXT4-fs (loop5): 1 orphan inode deleted [ 69.984365][ T5481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5481 comm=syz.5.707 [ 70.080058][ T5489] loop5: detected capacity change from 0 to 1024 [ 70.092126][ T5489] EXT4-fs: Ignoring removed bh option [ 70.611274][ T5514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5514 comm=syz.1.720 [ 70.697369][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.697555][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.744146][ T5522] loop4: detected capacity change from 0 to 1764 [ 70.747458][ T5522] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 70.768515][ T5526] bridge_slave_0: left allmulticast mode [ 70.768537][ T5526] bridge_slave_0: left promiscuous mode [ 70.768694][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.815084][ T5528] loop4: detected capacity change from 0 to 512 [ 70.816579][ T5528] EXT4-fs: test_dummy_encryption option not supported [ 70.981969][ T5537] loop5: detected capacity change from 0 to 1024 [ 71.075933][ T5542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.077371][ T5537] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 71.111672][ T5545] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5545 comm=syz.0.732 [ 71.530358][ T5555] loop5: detected capacity change from 0 to 128 [ 71.543829][ T5555] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.551221][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 71.551233][ T29] audit: type=1400 audit(1792313566.820:465): avc: denied { write } for pid=5554 comm="syz.5.736" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.615283][ T5561] loop5: detected capacity change from 0 to 512 [ 71.618055][ T5561] EXT4-fs: dax option not supported [ 71.648229][ T5565] UDC core: g1: couldn't find an available UDC or it's busy [ 71.699373][ T5567] EXT4-fs: Ignoring removed bh option [ 71.718053][ T29] audit: type=1400 audit(1792313566.990:466): avc: denied { write } for pid=5566 comm="syz.0.741" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.774487][ T5577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.774609][ T5577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.806135][ T5577] FAULT_INJECTION: forcing a failure. [ 71.806135][ T5577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.806231][ T5577] CPU: 0 UID: 0 PID: 5577 Comm: syz.5.745 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.806263][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.806280][ T5577] Call Trace: [ 71.806289][ T5577] [ 71.806299][ T5577] __dump_stack+0x1d/0x30 [ 71.806330][ T5577] dump_stack_lvl+0x95/0xd0 [ 71.806360][ T5577] dump_stack+0x15/0x1b [ 71.806388][ T5577] should_fail_ex+0x262/0x280 [ 71.806426][ T5577] should_fail+0xb/0x20 [ 71.806461][ T5577] should_fail_usercopy+0x1a/0x20 [ 71.806573][ T5577] _copy_from_user+0x1c/0xb0 [ 71.806608][ T5577] __sys_sendto+0x1b5/0x470 [ 71.806638][ T5577] __x64_sys_sendto+0x76/0x90 [ 71.806679][ T5577] x64_sys_call+0x200c/0x2550 [ 71.806709][ T5577] do_syscall_64+0x112/0x360 [ 71.806744][ T5577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.806766][ T5577] RIP: 0033:0x7fa69b82ed8e [ 71.806784][ T5577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.806826][ T5577] RSP: 002b:00007fa69a2c5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 71.806853][ T5577] RAX: ffffffffffffffda RBX: 00007fa69a2c76c0 RCX: 00007fa69b82ed8e [ 71.806936][ T5577] RDX: 000000000000001c RSI: 00007fa69a2c6000 RDI: 0000000000000004 [ 71.806953][ T5577] RBP: 0000000000000000 R08: 00007fa69a2c5f04 R09: 000000000000000c [ 71.806971][ T5577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 71.806987][ T5577] R13: 00007fa69a2c5f58 R14: 00007fa69a2c6000 R15: 0000000000000000 [ 71.807010][ T5577] [ 72.015512][ T5584] EXT4-fs: Ignoring removed oldalloc option [ 72.015542][ T5584] EXT4-fs: quotafile must be on filesystem root [ 72.460025][ T5588] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 72.460366][ T5588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.471904][ T5588] EXT4-fs (loop1): 1 truncate cleaned up [ 72.605921][ T5591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.606632][ T5591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.750066][ T5593] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.759215][ T29] audit: type=1400 audit(1792313568.030:467): avc: denied { write } for pid=5594 comm="syz.0.751" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.759260][ T29] audit: type=1400 audit(1792313568.030:468): avc: denied { open } for pid=5594 comm="syz.0.751" path="/167/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.819614][ T29] audit: type=1400 audit(1792313568.090:469): avc: denied { read } for pid=5597 comm="syz.0.752" name="trace_options" dev="tracefs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.993745][ T5611] selinux_netlink_send: 1 callbacks suppressed [ 72.993762][ T5611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5611 comm=syz.2.756 [ 73.055161][ T5618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.055347][ T5618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.089470][ T5618] FAULT_INJECTION: forcing a failure. [ 73.089470][ T5618] name failslab, interval 1, probability 0, space 0, times 0 [ 73.089504][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: syz.2.760 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.089593][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.089613][ T5618] Call Trace: [ 73.089620][ T5618] [ 73.089646][ T5618] __dump_stack+0x1d/0x30 [ 73.089674][ T5618] dump_stack_lvl+0x95/0xd0 [ 73.089710][ T5618] dump_stack+0x15/0x1b [ 73.089736][ T5618] should_fail_ex+0x262/0x280 [ 73.089771][ T5618] ? skb_clone+0x151/0x1f0 [ 73.089822][ T5618] should_failslab+0x8c/0xb0 [ 73.089852][ T5618] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 73.089886][ T5618] ? skb_clone+0x151/0x1f0 [ 73.089997][ T5618] skb_clone+0x151/0x1f0 [ 73.090031][ T5618] __netlink_deliver_tap+0x2be/0x510 [ 73.090066][ T5618] netlink_unicast+0x712/0x740 [ 73.090109][ T5618] netlink_sendmsg+0x5be/0x6f0 [ 73.090131][ T5618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.090181][ T5618] __sys_sendto+0x411/0x470 [ 73.090215][ T5618] __x64_sys_sendto+0x76/0x90 [ 73.090275][ T5618] x64_sys_call+0x200c/0x2550 [ 73.090300][ T5618] do_syscall_64+0x112/0x360 [ 73.090331][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.090403][ T5618] RIP: 0033:0x7f36cb33ed8e [ 73.090423][ T5618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.090445][ T5618] RSP: 002b:00007f36c9dd5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 73.090488][ T5618] RAX: ffffffffffffffda RBX: 00007f36c9dd76c0 RCX: 00007f36cb33ed8e [ 73.090508][ T5618] RDX: 000000000000001c RSI: 00007f36c9dd6000 RDI: 0000000000000004 [ 73.090524][ T5618] RBP: 0000000000000000 R08: 00007f36c9dd5f04 R09: 000000000000000c [ 73.090540][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 73.090556][ T5618] R13: 00007f36c9dd5f58 R14: 00007f36c9dd6000 R15: 0000000000000000 [ 73.090650][ T5618] [ 73.191525][ T5625] EXT4-fs: Ignoring removed bh option [ 73.277881][ T29] audit: type=1400 audit(1792313568.540:470): avc: denied { write } for pid=5624 comm="syz.1.762" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.347414][ T5632] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.403314][ T5636] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 73.403364][ T5636] FAT-fs (loop5): Filesystem has been set read-only [ 73.403381][ T5636] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 73.486370][ T5632] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 73.573950][ T5648] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5648 comm=syz.4.771 [ 74.012031][ T5659] EXT4-fs: Ignoring removed bh option [ 74.071629][ T5659] EXT4-fs mount: 29 callbacks suppressed [ 74.072047][ T5659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.072130][ T5659] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.163174][ T29] audit: type=1400 audit(1792313569.420:471): avc: denied { write } for pid=5658 comm="syz.5.775" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.273357][ T29] audit: type=1400 audit(1792313569.550:472): avc: denied { name_bind } for pid=5671 comm="syz.2.779" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 74.281604][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.313524][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.340262][ T5674] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5674 comm=syz.2.783 [ 74.377670][ T5682] EXT4-fs: Ignoring removed orlov option [ 74.377831][ T5682] EXT4-fs: Ignoring removed oldalloc option [ 74.377897][ T5682] EXT4-fs: Ignoring removed bh option [ 74.378872][ T5682] EXT4-fs: Mount option(s) incompatible with ext3 [ 74.404161][ T5681] set_capacity_and_notify: 7 callbacks suppressed [ 74.404202][ T5681] loop5: detected capacity change from 0 to 512 [ 74.412076][ T5681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.433732][ T29] audit: type=1400 audit(1792313569.690:473): avc: denied { write } for pid=5677 comm="syz.5.781" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.477979][ T29] audit: type=1400 audit(1792313569.730:474): avc: denied { ioctl } for pid=5677 comm="syz.5.781" path="/92/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.507194][ T5685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.509053][ T5685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.527010][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.630771][ T5701] loop2: detected capacity change from 0 to 1024 [ 74.633113][ T5701] EXT4-fs: Ignoring removed bh option [ 74.647553][ T5701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.762878][ T5712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5712 comm=syz.4.794 [ 74.834005][ T5717] loop0: detected capacity change from 0 to 1024 [ 74.835179][ T5717] EXT4-fs: Invalid want_extra_isize 1 [ 74.893960][ T5719] loop0: detected capacity change from 0 to 256 [ 75.178504][ T5732] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 75.178552][ T5732] FAT-fs (loop0): Filesystem has been set read-only [ 75.610312][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.610815][ T5739] loop5: detected capacity change from 0 to 512 [ 75.637455][ T5739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.637547][ T5739] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.669305][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.670983][ T5737] loop1: detected capacity change from 0 to 4096 [ 75.679623][ T5744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5744 comm=syz.2.805 [ 75.687774][ T5737] EXT4-fs: Ignoring removed nobh option [ 75.687812][ T5737] EXT4-fs: test_dummy_encryption option not supported [ 75.725668][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.725769][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.811908][ T5750] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 75.832260][ T5754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.832438][ T5754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.896312][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.896421][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.476418][ T5774] loop5: detected capacity change from 0 to 1024 [ 76.476860][ T5774] EXT4-fs: Ignoring removed bh option [ 76.509260][ T5778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5778 comm=syz.0.819 [ 76.510725][ T5774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.558262][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 76.558281][ T29] audit: type=1400 audit(1792313571.830:484): avc: denied { mount } for pid=5783 comm="syz.2.821" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.559118][ T5784] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 76.559151][ T5784] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 76.559182][ T5784] vhci_hcd vhci_hcd.0: Device attached [ 76.559976][ T5785] vhci_hcd: xmit failed -107 [ 76.560248][ T38] vhci_hcd vhci_hcd.0: stop threads [ 76.560262][ T38] vhci_hcd vhci_hcd.0: release socket [ 76.560305][ T38] vhci_hcd vhci_hcd.0: disconnect device [ 76.639657][ T29] audit: type=1400 audit(1792313571.910:485): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.702276][ T5796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 76.702376][ T5796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 76.816001][ T5806] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5806 comm=syz.4.831 [ 76.845603][ T5810] loop0: detected capacity change from 0 to 256 [ 76.860705][ T5810] FAT-fs (loop0): Directory bread(block 1285) failed [ 76.860803][ T5810] FAT-fs (loop0): Directory bread(block 1286) failed [ 76.860856][ T5810] FAT-fs (loop0): Directory bread(block 1287) failed [ 76.860895][ T5810] FAT-fs (loop0): Directory bread(block 1288) failed [ 76.896925][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.897066][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.902693][ T5810] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 76.909079][ T5810] FAT-fs (loop0): Directory bread(block 1285) failed [ 76.909148][ T5810] FAT-fs (loop0): Directory bread(block 1286) failed [ 76.909207][ T5810] FAT-fs (loop0): Directory bread(block 1287) failed [ 76.909259][ T5810] FAT-fs (loop0): Directory bread(block 1288) failed [ 76.944815][ T5814] loop2: detected capacity change from 0 to 128 [ 77.013184][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.013351][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.139975][ T5837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5837 comm=syz.2.843 [ 77.166552][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.166659][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.253624][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.473869][ T5863] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5863 comm=syz.5.855 [ 77.558355][ T5868] loop5: detected capacity change from 0 to 1024 [ 77.558984][ T5868] EXT4-fs: Ignoring removed bh option [ 77.611023][ T5868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.612199][ T29] audit: type=1400 audit(1792313572.880:486): avc: denied { write } for pid=5864 comm="syz.5.856" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.689681][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.689772][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.743708][ T5875] FAULT_INJECTION: forcing a failure. [ 77.743708][ T5875] name failslab, interval 1, probability 0, space 0, times 0 [ 77.743752][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: syz.1.869 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.743785][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.743802][ T5875] Call Trace: [ 77.743811][ T5875] [ 77.743821][ T5875] __dump_stack+0x1d/0x30 [ 77.743929][ T5875] dump_stack_lvl+0x95/0xd0 [ 77.743957][ T5875] dump_stack+0x15/0x1b [ 77.743979][ T5875] should_fail_ex+0x262/0x280 [ 77.744009][ T5875] should_failslab+0x8c/0xb0 [ 77.744053][ T5875] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 77.744123][ T5875] ? __request_module+0x1c4/0x3c0 [ 77.744145][ T5875] ? __request_module+0x1df/0x3c0 [ 77.744168][ T5875] ? __request_module+0x1df/0x3c0 [ 77.744197][ T5875] ? __kmalloc_cache_noprof+0x19b/0x400 [ 77.744272][ T5875] kstrdup+0x3e/0xd0 [ 77.744302][ T5875] __request_module+0x1df/0x3c0 [ 77.744338][ T5875] ctrl_getfamily+0x186/0x3b0 [ 77.744374][ T5875] genl_family_rcv_msg_doit+0x187/0x1f0 [ 77.744410][ T5875] genl_rcv_msg+0x42f/0x470 [ 77.744443][ T5875] ? __pfx_ctrl_getfamily+0x10/0x10 [ 77.744474][ T5875] netlink_rcv_skb+0x11e/0x220 [ 77.744501][ T5875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.744594][ T5875] genl_rcv+0x28/0x40 [ 77.744621][ T5875] netlink_unicast+0x665/0x740 [ 77.744756][ T5875] netlink_sendmsg+0x5be/0x6f0 [ 77.744780][ T5875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.744836][ T5875] __sys_sendto+0x411/0x470 [ 77.744868][ T5875] __x64_sys_sendto+0x76/0x90 [ 77.744899][ T5875] x64_sys_call+0x200c/0x2550 [ 77.744934][ T5875] do_syscall_64+0x112/0x360 [ 77.745090][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.745113][ T5875] RIP: 0033:0x7fefb5d3ed8e [ 77.745133][ T5875] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.745197][ T5875] RSP: 002b:00007fefb47d5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 77.745218][ T5875] RAX: ffffffffffffffda RBX: 00007fefb47d76c0 RCX: 00007fefb5d3ed8e [ 77.745232][ T5875] RDX: 000000000000001c RSI: 00007fefb47d6000 RDI: 0000000000000004 [ 77.745250][ T5875] RBP: 0000000000000000 R08: 00007fefb47d5f04 R09: 000000000000000c [ 77.745268][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 77.745357][ T5875] R13: 00007fefb47d5f58 R14: 00007fefb47d6000 R15: 0000000000000000 [ 77.745382][ T5875] [ 77.766898][ T29] audit: type=1400 audit(1792313573.040:487): avc: denied { setopt } for pid=5866 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.334096][ T5895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5895 comm=syz.2.866 [ 78.420607][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.470765][ T29] audit: type=1400 audit(1792313573.740:488): avc: denied { remount } for pid=5904 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.497039][ T5905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 78.497140][ T5905] System zones: 1-12 [ 78.497570][ T5905] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.872: missing EA_INODE flag [ 78.497644][ T5905] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 78.502110][ T5905] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.872: error while reading EA inode 12 err=-117 [ 78.502141][ T5905] loop1: lost filesystem error report for type 5 error -117 [ 78.502329][ T5905] EXT4-fs (loop1): 1 orphan inode deleted [ 78.502802][ T5905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.515011][ T29] audit: type=1400 audit(1792313573.780:489): avc: denied { write } for pid=5904 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.594840][ T29] audit: type=1400 audit(1792313573.840:490): avc: denied { write } for pid=5903 comm="syz.1.872" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.642471][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.694137][ T5919] EXT4-fs: Ignoring removed bh option [ 78.696528][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.696645][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.727809][ T5919] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.761126][ T5921] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.775257][ T3307] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 78.805123][ T5928] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5928 comm=syz.2.879 [ 78.957697][ T29] audit: type=1400 audit(1792313574.230:491): avc: denied { accept } for pid=5942 comm="syz.4.