last executing test programs: 3.240793261s ago: executing program 0 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x90) 3.033962409s ago: executing program 0 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r2) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x22c7, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x839936b24a6f297d, r2, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000340)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x3, 0x23c}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000580)=0x8, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x9}) tkill(r4, 0x13) chroot(&(0x7f0000000300)='.\x00') pipe2(&(0x7f0000000040), 0x0) 2.335258589s ago: executing program 0 (id=1024): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/257, 0x101}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.258247069s ago: executing program 4 (id=1026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0xf2ff, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.033766157s ago: executing program 4 (id=1033): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './cgroup.cpu/cgroup.procs\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000010000202070eb508c0a00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.987622734s ago: executing program 4 (id=1035): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getrandom(&(0x7f00000007c0)=""/4, 0x4, 0x2) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="c3aa00fe40000000a92f61bbd168a33ef7d32429d9dcb7c0d874cd4739642b05041607f52b4c449a3d9f74515dd99b3b667cdbd716b43bc10b73c6246f99b7bf56086ea686328baddc16b8f1cf6f45158fc1e203006695c2d9398a3c3ad09c5554f62c68926761b20acdea10a6e676594be6ce7e05a8a4e026e478b963fe07c64b7ba6c8eb7d790e66046efcbf7e3560ea5dc4030a5173b8c1257eb2d686eadd2dd6a99429b34893"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x40000000009}, 0x18) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:chfn_exec_t:s0\x00', 0x21) close_range(r0, r1, 0x0) 1.371577383s ago: executing program 0 (id=1040): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) close_range(r0, r1, 0x0) 1.00918211s ago: executing program 3 (id=1042): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") socket(0x15, 0x80005, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) getpid() set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa302bd0ac46a208004500005c000000000033907800000000ffffffff000000000048907803000000040000b40f001fa3883e21cd9fe5caae18544a9131d14c91cf0d355079896e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363e"], 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) open$dir(&(0x7f0000000040)='./file1\x00', 0x400000, 0x4) unshare(0x22020400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) unshare(0x2060280) fsmount(r4, 0x0, 0x0) 865.218038ms ago: executing program 1 (id=1043): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x9}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41103, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") 804.859156ms ago: executing program 0 (id=1044): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000006400000181100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000001c0), &(0x7f0000000380)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000140)=[0x2, 0x9]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14"], 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}], 0x10) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ptrace$setregs(0xf, r1, 0xfffffffffffffffb, &(0x7f0000000a00)="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") 792.966268ms ago: executing program 2 (id=1045): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './cgroup.cpu/cgroup.procs\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000010000202070eb508c0a00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 724.690627ms ago: executing program 4 (id=1046): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[], 0x0, 0x2b9, &(0x7f0000000280)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) preadv2(r2, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 665.976274ms ago: executing program 2 (id=1047): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000036c0)="7d29dbe640bf9136", 0x8}, {&(0x7f0000000240)="aa6a7fbfbf49dfac9272525c4343a34f95b39a9a3bfa7fb94e5494fb8ce1e37a65fc24a466bb37366fb162e71bc141f02f566d720cd7d0343dcf617bebc4458cf88acfe989ffe0750f364818ab947367", 0x50}, {&(0x7f0000000b00)="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", 0x569}], 0x3) 602.004182ms ago: executing program 2 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 601.421332ms ago: executing program 4 (id=1049): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000036c0)="7d29dbe640bf9136", 0x8}, {&(0x7f0000000240)="aa6a7fbfbf49dfac9272525c4343a34f95b39a9a3bfa7fb94e5494fb8ce1e37a65fc24a466bb37366fb162e71bc141f02f566d720cd7d0343dcf617bebc4458cf88acfe989ffe0750f364818ab947367", 0x50}, {&(0x7f0000000b00)="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", 0x567}], 0x3) 578.895255ms ago: executing program 0 (id=1050): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/257, 0x101}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 512.627714ms ago: executing program 2 (id=1051): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x894b, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000140)=0x1000, 0x4) fsetxattr$security_evm(r1, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x2, "f18b7984bacd1a"}, 0x8, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="52ffb508e4237a17281bf98911a7d85e51568cc10260"], 0x1, 0x536, &(0x7f0000001800)="$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") 478.236018ms ago: executing program 4 (id=1052): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa, 0x40000}, 0x20) 446.609163ms ago: executing program 1 (id=1053): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000d00)={0x0, 0x0, 0x9}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001400)={r1, "75fd406f7ccb2418e59a7504f9994f86"}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 376.296271ms ago: executing program 2 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in=@empty}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xff4a) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 330.724687ms ago: executing program 1 (id=1055): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16, @ANYBLOB="0000000000000000b708000c000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='net_dev_start_xmit\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0xe61b, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xff, 0x55c, &(0x7f0000000440)="$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") r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000004850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) 297.487151ms ago: executing program 2 (id=1056): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getrandom(&(0x7f00000007c0)=""/4, 0x4, 0x2) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="c3aa00fe40000000a92f61bbd168a33ef7d32429d9dcb7c0d874cd4739642b05041607f52b4c449a3d9f74515dd99b3b667cdbd716b43bc10b73c6246f99b7bf56086ea686328baddc16b8f1cf6f45158fc1e203006695c2d9398a3c3ad09c5554f62c68926761b20acdea10a6e676594be6ce7e05a8a4e026e478b963fe07c64b7ba6c8eb7d790e66046efcbf7e3560ea5dc4030a5173b8c1257eb2d686eadd2dd6a99429b34893"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) close_range(r0, r1, 0x0) 97.616547ms ago: executing program 3 (id=1058): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 76.82893ms ago: executing program 3 (id=1059): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[], 0x0, 0x2b9, &(0x7f0000000280)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) preadv2(r2, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 42.274674ms ago: executing program 3 (id=1060): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000036c0)="7d29dbe640bf9136", 0x8}, {&(0x7f0000000240)="aa6a7fbfbf49dfac9272525c4343a34f95b39a9a3bfa7fb94e5494fb8ce1e37a65fc24a466bb37366fb162e71bc141f02f566d720cd7d0343dcf617bebc4458cf88acfe989ffe0750f364818ab947367", 0x50}, {&(0x7f0000000b00)="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", 0x569}], 0x3) 0s ago: executing program 3 (id=1061): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './cgroup.cpu/cgroup.procs\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000010000202070eb508c0a00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): gth. [ 59.040012][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.047663][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.074743][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.104866][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.118388][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.194010][ T4641] : renamed from wg2 (while UP) [ 59.212828][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.237826][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.268045][ T4661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.294187][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.318593][ T4661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.330108][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.360805][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.424496][ T4666] loop0: detected capacity change from 0 to 1024 [ 59.447003][ T4666] EXT4-fs: Ignoring removed nobh option [ 59.452792][ T4666] EXT4-fs: Ignoring removed bh option [ 59.468779][ T4666] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 59.601143][ T4678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 59.630014][ T4678] SELinux: security_context_str_to_sid (&"/]JVYq]fFw$TߦFecVX?iHPFݲ}_vWٴqKJ+(vTQ\'2I4+Hoa=@$l(`jpv'z=Xo\mztβho3%iÍ\ [ 59.630014][ T4678] QO?̫IM#iU:2uYmMDM. _ykO-S{9v)ŋ) failed with errno=-22 [ 60.154506][ T4687] loop0: detected capacity change from 0 to 1024 [ 60.182436][ T4687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 60.540911][ T4709] loop1: detected capacity change from 0 to 128 [ 60.547862][ T4709] vfat: Unknown parameter ' ' [ 60.737986][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 60.960251][ T4727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.971219][ T4727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.014789][ T4728] FAULT_INJECTION: forcing a failure. [ 61.014789][ T4728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.027944][ T4728] CPU: 1 UID: 0 PID: 4728 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.028038][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.028184][ T4728] Call Trace: [ 61.028191][ T4728] [ 61.028200][ T4728] __dump_stack+0x1d/0x30 [ 61.028231][ T4728] dump_stack_lvl+0x95/0xd0 [ 61.028253][ T4728] dump_stack+0x15/0x1b [ 61.028332][ T4728] should_fail_ex+0x265/0x280 [ 61.028358][ T4728] should_fail+0xb/0x20 [ 61.028382][ T4728] should_fail_usercopy+0x1a/0x20 [ 61.028486][ T4728] _copy_to_user+0x20/0xa0 [ 61.028514][ T4728] simple_read_from_buffer+0xb5/0x130 [ 61.028535][ T4728] proc_fail_nth_read+0x10e/0x150 [ 61.028632][ T4728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.028657][ T4728] vfs_read+0x1a8/0x770 [ 61.028673][ T4728] ? __rcu_read_unlock+0x4f/0x70 [ 61.028695][ T4728] ? __fget_files+0x184/0x1c0 [ 61.028778][ T4728] ? mutex_lock+0x58/0x90 [ 61.028803][ T4728] ksys_read+0xda/0x1a0 [ 61.028821][ T4728] __x64_sys_read+0x40/0x50 [ 61.028842][ T4728] x64_sys_call+0x2889/0x3000 [ 61.028871][ T4728] do_syscall_64+0xca/0x2b0 [ 61.028938][ T4728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.028961][ T4728] RIP: 0033:0x7fad3633e15c [ 61.028976][ T4728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.028992][ T4728] RSP: 002b:00007fad34d7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.029009][ T4728] RAX: ffffffffffffffda RBX: 00007fad36596090 RCX: 00007fad3633e15c [ 61.029061][ T4728] RDX: 000000000000000f RSI: 00007fad34d7e0a0 RDI: 0000000000000006 [ 61.029073][ T4728] RBP: 00007fad34d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 61.029084][ T4728] R10: 000000008000002b R11: 0000000000000246 R12: 0000000000000001 [ 61.029095][ T4728] R13: 00007fad36596128 R14: 00007fad36596090 R15: 00007ffe684e33a8 [ 61.029111][ T4728] [ 61.249246][ T29] kauditd_printk_skb: 1431 callbacks suppressed [ 61.249259][ T29] audit: type=1326 audit(2000000001.619:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.290044][ T29] audit: type=1326 audit(2000000001.649:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.313662][ T29] audit: type=1326 audit(2000000001.649:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.337427][ T29] audit: type=1326 audit(2000000001.649:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.361197][ T29] audit: type=1326 audit(2000000001.649:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.384808][ T29] audit: type=1326 audit(2000000001.649:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.408258][ T29] audit: type=1326 audit(2000000001.649:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.431747][ T29] audit: type=1326 audit(2000000001.649:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.455719][ T29] audit: type=1326 audit(2000000001.649:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.479927][ T29] audit: type=1326 audit(2000000001.649:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d81042005 code=0x7ffc0000 [ 61.513442][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 61.550905][ T4740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 61.560014][ T4734] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.611495][ T4740] SELinux: security_context_str_to_sid ("><2)d,vg5HT˻79}3Ӏ\.