last executing test programs: 1.978380625s ago: executing program 0 (id=3725): ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) 1.947124898s ago: executing program 0 (id=3727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00ebff0000000000000000000000000000000000000001090000000000000002000100000000000000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x18) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.946329239s ago: executing program 1 (id=3728): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee6, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.672064226s ago: executing program 0 (id=3730): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000340)={r5, 0x800}, 0x8) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000180)='./file0\x00', 0x810000, &(0x7f0000000140)=ANY=[@ANYBLOB="00628852ac0b066dfdb346cba3e9e0200c6140791c045c479cc0be671b3789bb8ae95e143015643f9013eedcdea5aa169136eb"], 0x1, 0x549, &(0x7f0000000b40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x2c, 0xc000000, 0x1a}, 0x9c) 1.341940658s ago: executing program 1 (id=3734): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000340)={r4, 0x800}, 0x8) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r6, 0x0, r0, 0x0, 0x20000000000002, 0x2) 1.270413975s ago: executing program 2 (id=3735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000300)={[{@nogrpid}, {@resuid}]}, 0xfe, 0x246, &(0x7f0000000840)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.197884492s ago: executing program 2 (id=3737): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1811000000000000000000080000000000080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.171660445s ago: executing program 2 (id=3739): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) timer_settime(r4, 0x1, &(0x7f0000000880)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000008c0)) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) syz_mount_image$iso9660(&(0x7f00000009c0), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[], 0x2, 0x699, &(0x7f0000000140)="$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") execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 984.020263ms ago: executing program 2 (id=3744): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee6, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 777.128274ms ago: executing program 0 (id=3748): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7917c52fce7379c7ed0e1995322047b83e65b2869b4bad0a56e926319784aa46acf158182329ed3d349e5ec1d0865ac2f5e5876779b01e90e3dd830e72fc2822372cb30b1e532a80e067583fe7b8b5326ceafd9c3a7ff865eb86455f299a29131ffe0903c6bf84886fb284c6fb01ea200b6e38df139b60fdfbc8e03f9aeef711fa5c847921049471f5926e6d8cd4c44d33d56723529a526cc738555280a481154b1dbfe4c7abebc8f1a927da30da7d3c3c4921374e539e3eeb98318a46d920e182255632968274909c523530ec8f", @ANYBLOB="b25e778001d34a9bfa5c7acc5f580808e30604390eedc95a57c7e66d66025f97e309a8ac249720de3c94f45e1e5fa790e3a89088a1528be540080db1fd2e6df920168c22c1ab936906986a5087e7d30cf32eb496340b2458e929679c3c78cf4a9956f2a43788762ee7bbd49064345d397b510cf8d6f17c", @ANYRES32, @ANYRES32, @ANYRES64], 0x1, 0x191, &(0x7f00000002c0)="$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") r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r2, r1, 0x0) finit_module(r2, 0x0, 0x0) 746.803137ms ago: executing program 0 (id=3750): r0 = syz_open_dev$evdev(0x0, 0x200, 0x80) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 708.36415ms ago: executing program 0 (id=3751): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="00000000a65a020008001300", @ANYRES32=0x0, @ANYBLOB="376a078d3c76af2407877a48fbeec7de40a2879a97d01ef309fe76554654ab1d5feb0c8ff63fad77be142bf523cd4b430bd66757f2187c33aa6d1f1e89c1c777c4e5d17d96033718241cffeebf993b76caf52f601b73eeccca97050fdbdb345cd9"], 0x28}}, 0x2000e844) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYBLOB="00000000000000000000000000767b4ff0fc9ad02b29627054000000", @ANYBLOB="0e5da06faddf5673f19cb201c67aebf841decf33d160914483e88db99b3c743a668f1456a09d80", @ANYRESHEX=r0, @ANYRES16, @ANYRES32=r1, @ANYBLOB="0e00000004000000040000000300000000000000", @ANYRESHEX=r0], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="e90327bd7000ffdbbf25064000000c04000000000006001a004e2300000800110000000000060003000b2e001705b51fddf800000005000600f8000000"], 0x50}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100010, 0xffffffff00000000, 0x8, 0x1, 0x10000000000b, 0x20005, 0xb, 0x0, 0x1, 0x0, 0x800020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x808000, &(0x7f0000000180)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x550, &(0x7f0000001780)="$eJzs3c9vHFcdAPDvTHYTJ3G6LnCASi2FFiUVZDeuaWtxKEVCcKqEKJyDsTeWlbU3yq7b2KrA+QuQEAIkTnDhgsQfgFRF4sKxQqoEZ5CKQIimIMEBOmh3Z9dhM2uvy/pH1p+PNJ733uzM971dz483M5oJ4NR6OiJeiYgPsix7LiIqeXmaD7HTGzqfe//+m8udIYkse+1vSSR52fAyL+azzUTE178a8e3k4bitre2bS41GqZ+vtddv1Vpb21fX1pdW66v1jYWF+RcXX1p8YfFaxFv/fzsvRcTLX/7TD7/386+8/Nbn3vjj9b9c+U6nWrP59KJ2jKm018Re08vnZoZmuP0hg51EnfaU+5nz481z9xDrAwDAaJ1j/I9ExKcj4rmoxJm9D2cBAACAR1D2xdn4dxKRFTs7ohwAAAB4hKTde2CTtJrfCzAbaVqt9u7h/VhcSBvNVvuzN5qbGyu9e2XnopzeWGvUr+X3Cs9FOenk57vp3fzzQ/mFiHg8In5QOd/NV5ebjZXjPvkBAAAAp8TFof7/Pyq9/j8AAAAwZeb2nlw5qnoAAAAAh2ef/j8AAAAwBfT/AQAAYKp97dVXO0PWf//1yutbmzebr19dqbduVtc3l6vLzdu3qqvN5mr3mX3r+y2v0Wze+nxsbN6pteutdq21tX19vbm50b6+FjNH0iAAAADgIY9/8t7vk4jY+cL57tBx9rgrBRyJ0iCV5OOCtf8Pj/XG7x5RpYAjcWbklHSQevdc8SccJ8CjrTRcMGJdB6ZP+bgrABy7ZJ/pQzfvXBik3s7Hn5p8nQAAgMm6/Ini6/+jrwv07aRHUD3gEFmJ4fQa2s9n3vUDp0f3+v+4N/I4WICpUh6jpw9MtwNe/9/19rgRsuxAFQIAACZutjskaTU/vTcbaVqtRlzqvhagnNxYa9SvRcRjEfG7SvlcJz/fnTPZt88AAAAAAAAAAAAAAAAAAAAAAAAAAPRkWRIZAAAAMNUi0j8nv+49y/9y5dnZ4fMDZ5N/dV8JfDYi3vjJaz+6s9Ru357vlL83KG//OC9//jjOYAAAAADD+v307vifx10bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKbN+/ffXO4PY3z8/KTi/vVLETFXFL8UM93xTJQj4sLfkyg9MF8SEWcmEH/nbkR8vCh+0qnWIGRR/El8CfvEj7n8WyiKf3EC8eE0u9fZ/rxStP6l8XR3XLz+lSL+J/9hjd7+xWD7d2bE+n9pzBhPvPPL2sj4dyOeKBVvf/rxkxHxnxkz/re+sb09alr204jL/f1Pd4s3iDDzYKxae/1WrbW1fXVtfWm1vlrfWFiYf3HxpcUXFq/Vbqw16vnfwhjff/JXH+zV/guF+78kr83o9j9bsLyifdJ/3rlz/6P9zM7D8a88UxD/Nz/LP5HHT3bnSfM4n8nTSSSD8mSn930+6Klf/Papvdq/stv+8kF+/yujFjrsoRXlyXH/dQCAQ9Da2r651GjUb09totNLPwHVOPREVun9oielPkOJb753Av/ZvjvRBWZZlnV+gYJJ9yJinOUkMeGWpsX12U2M/FGOecMEAABM3O5B/2SupwMAAAAAAAAAAAAAAAAAAAAHdxRPWRuOufsI5GQSj9AGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiI/wYAAP//in3QFg==") bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYRESDEC=r5, @ANYBLOB="9334e5d584f39c42defe7a883478a411904b231e49124ab874828179786ba47cff61016c19441b07a82cc01987edb97d3dd142a4e487181434237885f5b9d5d763f87eaffb967603fb4b515c380d5e09a481f83c4266ace49c97272b917885ba6d10b0a5eaafbe3514fcb0adc0b0f5c9b1f93c9268381d9e730acfc582add96a50005e65f77895de7bc3c63559a5f126038e0852b453afb5bd66c50678c469bb77e9e9ecc27832f2594071a1c6820324f503bda2cb69898b8e1284d826", @ANYRES16=r2], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1) close(r6) 