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.959203][ T29] audit: type=1400 audit(1792313574.230:492): avc: denied { write } for pid=5942 comm="syz.4.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.978004][ T5939] EXT4-fs: Ignoring removed bh option [ 79.009035][ T5939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.010226][ T29] audit: type=1400 audit(1792313574.280:493): avc: denied { write } for pid=5931 comm="syz.2.881" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.012818][ T5945] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.016167][ T5945] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.205075][ T5957] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5957 comm=syz.4.890 [ 79.271904][ T4218] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.315008][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 79.315122][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 79.315261][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 79.315567][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 79.315666][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 79.315724][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 79.315839][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 79.315894][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 79.415994][ T5972] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.424262][ T5973] tmpfs: Bad value for 'nr_inodes' [ 79.431841][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.432179][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.485641][ T5981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5981 comm=syz.4.901 [ 79.558041][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.558128][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.730704][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.791375][ T6009] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 79.843260][ T6015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6015 comm=syz.2.916 [ 80.066681][ T6024] set_capacity_and_notify: 5 callbacks suppressed [ 80.066701][ T6024] loop5: detected capacity change from 0 to 1024 [ 80.067703][ T6024] EXT4-fs: Ignoring removed bh option [ 80.097913][ T6024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.134852][ T6029] loop0: detected capacity change from 0 to 512 [ 80.135674][ T6029] EXT4-fs: inline encryption not supported [ 80.135761][ T6029] EXT4-fs: test_dummy_encryption option not supported [ 80.204702][ T6032] loop0: detected capacity change from 0 to 512 [ 80.214655][ T6032] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.923: iget: bad extended attribute block 134217728 [ 80.214681][ T6032] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.215032][ T6032] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.923: couldn't read orphan inode 15 (err -117) [ 80.215069][ T6032] loop0: lost filesystem error report for type 5 error -117 [ 80.217061][ T6032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.305515][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.355941][ T6036] loop0: detected capacity change from 0 to 1764 [ 80.373133][ T6036] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 80.538944][ T6045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6045 comm=syz.0.928 [ 80.587052][ T6047] loop0: detected capacity change from 0 to 128 [ 80.598929][ T6049] FAULT_INJECTION: forcing a failure. [ 80.598929][ T6049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.598966][ T6049] CPU: 1 UID: 0 PID: 6049 Comm: syz.1.930 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.599065][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.599082][ T6049] Call Trace: [ 80.599091][ T6049] [ 80.599133][ T6049] __dump_stack+0x1d/0x30 [ 80.599159][ T6049] dump_stack_lvl+0x95/0xd0 [ 80.599189][ T6049] dump_stack+0x15/0x1b [ 80.599217][ T6049] should_fail_ex+0x262/0x280 [ 80.599297][ T6049] should_fail+0xb/0x20 [ 80.599330][ T6049] should_fail_usercopy+0x1a/0x20 [ 80.599370][ T6049] _copy_from_user+0x1c/0xb0 [ 80.599534][ T6049] do_seccomp+0x27c/0xa40 [ 80.599576][ T6049] ? restore_fpregs_from_fpstate+0x61/0x110 [ 80.599608][ T6049] __x64_sys_seccomp+0x40/0x50 [ 80.599657][ T6049] x64_sys_call+0x3f0/0x2550 [ 80.599763][ T6049] do_syscall_64+0x112/0x360 [ 80.599804][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.599896][ T6049] RIP: 0033:0x7fefb5d7e559 [ 80.599912][ T6049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.599929][ T6049] RSP: 002b:00007fefb47d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 80.599975][ T6049] RAX: ffffffffffffffda RBX: 00007fefb6005fa0 RCX: 00007fefb5d7e559 [ 80.600059][ T6049] RDX: 0000200000000240 RSI: 000000000000000c RDI: 0000000000000001 [ 80.600140][ T6049] RBP: 00007fefb5e15ab8 R08: 0000000000000000 R09: 0000000000000000 [ 80.600156][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.600182][ T6049] R13: 00007fefb6006038 R14: 00007fefb6005fa0 R15: 00007ffc779f75a8 [ 80.600204][ T6049] [ 80.818735][ T6051] wlan0: renamed from gretap0 (while UP) [ 80.826386][ T6051] wlan0: entered promiscuous mode [ 80.894173][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.894268][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.973595][ T6055] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.999577][ T6053] FAULT_INJECTION: forcing a failure. [ 80.999577][ T6053] name fail_futex, interval 1, probability 0, space 0, times 0 [ 80.999623][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.1.932 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.999675][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.999689][ T6053] Call Trace: [ 80.999697][ T6053] [ 80.999706][ T6053] __dump_stack+0x1d/0x30 [ 80.999732][ T6053] dump_stack_lvl+0x95/0xd0 [ 80.999782][ T6053] dump_stack+0x15/0x1b [ 80.999824][ T6053] should_fail_ex+0x262/0x280 [ 80.999850][ T6053] should_fail+0xb/0x20 [ 80.999875][ T6053] get_futex_key+0x12d/0xb10 [ 80.999899][ T6053] ? __memcg_slab_free_hook+0x78/0x340 [ 80.999990][ T6053] futex_wait_setup+0x49/0x3e0 [ 81.000014][ T6053] ? rcu_segcblist_enqueue+0x9b/0xb0 [ 81.000044][ T6053] ? call_rcu+0x2be/0x440 [ 81.000110][ T6053] __futex_wait+0xa9/0x260 [ 81.000129][ T6053] ? __pfx_futex_wake_mark+0x10/0x10 [ 81.000199][ T6053] futex_wait+0x98/0x1c0 [ 81.000229][ T6053] do_futex+0x391/0x460 [ 81.000266][ T6053] __se_sys_futex+0x2f6/0x370 [ 81.000351][ T6053] __x64_sys_futex+0x78/0x90 [ 81.000419][ T6053] x64_sys_call+0x22e2/0x2550 [ 81.000482][ T6053] do_syscall_64+0x112/0x360 [ 81.000517][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.000539][ T6053] RIP: 0033:0x7fefb5d7e559 [ 81.000553][ T6053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.000643][ T6053] RSP: 002b:00007fefb47d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.000662][ T6053] RAX: ffffffffffffffda RBX: 00007fefb6005fa8 RCX: 00007fefb5d7e559 [ 81.000674][ T6053] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fefb6005fa8 [ 81.000687][ T6053] RBP: 00007fefb6005fa0 R08: 0000000000000000 R09: 0000000000000000 [ 81.000703][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.000737][ T6053] R13: 00007fefb6006038 R14: 00007ffc779f74c0 R15: 00007ffc779f75a8 [ 81.000778][ T6053] [ 81.164525][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.655376][ T6077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6077 comm=syz.1.940 [ 81.740519][ T6081] loop1: detected capacity change from 0 to 4096 [ 81.749626][ T6081] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.749677][ T6081] EXT4-fs: test_dummy_encryption option not supported [ 81.870724][ T6085] loop1: detected capacity change from 0 to 1024 [ 81.874325][ T6085] EXT4-fs: Ignoring removed bh option [ 81.896276][ T6085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.898055][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 81.898079][ T29] audit: type=1400 audit(1792313577.170:499): avc: denied { write } for pid=6084 comm="syz.1.944" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.262162][ T6097] loop0: detected capacity change from 0 to 128 [ 82.269953][ T6097] vfat: Unknown parameter 'nnonumtail' [ 82.375047][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.375146][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.430676][ T6102] FAULT_INJECTION: forcing a failure. [ 82.430676][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 82.430776][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.5.950 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.430810][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.430874][ T6102] Call Trace: [ 82.430881][ T6102] [ 82.430889][ T6102] __dump_stack+0x1d/0x30 [ 82.430914][ T6102] dump_stack_lvl+0x95/0xd0 [ 82.430956][ T6102] dump_stack+0x15/0x1b [ 82.430985][ T6102] should_fail_ex+0x262/0x280 [ 82.431077][ T6102] ? __alloc_skb+0x2e0/0x6f0 [ 82.431108][ T6102] should_failslab+0x8c/0xb0 [ 82.431153][ T6102] kmem_cache_alloc_node_noprof+0x82/0x400 [ 82.431276][ T6102] ? netlink_insert+0x7d5/0x950 [ 82.431316][ T6102] ? __alloc_skb+0x2e0/0x6f0 [ 82.431340][ T6102] __alloc_skb+0x2e0/0x6f0 [ 82.431429][ T6102] ? __alloc_skb+0x209/0x6f0 [ 82.431460][ T6102] netlink_alloc_large_skb+0xbf/0xf0 [ 82.431508][ T6102] netlink_sendmsg+0x40c/0x6f0 [ 82.431541][ T6102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.431675][ T6102] __sys_sendto+0x411/0x470 [ 82.431707][ T6102] __x64_sys_sendto+0x76/0x90 [ 82.431732][ T6102] x64_sys_call+0x200c/0x2550 [ 82.431776][ T6102] do_syscall_64+0x112/0x360 [ 82.431846][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.431869][ T6102] RIP: 0033:0x7fa69b82ed8e [ 82.431942][ T6102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.431969][ T6102] RSP: 002b:00007fa69a2c5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.431998][ T6102] RAX: ffffffffffffffda RBX: 00007fa69a2c76c0 RCX: 00007fa69b82ed8e [ 82.432018][ T6102] RDX: 000000000000001c RSI: 00007fa69a2c6000 RDI: 0000000000000004 [ 82.432037][ T6102] RBP: 0000000000000000 R08: 00007fa69a2c5f04 R09: 000000000000000c [ 82.432055][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 82.432100][ T6102] R13: 00007fa69a2c5f58 R14: 00007fa69a2c6000 R15: 0000000000000000 [ 82.432120][ T6102] [ 82.771670][ T6110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6110 comm=syz.4.953 [ 82.803581][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.961579][ T6116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.000443][ T6126] loop5: detected capacity change from 0 to 512 [ 83.026524][ T6126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.026588][ T6126] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.074319][ T29] audit: type=1400 audit(1792313578.350:500): avc: denied { write } for pid=6124 comm="syz.5.959" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.074853][ T29] audit: type=1400 audit(1792313578.350:501): avc: denied { read write } for pid=6124 comm="syz.5.959" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.074933][ T29] audit: type=1400 audit(1792313578.350:502): avc: denied { open } for pid=6124 comm="syz.5.959" path="/123/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.076084][ T6126] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 83.185454][ T124] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8421510 with max blocks 1 with error 28 [ 83.185499][ T124] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.185499][ T124] [ 83.185595][ T124] EXT4-fs (loop5): Total free blocks count 0 [ 83.185613][ T124] EXT4-fs (loop5): Free/Dirty block details [ 83.185628][ T124] EXT4-fs (loop5): free_blocks=65280 [ 83.185645][ T124] EXT4-fs (loop5): dirty_blocks=1 [ 83.185660][ T124] EXT4-fs (loop5): Block reservation details [ 83.185675][ T124] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 83.186698][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.379523][ T6142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6142 comm=syz.1.965 [ 83.417348][ T6138] loop5: detected capacity change from 0 to 8192 [ 83.453670][ T6138] loop5: p1 < > p3 < p5 > p4 [ 83.466993][ T6144] EXT4-fs: Ignoring removed bh option [ 83.485175][ T6144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.506437][ T29] audit: type=1400 audit(1792313578.780:503): avc: denied { write } for pid=6143 comm="syz.1.966" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.607171][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 83.613981][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 83.614858][ T3345] udevd[3345]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 83.643778][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 83.844682][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.844822][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.360329][ T29] audit: type=1400 audit(1792313579.630:504): avc: denied { associate } for pid=6170 comm="syz.5.973" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.377357][ T29] audit: type=1400 audit(1792313579.650:505): avc: denied { mounton } for pid=6168 comm="syz.5.973" path="/proc/294/task" dev="proc" ino=14056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 84.584859][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.702987][ T29] audit: type=1400 audit(1792313579.950:506): avc: denied { read } for pid=6171 comm="syz.5.974" name="kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 84.703048][ T29] audit: type=1400 audit(1792313579.950:507): avc: denied { open } for pid=6171 comm="syz.5.974" path="/128/proc_mnt/kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 85.101041][ T6178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6178 comm=syz.0.977 [ 85.161227][ T6182] set_capacity_and_notify: 1 callbacks suppressed [ 85.161315][ T6182] loop1: detected capacity change from 0 to 256 [ 85.231223][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.231329][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.251677][ T6186] loop0: detected capacity change from 0 to 164 [ 85.252307][ T6186] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff0xffffffffffffffff01777777777777777777777' [ 85.315236][ T6192] ./dev/sda1: Can't lookup blockdev [ 85.401807][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.401929][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.437514][ T6201] FAULT_INJECTION: forcing a failure. [ 85.437514][ T6201] name fail_futex, interval 1, probability 0, space 0, times 0 [ 85.437548][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.5.988 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.437581][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.437598][ T6201] Call Trace: [ 85.437616][ T6201] [ 85.437627][ T6201] __dump_stack+0x1d/0x30 [ 85.437655][ T6201] dump_stack_lvl+0x95/0xd0 [ 85.437676][ T6201] dump_stack+0x15/0x1b [ 85.437697][ T6201] should_fail_ex+0x262/0x280 [ 85.437729][ T6201] should_fail+0xb/0x20 [ 85.437806][ T6201] get_futex_key+0x12d/0xb10 [ 85.437832][ T6201] ? __refill_obj_stock+0x1f8/0x3d0 [ 85.437936][ T6201] futex_wake+0x89/0x400 [ 85.437964][ T6201] ? handle_mm_fault+0x370d/0x3bb0 [ 85.437998][ T6201] do_futex+0x3f8/0x460 [ 85.438086][ T6201] __se_sys_futex+0x2f6/0x370 [ 85.438183][ T6201] __x64_sys_futex+0x78/0x90 [ 85.438216][ T6201] x64_sys_call+0x22e2/0x2550 [ 85.438249][ T6201] do_syscall_64+0x112/0x360 [ 85.438286][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.438317][ T6201] RIP: 0033:0x7fa69b86e559 [ 85.438339][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.438365][ T6201] RSP: 002b:00007fa69a2c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 85.438416][ T6201] RAX: ffffffffffffffda RBX: 00007fa69baf5fa8 RCX: 00007fa69b86e559 [ 85.438429][ T6201] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa69baf5fac [ 85.438446][ T6201] RBP: 00007fa69baf5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 85.438518][ T6201] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 85.438537][ T6201] R13: 00007fa69baf6038 R14: 00007ffc38002250 R15: 00007ffc38002338 [ 85.438561][ T6201] [ 86.098607][ T6213] __nla_validate_parse: 4 callbacks suppressed [ 86.098628][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'. [ 86.737567][ T6229] loop1: detected capacity change from 0 to 512 [ 86.802575][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.802720][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.835893][ T6234] FAULT_INJECTION: forcing a failure. [ 86.835893][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 86.835923][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.1.1001 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.835958][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.836051][ T6234] Call Trace: [ 86.836117][ T6234] [ 86.836129][ T6234] __dump_stack+0x1d/0x30 [ 86.836171][ T6234] dump_stack_lvl+0x95/0xd0 [ 86.836197][ T6234] dump_stack+0x15/0x1b [ 86.836309][ T6234] should_fail_ex+0x262/0x280 [ 86.836368][ T6234] should_failslab+0x8c/0xb0 [ 86.836470][ T6234] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 86.836516][ T6234] ? __request_module+0x1c4/0x3c0 [ 86.836593][ T6234] ? __request_module+0x1df/0x3c0 [ 86.836621][ T6234] ? __request_module+0x1df/0x3c0 [ 86.836720][ T6234] ? __kmalloc_cache_noprof+0x19b/0x400 [ 86.836755][ T6234] kstrdup+0x3e/0xd0 [ 86.836787][ T6234] __request_module+0x1df/0x3c0 [ 86.836881][ T6234] ctrl_getfamily+0x186/0x3b0 [ 86.836912][ T6234] genl_family_rcv_msg_doit+0x187/0x1f0 [ 86.836961][ T6234] genl_rcv_msg+0x42f/0x470 [ 86.837008][ T6234] ? __pfx_ctrl_getfamily+0x10/0x10 [ 86.837042][ T6234] netlink_rcv_skb+0x11e/0x220 [ 86.837081][ T6234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.837192][ T6234] genl_rcv+0x28/0x40 [ 86.837222][ T6234] netlink_unicast+0x665/0x740 [ 86.837351][ T6234] netlink_sendmsg+0x5be/0x6f0 [ 86.837386][ T6234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.837499][ T6234] __sys_sendto+0x411/0x470 [ 86.837539][ T6234] __x64_sys_sendto+0x76/0x90 [ 86.837572][ T6234] x64_sys_call+0x200c/0x2550 [ 86.837621][ T6234] do_syscall_64+0x112/0x360 [ 86.837658][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.837690][ T6234] RIP: 0033:0x7fefb5d3ed8e [ 86.837724][ T6234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.837745][ T6234] RSP: 002b:00007fefb47d5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 86.837798][ T6234] RAX: ffffffffffffffda RBX: 00007fefb47d76c0 RCX: 00007fefb5d3ed8e [ 86.837815][ T6234] RDX: 000000000000001c RSI: 00007fefb47d6000 RDI: 0000000000000004 [ 86.837833][ T6234] RBP: 0000000000000000 R08: 00007fefb47d5f04 R09: 000000000000000c [ 86.837851][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 86.837869][ T6234] R13: 00007fefb47d5f58 R14: 00007fefb47d6000 R15: 0000000000000000 [ 86.837895][ T6234] [ 87.205658][ T6243] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 80 [ 87.991696][ T6250] loop1: detected capacity change from 0 to 1024 [ 88.005011][ T6250] EXT4-fs: Ignoring removed bh option [ 88.025032][ T6250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.026235][ T29] audit: type=1400 audit(1792313583.300:508): avc: denied { write } for pid=6247 comm="syz.1.1006" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.935634][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.056609][ T6279] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 80 [ 90.084859][ T6287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.218203][ T6296] loop5: detected capacity change from 0 to 512 [ 90.291374][ T6296] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 90.475659][ T6296] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 90.475982][ T6296] EXT4-fs (loop5): Remounting filesystem read-only [ 90.476899][ T6296] EXT4-fs (loop5): 1 truncate cleaned up [ 90.477731][ T6296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.477861][ T6296] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.748235][ T55] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 90.748286][ T55] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.748320][ T55] Quota error (device loop5): write_blk: dquota write failed [ 90.748352][ T55] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 90.748373][ T55] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.748396][ T55] Quota error (device loop5): write_blk: dquota write failed [ 90.748413][ T55] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 90.748431][ T55] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.748507][ T55] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 90.748566][ T55] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 90.748599][ T55] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.868850][ T6306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.868998][ T6306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.988187][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.027534][ T6320] loop5: detected capacity change from 0 to 512 [ 91.030217][ T6320] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1028: iget: bad i_size value: 38620345925642 [ 91.030318][ T6320] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.030753][ T6320] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1028: couldn't read orphan inode 15 (err -117) [ 91.030844][ T6320] loop5: lost filesystem error report for type 5 error -117 [ 91.032079][ T6320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.048082][ T29] audit: type=1400 audit(1792313586.320:509): avc: denied { write } for pid=6319 comm="syz.5.1028" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.142639][ T6320] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1028: bg 0: block 5: invalid block bitmap [ 91.143627][ T6320] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 920 with error 28 [ 91.143788][ T6320] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.143788][ T6320] [ 91.143829][ T6320] EXT4-fs (loop5): Total free blocks count 0 [ 91.143895][ T6320] EXT4-fs (loop5): Free/Dirty block details [ 91.143941][ T6320] EXT4-fs (loop5): free_blocks=0 [ 91.143982][ T6320] EXT4-fs (loop5): dirty_blocks=920 [ 91.144038][ T6320] EXT4-fs (loop5): Block reservation details [ 91.144070][ T6320] EXT4-fs (loop5): i_reserved_data_blocks=920 [ 91.181078][ T6320] EXT4-fs (loop5): shut down requested (0) [ 91.293083][ T6326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.541070][ T6340] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 80 [ 92.026059][ T6348] loop5: detected capacity change from 0 to 512 [ 92.028762][ T6348] EXT4-fs: Ignoring removed oldalloc option [ 92.067836][ T6348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.067968][ T6348] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.098271][ T6348] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 92.246203][ T6356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.305903][ T6365] loop0: detected capacity change from 0 to 512 [ 92.326343][ T6365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.326399][ T6365] ext4 filesystem being mounted at /225/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.358290][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.576239][ T6383] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.619568][ T6384] ip_tables: iptables: counters copy to user failed while replacing table [ 92.622843][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.623795][ T6384] ip_tables: iptables: counters copy to user failed while replacing table [ 92.723091][ T6386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.749349][ T6392] zero sized request [ 92.786362][ T6396] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 80 [ 92.872838][ T6404] loop5: detected capacity change from 0 to 512 [ 92.898868][ T6404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.923976][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.981726][ T6412] loop5: detected capacity change from 0 to 1024 [ 92.996559][ T6412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.033961][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.061976][ T6416] loop5: detected capacity change from 0 to 128 [ 93.272142][ T6427] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.639549][ T6444] loop0: detected capacity change from 0 to 4096 [ 93.653850][ T6444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.676211][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.051544][ T6460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.588365][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.588471][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.066217][ T6503] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.157069][ T32] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.426970][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.428961][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.537630][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 95.537701][ T29] audit: type=1400 audit(1792313590.810:527): avc: denied { bind } for pid=6525 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.539977][ T29] audit: type=1400 audit(1792313590.810:528): avc: denied { setopt } for pid=6525 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.592514][ T6528] ip_tables: iptables: counters copy to user failed while replacing table [ 95.687203][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.723630][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.725957][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.763882][ T32] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.803072][ T55] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.803175][ T55] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.803216][ T55] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.803266][ T55] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.810952][ T32] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.877877][ T32] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.968722][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.968761][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.968842][ T6503] bridge_slave_0: entered allmulticast mode [ 95.972391][ T6503] bridge_slave_0: entered promiscuous mode [ 96.017127][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.017166][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.017290][ T6503] bridge_slave_1: entered allmulticast mode [ 96.017873][ T6503] bridge_slave_1: entered promiscuous mode [ 96.056971][ T6503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.057723][ T32] bridge_slave_1: left allmulticast mode [ 96.057744][ T32] bridge_slave_1: left promiscuous mode [ 96.057843][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.058677][ T32] bridge_slave_0: left allmulticast mode [ 96.058693][ T32] bridge_slave_0: left promiscuous mode [ 96.058847][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.170796][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.184535][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.187225][ T32] bond0 (unregistering): Released all slaves [ 96.209018][ T6503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.246735][ T6503] team0: Port device team_slave_0 added [ 96.249595][ T6503] team0: Port device team_slave_1 added [ 96.282342][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.282356][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.282392][ T6503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.337653][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.338361][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.338409][ T6503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.466958][ T6503] hsr_slave_0: entered promiscuous mode [ 96.469124][ T6503] hsr_slave_1: entered promiscuous mode [ 96.470372][ T6503] debugfs: 'hsr0' already exists in 'hsr' [ 96.470385][ T6503] Cannot create hsr debugfs directory [ 96.698103][ T29] audit: type=1400 audit(1792313591.960:529): avc: denied { watch } for pid=6562 comm="syz.0.1119" path="/" dev="ramfs" ino=16468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 96.757164][ T32] hsr_slave_0: left promiscuous mode [ 96.757454][ T32] hsr_slave_1: left promiscuous mode [ 96.757872][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.757895][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.758302][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.758318][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.761247][ T32] veth1_macvtap: left promiscuous mode [ 96.761273][ T32] veth0_macvtap: left promiscuous mode [ 96.761346][ T32] veth1_vlan: left promiscuous mode [ 96.761380][ T32] veth0_vlan: left promiscuous mode [ 96.860025][ T32] team0 (unregistering): Port device team_slave_1 removed [ 96.862559][ T32] team0 (unregistering): Port device team_slave_0 removed [ 96.934078][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 96.991627][ T6580] loop1: detected capacity change from 0 to 512 [ 97.015376][ T6580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.015459][ T6580] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.047537][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.065161][ T6585] loop1: detected capacity change from 0 to 512 [ 97.065490][ T6585] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.066692][ T6585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.087500][ T6585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.087645][ T6585] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.091779][ T6585] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.1125: corrupted xattr block 6: invalid header [ 97.092488][ T6585] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 97.092580][ T6585] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.1125: corrupted xattr block 6: invalid header [ 97.093700][ T6585] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 97.095005][ T29] audit: type=1400 audit(1792313592.360:530): avc: denied { setattr } for pid=6584 comm="syz.1.1125" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.095400][ T6585] EXT4-fs error (device loop1): ext4_xattr_block_find:1885: inode #12: comm syz.1.1125: corrupted xattr block 6: invalid header [ 97.151016][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.215768][ T6589] loop1: detected capacity change from 0 to 128 [ 97.221696][ T6589] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.221926][ T6589] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.253189][ T29] audit: type=1400 audit(1792313592.530:531): avc: denied { write } for pid=6588 comm="syz.1.1126" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.276379][ T29] audit: type=1400 audit(1792313592.550:532): avc: denied { setattr } for pid=6588 comm="syz.1.1126" path="/254/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.322331][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.358372][ T6598] loop1: detected capacity change from 0 to 1024 [ 97.361599][ T6598] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 97.369859][ T6598] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.1130: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.369973][ T6598] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.370184][ T6598] EXT4-fs (loop1): Remounting filesystem read-only [ 97.370248][ T6598] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 97.370314][ T6598] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 97.370418][ T6598] EXT4-fs (loop1): 1 orphan inode deleted [ 97.371579][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.445738][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.477397][ T6606] loop1: detected capacity change from 0 to 128 [ 97.481824][ T6606] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.482080][ T6606] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.502551][ T29] audit: type=1400 audit(1792313592.760:533): avc: denied { write } for pid=6605 comm="syz.1.1132" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.502581][ T29] audit: type=1400 audit(1792313592.760:534): avc: denied { write } for pid=6605 comm="syz.1.1132" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.537349][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.604895][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.605026][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.615358][ T6613] FAULT_INJECTION: forcing a failure. [ 97.615358][ T6613] name fail_futex, interval 1, probability 0, space 0, times 0 [ 97.615447][ T6613] CPU: 0 UID: 0 PID: 6613 Comm: syz.1.1135 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.615566][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.615612][ T6613] Call Trace: [ 97.615634][ T6613] [ 97.615656][ T6613] __dump_stack+0x1d/0x30 [ 97.615735][ T6613] dump_stack_lvl+0x95/0xd0 [ 97.615828][ T6613] dump_stack+0x15/0x1b [ 97.615890][ T6613] should_fail_ex+0x262/0x280 [ 97.616007][ T6613] should_fail+0xb/0x20 [ 97.616147][ T6613] get_futex_key+0x12d/0xb10 [ 97.616258][ T6613] futex_wait_setup+0x49/0x3e0 [ 97.616334][ T6613] ? tick_program_event+0x79/0xc0 [ 97.616497][ T6613] __futex_wait+0xa9/0x260 [ 97.616586][ T6613] ? __pfx_futex_wake_mark+0x10/0x10 [ 97.616663][ T6613] futex_wait+0x98/0x1c0 [ 97.616746][ T6613] do_futex+0x391/0x460 [ 97.616986][ T6613] __se_sys_futex+0x2f6/0x370 [ 97.617097][ T6613] __x64_sys_futex+0x78/0x90 [ 97.617195][ T6613] x64_sys_call+0x22e2/0x2550 [ 97.617331][ T6613] do_syscall_64+0x112/0x360 [ 97.617435][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.617513][ T6613] RIP: 0033:0x7fefb5d7e559 [ 97.617564][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.617633][ T6613] RSP: 002b:00007fefb47d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.617683][ T6613] RAX: ffffffffffffffda RBX: 00007fefb6005fa8 RCX: 00007fefb5d7e559 [ 97.617728][ T6613] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fefb6005fa8 [ 97.617739][ T6613] RBP: 00007fefb6005fa0 R08: 0000000000000000 R09: 