ߣ[žմDŔ-h [ 61.611495][ T4740] /MPlJ>E+w}r$EQ;Ba[ޮtACs:Esc6+(jrTY'L-é=\),h}[yڏ|'97lorC2ezaȊv=$ =|ۡ[餐Kkz"nTH PS: //) failed with errno=-22 [ 61.656003][ T4751] loop3: detected capacity change from 0 to 128 [ 61.672035][ T4751] bio_check_eod: 102 callbacks suppressed [ 61.672052][ T4751] syz.3.390: attempt to access beyond end of device [ 61.672052][ T4751] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 61.692976][ T4751] syz.3.390: attempt to access beyond end of device [ 61.692976][ T4751] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 61.696250][ T4753] process 'syz.4.389' launched '/dev/fd/8' with NULL argv: empty string added [ 61.706695][ T4751] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 61.737221][ T4751] syz.3.390: attempt to access beyond end of device [ 61.737221][ T4751] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 61.750973][ T4751] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 61.761308][ T4751] syz.3.390: attempt to access beyond end of device [ 61.761308][ T4751] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 61.775251][ T4751] syz.3.390: attempt to access beyond end of device [ 61.775251][ T4751] loop3: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 61.789116][ T4751] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 61.798714][ T4751] syz.3.390: attempt to access beyond end of device [ 61.798714][ T4751] loop3: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 61.812377][ T4751] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 61.817803][ T4760] loop2: detected capacity change from 0 to 128 [ 61.828007][ T4751] syz.3.390: attempt to access beyond end of device [ 61.828007][ T4751] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 61.847739][ T4751] syz.3.390: attempt to access beyond end of device [ 61.847739][ T4751] loop3: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 61.861573][ T4751] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 61.870140][ T4751] syz.3.390: attempt to access beyond end of device [ 61.870140][ T4751] loop3: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 61.883933][ T4751] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 61.892892][ T4751] syz.3.390: attempt to access beyond end of device [ 61.892892][ T4751] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 61.910837][ T4751] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 61.920551][ T4751] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 61.930777][ T4751] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 61.939761][ T4747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 61.940197][ T4751] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 62.099175][ T4773] vfat: Unknown parameter ' ' [ 62.446960][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 62.498299][ T4786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.402'. [ 62.529654][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 62.536597][ T4786] SELinux: security_context_str_to_sid (ߓ04+!Gj%OgNNWcVgQ3UJdX"0ʯF ((@"Y))FU3!AeEKXDʆzP䊮~r_$&(z%ղ9UO~yup$>yЬ7 [ 62.536597][ T4786] f\ʈo_b۹g8nc 1.׷@h&=qC1=m4[f [*pi<Ա7".ŭL[++K$:[) failed with errno=-22 [ 62.539796][ T4792] tipc: Started in network mode [ 62.575410][ T4792] tipc: Node identity c2298a237875, cluster identity 4711 [ 62.582701][ T4792] tipc: Enabled bearer , priority 0 [ 62.598098][ T4792] syzkaller0: entered promiscuous mode [ 62.603842][ T4792] syzkaller0: entered allmulticast mode [ 62.613447][ T4791] tipc: Resetting bearer [ 62.626121][ T4791] tipc: Disabling bearer [ 62.701926][ T4801] FAULT_INJECTION: forcing a failure. [ 62.701926][ T4801] name failslab, interval 1, probability 0, space 0, times 0 [ 62.714712][ T4801] CPU: 0 UID: 0 PID: 4801 Comm: wg1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.714738][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.714749][ T4801] Call Trace: [ 62.714754][ T4801] [ 62.714810][ T4801] __dump_stack+0x1d/0x30 [ 62.714833][ T4801] dump_stack_lvl+0x95/0xd0 [ 62.714852][ T4801] dump_stack+0x15/0x1b [ 62.714873][ T4801] should_fail_ex+0x265/0x280 [ 62.714899][ T4801] should_failslab+0x8c/0xb0 [ 62.714946][ T4801] kmem_cache_alloc_noprof+0x69/0x4b0 [ 62.714971][ T4801] ? skb_clone+0x151/0x1f0 [ 62.714997][ T4801] skb_clone+0x151/0x1f0 [ 62.715024][ T4801] ip_mc_output+0x10d/0x340 [ 62.715095][ T4801] ? __pfx_dst_output+0x10/0x10 [ 62.715210][ T4801] ip_send_skb+0x151/0x160 [ 62.715233][ T4801] udp_send_skb+0x6e3/0xa40 [ 62.715255][ T4801] ? ip_make_skb+0x197/0x2c0 [ 62.715287][ T4801] udp_sendmsg+0x1050/0x13c0 [ 62.715332][ T4801] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 62.715368][ T4801] ? __pfx_udp_sendmsg+0x10/0x10 [ 62.715391][ T4801] inet_sendmsg+0xac/0xd0 [ 62.715434][ T4801] __sock_sendmsg+0x102/0x180 [ 62.715532][ T4801] ____sys_sendmsg+0x31e/0x4a0 [ 62.715566][ T4801] ___sys_sendmsg+0x17b/0x1d0 [ 62.715608][ T4801] __x64_sys_sendmsg+0xd4/0x160 [ 62.715637][ T4801] x64_sys_call+0x17ba/0x3000 [ 62.715686][ T4801] do_syscall_64+0xca/0x2b0 [ 62.715762][ T4801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.715783][ T4801] RIP: 0033:0x7f5d26ccf749 [ 62.715866][ T4801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.715886][ T4801] RSP: 002b:00007f5d25737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.715907][ T4801] RAX: ffffffffffffffda RBX: 00007f5d26f25fa0 RCX: 00007f5d26ccf749 [ 62.715921][ T4801] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 62.715932][ T4801] RBP: 00007f5d25737090 R08: 0000000000000000 R09: 0000000000000000 [ 62.715945][ T4801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.715999][ T4801] R13: 00007f5d26f26038 R14: 00007f5d26f25fa0 R15: 00007ffc037f85d8 [ 62.716082][ T4801] [ 62.985814][ T4804] set_capacity_and_notify: 2 callbacks suppressed [ 62.985831][ T4804] loop1: detected capacity change from 0 to 512 [ 63.034239][ T4804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.048273][ T4804] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.060481][ T4810] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 63.068156][ T4810] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 63.075873][ T4810] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 63.083535][ T4810] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 63.091179][ T4810] netlink: 'syz.2.411': attribute type 2 has an invalid length. [ 63.098907][ T4810] netlink: 'syz.2.411': attribute type 2 has an invalid length. [ 63.122413][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.194177][ T4815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4815 comm=syz.1.413 [ 63.213603][ T4817] loop3: detected capacity change from 0 to 512 [ 63.222332][ T4817] EXT4-fs error (device loop3): __ext4_iget:5426: inode #11: block 1: comm syz.3.414: invalid block [ 63.270395][ T4817] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.414: couldn't read orphan inode 11 (err -117) [ 63.289967][ T4817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.365519][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.418644][ T4832] loop3: detected capacity change from 0 to 128 [ 63.455014][ T4837] FAULT_INJECTION: forcing a failure. [ 63.455014][ T4837] name failslab, interval 1, probability 0, space 0, times 0 [ 63.455040][ T4837] CPU: 0 UID: 0 PID: 4837 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.455064][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.455090][ T4837] Call Trace: [ 63.455096][ T4837] [ 63.455102][ T4837] __dump_stack+0x1d/0x30 [ 63.455125][ T4837] dump_stack_lvl+0x95/0xd0 [ 63.455145][ T4837] dump_stack+0x15/0x1b [ 63.455176][ T4837] should_fail_ex+0x265/0x280 [ 63.455236][ T4837] should_failslab+0x8c/0xb0 [ 63.455258][ T4837] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 63.455281][ T4837] ? __get_vm_area_node+0x106/0x1d0 [ 63.455331][ T4837] __get_vm_area_node+0x106/0x1d0 [ 63.455356][ T4837] __vmalloc_node_range_noprof+0x28e/0x1310 [ 63.455382][ T4837] ? vc_uniscr_check+0x11a/0x4a0 [ 63.455535][ T4837] ? unwind_get_return_address+0x16/0x40 [ 63.455563][ T4837] ? vc_uniscr_check+0x11a/0x4a0 [ 63.455595][ T4837] vzalloc_noprof+0x82/0xc0 [ 63.455621][ T4837] ? vc_uniscr_check+0x11a/0x4a0 [ 63.455712][ T4837] vc_uniscr_check+0x11a/0x4a0 [ 63.455743][ T4837] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 63.455769][ T4837] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 63.455796][ T4837] vcs_read+0x4d7/0xa10 [ 63.455891][ T4837] ? selinux_file_permission+0x1e2/0x320 [ 63.455987][ T4837] ? __pfx_vcs_read+0x10/0x10 [ 63.456005][ T4837] vfs_readv+0x3fb/0x690 [ 63.456123][ T4837] __x64_sys_preadv+0xfd/0x1c0 [ 63.456144][ T4837] x64_sys_call+0x2805/0x3000 [ 63.456174][ T4837] do_syscall_64+0xca/0x2b0 [ 63.456208][ T4837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.456269][ T4837] RIP: 0033:0x7f1d9ab9f749 [ 63.456285][ T4837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.456303][ T4837] RSP: 002b:00007f1d99607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 63.456321][ T4837] RAX: ffffffffffffffda RBX: 00007f1d9adf5fa0 RCX: 00007f1d9ab9f749 [ 63.456335][ T4837] RDX: 0000000000000001 RSI: 0000200000000f80 RDI: 0000000000000003 [ 63.456348][ T4837] RBP: 00007f1d99607090 R08: 0000000000000001 R09: 0000000000000000 [ 63.456362][ T4837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.456434][ T4837] R13: 00007f1d9adf6038 R14: 00007f1d9adf5fa0 R15: 00007fff8e0c8118 [ 63.456450][ T4837] [ 63.456457][ T4837] syz.3.421: vmalloc error: size 8200, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 63.456508][ T4837] CPU: 0 UID: 0 PID: 4837 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.456534][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.456594][ T4837] Call Trace: [ 63.456599][ T4837] [ 63.456606][ T4837] __dump_stack+0x1d/0x30 [ 63.456684][ T4837] dump_stack_lvl+0x95/0xd0 [ 63.456708][ T4837] dump_stack+0x15/0x1b [ 63.456791][ T4837] warn_alloc+0x12b/0x1a0 [ 63.456821][ T4837] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 63.456852][ T4837] ? unwind_get_return_address+0x16/0x40 [ 63.456878][ T4837] ? vc_uniscr_check+0x11a/0x4a0 [ 63.456927][ T4837] vzalloc_noprof+0x82/0xc0 [ 63.456951][ T4837] ? vc_uniscr_check+0x11a/0x4a0 [ 63.456981][ T4837] vc_uniscr_check+0x11a/0x4a0 [ 63.457018][ T4837] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 63.457087][ T4837] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 63.457150][ T4837] vcs_read+0x4d7/0xa10 [ 63.457186][ T4837] ? selinux_file_permission+0x1e2/0x320 [ 63.457232][ T4837] ? __pfx_vcs_read+0x10/0x10 [ 63.457248][ T4837] vfs_readv+0x3fb/0x690 [ 63.457283][ T4837] __x64_sys_preadv+0xfd/0x1c0 [ 63.457307][ T4837] x64_sys_call+0x2805/0x3000 [ 63.457367][ T4837] do_syscall_64+0xca/0x2b0 [ 63.457401][ T4837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.457421][ T4837] RIP: 0033:0x7f1d9ab9f749 [ 63.457435][ T4837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.457515][ T4837] RSP: 002b:00007f1d99607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 63.457532][ T4837] RAX: ffffffffffffffda RBX: 00007f1d9adf5fa0 RCX: 00007f1d9ab9f749 [ 63.457544][ T4837] RDX: 0000000000000001 RSI: 0000200000000f80 RDI: 0000000000000003 [ 63.457623][ T4837] RBP: 00007f1d99607090 R08: 0000000000000001 R09: 0000000000000000 [ 63.457690][ T4837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.457701][ T4837] R13: 00007f1d9adf6038 R14: 00007f1d9adf5fa0 R15: 00007fff8e0c8118 [ 63.457719][ T4837] [ 63.457737][ T4837] Mem-Info: [ 63.457743][ T4837] active_anon:7449 inactive_anon:0 isolated_anon:0 [ 63.457743][ T4837] active_file:19535 inactive_file:2273 isolated_file:0 [ 63.457743][ T4837] unevictable:0 dirty:393 writeback:0 [ 63.457743][ T4837] slab_reclaimable:3260 slab_unreclaimable:44054 [ 63.457743][ T4837] mapped:29938 shmem:179 pagetables:1486 [ 63.457743][ T4837] sec_pagetables:0 bounce:0 [ 63.457743][ T4837] kernel_misc_reclaimable:0 [ 63.457743][ T4837] free:1851189 free_pcp:15011 free_cma:0 [ 63.457891][ T4837] Node 0 active_anon:29796kB inactive_anon:0kB active_file:78140kB inactive_file:9092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119752kB dirty:1572kB writeback:0kB