708.00171ms ago: executing program 3 (id=3752): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 571.776604ms ago: executing program 2 (id=3754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf4}}, 0x0) 552.530036ms ago: executing program 3 (id=3755): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000300)={[{@nogrpid}, {@resuid}]}, 0xfe, 0x246, &(0x7f0000000840)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 522.570579ms ago: executing program 2 (id=3756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0], 0x30}}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000340)={r5, 0x800}, 0x8) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000180)='./file0\x00', 0x810000, &(0x7f0000000140)=ANY=[@ANYBLOB="00628852ac0b066dfdb346cba3e9e0200c6140791c045c479cc0be671b3789bb8ae95e143015643f9013eedcdea5aa169136eb"], 0x1, 0x549, &(0x7f0000000b40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x2c, 0xc000000, 0x1a}, 0x9c) 481.938763ms ago: executing program 4 (id=3757): openat$sysfs(0xffffffffffffff9c, 0x0, 0x2882, 0x0) 460.820495ms ago: executing program 1 (id=3758): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x6f, 0x3, 0x6, 0x0, @empty, @local, 0x8, 0x20, 0xff, 0x200}}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rpc\x00') symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x541e, &(0x7f0000000280)={0x2, 0x0, 0x0, 0xf1a8, 0x0, "1a96947d01000000000000008a81ca1e1238ec"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x400005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x5, 0x0) pipe(0x0) splice(r3, &(0x7f0000000180)=0xc9d4, 0xffffffffffffffff, 0x0, 0x1, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 460.197245ms ago: executing program 3 (id=3759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8000) 399.468731ms ago: executing program 4 (id=3760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) getdents64(r1, &(0x7f0000000200)=""/208, 0xd0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="014b00004000000000f701000000040001"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x1e, 0x805, 0x0) connect$tipc(r7, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r7) 347.575616ms ago: executing program 1 (id=3761): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000440)={[{@grpid}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@nogrpid}, {@auto_da_alloc}, {@grpid}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 259.082425ms ago: executing program 3 (id=3762): r0 = syz_open_dev$evdev(0x0, 0x200, 0x80) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 226.309658ms ago: executing program 3 (id=3763): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1811000000000000000000080000000000080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 225.724418ms ago: executing program 4 (id=3764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8000) 205.69909ms ago: executing program 3 (id=3765): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee6, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 147.853846ms ago: executing program 1 (id=3766): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lgetxattr(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00', 0x0, 0x0) 138.688417ms ago: executing program 4 (id=3767): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r4, 0x0, 0xbf5, 0x2000402) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000280)={0x6, 0x0, [{0x2, 0x2, 0x5, [0xfffffff9, 0x0, 0x9, 0x7d8, 0x31, 0x80, 0x5, 0xfff]}, {0x10000, 0x7df8, 0x2, [0x916, 0x7, 0x4, 0x5, 0x6, 0x401, 0x2, 0xfba6]}, {0x577, 0x8, 0x4001b90, [0x10, 0xf, 0x2, 0x7e, 0x8a, 0x1fb, 0x220, 0xad]}, {0x2b280, 0x1, 0x2, [0xa3c, 0xfffffc00, 0xfffffff8, 0x10000, 0x7, 0x3, 0x4, 0xfffffffa]}, {0x5, 0x6, 0xc2, [0x9, 0xffff99e1, 0x9, 0x7, 0x2, 0x7fffffff, 0x1, 0x8]}, {0x4, 0x1, 0x80000001, [0x400, 0x8000, 0xec3, 0x7, 0x5, 0x2, 0xffffff37, 0x9f]}]}) creat(&(0x7f0000000080)='./file1\x00', 0x64) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 118.951569ms ago: executing program 1 (id=3768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000340)={r4, 0x800}, 0x8) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r6, 0x0, r0, 0x0, 0x20000000000002, 0x2) 0s ago: executing program 4 (id=3769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000001000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x3800480, &(0x7f0000000040)={[], [{@smackfsdef}]}, 0x45, 0x79f, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyL+d7NoLC7vZk9mFXUOInGS9yRZ6SOmhFBoItOcmRlaMa9kKlhxiY2hCKfRSaEsPhfaSc3+kt17749r+Fe2hJKStE5rQQnEZ/YjlWHLkxJLd5POBsd6b9+T3vnqamSfNoAngiTWW/slEHIqIt5KIkdr6JCL6KqneiFPVenfWVnPpksT6ry/+mFTq3F5bzUXDc1IHapm/R8SXr0cczmxtt7S8MjdVKOQXa/mJ8vyFidLyypHZ+amZ/Ex+4cSxycnjJ/938sTuxfrzNysHb7z93H8+OfXLa3+79uZXSZyKg7Wyxjh2y1iM1V6TvvQl3OTZ3W5sjyXbFzd5B7AfpAPTU93K41CMRE8l1cJQN3sGAHTKqxGx3kpPyxIA4A8taX38BwAeS/XvAW6vrebqy95+I9FdN5+JiMFq/PXzm9WS3to5u8HKedDh28mmMyNJRIzuQvtjEfHBZy9/lC7RofOQAM1cvhIR50bHNu3/Kzu6ZMs1Czt1tI06Y/fl7f+gez5P5z//bzb/y9yb/0ST+c9Ak233YTx4+89c34VmWkrnf083XNt2pyH+mtGeWu5PlTlfX3J+tvDtPyPizxExHn0D52cL+WPbtDF+67dbrcoa538/vfPKh2n76eNGjcz13oHNz5meKk89SsyNbl6J+Edvs/iTe+OftJj/nmmzjeefeuP9VmVp/Gm89WVr/J21fjXi303Hf+OKtmTb6xMn0uE/Wv3bvI1Pv3tvuFX7jeOfLmn79c8C3ZCO//D28Y8mjddrlnbextdXR75oVfbg+Ju///uTlyrp/tq6S1Pl8uKxiP7kha3rj288t56v10/jH/9X8+1/u/d/+pnwXJvx99744eOHj7+z0vindzT+O09cuzPX06r99sZ/spIar61pZ//Xbgcf5bUDAAAAAAAAAAAAAAAAAAAAAAAAgHZlIuJgJJnsvXQmk81W7+H91xjOFIql8uHzxaWF6ajcK3s0+jL1n7oc2fg91Mrvn4425I/fl/9vRPwlIt4dGKrks7liYXqvgwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmgMt7v+f+n5gr3sHAHTMYM+Oqt9d71hPAIBuGezd6x4AAN02uKPaQx3rBwDQPTs7/gMAjwPHfwB48jj+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GFnTp9Ol/W7a6u5ND99cXlprnjxyHS+NJedX8plc8XFC9mZYnGmkM/mivNpndFm/+hy9aFQLF6YjIWlSxPlfKk8UVpeOTtfXFoon52dn5rJn833dTU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhPaXllbqpQyC9KSOyfxGBE7INuPDgRl6vb0X7pz+4lon9jLzG0Z/snAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3u9wAAAP//VU4nrg==") r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): slave