0000000000000000 [ 97.617772][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.617806][ T6613] R13: 00007fefb6006038 R14: 00007ffc779f74c0 R15: 00007ffc779f75a8 [ 97.617934][ T6613] [ 98.526521][ T6527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.530632][ T6503] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 98.555742][ T6503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.556428][ T6503] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 98.566034][ T6503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.571806][ T6503] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 98.597494][ T6503] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.598437][ T6503] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 98.610796][ T6503] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.670463][ T6634] loop0: detected capacity change from 0 to 1024 [ 98.695678][ T6634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.695802][ T6634] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.700308][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.707876][ T6503] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.714083][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.714244][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.721355][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.721482][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.779614][ T6503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.815991][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.881225][ T3025] 8021q: adding VLAN 0 to HW filter on device eth5 [ 98.913786][ T6662] loop0: detected capacity change from 0 to 512 [ 98.914428][ T6662] EXT4-fs: test_dummy_encryption option not supported [ 99.048102][ T6503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.246251][ T6699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.285327][ T3025] 8021q: adding VLAN 0 to HW filter on device eth6 [ 99.738185][ T6503] veth0_vlan: entered promiscuous mode [ 99.741709][ T6503] veth1_vlan: entered promiscuous mode [ 99.852601][ T6503] veth0_macvtap: entered promiscuous mode [ 99.860414][ T6503] veth1_macvtap: entered promiscuous mode [ 99.875507][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.878396][ T6725] loop1: detected capacity change from 0 to 1024 [ 99.878813][ T6725] EXT4-fs: inline encryption not supported [ 99.889087][ T6725] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.904442][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.911766][ T6725] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.1153: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.911819][ T6725] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 99.912215][ T6725] EXT4-fs (loop1): Remounting filesystem read-only [ 99.912279][ T6725] EXT4-fs (loop1): 1 orphan inode deleted [ 99.921057][ T6725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.940320][ T32] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.941024][ T32] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.941173][ T32] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.941311][ T32] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.215916][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.477904][ T6747] xt_socket: unknown flags 0x8 [ 100.480559][ T3025] 8021q: adding VLAN 0 to HW filter on device eth7 [ 100.547358][ T6761] loop6: detected capacity change from 0 to 128 [ 100.598932][ T6761] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.619685][ T6765] 9pnet_fd: p9_fd_create_tcp (6765): problem connecting socket to 127.0.0.1 [ 100.694875][ T6761] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.795022][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 100.795053][ T29] audit: type=1400 audit(1792313596.070:549): avc: denied { write } for pid=6752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.910601][ T29] audit: type=1400 audit(1792313596.180:550): avc: denied { write } for pid=6769 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.044943][ T6773] ip_tables: iptables: counters copy to user failed while replacing table [ 101.046088][ T6773] ip_tables: iptables: counters copy to user failed while replacing table [ 101.140043][ T3025] 8021q: adding VLAN 0 to HW filter on device eth8 [ 101.181111][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.181251][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.286005][ T6798] xt_SECMARK: invalid mode: 2 [ 101.399846][ T29] audit: type=1400 audit(1792313596.670:551): avc: denied { shutdown } for pid=6812 comm="syz.1.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.470468][ T6822] loop1: detected capacity change from 0 to 2048 [ 101.481550][ T6822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.494029][ T6822] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 101.494196][ T6822] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 101.494384][ T6822] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.494384][ T6822] [ 101.494412][ T6822] EXT4-fs (loop1): Total free blocks count 0 [ 101.494444][ T6822] EXT4-fs (loop1): Free/Dirty block details [ 101.494480][ T6822] EXT4-fs (loop1): free_blocks=2415919504 [ 101.494544][ T6822] EXT4-fs (loop1): dirty_blocks=48 [ 101.494580][ T6822] EXT4-fs (loop1): Block reservation details [ 101.494611][ T6822] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 101.500447][ T6822] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 101.605782][ T6832] process 'syz.0.1184' launched './file0' with NULL argv: empty string added [ 101.606056][ T29] audit: type=1400 audit(1792313596.880:552): avc: denied { execute } for pid=6831 comm="syz.0.1184" name="file0" dev="ramfs" ino=16860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 101.606093][ T29] audit: type=1400 audit(1792313596.880:553): avc: denied { execute_no_trans } for pid=6831 comm="syz.0.1184" path="/file0" dev="ramfs" ino=16860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 101.607911][ T6830] capability: warning: `syz.1.1183' uses 32-bit capabilities (legacy support in use) [ 101.691191][ T6836] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.704107][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.704548][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.129921][ T6858] loop1: detected capacity change from 0 to 128 [ 103.130479][ T6858] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.130759][ T6858] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.200279][ T6860] loop1: detected capacity change from 0 to 128 [ 103.209910][ T6860] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.210269][ T6860] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.325288][ T6874] loop1: detected capacity change from 0 to 512 [ 103.414036][ T6884] loop1: detected capacity change from 0 to 4096 [ 103.414573][ T6884] EXT4-fs: test_dummy_encryption option not supported [ 103.461508][ T6886] loop1: detected capacity change from 0 to 4096 [ 104.230150][ T6789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.525618][ T6932] 9pnet_fd: p9_fd_create_tcp (6932): problem connecting socket to 127.0.0.1 [ 105.351045][ T6971] loop1: detected capacity change from 0 to 128 [ 105.362208][ T6971] FAT-fs (loop1): data area starts beyond volume (1024 > 255) [ 105.362240][ T6971] FAT-fs (loop1): Can't find a valid FAT filesystem [ 105.369652][ T6972] loop5: detected capacity change from 0 to 764 [ 107.018627][ T6989] 9pnet_fd: p9_fd_create_tcp (6989): problem connecting socket to 127.0.0.1 [ 107.455039][ T6922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.502785][ T29] audit: type=1400 audit(1792313602.770:554): avc: denied { create } for pid=7002 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.509768][ T29] audit: type=1400 audit(1792313602.780:555): avc: denied { setopt } for pid=7002 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.545402][ T7004] loop1: detected capacity change from 0 to 1024 [ 107.554412][ T7004] EXT4-fs: Ignoring removed bh option [ 107.572147][ T7004] EXT4-fs mount: 5 callbacks suppressed [ 107.572162][ T7004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.589683][ T29] audit: type=1400 audit(1792313602.860:556): avc: denied { write } for pid=7002 comm="syz.1.1255" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.634576][ T7020] loop6: detected capacity change from 0 to 512 [ 107.640326][ T7020] EXT4-fs: Ignoring removed bh option [ 107.648197][ T7019] loop5: detected capacity change from 0 to 512 [ 107.664115][ T7020] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1258: inode #13: comm syz.6.1258: iget: illegal inode # [ 107.664143][ T7020] loop6: lost filesystem error report for type 5 error -117 [ 107.664280][ T7020] EXT4-fs (loop6): Remounting filesystem read-only [ 107.664742][ T7020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.748311][ T7019] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1257: iget: bad extended attribute block 6 [ 107.748355][ T7019] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.748622][ T7019] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1257: couldn't read orphan inode 15 (err -117) [ 107.748708][ T7019] loop5: lost filesystem error report for type 5 error -117 [ 107.751697][ T7019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.170988][ T7032] FAULT_INJECTION: forcing a failure. [ 108.170988][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 108.171019][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.5.1257 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.171075][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.171157][ T7032] Call Trace: [ 108.171164][ T7032] [ 108.171171][ T7032] __dump_stack+0x1d/0x30 [ 108.171211][ T7032] dump_stack_lvl+0x95/0xd0 [ 108.171241][ T7032] dump_stack+0x15/0x1b [ 108.171268][ T7032] should_fail_ex+0x262/0x280 [ 108.171320][ T7032] ? security_inode_alloc+0x37/0x100 [ 108.171361][ T7032] should_failslab+0x8c/0xb0 [ 108.171400][ T7032] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 108.171439][ T7032] ? security_inode_alloc+0x37/0x100 [ 108.171508][ T7032] security_inode_alloc+0x37/0x100 [ 108.171544][ T7032] inode_init_always_gfp+0x495/0x4e0 [ 108.171587][ T7032] ? __pfx_sock_alloc_inode+0x10/0x10 [ 108.171627][ T7032] alloc_inode+0x58/0x170 [ 108.171681][ T7032] sock_create_lite+0x79/0x290 [ 108.171727][ T7032] __netlink_kernel_create+0x8d/0x550 [ 108.171787][ T7032] genl_pernet_init+0x4e/0xc0 [ 108.171819][ T7032] ? __pfx_genl_rcv+0x10/0x10 [ 108.171854][ T7032] ? __pfx_genl_bind+0x10/0x10 [ 108.171932][ T7032] ? __pfx_genl_unbind+0x10/0x10 [ 108.171959][ T7032] ? __pfx_genl_release+0x10/0x10 [ 108.171996][ T7032] ops_init+0x22a/0x2e0 [ 108.172029][ T7032] setup_net+0x9f/0x230 [ 108.172111][ T7032] copy_net_ns+0x333/0x490 [ 108.172279][ T7032] create_new_namespaces+0x1f6/0x420 [ 108.172317][ T7032] unshare_nsproxy_namespaces+0x115/0x150 [ 108.172360][ T7032] ksys_unshare+0x3fd/0x6f0 [ 108.172454][ T7032] __x64_sys_unshare+0x1f/0x30 [ 108.172504][ T7032] x64_sys_call+0x1e33/0x2550 [ 108.172537][ T7032] do_syscall_64+0x112/0x360 [ 108.172612][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.172636][ T7032] RIP: 0033:0x7fa69b86e559 [ 108.172652][ T7032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.172672][ T7032] RSP: 002b:00007fa69a285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 108.172721][ T7032] RAX: ffffffffffffffda RBX: 00007fa69baf6180 RCX: 00007fa69b86e559 [ 108.172737][ T7032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 108.172750][ T7032] RBP: 00007fa69b905ab8 R08: 0000000000000000 R09: 0000000000000000 [ 108.172763][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.172778][ T7032] R13: 00007fa69baf6218 R14: 00007fa69baf6180 R15: 00007ffc38002338 [ 108.172843][ T7032] [ 108.755436][ T6503] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.761362][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.786083][ T4218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.826434][ T7045] set_capacity_and_notify: 1 callbacks suppressed [ 108.826469][ T7045] loop1: detected capacity change from 0 to 512 [ 108.856770][ T7045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 108.856870][ T7045] System zones: 1-12 [ 108.857185][ T7045] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.1263: missing EA_INODE flag [ 108.857213][ T7045] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 108.857312][ T7045] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1263: error while reading EA inode 12 err=-117 [ 108.857339][ T7045] loop1: lost filesystem error report for type 5 error -117 [ 108.857545][ T7045] EXT4-fs (loop1): 1 orphan inode deleted [ 108.858034][ T7045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.904749][ T29] audit: type=1400 audit(1792313604.180:557): avc: denied { write } for pid=7041 comm="syz.1.1263" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.968664][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.994568][ T7061] loop1: detected capacity change from 0 to 512 [ 109.017341][ T7061] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 109.017371][ T7061] System zones: 0-7 [ 109.018136][ T7061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.030439][ T29] audit: type=1400 audit(1792313604.300:558): avc: denied { write } for pid=7059 comm="syz.1.1270" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.076778][ T7068] loop6: detected capacity change from 0 to 1024 [ 109.080289][ T7068] EXT4-fs: Ignoring removed bh option [ 109.099892][ T7068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.115761][ T29] audit: type=1400 audit(1792313604.380:559): avc: denied { write } for pid=7067 comm="syz.6.1274" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.137644][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.209241][ T7068] ================================================================== [ 109.209278][ T7068] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 109.209321][ T7068] [ 109.209329][ T7068] write to 0xffff8881072f866c of 4 bytes by task 7076 on cpu 0: [ 109.209351][ T7068] xas_set_mark+0x12b/0x140 [ 109.209380][ T7068] tag_pages_for_writeback+0xe3/0x2e0 [ 109.209418][ T7068] ext4_do_writepages+0x6b4/0x2870 [ 109.209456][ T7068] ext4_writepages+0x191/0x300 [ 109.209479][ T7068] do_writepages+0x1b9/0x300 [ 109.209519][ T7068] file_write_and_wait_range+0x178/0x2f0 [ 109.209548][ T7068] ext4_sync_file+0x114/0x5c0 [ 109.209586][ T7068] vfs_fsync_range+0xc5/0xe0 [ 109.209618][ T7068] ext4_buffered_write_iter+0x427/0x480 [ 109.209658][ T7068] ext4_file_write_iter+0x36e/0x1020 [ 109.209695][ T7068] iter_file_splice_write+0x6a0/0xa60 [ 109.209722][ T7068] direct_splice_actor+0x158/0x280 [ 109.209748][ T7068] splice_direct_to_actor+0x2f9/0x680 [ 109.209776][ T7068] do_splice_direct+0x119/0x1a0 [ 109.209802][ T7068] do_sendfile+0x37d/0x640 [ 109.209829][ T7068] __x64_sys_sendfile64+0x105/0x150 [ 109.209857][ T7068] x64_sys_call+0x1015/0x2550 [ 109.209889][ T7068] do_syscall_64+0x112/0x360 [ 109.209942][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.209963][ T7068] [ 109.209969][ T7068] read to 0xffff8881072f866c of 4 bytes by task 7068 on cpu 1: [ 109.209988][ T7068] file_write_and_wait_range+0x130/0x2f0 [ 109.210019][ T7068] ext4_sync_file+0x114/0x5c0 [ 109.210059][ T7068] vfs_fsync_range+0xc5/0xe0 [ 109.210083][ T7068] ext4_buffered_write_iter+0x427/0x480 [ 109.210124][ T7068] ext4_file_write_iter+0x36e/0x1020 [ 109.210164][ T7068] iter_file_splice_write+0x6a0/0xa60 [ 109.210193][ T7068] direct_splice_actor+0x158/0x280 [ 109.210221][ T7068] splice_direct_to_actor+0x2f9/0x680 [ 109.210242][ T7068] do_splice_direct+0x119/0x1a0 [ 109.210262][ T7068] do_sendfile+0x37d/0x640 [ 109.210299][ T7068] __x64_sys_sendfile64+0x105/0x150 [ 109.210327][ T7068] x64_sys_call+0x1015/0x2550 [ 109.210360][ T7068] do_syscall_64+0x112/0x360 [ 109.210391][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.210418][ T7068] [ 109.210424][ T7068] value changed: 0x01000021 -> 0x02000021 [ 109.210439][ T7068] [ 109.210445][ T7068] Reported by Kernel Concurrency Sanitizer on: [ 109.210458][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.6.1274 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.210487][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.210500][ T7068] ================================================================== [ 109.245840][ T29] audit: type=1400 audit(1792313604.520:560): avc: denied { ioctl } for pid=7077 comm="syz.1.1277" path="socket:[17442]" dev="sockfs" ino=17442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.917059][ T6503] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.263578][ T29] audit: type=1400 audit(1792313606.540:561): avc: denied { write } for pid=7082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.297402][ T29] audit: type=1400 audit(1792313606.570:562): avc: denied { write } for pid=7093 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.424007][ T29] audit: type=1400 audit(1792313606.700:563): avc: denied { write } for pid=7096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.822687][ T7043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.092022][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 113.092039][ T29] audit: type=1400 audit(1792313608.360:567): avc: denied { write } for pid=7124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.127949][ T29] audit: type=1400 audit(1792313608.400:568): avc: denied { write } for pid=7135 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1