shmem:716kB kernel_stack:3824kB pagetables:5944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 63.457980][ T4837] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.458039][ T4837] lowmem_reserve[]: 0 2880 7859 7859 [ 63.458133][ T4837] Node 0 DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 63.458217][ T4837] lowmem_reserve[]: 0 0 4978 4978 [ 63.458284][ T4837] Node 0 Normal free:4443404kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29796kB inactive_anon:0kB active_file:78140kB inactive_file:9092kB unevictable:0kB writepending:1572kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:56516kB local_pcp:9976kB free_cma:0kB [ 63.458358][ T4837] lowmem_reserve[]: 0 0 0 0 [ 63.458381][ T4837] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 63.458604][ T4837] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 63.458812][ T4837] Node 0 Normal: 835*4kB (UME) 515*8kB (UME) 245*16kB (UME) 179*32kB (UME) 141*64kB (UME) 82*128kB (UME) 62*256kB (UME) 18*512kB (UME) 11*1024kB (UME) 8*2048kB (U) 1063*4096kB (UM) = 4443412kB [ 63.459191][ T4837] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 63.459209][ T4837] 21979 total pagecache pages [ 63.459216][ T4837] 0 pages in swap cache [ 63.459222][ T4837] Free swap = 124996kB [ 63.459229][ T4837] Total swap = 124996kB [ 63.459301][ T4837] 2097051 pages RAM [ 63.459308][ T4837] 0 pages HighMem/MovableOnly [ 63.459315][ T4837] 81271 pages reserved [ 63.460875][ T4838] tipc: Started in network mode [ 64.186741][ T4838] tipc: Node identity e24dc4e764b, cluster identity 4711 [ 64.193818][ T4838] tipc: Enabled bearer , priority 0 [ 64.202275][ T4840] syzkaller0: entered promiscuous mode [ 64.207798][ T4840] syzkaller0: entered allmulticast mode [ 64.243559][ T4835] tipc: Resetting bearer [ 64.280704][ T4835] tipc: Disabling bearer [ 64.320544][ T4856] netlink: 780 bytes leftover after parsing attributes in process `syz.1.425'. [ 64.329674][ T4856] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 64.343704][ T4858] loop3: detected capacity change from 0 to 512 [ 64.365922][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.390568][ T4858] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.478665][ T4868] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.426: corrupted xattr block 33: invalid ea_ino [ 64.483216][ T4867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.427'. [ 64.501591][ T4868] EXT4-fs (loop3): Remounting filesystem read-only [ 64.508238][ T4868] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 64.518410][ T4868] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 64.521959][ T4870] loop2: detected capacity change from 0 to 512 [ 64.528568][ T4868] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 64.543857][ T4870] ext4: Unknown parameter 'subj_type' [ 64.559275][ T4867] SELinux: security_context_str_to_sid (sxw|O՛^?u@Ŷ`T1GvPh.5Z) failed with errno=-22 [ 64.597323][ T4874] FAULT_INJECTION: forcing a failure. [ 64.597323][ T4874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.610671][ T4874] CPU: 1 UID: 0 PID: 4874 Comm: syz.2.431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.610702][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.610715][ T4874] Call Trace: [ 64.610722][ T4874] [ 64.610730][ T4874] __dump_stack+0x1d/0x30 [ 64.610758][ T4874] dump_stack_lvl+0x95/0xd0 [ 64.610861][ T4874] dump_stack+0x15/0x1b [ 64.610879][ T4874] should_fail_ex+0x265/0x280 [ 64.610969][ T4874] should_fail+0xb/0x20 [ 64.610986][ T4874] should_fail_usercopy+0x1a/0x20 [ 64.611013][ T4874] strncpy_from_user+0x27/0x260 [ 64.611120][ T4874] getname_flags+0xae/0x3b0 [ 64.611142][ T4874] do_sys_openat2+0x60/0x150 [ 64.611169][ T4874] __x64_sys_openat+0xf2/0x120 [ 64.611196][ T4874] x64_sys_call+0x2b07/0x3000 [ 64.611279][ T4874] do_syscall_64+0xca/0x2b0 [ 64.611316][ T4874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.611336][ T4874] RIP: 0033:0x7fad3633df90 [ 64.611390][ T4874] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 64.611406][ T4874] RSP: 002b:00007fad34d9ef00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 64.611424][ T4874] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad3633df90 [ 64.611438][ T4874] RDX: 0000000000000000 RSI: 00007fad34d9efa0 RDI: 00000000ffffff9c [ 64.611451][ T4874] RBP: 00007fad34d9efa0 R08: 0000000000000000 R09: 00007fad34d9ed17 [ 64.611465][ T4874] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 64.611479][ T4874] R13: 00007fad36596038 R14: 00007fad36595fa0 R15: 00007ffe684e33a8 [ 64.611568][ T4874] [ 65.032295][ T4889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.435'. [ 65.077613][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 65.113372][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 65.143791][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.198415][ T4901] loop3: detected capacity change from 0 to 512 [ 65.241551][ T4901] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.283907][ T4908] loop2: detected capacity change from 0 to 764 [ 65.303978][ T4908] isofs: isofs_export_get_parent(): child directory not normalized! [ 65.384004][ T4923] loop3: detected capacity change from 0 to 512 [ 65.411814][ T4918] netlink: 48 bytes leftover after parsing attributes in process `syz.2.445'. [ 65.824629][ T4946] SELinux: security_context_str_to_sid (a7uk{f '8VN/\ Ui(| I[XH_uI{ [ 65.824629][ T4946] "4H;T{7ˠU1o+2XvK7, 3) failed with errno=-22 [ 65.871627][ T4949] loop2: detected capacity change from 0 to 512 [ 65.890308][ T4949] EXT4-fs mount: 2 callbacks suppressed [ 65.890321][ T4949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.910225][ T4949] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.935779][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.011171][ T4956] loop2: detected capacity change from 0 to 512 [ 66.020436][ T4956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.033399][ T4956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.046328][ T4956] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.057173][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 66.057185][ T29] audit: type=1326 audit(2000000000.503:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad3633df90 code=0x7ffc0000 [ 66.106081][ T29] audit: type=1326 audit(2000000000.545:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fad3633e497 code=0x7ffc0000 [ 66.129518][ T29] audit: type=1326 audit(2000000000.545:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad3633df90 code=0x7ffc0000 [ 66.152880][ T29] audit: type=1326 audit(2000000000.545:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 66.177336][ T29] audit: type=1326 audit(2000000000.629:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 66.202214][ T29] audit: type=1326 audit(2000000000.650:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c55ff749 code=0x7ffc0000 [ 66.226458][ T29] audit: type=1326 audit(2000000000.650:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c55ff749 code=0x7ffc0000 [ 66.249988][ T29] audit: type=1326 audit(2000000000.650:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c55ff749 code=0x7ffc0000 [ 66.274305][ T29] audit: type=1326 audit(2000000000.650:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c55ff749 code=0x7ffc0000 [ 66.297674][ T29] audit: type=1326 audit(2000000000.650:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c55ff749 code=0x7ffc0000 [ 66.334135][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.546506][ T4977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4977 comm=syz.0.463 [ 66.717661][ T4991] isofs: isofs_export_get_parent(): child directory not normalized! [ 66.751336][ T4994] vfat: Unknown parameter ' ' [ 66.904406][ T5000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.478481][ T5016] vfat: Unknown parameter ' ' [ 67.487020][ T5020] EXT4-fs: Invalid want_extra_isize 93 [ 67.538844][ T5022] netlink: 'syz.2.480': attribute type 5 has an invalid length. [ 67.546555][ T5022] __nla_validate_parse: 3 callbacks suppressed [ 67.546567][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 67.652982][ T5036] isofs: isofs_export_get_parent(): child directory not normalized! [ 67.906462][ T5054] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.932341][ T5054] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.978017][ T5054] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.015285][ T5054] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.080373][ T4547] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.092121][ T4547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.103458][ T4547] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.114944][ T4547] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.144777][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 68.159178][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 68.175687][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 68.209820][ T5060] set_capacity_and_notify: 5 callbacks suppressed [ 68.209831][ T5060] loop3: detected capacity change from 0 to 128 [ 68.223447][ T5060] vfat: Unknown parameter ' ' [ 68.324249][ T5065] loop3: detected capacity change from 0 to 512 [ 68.334660][ T5065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.357114][ T5065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.369828][ T5065] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.398373][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.419632][ T5073] FAULT_INJECTION: forcing a failure. [ 68.419632][ T5073] name failslab, interval 1, probability 0, space 0, times 0 [ 68.432364][ T5073] CPU: 1 UID: 0 PID: 5073 Comm: syz.3.496 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.432393][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.432406][ T5073] Call Trace: [ 68.432412][ T5073] [ 68.432420][ T5073] __dump_stack+0x1d/0x30 [ 68.432499][ T5073] dump_stack_lvl+0x95/0xd0 [ 68.432521][ T5073] dump_stack+0x15/0x1b [ 68.432548][ T5073] should_fail_ex+0x265/0x280 [ 68.432572][ T5073] should_failslab+0x8c/0xb0 [ 68.432596][ T5073] kmem_cache_alloc_noprof+0x69/0x4b0 [ 68.432666][ T5073] ? io_submit_one+0xbc/0x1210 [ 68.432696][ T5073] io_submit_one+0xbc/0x1210 [ 68.432809][ T5073] __se_sys_io_submit+0xfb/0x280 [ 68.432849][ T5073] __x64_sys_io_submit+0x43/0x50 [ 68.432873][ T5073] x64_sys_call+0x2e40/0x3000 [ 68.432974][ T5073] do_syscall_64+0xca/0x2b0 [ 68.433036][ T5073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.433057][ T5073] RIP: 0033:0x7f1d9ab9f749 [ 68.433070][ T5073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.433088][ T5073] RSP: 002b:00007f1d99607038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 68.433147][ T5073] RAX: ffffffffffffffda RBX: 00007f1d9adf5fa0 RCX: 00007f1d9ab9f749 [ 68.433158][ T5073] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f1d995c3000 [ 68.433169][ T5073] RBP: 00007f1d99607090 R08: 0000000000000000 R09: 0000000000000000 [ 68.433179][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.433190][ T5073] R13: 00007f1d9adf6038 R14: 00007f1d9adf5fa0 R15: 00007fff8e0c8118 [ 68.433206][ T5073] [ 68.645408][ T5070] netlink: 'syz.1.495': attribute type 5 has an invalid length. [ 68.653101][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 68.701349][ T5083] loop4: detected capacity change from 0 to 512 [ 68.750879][ T5083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.816521][ T5083] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.881047][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.940308][ T5102] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 68.953298][ T5102] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.191819][ T5123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5123 comm=syz.4.511 [ 69.235797][ T5129] loop1: detected capacity change from 0 to 512 [ 69.260427][ T5134] loop4: detected capacity change from 0 to 512 [ 69.273261][ T5129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.276138][ T5132] loop0: detected capacity change from 0 to 128 [ 69.290531][ T5132] vfat: Unknown parameter ' ' [ 69.313402][ T5134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.327903][ T5129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.348721][ T5134] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.364720][ T5129] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.389238][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.418356][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.550155][ T5154] FAULT_INJECTION: forcing a failure. [ 69.550155][ T5154] name failslab, interval 1, probability 0, space 0, times 0 [ 69.564312][ T5154] CPU: 1 UID: 0 PID: 5154 Comm: syz.4.522 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.564338][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.564351][ T5154] Call Trace: [ 69.564358][ T5154] [ 69.564366][ T5154] __dump_stack+0x1d/0x30 [ 69.564388][ T5154] dump_stack_lvl+0x95/0xd0 [ 69.564465][ T5154] dump_stack+0x15/0x1b [ 69.564483][ T5154] should_fail_ex+0x265/0x280 [ 69.564505][ T5154] should_failslab+0x8c/0xb0 [ 69.564574][ T5154] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 69.564599][ T5154] ? resume_store+0xf2/0x3d0 [ 69.564634][ T5154] ? __pfx_resume_store+0x10/0x10 [ 69.564654][ T5154] kstrndup+0x80/0x130 [ 69.564684][ T5154] resume_store+0xf2/0x3d0 [ 69.564701][ T5154] ? _copy_from_iter+0x13e/0xe70 [ 69.564796][ T5154] ? should_fail_ex+0xdb/0x280 [ 69.564815][ T5154] ? __pfx_resume_store+0x10/0x10 [ 69.564835][ T5154] kobj_attr_store+0x4a/0x70 [ 69.564856][ T5154] ? __pfx_kobj_attr_store+0x10/0x10 [ 69.564878][ T5154] sysfs_kf_write+0xfe/0x120 [ 69.564981][ T5154] ? __pfx_sysfs_kf_write+0x10/0x10 [ 69.565000][ T5154] kernfs_fop_write_iter+0x1eb/0x300 [ 69.565031][ T5154] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 69.565070][ T5154] vfs_write+0x52a/0x960 [ 69.565204][ T5154] ksys_write+0xda/0x1a0 [ 69.565224][ T5154] __x64_sys_write+0x40/0x50 [ 69.565245][ T5154] x64_sys_call+0x2847/0x3000 [ 69.565309][ T5154] do_syscall_64+0xca/0x2b0 [ 69.565402][ T5154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.565423][ T5154] RIP: 0033:0x7f5d26ccf749 [ 69.565439][ T5154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.565458][ T5154] RSP: 002b:00007f5d25737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.565477][ T5154] RAX: ffffffffffffffda RBX: 00007f5d26f25fa0 RCX: 00007f5d26ccf749 [ 69.565555][ T5154] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 69.565569][ T5154] RBP: 00007f5d25737090 R08: 0000000000000000 R09: 0000000000000000 [ 69.565582][ T5154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.565595][ T5154] R13: 00007f5d26f26038 R14: 00007f5d26f25fa0 R15: 00007ffc037f85d8 [ 69.565622][ T5154] [ 69.789995][ T5151] loop0: detected capacity change from 0 to 256 [ 69.855201][ T5159] loop4: detected capacity change from 0 to 1024 [ 69.875595][ T5159] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 69.895829][ T5159] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 69.905096][ T5162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5162 comm=syz.2.525 [ 69.995591][ T5168] loop2: detected capacity change from 0 to 128 [ 70.007555][ T5168] vfat: Unknown parameter ' ' [ 70.025938][ T5173] loop3: detected capacity change from 0 to 128 [ 70.037248][ T5173] vfat: Unknown parameter ' ' [ 70.050866][ T5159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.123459][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.147431][ T5182] tipc: Started in network mode [ 70.152408][ T5182] tipc: Node identity 62eb8871e3b2, cluster identity 4711 [ 70.159917][ T5182] tipc: Enabled bearer , priority 0 [ 70.180585][ T5182] syzkaller0: entered promiscuous mode [ 70.186154][ T5182] syzkaller0: entered allmulticast mode [ 70.194205][ T5180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.207360][ T5182] tipc: Resetting bearer [ 70.214201][ T5181] tipc: Resetting bearer [ 70.220468][ T5180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.234690][ T5181] tipc: Disabling bearer [ 70.240317][ T5180] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.324487][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.346930][ T5170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 70.378986][ T5193] tipc: Started in network mode [ 70.384157][ T5193] tipc: Node identity bae28b2793d5, cluster identity 4711 [ 70.391496][ T5193] tipc: Enabled bearer , priority 0 [ 70.399163][ T5193] syzkaller0: entered promiscuous mode [ 70.404696][ T5193] syzkaller0: entered allmulticast mode [ 70.415486][ T5193] tipc: Resetting bearer [ 70.421429][ T5198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5198 comm=syz.0.537 [ 70.434673][ T5192] tipc: Resetting bearer [ 70.442678][ T5192] tipc: Disabling bearer [ 70.852116][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 70.877014][ T5208] vfat: Unknown parameter ' ' [ 70.882766][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 70.882795][ T29] audit: type=1326 audit(2000000000.388:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 70.928995][ T29] audit: type=1326 audit(2000000000.388:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 70.952637][ T29] audit: type=1326 audit(2000000000.388:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 70.976480][ T29] audit: type=1326 audit(2000000000.388:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 70.985906][ T5210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.000835][ T29] audit: type=1326 audit(2000000000.388:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 71.013211][ T5210] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.047024][ T29] audit: type=1326 audit(2000000000.388:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 71.070365][ T29] audit: type=1326 audit(2000000000.388:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 71.093740][ T29] audit: type=1326 audit(2000000000.388:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 71.117108][ T29] audit: type=1326 audit(2000000000.388:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 71.141250][ T29] audit: type=1326 audit(2000000000.388:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 71.219094][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 71.300520][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.350213][ T5224] netlink: 'syz.1.545': attribute type 11 has an invalid length. [ 71.419930][ T5228] tipc: Started in network mode [ 71.425054][ T5228] tipc: Node identity a6bb8c7d8209, cluster identity 4711 [ 71.432773][ T5228] tipc: Enabled bearer , priority 0 [ 71.440060][ T5228] syzkaller0: entered promiscuous mode [ 71.445586][ T5228] syzkaller0: entered allmulticast mode [ 71.455020][ T5228] tipc: Resetting bearer [ 71.462621][ T5227] tipc: Resetting bearer [ 71.469293][ T5227] tipc: Disabling bearer [ 71.643470][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.654682][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.689503][ T5239] mmap: syz.1.546 (5239) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.907624][ T5226] netlink: 'syz.1.546': attribute type 3 has an invalid length. [ 71.920594][ T5226] netlink: 244 bytes leftover after parsing attributes in process `syz.1.546'. [ 72.122184][ T290] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.192724][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5250 comm=syz.2.555 [ 72.251191][ T5252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.263926][ T5252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.276765][ T5252] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.298286][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.322103][ T5257] netlink: 'syz.2.557': attribute type 11 has an invalid length. [ 72.770988][ T5280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.780821][ T5280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.822059][ T5282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5282 comm=syz.1.566 [ 72.944257][ T5288] tipc: Enabled bearer , priority 0 [ 72.951527][ T5288] syzkaller0: entered promiscuous mode [ 72.957047][ T5288] syzkaller0: entered allmulticast mode [ 72.967147][ T5288] tipc: Resetting bearer [ 72.973885][ T5287] tipc: Resetting bearer [ 72.981833][ T5287] tipc: Disabling bearer [ 73.051718][ T5290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5290 comm=syz.1.570 [ 73.295586][ T5305] netlink: 44 bytes leftover after parsing attributes in process `syz.2.576'. [ 73.306502][ T5305] netlink: 'syz.2.576': attribute type 10 has an invalid length. [ 73.317012][ T5305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 73.333954][ T5307] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 73.340538][ T5307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.348393][ T5307] vhci_hcd vhci_hcd.0: Device attached [ 73.358973][ T5308] vhci_hcd: connection closed [ 73.359139][ T31] vhci_hcd vhci_hcd.0: stop threads [ 73.369311][ T31] vhci_hcd vhci_hcd.0: release socket [ 73.374695][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 73.386176][ T5311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5311 comm=syz.2.578 [ 73.536079][ T5319] netlink: 92 bytes leftover after parsing attributes in process `syz.2.581'. [ 74.070283][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.070294][ T4289] Bluetooth: hci0: command 0x1003 tx timeout [ 74.406232][ T5343] tipc: Enabled bearer , priority 0 [ 74.413595][ T5343] syzkaller0: entered promiscuous mode [ 74.419147][ T5343] syzkaller0: entered allmulticast mode [ 74.428668][ T5343] tipc: Resetting bearer [ 74.436923][ T5342] tipc: Resetting bearer [ 74.446956][ T5342] tipc: Disabling bearer [ 74.526159][ T5348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.590'. [ 74.542129][ T5348] SELinux: security_context_str_to_sid (iŒXT&l@O i)MȨGhKnAq'%kI\Q7`h [ 74.542129][ T5348] g6;&ҬiOUч,# Ϗ&SQ5b쭋IJS)>+n6ku?Gش [ 74.542129][ T5348] w)])^=_+ҘQ黱fv* ) failed with errno=-22 [ 74.738948][ T5354] netlink: 92 bytes leftover after parsing attributes in process `syz.2.593'. [ 74.829198][ T5366] set_capacity_and_notify: 5 callbacks suppressed [ 74.829210][ T5366] loop2: detected capacity change from 0 to 512 [ 74.862814][ T5366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.889653][ T5366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.927941][ T5366] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.958030][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.979922][ T5376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5376 comm=syz.2.599 [ 75.016430][ T5378] loop2: detected capacity change from 0 to 764 [ 75.025706][ T5378] rock: directory entry would overflow storage [ 75.032136][ T5378] rock: sig=0x4f50, size=4, remaining=3 [ 75.037992][ T5378] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.040267][ T5357] loop0: detected capacity change from 0 to 1024 [ 75.139234][ T5357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 75.222785][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 75.330972][ T5399] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 75.340807][ T5399] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.577581][ T5421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5421 comm=syz.3.611 [ 75.613248][ T5422] loop2: detected capacity change from 0 to 256 [ 75.850882][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 75.928432][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 75.928450][ T29] audit: type=1326 audit(2000000000.272:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 75.958021][ T29] audit: type=1326 audit(2000000000.272:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 75.981483][ T29] audit: type=1326 audit(2000000000.283:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 76.004793][ T29] audit: type=1326 audit(2000000000.283:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 76.028133][ T29] audit: type=1326 audit(2000000000.283:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 76.051624][ T29] audit: type=1326 audit(2000000000.283:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 76.074884][ T29] audit: type=1326 audit(2000000000.283:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 76.098314][ T29] audit: type=1326 audit(2000000000.283:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 76.121691][ T29] audit: type=1326 audit(2000000000.283:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 76.145014][ T29] audit: type=1326 audit(2000000000.283:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 76.366163][ T5438] netlink: 92 bytes leftover after parsing attributes in process `syz.3.617'. [ 76.392575][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 76.406553][ T5443] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 76.575204][ T5456] loop2: detected capacity change from 0 to 764 [ 76.586632][ T5457] loop0: detected capacity change from 0 to 764 [ 76.593286][ T5450] loop3: detected capacity change from 0 to 256 [ 76.603215][ T5456] rock: directory entry would overflow storage [ 76.609560][ T5456] rock: sig=0x4f50, size=4, remaining=3 [ 76.615180][ T5456] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.665999][ T5457] isofs: isofs_export_get_parent(): child directory not normalized! [ 76.756016][ T5464] loop1: detected capacity change from 0 to 128 [ 76.775075][ T5464] bio_check_eod: 32 callbacks suppressed [ 76.775091][ T5464] syz.1.625: attempt to access beyond end of device [ 76.775091][ T5464] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 76.802861][ T5464] syz.1.625: attempt to access beyond end of device [ 76.802861][ T5464] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 76.816568][ T5464] buffer_io_error: 18 callbacks suppressed [ 76.816582][ T5464] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 76.833198][ T5464] syz.1.625: attempt to access