bond_slave_1): Enslaving as an active interface with an up link [ 211.104459][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.142813][T12708] team0: Port device team_slave_0 added [ 211.155904][T12708] team0: Port device team_slave_1 added [ 211.165414][T12737] FAULT_INJECTION: forcing a failure. [ 211.165414][T12737] name failslab, interval 1, probability 0, space 0, times 0 [ 211.178136][T12737] CPU: 0 UID: 0 PID: 12737 Comm: syz.2.3178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.178169][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.178181][T12737] Call Trace: [ 211.178188][T12737] [ 211.178196][T12737] __dump_stack+0x1d/0x30 [ 211.178215][T12737] dump_stack_lvl+0xe8/0x140 [ 211.178232][T12737] dump_stack+0x15/0x1b [ 211.178321][T12737] should_fail_ex+0x265/0x280 [ 211.178367][T12737] should_failslab+0x8c/0xb0 [ 211.178399][T12737] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 211.178510][T12737] ? __get_vm_area_node+0x106/0x1d0 [ 211.178540][T12737] __get_vm_area_node+0x106/0x1d0 [ 211.178582][T12737] __vmalloc_node_range_noprof+0x28c/0xed0 [ 211.178611][T12737] ? n_tty_open+0x1b/0xf0 [ 211.178684][T12737] ? klist_next+0x6a/0x220 [ 211.178709][T12737] ? klist_dec_and_del+0xba/0x270 [ 211.178735][T12737] ? _raw_spin_unlock+0x26/0x50 [ 211.178761][T12737] ? kobject_put+0x10b/0x190 [ 211.178830][T12737] ? n_tty_open+0x1b/0xf0 [ 211.178896][T12737] vzalloc_noprof+0x82/0xc0 [ 211.178925][T12737] ? n_tty_open+0x1b/0xf0 [ 211.178950][T12737] n_tty_open+0x1b/0xf0 [ 211.179028][T12737] tty_ldisc_setup+0x80/0x220 [ 211.179048][T12737] tty_init_dev+0x183/0x330 [ 211.179067][T12737] tty_open+0x6c7/0xaf0 [ 211.179130][T12737] chrdev_open+0x2eb/0x3a0 [ 211.179157][T12737] do_dentry_open+0x646/0xa20 [ 211.179236][T12737] ? __pfx_chrdev_open+0x10/0x10 [ 211.179262][T12737] vfs_open+0x37/0x1e0 [ 211.179290][T12737] path_openat+0x1c5e/0x2170 [ 211.179318][T12737] do_filp_open+0x109/0x230 [ 211.179404][T12737] do_sys_openat2+0xa6/0x110 [ 211.179455][T12737] __x64_sys_openat+0xf2/0x120 [ 211.179487][T12737] x64_sys_call+0x2eab/0x3000 [ 211.179506][T12737] do_syscall_64+0xd2/0x200 [ 211.179588][T12737] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.179614][T12737] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 211.179634][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.179728][T12737] RIP: 0033:0x7fae984feec9 [ 211.179741][T12737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.179798][T12737] RSP: 002b:00007fae96f46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.179815][T12737] RAX: ffffffffffffffda RBX: 00007fae98756090 RCX: 00007fae984feec9 [ 211.179827][T12737] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 211.179839][T12737] RBP: 00007fae96f46090 R08: 0000000000000000 R09: 0000000000000000 [ 211.179851][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.179861][T12737] R13: 00007fae98756128 R14: 00007fae98756090 R15: 00007ffe9d2b8cf8 [ 211.179902][T12737] [ 211.442954][T12737] syz.2.3178: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 211.457826][T12737] CPU: 0 UID: 0 PID: 12737 Comm: syz.2.3178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.457908][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.457919][T12737] Call Trace: [ 211.457925][T12737] [ 211.457932][T12737] __dump_stack+0x1d/0x30 [ 211.457952][T12737] dump_stack_lvl+0xe8/0x140 [ 211.457970][T12737] dump_stack+0x15/0x1b [ 211.457985][T12737] warn_alloc+0x12b/0x1a0 [ 211.458088][T12737] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 211.458147][T12737] ? klist_next+0x6a/0x220 [ 211.458224][T12737] ? klist_dec_and_del+0xba/0x270 [ 211.458249][T12737] ? _raw_spin_unlock+0x26/0x50 [ 211.458276][T12737] ? kobject_put+0x10b/0x190 [ 211.458307][T12737] ? n_tty_open+0x1b/0xf0 [ 211.458390][T12737] vzalloc_noprof+0x82/0xc0 [ 211.458466][T12737] ? n_tty_open+0x1b/0xf0 [ 211.458491][T12737] n_tty_open+0x1b/0xf0 [ 211.458515][T12737] tty_ldisc_setup+0x80/0x220 [ 211.458566][T12737] tty_init_dev+0x183/0x330 [ 211.458612][T12737] tty_open+0x6c7/0xaf0 [ 211.458639][T12737] chrdev_open+0x2eb/0x3a0 [ 211.458665][T12737] do_dentry_open+0x646/0xa20 [ 211.458887][T12737] ? __pfx_chrdev_open+0x10/0x10 [ 211.458914][T12737] vfs_open+0x37/0x1e0 [ 211.458946][T12737] path_openat+0x1c5e/0x2170 [ 211.458974][T12737] do_filp_open+0x109/0x230 [ 211.459001][T12737] do_sys_openat2+0xa6/0x110 [ 211.459050][T12737] __x64_sys_openat+0xf2/0x120 [ 211.459082][T12737] x64_sys_call+0x2eab/0x3000 [ 211.459108][T12737] do_syscall_64+0xd2/0x200 [ 211.459129][T12737] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.459170][T12737] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 211.459191][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.459257][T12737] RIP: 0033:0x7fae984feec9 [ 211.459270][T12737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.459287][T12737] RSP: 002b:00007fae96f46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.459304][T12737] RAX: ffffffffffffffda RBX: 00007fae98756090 RCX: 00007fae984feec9 [ 211.459316][T12737] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 211.459327][T12737] RBP: 00007fae96f46090 R08: 0000000000000000 R09: 0000000000000000 [ 211.459338][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.459426][T12737] R13: 00007fae98756128 R14: 00007fae98756090 R15: 00007ffe9d2b8cf8 [ 211.459444][T12737] [ 211.697452][T12737] Mem-Info: [ 211.700812][T12737] active_anon:4166 inactive_anon:15 isolated_anon:0 [ 211.700812][T12737] active_file:22796 inactive_file:2394 isolated_file:0 [ 211.700812][T12737] unevictable:0 dirty:343 writeback:0 [ 211.700812][T12737] slab_reclaimable:3428 slab_unreclaimable:15807 [ 211.700812][T12737] mapped:29206 shmem:323 pagetables:1030 [ 211.700812][T12737] sec_pagetables:0 bounce:0 [ 211.700812][T12737] kernel_misc_reclaimable:0 [ 211.700812][T12737] free:1845790 free_pcp:24798 free_cma:0 [ 211.745787][T12737] Node 0 active_anon:16664kB inactive_anon:60kB active_file:91184kB inactive_file:9576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116824kB dirty:1372kB writeback:0kB shmem:1292kB kernel_stack:3344kB pagetables:4120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 211.757386][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.773234][T12737] Node 0 [ 211.780172][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.780202][T12737] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.780271][T12737] lowmem_reserve[]: 0 2883 [ 211.783272][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.809341][T12737] 7862 7862 [ 211.809365][T12737] Node 0 DMA32 free:2949056kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 211.854526][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.856679][T12737] lowmem_reserve[]: 0 0 [ 211.888393][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.895426][T12737] 4978 [ 211.899594][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.925427][T12737] 4978 [ 211.925441][T12737] Node 0 Normal free:4418744kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16548kB inactive_anon:60kB active_file:91184kB inactive_file:9576kB unevictable:0kB writepending:1360kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:95764kB local_pcp:54528kB free_cma:0kB [ 211.974702][T12737] lowmem_reserve[]: 0 0 0 0 [ 211.979660][T12737] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.992490][T12737] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949056kB [ 212.009098][T12737] Node 0 Normal: 205*4kB (UM) 56*8kB (UME) 182*16kB (UME) 675*32kB (UME) 560*64kB (ME) 392*128kB (UME) 171*256kB (UME) 53*512kB (UME) 27*1024kB (UME) 45*2048kB (UM) 1005*4096kB (UM) = 4418996kB [ 212.028727][T12737] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 212.038346][T12737] 25446 total pagecache pages [ 212.043039][T12737] 16 pages in swap cache [ 212.047307][T12737] Free swap = 124936kB [ 212.051485][T12737] Total swap = 124996kB [ 212.055656][T12737] 2097051 pages RAM [ 212.059477][T12737] 0 pages HighMem/MovableOnly [ 212.064213][T12737] 80479 pages reserved [ 212.068336][T12737] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 212.117487][T12708] hsr_slave_0: entered promiscuous mode [ 212.123851][T12708] hsr_slave_1: entered promiscuous mode [ 212.130932][T12760] loop3: detected capacity change from 0 to 1024 [ 212.131647][T12708] debugfs: 'hsr0' already exists in 'hsr' [ 212.143087][T12708] Cannot create hsr debugfs directory [ 212.161086][T12760] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3189: Failed to acquire dquot type 0 [ 212.174985][T12760] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 212.190469][T12760] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3189: corrupted inode contents [ 212.203144][ T37] bridge0: port 3(batadv0) entered disabled state [ 212.210259][T12760] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.3189: mark_inode_dirty error [ 212.222291][T12760] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3189: corrupted inode contents [ 212.222513][ T37] bridge_slave_1: left allmulticast mode [ 212.234375][T12760] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3189: mark_inode_dirty error [ 212.239877][ T37] bridge_slave_1: left promiscuous mode [ 212.251365][T12760] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3189: corrupted inode contents [ 212.256855][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.268884][T12760] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 212.284331][T12760] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3189: corrupted inode contents [ 212.296471][ T37] bridge_slave_0: left promiscuous mode [ 212.296606][T12760] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.3189: mark_inode_dirty error [ 212.302320][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.313534][T12760] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 212.329986][T12760] EXT4-fs (loop3): 1 truncate cleaned up [ 212.441079][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.451151][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.460693][ T37] bond0 (unregistering): Released all slaves [ 212.468336][T12768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3191'. [ 212.512021][ T37] tipc: Disabling bearer [ 212.517300][ T37] tipc: Left network mode [ 212.527328][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 212.541594][ T37] hsr_slave_0: left promiscuous mode [ 212.547310][ T37] hsr_slave_1: left promiscuous mode [ 212.553156][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.560620][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.569030][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.575708][T12774] Invalid ELF header magic: != ELF [ 212.576450][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.591833][ T37] veth1_macvtap: left promiscuous mode [ 212.604031][ T37] veth0_macvtap: left promiscuous mode [ 212.623740][ T37] veth1_vlan: left promiscuous mode [ 212.629573][ T37] veth0_vlan: left promiscuous mode [ 212.719082][ T37] team0 (unregistering): Port device team_slave_1 removed [ 212.728595][ T37] team0 (unregistering): Port device team_slave_0 removed [ 212.811272][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3201'. [ 212.811812][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 212.857644][T12796] loop2: detected capacity change from 0 to 512 [ 212.870772][T12796] EXT4-fs (loop2): too many log groups per flexible block group [ 212.879542][T12796] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 212.887121][T12796] EXT4-fs (loop2): mount failed [ 212.900070][T12796] loop2: detected capacity change from 0 to 764 [ 212.907473][T12796] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 212.925530][T12804] FAULT_INJECTION: forcing a failure. [ 212.925530][T12804] name failslab, interval 1, probability 0, space 0, times 0 [ 212.938341][T12804] CPU: 0 UID: 0 PID: 12804 Comm: syz.3.3206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.938378][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.938395][T12804] Call Trace: [ 212.938404][T12804] [ 212.938415][T12804] __dump_stack+0x1d/0x30 [ 212.938445][T12804] dump_stack_lvl+0xe8/0x140 [ 212.938536][T12804] dump_stack+0x15/0x1b [ 212.938557][T12804] should_fail_ex+0x265/0x280 [ 212.938616][T12804] should_failslab+0x8c/0xb0 [ 212.938645][T12804] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 212.938690][T12804] ? sidtab_sid2str_get+0xa0/0x130 [ 212.938843][T12804] kmemdup_noprof+0x2b/0x70 [ 212.938870][T12804] sidtab_sid2str_get+0xa0/0x130 [ 212.938902][T12804] security_sid_to_context_core+0x1eb/0x2e0 [ 212.938934][T12804] security_sid_to_context+0x27/0x40 [ 212.938997][T12804] selinux_lsmprop_to_secctx+0x67/0xf0 [ 212.939080][T12804] security_lsmprop_to_secctx+0x1a0/0x1c0 [ 212.939120][T12804] audit_log_subj_ctx+0xa4/0x3e0 [ 212.939214][T12804] ? skb_put+0xa9/0xf0 [ 212.939245][T12804] audit_log_task_context+0x48/0x70 [ 212.939299][T12804] audit_log_task+0xf4/0x250 [ 212.939335][T12804] ? kstrtouint+0x76/0xc0 [ 212.939369][T12804] audit_seccomp+0x61/0x100 [ 212.939400][T12804] ? __seccomp_filter+0x82d/0x1250 [ 212.939481][T12804] __seccomp_filter+0x83e/0x1250 [ 212.939537][T12804] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.939568][T12804] ? vfs_write+0x7e8/0x960 [ 212.939591][T12804] ? __rcu_read_unlock+0x4f/0x70 [ 212.939617][T12804] ? __fget_files+0x184/0x1c0 [ 212.939680][T12804] __secure_computing+0x82/0x150 [ 212.939708][T12804] syscall_trace_enter+0xcf/0x1e0 [ 212.939792][T12804] do_syscall_64+0xac/0x200 [ 212.939846][T12804] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.939874][T12804] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.939933][T12804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.939955][T12804] RIP: 0033:0x7fdbb8c1eec9 [ 212.939971][T12804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.940065][T12804] RSP: 002b:00007fdbb7687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 212.940086][T12804] RAX: ffffffffffffffda RBX: 00007fdbb8e75fa0 RCX: 00007fdbb8c1eec9 [ 212.940131][T12804] RDX: 0000000000000202 RSI: 0000000000000039 RDI: 0000000000004205 [ 212.940144][T12804] RBP: 00007fdbb7687090 R08: 0000000000000000 R09: 0000000000000000 [ 212.940162][T12804] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 212.940251][T12804] R13: 00007fdbb8e76038 R14: 00007fdbb8e75fa0 R15: 00007ffccf6236e8 [ 212.940391][T12804] [ 213.236800][T12808] loop2: detected capacity change from 0 to 512 [ 213.246407][T12808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.261156][T12808] EXT4-fs (loop2): 1 truncate cleaned up [ 213.262420][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3209'. [ 213.336320][T12708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.345640][T12708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.349463][T12818] loop2: detected capacity change from 0 to 2048 [ 213.359186][T12818] ext4: Unknown parameter 'smackfsdef' [ 213.366939][T12708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.378880][T12818] vlan2: entered allmulticast mode [ 213.388661][T12708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.431512][T12708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.445621][T12708] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.452532][T12827] loop3: detected capacity change from 0 to 1024 [ 213.456150][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.466156][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.476641][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3214'. [ 213.476635][T12827] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3213: Failed to acquire dquot type 0 [ 213.499223][T12827] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 213.514307][T12827] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3213: corrupted inode contents [ 213.514393][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.526614][T12827] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.3213: mark_inode_dirty error [ 213.533302][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.560091][T12827] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3213: corrupted inode contents [ 213.578699][T12832] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 213.585272][T12832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.592923][T12832] vhci_hcd vhci_hcd.0: Device attached [ 213.600692][T12827] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3213: mark_inode_dirty error [ 213.614577][T12827] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3213: corrupted inode contents [ 213.626666][T12827] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 213.635762][T12827] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3213: corrupted inode contents [ 213.656342][T12837] loop2: detected capacity change from 0 to 2048 [ 213.657648][T12827] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.3213: mark_inode_dirty error [ 213.669673][T12837] ext4: Unknown parameter 'smackfsdef' [ 213.676104][T12827] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 213.694889][T12837] vlan2: entered allmulticast mode [ 213.702170][T12827] EXT4-fs (loop3): 1 truncate cleaned up [ 213.718451][T12708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.787560][T12708] veth0_vlan: entered promiscuous mode [ 213.797611][T12708] veth1_vlan: entered promiscuous mode [ 213.827820][T12708] veth0_macvtap: entered promiscuous mode [ 213.838314][ T1038] usb 1-1: new low-speed USB device number 4 using vhci_hcd [ 213.850915][T12708] veth1_macvtap: entered promiscuous mode [ 