beyond end of device [ 76.833198][ T5464] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 76.846953][ T5464] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 76.855587][ T5464] syz.1.625: attempt to access beyond end of device [ 76.855587][ T5464] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 76.869832][ T5464] syz.1.625: attempt to access beyond end of device [ 76.869832][ T5464] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 76.888616][ T5464] syz.1.625: attempt to access beyond end of device [ 76.888616][ T5464] loop1: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 76.902273][ T5464] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 76.911505][ T5464] syz.1.625: attempt to access beyond end of device [ 76.911505][ T5464] loop1: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 76.925116][ T5464] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 76.934563][ T5464] syz.1.625: attempt to access beyond end of device [ 76.934563][ T5464] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 76.948517][ T5464] syz.1.625: attempt to access beyond end of device [ 76.948517][ T5464] loop1: rw=8390657, sector=198, nr_sectors = 2 limit=128 [ 76.962155][ T5464] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 76.980350][ T5464] syz.1.625: attempt to access beyond end of device [ 76.980350][ T5464] loop1: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 76.994079][ T5464] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 77.014945][ T5464] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 77.031548][ T5464] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 77.041059][ T5477] netlink: 'syz.0.629': attribute type 11 has an invalid length. [ 77.049501][ T5464] Buffer I/O error on dev loop1, logical block 115, lost async page write [ 77.064175][ T5469] loop2: detected capacity change from 0 to 1024 [ 77.082276][ T5464] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 77.083107][ T5469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 77.467836][ T5485] loop3: detected capacity change from 0 to 256 [ 77.710433][ T5487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.731457][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 77.780135][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 77.792194][ T5496] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 77.815140][ T5487] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.021842][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.177701][ T5504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.211630][ T5504] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.354884][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.558102][ T5519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.619719][ T5519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.745746][ T5519] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.804970][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.827446][ T5538] netlink: 'syz.2.646': attribute type 11 has an invalid length. [ 78.869066][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 78.968501][ T5547] vfat: Unknown parameter ' ' [ 79.080183][ T5551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.114302][ T5551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.141513][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 79.179784][ T5558] sg_write: data in/out 393180/10 bytes for SCSI command 0xff-- guessing data in; [ 79.179784][ T5558] program syz.1.653 not setting count and/or reply_len properly [ 79.201603][ T5551] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.247072][ T5560] isofs: isofs_export_get_parent(): child directory not normalized! [ 79.263132][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.339496][ T5562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5562 comm=syz.1.656 [ 79.629819][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.649091][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.803316][ T5597] set_capacity_and_notify: 6 callbacks suppressed [ 79.803329][ T5597] loop1: detected capacity change from 0 to 764 [ 79.829647][ T5597] isofs: isofs_export_get_parent(): child directory not normalized! [ 80.068224][ T5608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.671'. [ 80.133440][ T5608] SELinux: security_context_str_to_sid (>c~mCcqr|S?oݠ]t#^"ɍ_7e|`,Td|4@A7;<μ\zaccPR;EH&%nim~ $?ex}+Ue\n;9XۻDy>]҅ !UL40}Lmչt_O)2 ᓷy:ŤE8 KC [ 80.133440][ T5608] úʯ#UT?v>) failed with errno=-22 [ 80.203065][ T5611] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 80.212652][ T5611] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.285736][ T5621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5621 comm=syz.0.675 [ 80.350502][ T5625] netlink: 'syz.0.677': attribute type 11 has an invalid length. [ 80.693836][ T5634] loop4: detected capacity change from 0 to 764 [ 80.738823][ T5634] rock: directory entry would overflow storage [ 80.745093][ T5634] rock: sig=0x4f50, size=4, remaining=3 [ 80.750824][ T5634] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 80.809335][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 80.809412][ T29] audit: type=1400 audit(2000000001.049:5042): avc: denied { setopt } for pid=5637 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.070670][ T5640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.079293][ T5640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.544798][ T5643] netlink: 92 bytes leftover after parsing attributes in process `syz.3.684'. [ 81.797310][ T29] audit: type=1326 audit(2000000001.574:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 81.820729][ T29] audit: type=1326 audit(2000000001.574:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 81.831547][ T5653] loop2: detected capacity change from 0 to 128 [ 81.844308][ T29] audit: type=1326 audit(2000000001.574:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 81.874179][ T29] audit: type=1326 audit(2000000001.574:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 81.895191][ T5653] vfat: Unknown parameter ' ' [ 81.897583][ T29] audit: type=1326 audit(2000000001.574:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 81.926061][ T29] audit: type=1326 audit(2000000001.574:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 81.949344][ T29] audit: type=1326 audit(2000000001.627:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 81.972716][ T29] audit: type=1326 audit(2000000001.627:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1d9abd2005 code=0x7ffc0000 [ 81.996235][ T29] audit: type=1326 audit(2000000001.627:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 82.221399][ T5664] loop4: detected capacity change from 0 to 2048 [ 82.296346][ T5664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.321272][ T5664] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.432178][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.629040][ T5686] bridge_slave_0: left allmulticast mode [ 82.634882][ T5686] bridge_slave_0: left promiscuous mode [ 82.640501][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.651020][ T5686] bridge_slave_1: left allmulticast mode [ 82.656905][ T5686] bridge_slave_1: left promiscuous mode [ 82.662681][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.665766][ T5687] netlink: 'syz.4.697': attribute type 10 has an invalid length. [ 82.677514][ T5687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.697'. [ 82.689448][ T5686] bond0: (slave bond_slave_0): Releasing backup interface [ 82.699723][ T5686] bond0: (slave bond_slave_1): Releasing backup interface [ 82.712759][ T5686] team0: Port device team_slave_0 removed [ 82.722207][ T5686] team0: Port device team_slave_1 removed [ 82.728904][ T5686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.736432][ T5686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.745259][ T5686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.753187][ T5686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.763132][ T5686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.792099][ T5687] batman_adv: batadv0: Adding interface: veth1_vlan [ 82.798931][ T5687] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.825941][ T5687] batman_adv: batadv0: Interface activated: veth1_vlan [ 83.027851][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 83.096942][ T5700] loop2: detected capacity change from 0 to 128 [ 83.103741][ T5700] vfat: Unknown parameter ' ' [ 83.151205][ T5704] netlink: 'syz.2.704': attribute type 11 has an invalid length. [ 83.446565][ T5706] netlink: 92 bytes leftover after parsing attributes in process `syz.4.705'. [ 83.528809][ T5709] loop4: detected capacity change from 0 to 512 [ 83.538863][ T5709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.551999][ T5709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.565137][ T5709] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.617363][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.669443][ T5715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5715 comm=syz.1.710 [ 83.723166][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 83.766157][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 84.203959][ T5743] loop1: detected capacity change from 0 to 512 [ 84.222879][ T5743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.250228][ T5753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5753 comm=syz.4.724 [ 84.265127][ T5743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.290763][ T5743] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.324176][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.367477][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.521386][ T5768] program syz.4.730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.543789][ T5768] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 84.589362][ T5768] lo speed is unknown, defaulting to 1000 [ 84.607956][ T5768] lo speed is unknown, defaulting to 1000 [ 84.627119][ T5768] lo speed is unknown, defaulting to 1000 [ 84.635901][ T5768] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.679855][ T5768] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.799997][ T5777] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 84.810337][ T5777] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.819867][ T5768] lo speed is unknown, defaulting to 1000 [ 84.847950][ T5768] lo speed is unknown, defaulting to 1000 [ 84.871075][ T5768] lo speed is unknown, defaulting to 1000 [ 84.923671][ T5788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5788 comm=syz.0.735 [ 84.946930][ T5768] lo speed is unknown, defaulting to 1000 [ 84.995035][ T5768] lo speed is unknown, defaulting to 1000 [ 85.124042][ T5799] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 85.189281][ T5799] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.294346][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 85.476158][ T5831] lo speed is unknown, defaulting to 1000 [ 85.670258][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 85.670270][ T29] audit: type=1326 audit(2000000000.125:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 85.713718][ T29] audit: type=1326 audit(2000000000.167:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d9ab3b829 code=0x7ffc0000 [ 85.739266][ T29] audit: type=1326 audit(2000000000.167:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 85.762630][ T29] audit: type=1326 audit(2000000000.167:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 85.819821][ T5846] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 85.821887][ T5850] loop2: detected capacity change from 0 to 764 [ 85.837086][ T5846] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.850632][ T5850] rock: directory entry would overflow storage [ 85.856914][ T5850] rock: sig=0x4f50, size=4, remaining=3 [ 85.862506][ T5850] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.892276][ T5852] loop2: detected capacity change from 0 to 764 [ 85.905482][ T5852] rock: directory entry would overflow storage [ 85.911822][ T5852] rock: sig=0x4f50, size=4, remaining=3 [ 85.917429][ T5852] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.992607][ T5856] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20004 [ 86.010025][ T29] audit: type=1400 audit(2000000000.482:5656): avc: denied { load_policy } for pid=5853 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.045838][ T29] audit: type=1326 audit(2000000000.524:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 86.048546][ T5854] SELinux: failed to load policy [ 86.069243][ T29] audit: type=1326 audit(2000000000.524:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 86.097775][ T29] audit: type=1326 audit(2000000000.524:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 86.121693][ T29] audit: type=1326 audit(2000000000.556:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 86.145178][ T29] audit: type=1326 audit(2000000000.556:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 86.195475][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 86.199407][ T5859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.761'. [ 86.281810][ T5872] loop1: detected capacity change from 0 to 512 [ 86.331116][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.344888][ T5872] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.366982][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.444919][ T5880] loop3: detected capacity change from 0 to 256 [ 86.684831][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.717146][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.137947][ T5893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5893 comm=syz.2.771 [ 87.222837][ T5895] loop2: detected capacity change from 0 to 512 [ 87.236515][ T5895] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.266430][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.279273][ T5895] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.318016][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.386847][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 87.439821][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 87.460093][ T5901] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.953428][ T5928] loop0: detected capacity change from 0 to 1024 [ 87.971325][ T5928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 88.280922][ T5934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.382212][ T290] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.517742][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 88.522582][ T5952] loop4: detected capacity change from 0 to 764 [ 88.544189][ T5952] rock: directory entry would overflow storage [ 88.550613][ T5952] rock: sig=0x4f50, size=4, remaining=3 [ 88.556332][ T5952] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 88.891352][ T5974] loop0: detected capacity change from 0 to 256 [ 89.879172][ T5984] loop1: detected capacity change from 0 to 1024 [ 89.922095][ T5984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 90.012693][ T5997] loop4: detected capacity change from 0 to 256 [ 90.311426][ T4289] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.483996][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 90.556119][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 90.556196][ T29] audit: type=1326 audit(2000000001.826:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 90.872394][ T29] audit: type=1326 audit(2000000002.057:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad362db829 code=0x7ffc0000 [ 90.895759][ T29] audit: type=1326 audit(2000000002.057:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 90.920431][ T29] audit: type=1326 audit(2000000002.057:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 91.140026][ T6023] loop0: detected capacity change from 0 to 764 [ 91.174005][ T6022] loop3: detected capacity change from 0 to 256 [ 91.261214][ T29] audit: type=1326 audit(2000000000.136:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 91.284803][ T29] audit: type=1326 audit(2000000000.136:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 91.308558][ T6029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6029 comm=syz.2.813 [ 91.320900][ T29] audit: type=1326 audit(2000000000.167:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 91.344285][ T29] audit: type=1326 audit(2000000000.167:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 91.344327][ T29] audit: type=1326 audit(2000000000.167:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 91.391010][ T29] audit: type=1326 audit(2000000000.167:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6027 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 91.397996][ T6023] rock: directory entry would overflow storage [ 91.420651][ T6023] rock: sig=0x4f50, size=4, remaining=3 [ 91.426295][ T6023] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 91.546387][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.753547][ T6037] loop2: detected capacity change from 0 to 1024 [ 91.839751][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 91.923245][ T6052] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 91.933154][ T6052] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.993637][ T6056] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 92.004599][ T6056] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 92.037263][ T6060] FAULT_INJECTION: forcing a failure. [ 92.037263][ T6060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.050412][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.4.822 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.050439][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.050451][ T6060] Call Trace: [ 92.050457][ T6060] [ 92.050464][ T6060] __dump_stack+0x1d/0x30 [ 92.050488][ T6060] dump_stack_lvl+0x95/0xd0 [ 92.050527][ T6060] dump_stack+0x15/0x1b [ 92.050568][ T6060] should_fail_ex+0x265/0x280 [ 92.050588][ T6060] should_fail+0xb/0x20 [ 92.050605][ T6060] should_fail_usercopy+0x1a/0x20 [ 92.050627][ T6060] _copy_to_user+0x20/0xa0 [ 92.050663][ T6060] copy_siginfo_to_user+0x22/0xb0 [ 92.050690][ T6060] x64_setup_rt_frame+0x2b5/0x580 [ 92.050715][ T6060] arch_do_signal_or_restart+0x24c/0x450 [ 92.050741][ T6060] exit_to_user_mode_loop+0x6a/0x740 [ 92.050764][ T6060] do_syscall_64+0x1dd/0x2b0 [ 92.050804][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.050823][ T6060] RIP: 0033:0x7f5d26ccf747 [ 92.050836][ T6060] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 92.050852][ T6060] RSP: 002b:00007f5d25737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 92.050949][ T6060] RAX: 0000000000000013 RBX: 00007f5d26f25fa0 RCX: 00007f5d26ccf749 [ 92.050960][ T6060] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 92.050970][ T6060] RBP: 00007f5d25737090 R08: 0000000000000000 R09: 0000000000000000 [ 92.050981][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.051013][ T6060] R13: 00007f5d26f26038 R14: 00007f5d26f25fa0 R15: 00007ffc037f85d8 [ 92.051029][ T6060] [ 92.300784][ T6071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6071 comm=syz.4.825 [ 92.363377][ T6074] loop0: detected capacity change from 0 to 764 [ 92.376078][ T6078] loop4: detected capacity change from 0 to 512 [ 92.400639][ T6078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.413571][ T6078] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.424599][ T6074] rock: directory entry would overflow storage [ 92.430795][ T6074] rock: sig=0x4f50, size=4, remaining=3 [ 92.436479][ T6074] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 92.444953][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 92.516729][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.598307][ T6090] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 92.608023][ T6090] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 93.512044][ T4289] Bluetooth: hci0: command 0x1003 tx timeout [ 93.518159][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.690433][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 93.715082][ T6115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6115 comm=syz.2.838 [ 93.772299][ T6122] loop0: detected capacity change from 0 to 764 [ 93.795094][ T6122] rock: directory entry would overflow storage [ 93.801534][ T6122] rock: sig=0x4f50, size=4, remaining=3 [ 93.807350][ T6122] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 93.898507][ T6127] loop0: detected capacity change from 0 to 512 [ 93.924158][ T6127] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.930528][ T6127] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 93.939412][ T6127] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 93.963320][ T6127] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.842: attempt to clear invalid blocks 2 len 1 [ 93.976778][ T6127] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.842: invalid indirect mapped block 1819239214 (level 0) [ 93.992345][ T6127] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.842: invalid indirect mapped block 1819239214 (level 1) [ 94.027982][ T6127] EXT4-fs (loop0): 1 truncate cleaned up [ 94.034295][ T6127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.096799][ T6137] netlink: 14 bytes leftover after parsing attributes in process `syz.4.846'. [ 94.472216][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.801648][ T6154] FAULT_INJECTION: forcing a failure. [ 94.801648][ T6154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.814837][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: syz.2.851 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.814930][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.814944][ T6154] Call Trace: [ 94.814950][ T6154] [ 94.814958][ T6154] __dump_stack+0x1d/0x30 [ 94.814985][ T6154] dump_stack_lvl+0x95/0xd0 [ 94.815006][ T6154] dump_stack+0x15/0x1b [ 94.815047][ T6154] should_fail_ex+0x265/0x280 [ 94.815072][ T6154] should_fail+0xb/0x20 [ 94.815149][ T6154] should_fail_usercopy+0x1a/0x20 [ 94.815239][ T6154] _copy_from_iter+0xcf/0xe70 [ 94.815269][ T6154] ? alloc_pages_mpol+0x217/0x260 [ 94.815302][ T6154] copy_page_from_iter+0x178/0x2a0 [ 94.815403][ T6154] tun_get_user+0x679/0x2670 [ 94.815459][ T6154] ? ref_tracker_alloc+0x1f2/0x2f0 [ 94.815483][ T6154] tun_chr_write_iter+0x15e/0x210 [ 94.815510][ T6154] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 94.815533][ T6154] vfs_write+0x52a/0x960 [ 94.815553][ T6154] ksys_write+0xda/0x1a0 [ 94.815639][ T6154] __x64_sys_write+0x40/0x50 [ 94.815660][ T6154] x64_sys_call+0x2847/0x3000 [ 94.815710][ T6154] do_syscall_64+0xca/0x2b0 [ 94.815876][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.815899][ T6154] RIP: 0033:0x7fad3633e1ff [ 94.816020][ T6154] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 94.816036][ T6154] RSP: 002b:00007fad34d9f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 94.816055][ T6154] RAX: ffffffffffffffda RBX: 00007fad36595fa0 RCX: 00007fad3633e1ff [ 94.816069][ T6154] RDX: 000000000000004a RSI: 0000200000000140 RDI: 00000000000000c8 [ 94.816082][ T6154] RBP: 00007fad34d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.816147][ T6154] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 94.816158][ T6154] R13: 00007fad36596038 R14: 00007fad36595fa0 R15: 00007ffe684e33a8 [ 94.816175][ T6154] [ 95.077560][ T6155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6155 comm=syz.1.850 [ 95.149097][ T6158] loop3: detected capacity change from 0 to 764 [ 95.166594][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 95.232022][ T6158] rock: directory entry would overflow storage [ 95.238281][ T6158] rock: sig=0x4f50, size=4, remaining=3 [ 95.243838][ T6158] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 95.409610][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 95.409626][ T29] audit: type=1400 audit(2000000003.327:6018): avc: denied { write } for pid=6166 comm="syz.0.856" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.439018][ T29] audit: type=1400 audit(2000000003.327:6019): avc: denied { open } for pid=6166 comm="syz.0.856" path="/dev/input/event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.463058][ T29] audit: type=1400 audit(2000000003.327:6020): avc: denied { ioctl } for pid=6166 comm="syz.0.856" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.498562][ T29] audit: type=1326 audit(2000000003.338:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 95.522143][ T29] audit: type=1326 audit(2000000003.338:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 95.545697][ T29] audit: type=1326 audit(2000000003.338:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 95.569188][ T29] audit: type=1326 audit(2000000003.338:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 95.593000][ T29] audit: type=1326 audit(2000000003.338:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 95.616373][ T29] audit: type=1326 audit(2000000003.338:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 95.639778][ T29] audit: type=1326 audit(2000000003.338:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 95.714810][ T6177] loop4: detected capacity change from 0 to 256 [ 96.093697][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 96.105525][ T6184] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 96.222149][ T6195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6195 comm=syz.1.863 [ 96.329795][ T6198] loop3: detected capacity change from 0 to 512 [ 96.362373][ T6198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.430124][ T6198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.458771][ T6198] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.686324][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.914272][ T6212] FAULT_INJECTION: forcing a failure. [ 