213.866301][T12708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.877849][T12708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.891389][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.901477][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.914288][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.933626][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.961515][T12869] loop4: detected capacity change from 0 to 1024 [ 213.980119][T12869] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.044780][T12887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3225'. [ 214.056942][T12889] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 214.144824][T12898] loop4: detected capacity change from 0 to 512 [ 214.158308][T12898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.177894][T12898] EXT4-fs (loop4): 1 truncate cleaned up [ 214.256804][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3233'. [ 214.335757][T12921] loop4: detected capacity change from 0 to 1024 [ 214.336309][T12924] loop3: detected capacity change from 0 to 256 [ 214.354615][T12924] Invalid ELF header magic: != ELF [ 214.370220][T12921] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.408888][T12833] vhci_hcd: connection reset by peer [ 214.414791][ T12] vhci_hcd: stop threads [ 214.419117][ T12] vhci_hcd: release socket [ 214.423622][ T12] vhci_hcd: disconnect device [ 214.535740][T12941] loop4: detected capacity change from 0 to 1024 [ 214.550622][T12941] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3241: Failed to acquire dquot type 0 [ 214.552723][T12938] SELinux: failed to load policy [ 214.563272][T12941] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 214.581954][T12941] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3241: corrupted inode contents [ 214.595713][T12941] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #13: comm syz.4.3241: mark_inode_dirty error [ 214.607659][T12941] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3241: corrupted inode contents [ 214.620268][T12941] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3241: mark_inode_dirty error [ 214.632269][T12941] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3241: corrupted inode contents [ 214.644346][T12941] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 214.653259][T12941] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3241: corrupted inode contents [ 214.666528][T12941] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.3241: mark_inode_dirty error [ 214.678438][T12941] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 214.687942][T12941] EXT4-fs (loop4): 1 truncate cleaned up [ 215.343894][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 215.343912][ T29] audit: type=1400 audit(2000000019.871:8057): avc: denied { create } for pid=12953 comm="syz.2.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.413442][ T29] audit: type=1400 audit(2000000019.911:8058): avc: denied { setattr } for pid=12953 comm="syz.2.3246" name="PPPOL2TP" dev="sockfs" ino=37242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.496602][T12973] FAULT_INJECTION: forcing a failure. [ 215.496602][T12973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.498127][ T29] audit: type=1326 audit(2000000019.971:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.1.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed105eec9 code=0x7ffc0000 [ 215.509734][T12973] CPU: 0 UID: 0 PID: 12973 Comm: syz.2.3250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.509819][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.509838][T12973] Call Trace: [ 215.509848][T12973] [ 215.509861][T12973] __dump_stack+0x1d/0x30 [ 215.509894][T12973] dump_stack_lvl+0xe8/0x140 [ 215.509923][T12973] dump_stack+0x15/0x1b [ 215.510009][T12973] should_fail_ex+0x265/0x280 [ 215.510060][T12973] should_fail+0xb/0x20 [ 215.510182][T12973] should_fail_usercopy+0x1a/0x20 [ 215.510287][T12973] _copy_from_user+0x1c/0xb0 [ 215.510324][T12973] ___sys_sendmsg+0xc1/0x1d0 [ 215.510387][T12973] __x64_sys_sendmsg+0xd4/0x160 [ 215.510562][T12973] x64_sys_call+0x191e/0x3000 [ 215.510595][T12973] do_syscall_64+0xd2/0x200 [ 215.510630][T12973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.510708][T12973] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 215.510739][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.510781][T12973] RIP: 0033:0x7fae984feec9 [ 215.510803][T12973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.510831][T12973] RSP: 002b:00007fae96f46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.510858][T12973] RAX: ffffffffffffffda RBX: 00007fae98756090 RCX: 00007fae984feec9 [ 215.510877][T12973] RDX: 0000000000008410 RSI: 0000200000000180 RDI: 000000000000000a [ 215.510896][T12973] RBP: 00007fae96f46090 R08: 0000000000000000 R09: 0000000000000000 [ 215.510914][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.510932][T12973] R13: 00007fae98756128 R14: 00007fae98756090 R15: 00007ffe9d2b8cf8 [ 215.511022][T12973] [ 215.703593][ T29] audit: type=1326 audit(2000000019.971:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.1.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed105eec9 code=0x7ffc0000 [ 215.727271][ T29] audit: type=1326 audit(2000000019.981:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.1.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed105eec9 code=0x7ffc0000 [ 215.750775][ T29] audit: type=1326 audit(2000000019.981:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.1.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed105eec9 code=0x7ffc0000 [ 215.774350][ T29] audit: type=1326 audit(2000000019.981:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.1.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed105eec9 code=0x7ffc0000 [ 215.797892][ T29] audit: type=1326 audit(2000000019.981:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.1.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed105eec9 code=0x7ffc0000 [ 215.821523][ T29] audit: type=1326 audit(2000000019.981:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.1.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed105eec9 code=0x7ffc0000 [ 215.845041][ T29] audit: type=1326 audit(2000000019.981:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.1.