96.914272][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 96.926983][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: syz.4.867 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.927009][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.927023][ T6212] Call Trace: [ 96.927031][ T6212] [ 96.927039][ T6212] __dump_stack+0x1d/0x30 [ 96.927079][ T6212] dump_stack_lvl+0x95/0xd0 [ 96.927136][ T6212] dump_stack+0x15/0x1b [ 96.927155][ T6212] should_fail_ex+0x265/0x280 [ 96.927176][ T6212] should_failslab+0x8c/0xb0 [ 96.927200][ T6212] __kmalloc_cache_noprof+0x65/0x4c0 [ 96.927331][ T6212] ? tcf_action_init_1+0x11e/0x4a0 [ 96.927426][ T6212] tcf_action_init_1+0x11e/0x4a0 [ 96.927456][ T6212] tcf_action_init+0x267/0x6d0 [ 96.927482][ T6212] ? is_bpf_text_address+0x141/0x160 [ 96.927520][ T6212] tc_ctl_action+0x291/0x830 [ 96.927595][ T6212] ? __mutex_lock_slowpath+0xa/0x10 [ 96.927623][ T6212] ? __pfx_tc_ctl_action+0x10/0x10 [ 96.927645][ T6212] rtnetlink_rcv_msg+0x65a/0x6d0 [ 96.927703][ T6212] netlink_rcv_skb+0x123/0x220 [ 96.927747][ T6212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.927917][ T6212] rtnetlink_rcv+0x1c/0x30 [ 96.927932][ T6212] netlink_unicast+0x5c0/0x690 [ 96.927964][ T6212] netlink_sendmsg+0x58b/0x6b0 [ 96.928046][ T6212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.928081][ T6212] __sock_sendmsg+0x145/0x180 [ 96.928099][ T6212] ____sys_sendmsg+0x31e/0x4a0 [ 96.928141][ T6212] ___sys_sendmsg+0x17b/0x1d0 [ 96.928256][ T6212] __x64_sys_sendmsg+0xd4/0x160 [ 96.928312][ T6212] x64_sys_call+0x17ba/0x3000 [ 96.928406][ T6212] do_syscall_64+0xca/0x2b0 [ 96.928437][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.928495][ T6212] RIP: 0033:0x7f5d26ccf749 [ 96.928510][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.928530][ T6212] RSP: 002b:00007f5d25737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.928598][ T6212] RAX: ffffffffffffffda RBX: 00007f5d26f25fa0 RCX: 00007f5d26ccf749 [ 96.928611][ T6212] RDX: 000000002400c800 RSI: 0000200000000000 RDI: 0000000000000004 [ 96.928625][ T6212] RBP: 00007f5d25737090 R08: 0000000000000000 R09: 0000000000000000 [ 96.928639][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.928653][ T6212] R13: 00007f5d26f26038 R14: 00007f5d26f25fa0 R15: 00007ffc037f85d8 [ 96.928674][ T6212] [ 97.327159][ T6217] loop3: detected capacity change from 0 to 764 [ 97.384506][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.435262][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.728910][ T6246] loop0: detected capacity change from 0 to 256 [ 98.245081][ T6256] SELinux: Context is not valid (left unmapped). [ 98.351746][ T6256] loop2: detected capacity change from 0 to 1024 [ 98.693179][ T6279] SELinux: policydb version 0 does not match my version range 15-35 [ 98.709877][ T6275] loop4: detected capacity change from 0 to 512 [ 98.718609][ T6275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.735791][ T6279] SELinux: failed to load policy [ 98.745452][ T6283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.887'. [ 98.761872][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.776789][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.785530][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.813539][ T6275] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.845024][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.936307][ T6295] loop2: detected capacity change from 0 to 764 [ 98.979261][ T6298] loop1: detected capacity change from 0 to 1024 [ 99.001109][ T6298] EXT4-fs: test_dummy_encryption option not supported [ 99.035026][ T6293] geneve2: entered promiscuous mode [ 99.040287][ T6293] geneve2: entered allmulticast mode [ 99.182880][ T6304] loop4: detected capacity change from 0 to 256 [ 100.197947][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 100.197963][ T29] audit: type=1326 audit(2000000000.251:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.201176][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.903'. [ 100.225070][ T29] audit: type=1326 audit(2000000000.251:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.259846][ T29] audit: type=1326 audit(2000000000.251:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.283626][ T29] audit: type=1326 audit(2000000000.251:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.307069][ T29] audit: type=1326 audit(2000000000.251:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.330770][ T29] audit: type=1326 audit(2000000000.251:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.354155][ T29] audit: type=1326 audit(2000000000.251:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.377606][ T29] audit: type=1326 audit(2000000000.251:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.401472][ T29] audit: type=1326 audit(2000000000.251:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.424896][ T29] audit: type=1326 audit(2000000000.251:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 100.440802][ T6333] SELinux: security_context_str_to_sid (Mx7/$c^DX(/ վs$Ẉ1&9 [oL6iP35Lo|L';R 9&5jWԳ%%5J? [ 100.440802][ T6333] [*)0a?s6aH9W ػ [ 100.440802][ T6333] 웙»X⧹h EDhrMe+ #&> LƛaG}S0zP9yԕ7M) failed with errno=-22 [ 100.498172][ T6335] loop4: detected capacity change from 0 to 764 [ 100.571670][ T6322] loop0: detected capacity change from 0 to 1024 [ 100.619813][ T6322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 100.733321][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.756673][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.014546][ T6350] tmpfs: Bad value for 'mpol' [ 101.019765][ T6350] netlink: 14 bytes leftover after parsing attributes in process `syz.3.910'. [ 101.032657][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.043346][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.053974][ T6350] bond0 (unregistering): (slave veth3): Releasing backup interface [ 101.063763][ T6350] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 101.073928][ T6350] bond0 (unregistering): Released all slaves [ 101.144716][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 101.302131][ T6360] FAULT_INJECTION: forcing a failure. [ 101.302131][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 101.314872][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.4.914 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.314900][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.314913][ T6360] Call Trace: [ 101.314920][ T6360] [ 101.314955][ T6360] __dump_stack+0x1d/0x30 [ 101.314982][ T6360] dump_stack_lvl+0x95/0xd0 [ 101.315005][ T6360] dump_stack+0x15/0x1b [ 101.315026][ T6360] should_fail_ex+0x265/0x280 [ 101.315124][ T6360] should_failslab+0x8c/0xb0 [ 101.315148][ T6360] kmem_cache_alloc_noprof+0x69/0x4b0 [ 101.315172][ T6360] ? dst_alloc+0xbd/0x100 [ 101.315202][ T6360] dst_alloc+0xbd/0x100 [ 101.315240][ T6360] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 101.315313][ T6360] ip_route_output_flow+0x65/0x110 [ 101.315343][ T6360] udp_sendmsg+0x11b0/0x13c0 [ 101.315372][ T6360] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 101.315465][ T6360] ? __rcu_read_unlock+0x4f/0x70 [ 101.315483][ T6360] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 101.315542][ T6360] ? __pfx_udp_sendmsg+0x10/0x10 [ 101.315648][ T6360] inet_sendmsg+0xac/0xd0 [ 101.315671][ T6360] __sock_sendmsg+0x102/0x180 [ 101.315706][ T6360] ____sys_sendmsg+0x31e/0x4a0 [ 101.315747][ T6360] ___sys_sendmsg+0x17b/0x1d0 [ 101.315792][ T6360] __x64_sys_sendmsg+0xd4/0x160 [ 101.315822][ T6360] x64_sys_call+0x17ba/0x3000 [ 101.315858][ T6360] do_syscall_64+0xca/0x2b0 [ 101.315936][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.315958][ T6360] RIP: 0033:0x7f5d26ccf749 [ 101.315974][ T6360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.316064][ T6360] RSP: 002b:00007f5d25737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.316120][ T6360] RAX: ffffffffffffffda RBX: 00007f5d26f25fa0 RCX: 00007f5d26ccf749 [ 101.316134][ T6360] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 101.316148][ T6360] RBP: 00007f5d25737090 R08: 0000000000000000 R09: 0000000000000000 [ 101.316162][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.316174][ T6360] R13: 00007f5d26f26038 R14: 00007f5d26f25fa0 R15: 00007ffc037f85d8 [ 101.316192][ T6360] [ 101.575992][ T6367] loop4: detected capacity change from 0 to 764 [ 102.230269][ T6386] loop3: detected capacity change from 0 to 512 [ 102.263413][ T6386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.350850][ T6386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.402859][ T6384] loop0: detected capacity change from 0 to 1024 [ 102.424109][ T6384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 102.443013][ T6386] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.511676][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.990345][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 103.625782][ T6407] loop2: detected capacity change from 0 to 764 [ 103.790411][ T4289] Bluetooth: hci0: command 0x1003 tx timeout [ 103.796462][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.325618][ T6421] loop4: detected capacity change from 0 to 256 [ 104.872382][ T6440] loop1: detected capacity change from 0 to 512 [ 104.882365][ T6440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.897029][ T6440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.910288][ T6440] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.932737][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.975517][ T6436] loop2: detected capacity change from 0 to 1024 [ 105.035588][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 105.059452][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 105.059466][ T29] audit: type=1326 audit(2000000000.346:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.089043][ T29] audit: type=1326 audit(2000000000.346:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.112413][ T29] audit: type=1326 audit(2000000000.346:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.136154][ T29] audit: type=1326 audit(2000000000.346:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.159631][ T29] audit: type=1326 audit(2000000000.346:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.183132][ T29] audit: type=1326 audit(2000000000.346:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.206510][ T29] audit: type=1326 audit(2000000000.346:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.229982][ T29] audit: type=1326 audit(2000000000.356:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.254083][ T29] audit: type=1326 audit(2000000000.356:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.277709][ T29] audit: type=1326 audit(2000000000.356:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1d9ab9f749 code=0x7ffc0000 [ 105.318001][ T6442] loop0: detected capacity change from 0 to 1024 [ 105.331188][ T6457] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 105.340375][ T6461] loop4: detected capacity change from 0 to 512 [ 105.348149][ T6457] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 105.359978][ T6461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.370444][ T6442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 105.393563][ T6461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.406587][ T6461] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.426438][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.560785][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 105.739681][ T6480] loop2: detected capacity change from 0 to 512 [ 105.752170][ T6480] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.822103][ T6480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.835548][ T6480] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.906109][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.917519][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 105.974120][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 106.253368][ T6496] FAULT_INJECTION: forcing a failure. [ 106.253368][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 106.266283][ T6496] CPU: 0 UID: 0 PID: 6496 Comm: syz.1.957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.266309][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.266322][ T6496] Call Trace: [ 106.266328][ T6496] [ 106.266336][ T6496] __dump_stack+0x1d/0x30 [ 106.266399][ T6496] dump_stack_lvl+0x95/0xd0 [ 106.266423][ T6496] dump_stack+0x15/0x1b [ 106.266445][ T6496] should_fail_ex+0x265/0x280 [ 106.266468][ T6496] should_failslab+0x8c/0xb0 [ 106.266556][ T6496] kmem_cache_alloc_noprof+0x69/0x4b0 [ 106.266580][ T6496] ? dst_alloc+0xbd/0x100 [ 106.266609][ T6496] dst_alloc+0xbd/0x100 [ 106.266699][ T6496] ? ip_vs_ftp_in+0x412/0x730 [ 106.266740][ T6496] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 106.266773][ T6496] ip_route_output_key_hash+0x63/0xa0 [ 106.266883][ T6496] tcp_v4_connect+0x3e4/0xaf0 [ 106.266977][ T6496] __inet_stream_connect+0x169/0x7d0 [ 106.267001][ T6496] ? _raw_spin_lock_bh+0x56/0xb0 [ 106.267021][ T6496] ? _raw_spin_unlock_bh+0x36/0x40 [ 106.267116][ T6496] ? lock_sock_nested+0x112/0x140 [ 106.267136][ T6496] ? selinux_netlbl_socket_connect+0x114/0x130 [ 106.267173][ T6496] inet_stream_connect+0x44/0x70 [ 106.267193][ T6496] ? __pfx_inet_stream_connect+0x10/0x10 [ 106.267284][ T6496] __sys_connect+0x1f2/0x2b0 [ 106.267310][ T6496] __x64_sys_connect+0x3f/0x50 [ 106.267403][ T6496] x64_sys_call+0x2e09/0x3000 [ 106.267427][ T6496] do_syscall_64+0xca/0x2b0 [ 106.267458][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.267482][ T6496] RIP: 0033:0x7f2d8100f749 [ 106.267499][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.267518][ T6496] RSP: 002b:00007f2d7fa6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 106.267535][ T6496] RAX: ffffffffffffffda RBX: 00007f2d81265fa0 RCX: 00007f2d8100f749 [ 106.267547][ T6496] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 106.267560][ T6496] RBP: 00007f2d7fa6f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.267574][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.267588][ T6496] R13: 00007f2d81266038 R14: 00007f2d81265fa0 R15: 00007fffca7b6ef8 [ 106.267670][ T6496] [ 106.830264][ T6513] loop0: detected capacity change from 0 to 128 [ 106.841431][ T6513] bio_check_eod: 28 callbacks suppressed [ 106.841448][ T6513] syz.0.963: attempt to access beyond end of device [ 106.841448][ T6513] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 106.924274][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 106.946527][ T6510] syz.0.963: attempt to access beyond end of device [ 106.946527][ T6510] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 107.022675][ T6509] syz.0.963: attempt to access beyond end of device [ 107.022675][ T6509] loop0: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 107.036420][ T6509] buffer_io_error: 14 callbacks suppressed [ 107.036462][ T6509] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 107.096773][ T6524] loop2: detected capacity change from 0 to 512 [ 107.107455][ T6524] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.113823][ T6524] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 107.128551][ T6524] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 107.143473][ T6524] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.968: attempt to clear invalid blocks 2 len 1 [ 107.156558][ T6524] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.968: invalid indirect mapped block 1819239214 (level 0) [ 107.170673][ T6524] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.968: invalid indirect mapped block 1819239214 (level 1) [ 107.185120][ T6524] EXT4-fs (loop2): 1 truncate cleaned up [ 107.194779][ T6524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.414298][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.554452][ T6537] loop2: detected capacity change from 0 to 256 [ 108.112956][ T6564] loop2: detected capacity change from 0 to 512 [ 108.120803][ T6564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.284445][ T6570] loop1: detected capacity change from 0 to 256 [ 108.412281][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.492614][ T6564] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.609872][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.863429][ T6595] loop1: detected capacity change from 0 to 256 [ 109.534229][ T6609] loop3: detected capacity change from 0 to 256 [ 109.735269][ T6611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=6611 comm=syz.3.999 [ 109.754463][ T6613] loop2: detected capacity change from 0 to 512 [ 109.786280][ T6613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.824764][ T6613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.860192][ T6613] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.870862][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 109.870876][ T29] audit: type=1326 audit(2000000000.787:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad3633df90 code=0x7ffc0000 [ 109.930827][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.963626][ T6623] FAULT_INJECTION: forcing a failure. [ 109.963626][ T6623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.976748][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.1.1002 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.976822][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.976836][ T6623] Call Trace: [ 109.976878][ T6623] [ 109.976886][ T6623] __dump_stack+0x1d/0x30 [ 109.976909][ T6623] dump_stack_lvl+0x95/0xd0 [ 109.976928][ T6623] dump_stack+0x15/0x1b [ 109.976949][ T6623] should_fail_ex+0x265/0x280 [ 109.976974][ T6623] should_fail+0xb/0x20 [ 109.977052][ T6623] should_fail_usercopy+0x1a/0x20 [ 109.977079][ T6623] _copy_from_iter+0xcf/0xe70 [ 109.977117][ T6623] ? __alloc_skb+0x396/0x4b0 [ 109.977138][ T6623] ? __alloc_skb+0x228/0x4b0 [ 109.977162][ T6623] netlink_sendmsg+0x471/0x6b0 [ 109.977230][ T6623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.977275][ T6623] __sock_sendmsg+0x145/0x180 [ 109.977332][ T6623] ____sys_sendmsg+0x31e/0x4a0 [ 109.977438][ T6623] ___sys_sendmsg+0x17b/0x1d0 [ 109.977480][ T6623] __x64_sys_sendmsg+0xd4/0x160 [ 109.977528][ T6623] x64_sys_call+0x17ba/0x3000 [ 109.977553][ T6623] do_syscall_64+0xca/0x2b0 [ 109.977637][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.977694][ T6623] RIP: 0033:0x7f2d8100f749 [ 109.977712][ T6623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.977731][ T6623] RSP: 002b:00007f2d7fa6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.977751][ T6623] RAX: ffffffffffffffda RBX: 00007f2d81265fa0 RCX: 00007f2d8100f749 [ 109.977774][ T6623] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 109.977788][ T6623] RBP: 00007f2d7fa6f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.977880][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.977892][ T6623] R13: 00007f2d81266038 R14: 00007f2d81265fa0 R15: 00007fffca7b6ef8 [ 109.977908][ T6623] [ 110.031455][ T29] audit: type=1326 audit(2000000000.787:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fad3633e497 code=0x7ffc0000 [ 110.192779][ T29] audit: type=1326 audit(2000000000.787:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad3633df90 code=0x7ffc0000 [ 110.216710][ T29] audit: type=1326 audit(2000000000.787:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 110.240709][ T29] audit: type=1326 audit(2000000000.787:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3633f749 code=0x7ffc0000 [ 110.265378][ T6625] loop3: detected capacity change from 0 to 1024 [ 110.275035][ T29] audit: type=1326 audit(2000000000.986:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 110.298645][ T29] audit: type=1326 audit(2000000000.986:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 110.322061][ T29] audit: type=1326 audit(2000000000.986:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 110.345600][ T29] audit: type=1326 audit(2000000000.986:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 110.369145][ T29] audit: type=1326 audit(2000000000.986:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8100f749 code=0x7ffc0000 [ 110.443902][ T6630] loop1: detected capacity change from 0 to 512 [ 110.474800][ T6630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.661497][ T6630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.782779][ T6630] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.989224][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.029193][ T6649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.212912][ T6649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.231467][ T6649] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.280148][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.620955][ T6663] set_capacity_and_notify: 4 callbacks suppressed [ 111.620974][ T6663] loop3: detected capacity change from 0 to 256 [ 111.751476][ T6661] loop2: detected capacity change from 0 to 512 [ 111.778014][ T6661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.847434][ T6667] netlink: 'syz.0.1017': attribute type 58 has an invalid length. [ 111.855317][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'. [ 111.923967][ T6661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.235695][ T6661] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.302388][ T6677] loop4: detected capacity change from 0 to 512 [ 112.336417][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.348829][ T6677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.403485][ T6677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.489770][ T6677] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.549615][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 112.592666][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.828624][ T6711] loop2: detected capacity change from 0 to 512 [ 112.855136][ T6711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.882913][ T6711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.908880][ T6711] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.928144][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1035'. [ 112.941661][ T6724] SELinux: security_context_str_to_sid (PlN]ڰ\=ى$?/) failed with errno=-22 [ 112.960744][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.216570][ T6732] loop2: detected capacity change from 0 to 256 [ 114.018801][ T6744] loop3: detected capacity change from 0 to 512 [ 114.085047][ T6744] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.091519][ T6744] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 114.101586][ T6746] loop1: detected capacity change from 0 to 512 [ 114.122902][ T6753] loop4: detected capacity change from 0 to 256 [ 114.129867][ T6744] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 114.144508][ T6746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.155858][ T6744] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1042: attempt to clear invalid blocks 2 len 1 [ 114.234878][ T6744] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1042: invalid indirect mapped block 1819239214 (level 0) [ 114.268108][ T6744] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1042: invalid indirect mapped block 1819239214 (level 1) [ 114.284095][ T6746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.298087][ T6744] EXT4-fs (loop3): 1 truncate cleaned up [ 114.304438][ T6744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.346913][ T6746] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.390080][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.395401][ T6767] loop2: detected capacity change from 0 to 2048 [ 114.554883][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.620298][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1056'. [ 114.690103][ T6787] SELinux: security_context_str_to_sid (=X+CבSe6w{:c![ A-tp~@D+QȨUBWxEp/<2Hϋ{41RުbLt?lyde~)/F4Z) failed with errno=-22 [ 114.770666][ T6792] loop3: detected capacity change from 0 to 256 [ 114.848892][ T3004] ================================================================== [ 114.857006][ T3004] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 114.864041][ T3004] [ 114.866361][ T3004] read-write to 0xffff888107af00c0 of 4 bytes by task 3508 on cpu 1: [ 114.874500][ T3004] d_delete+0x15a/0x180 [ 114.878659][ T3004] d_delete_notify+0x32/0x100 [ 114.883339][ T3004] vfs_unlink+0x32c/0x440 [ 114.887679][ T3004] do_unlinkat+0x1cd/0x4b0 [ 114.892100][ T3004] __x64_sys_unlink+0x2e/0x40 [ 114.896782][ T3004] x64_sys_call+0x2f48/0x3000 [ 114.901471][ T3004] do_syscall_64+0xca/0x2b0 [ 114.906007][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.911898][ T3004] [ 114.914212][ T3004] read to 0xffff888107af00c0 of 4 bytes by task 3004 on cpu 0: [ 114.921746][ T3004] step_into_slowpath+0x120/0x480 [ 114.926777][ T3004] path_lookupat+0x330/0x500 [ 114.931375][ T3004] filename_lookup+0x147/0x340 [ 114.936138][ T3004] do_readlinkat+0x7d/0x320 [ 114.940641][ T3004] __x64_sys_readlink+0x47/0x60 [ 114.945488][ T3004] x64_sys_call+0x2af1/0x3000 [ 114.950167][ T3004] do_syscall_64+0xca/0x2b0 [ 114.954676][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.960578][ T3004] [ 114.962887][ T3004] value changed: 0x00300180 -> 0x00004080 [ 114.968587][ T3004] [ 114.970895][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 114.977045][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.986327][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.996388][ T3004] ================================================================== [ 115.016963][ T6780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 115.042969][ T6780] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 115.042969][ T6780] program syz.1.1055 not setting count and/or reply_len properly [ 115.560135][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.