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed105eec9 code=0x7ffc0000 [ 216.427124][T12990] loop2: detected capacity change from 0 to 1024 [ 216.455678][T12992] loop3: detected capacity change from 0 to 736 [ 216.474475][T12990] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3257: Failed to acquire dquot type 0 [ 216.496008][T12990] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 216.529191][T12990] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3257: corrupted inode contents [ 216.555439][T12990] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #13: comm syz.2.3257: mark_inode_dirty error [ 216.583645][T12999] loop4: detected capacity change from 0 to 1024 [ 216.598209][T12990] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3257: corrupted inode contents [ 216.628648][T12990] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3257: mark_inode_dirty error [ 216.648366][T12990] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3257: corrupted inode contents [ 216.678392][T12990] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 216.697407][T12990] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3257: corrupted inode contents [ 216.718415][T12990] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.3257: mark_inode_dirty error [ 216.738478][T12990] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 216.759267][T12990] EXT4-fs (loop2): 1 truncate cleaned up [ 216.813165][T13016] loop3: detected capacity change from 0 to 1024 [ 216.893753][T13024] loop1: detected capacity change from 0 to 512 [ 216.901515][T13024] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.919283][T13024] EXT4-fs (loop1): 1 truncate cleaned up [ 217.108203][T13033] loop1: detected capacity change from 0 to 2048 [ 217.136201][T13033] EXT4-fs (loop1): failed to initialize system zone (-117) [ 217.143640][T13033] EXT4-fs (loop1): mount failed [ 217.177470][T13033] serio: Serial port ptm0 [ 217.242079][T13045] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 217.248697][T13045] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.256301][T13045] vhci_hcd vhci_hcd.0: Device attached [ 217.384648][T13066] loop4: detected capacity change from 0 to 1024 [ 217.400992][T13069] FAULT_INJECTION: forcing a failure. [ 217.400992][T13069] name failslab, interval 1, probability 0, space 0, times 0 [ 217.409348][T13066] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.413707][T13069] CPU: 1 UID: 0 PID: 13069 Comm: syz.0.3282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 217.413747][T13069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.413768][T13069] Call Trace: [ 217.413779][T13069] [ 217.413792][T13069] __dump_stack+0x1d/0x30 [ 217.413822][T13069] dump_stack_lvl+0xe8/0x140 [ 217.413853][T13069] dump_stack+0x15/0x1b [ 217.413886][T13069] should_fail_ex+0x265/0x280 [ 217.413936][T13069] ? alloc_pipe_info+0xae/0x350 [ 217.414027][T13069] should_failslab+0x8c/0xb0 [ 217.414067][T13069] __kmalloc_cache_noprof+0x4c/0x4a0 [ 217.414136][T13069] alloc_pipe_info+0xae/0x350 [ 217.414173][T13069] splice_direct_to_actor+0x592/0x680 [ 217.414206][T13069] ? kstrtouint_from_user+0x9f/0xf0 [ 217.414261][T13069] ? __pfx_direct_splice_actor+0x10/0x10 [ 217.414342][T13069] ? __rcu_read_unlock+0x4f/0x70 [ 217.414378][T13069] ? get_pid_task+0x96/0xd0 [ 217.414459][T13069] ? avc_policy_seqno+0x15/0x30 [ 217.414505][T13069] ? selinux_file_permission+0x1e4/0x320 [ 217.414549][T13069] do_splice_direct+0xda/0x150 [ 217.414627][T13069] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 217.414666][T13069] do_sendfile+0x380/0x650 [ 217.414715][T13069] __x64_sys_sendfile64+0x105/0x150 [ 217.414756][T13069] x64_sys_call+0x2bb4/0x3000 [ 217.414869][T13069] do_syscall_64+0xd2/0x200 [ 217.414944][T13069] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 217.414984][T13069] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 217.415016][T13069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.415069][T13069] RIP: 0033:0x7fa4db92eec9 [ 217.415093][T13069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.415120][T13069] RSP: 002b:00007fa4da38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 217.415148][T13069] RAX: ffffffffffffffda RBX: 00007fa4dbb85fa0 RCX: 00007fa4db92eec9 [ 217.415169][T13069] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 217.415187][T13069] RBP: 00007fa4da38f090 R08: 0000000000000000 R09: 0000000000000000 [ 217.415205][T13069] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 217.415224][T13069] R13: 00007fa4dbb86038 R14: 00007fa4dbb85fa0 R15: 00007ffe2c92f9b8 [ 217.415310][T13069] [ 217.678326][T13073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13073 comm=syz.3.3283 [ 217.708094][T12620] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 217.747826][T13079] geneve2: entered promiscuous mode [ 217.753297][T13079] geneve2: entered allmulticast mode [ 217.760499][T13078] loop4: detected capacity change from 0 to 512 [ 217.767665][T13078] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.781205][T13078] EXT4-fs (loop4): 1 truncate cleaned up [ 217.927257][T13089] SELinux: failed to load policy [ 217.936783][T13094] loop1: detected capacity change from 0 to 2048 [ 217.991117][T13100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.992625][T13094] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 218.010099][T13094] FAT-fs (loop1): Filesystem has been set read-only [ 218.042189][T13094] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 218.053360][T13094] SELinux: failed to load policy [ 218.064047][T13047] vhci_hcd: connection reset by peer [ 218.069895][ T3462] vhci_hcd: stop threads [ 218.074172][ T3462] vhci_hcd: release socket [ 218.078629][ T3462] vhci_hcd: disconnect device [ 218.407344][T13115] netlink: 'syz.4.3300': attribute type 19 has an invalid length. [ 218.464494][T13117] loop4: detected capacity change from 0 to 512 [ 218.471687][T13117] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.483311][T13117] EXT4-fs (loop4): 1 truncate cleaned up [ 218.519127][T13121] loop4: detected capacity change from 0 to 256 [ 218.589683][T13131] FAULT_INJECTION: forcing a failure. [ 218.589683][T13131] name failslab, interval 1, probability 0, space 0, times 0 [ 218.602497][T13131] CPU: 0 UID: 0 PID: 13131 Comm: syz.0.3307 Not tainted syzkaller #0 PREEMPT(voluntary) [ 218.602523][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 218.602535][T13131] Call Trace: [ 218.602540][T13131] [ 218.602547][T13131] __dump_stack+0x1d/0x30 [ 218.602566][T13131] dump_stack_lvl+0xe8/0x140 [ 218.602688][T13131] dump_stack+0x15/0x1b [ 218.602703][T13131] should_fail_ex+0x265/0x280 [ 218.602738][T13131] should_failslab+0x8c/0xb0 [ 218.602763][T13131] kmem_cache_alloc_noprof+0x50/0x480 [ 218.602809][T13131] ? getname_flags+0x80/0x3b0 [ 218.602864][T13131] getname_flags+0x80/0x3b0 [ 218.602890][T13131] path_setxattrat+0x223/0x310 [ 218.602932][T13131] __x64_sys_lsetxattr+0x71/0x90 [ 218.602956][T13131] x64_sys_call+0x287b/0x3000 [ 218.603009][T13131] do_syscall_64+0xd2/0x200 [ 218.603030][T13131] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 218.603063][T13131] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 218.603112][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.603135][T13131] RIP: 0033:0x7fa4db92eec9 [ 218.603149][T13131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.603166][T13131] RSP: 002b:00007fa4da38f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 218.603247][T13131] RAX: ffffffffffffffda RBX: 00007fa4dbb85fa0 RCX: 00007fa4db92eec9 [ 218.603263][T13131] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900 [ 218.603276][T13131] RBP: 00007fa4da38f090 R08: 0000000000000003 R09: 0000000000000000 [ 218.603373][T13131] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001 [ 218.603422][T13131] R13: 00007fa4dbb86038 R14: 00007fa4dbb85fa0 R15: 00007ffe2c92f9b8 [ 218.603442][T13131] [ 218.807881][T13132] IPv6: Can't replace route, no match found [ 218.815113][T13132] __nla_validate_parse: 4 callbacks suppressed [ 218.815132][T13132] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 218.908579][ T1038] usb 1-1: enqueue for inactive port 0 [ 218.916557][ T1038] usb 1-1: enqueue for inactive port 0 [ 218.937629][T13154] loop4: detected capacity change from 0 to 1024 [ 218.958369][T13154] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3313: Failed to acquire dquot type 0 [ 218.982116][T13160] sctp: [Deprecated]: syz.0.3319 (pid 13160) Use of int in maxseg socket option. [ 218.982116][T13160] Use struct sctp_assoc_value instead [ 218.983604][T13162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.997481][T13154] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 219.005475][ T1038] vhci_hcd: vhci_device speed not set [ 219.025707][T13162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.033673][T13154] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3313: corrupted inode contents [ 219.046299][T13154] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #13: comm syz.4.3313: mark_inode_dirty error [ 219.068773][T13154] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3313: corrupted inode contents [ 219.087914][T13154] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3313: mark_inode_dirty error [ 219.110213][T13154] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3313: corrupted inode contents [ 219.122662][T13154] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 219.148754][T13154] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3313: corrupted inode contents [ 219.198106][T13154] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.3313: mark_inode_dirty error [ 219.214957][T13154] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 219.233210][T13154] EXT4-fs (loop4): 1 truncate cleaned up [ 219.250944][T13171] Invalid ELF header magic: != ELF [ 219.360731][T13175] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 219.494132][T13180] FAULT_INJECTION: forcing a failure. [ 219.494132][T13180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.507345][T13180] CPU: 0 UID: 0 PID: 13180 Comm: syz.0.3327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 219.507382][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.507399][T13180] Call Trace: [ 219.507405][T13180] [ 219.507422][T13180] __dump_stack+0x1d/0x30 [ 219.507451][T13180] dump_stack_lvl+0xe8/0x140 [ 219.507475][T13180] dump_stack+0x15/0x1b [ 219.507497][T13180] should_fail_ex+0x265/0x280 [ 219.507553][T13180] should_fail+0xb/0x20 [ 219.507665][T13180] should_fail_usercopy+0x1a/0x20 [ 219.507712][T13180] _copy_from_user+0x1c/0xb0 [ 219.507797][T13180] do_handle_open+0x400/0x6e0 [ 219.507856][T13180] __x64_sys_open_by_handle_at+0x44/0x50 [ 219.507898][T13180] x64_sys_call+0x279f/0x3000 [ 219.507926][T13180] do_syscall_64+0xd2/0x200 [ 219.507956][T13180] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 219.508024][T13180] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 219.508052][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.508124][T13180] RIP: 0033:0x7fa4db92eec9 [ 219.508139][T13180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.508157][T13180] RSP: 002b:00007fa4da38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 219.508178][T13180] RAX: ffffffffffffffda RBX: 00007fa4dbb85fa0 RCX: 00007fa4db92eec9 [ 219.508194][T13180] RDX: 0200000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 219.508207][T13180] RBP: 00007fa4da38f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.508219][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.508230][T13180] R13: 00007fa4dbb86038 R14: 00007fa4dbb85fa0 R15: 00007ffe2c92f9b8 [ 219.508273][T13180] [ 219.744429][T13184] loop4: detected capacity change from 0 to 2048 [ 219.758224][T13184] ext4: Unknown parameter 'smackfsdef' [ 219.772254][T13184] vlan0: entered allmulticast mode [ 219.798719][T13191] FAULT_INJECTION: forcing a failure. [ 219.798719][T13191] name failslab, interval 1, probability 0, space 0, times 0 [ 219.811509][T13191] CPU: 0 UID: 0 PID: 13191 Comm: syz.0.3332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 219.811617][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.811652][T13191] Call Trace: [ 219.811661][T13191] [ 219.811671][T13191] __dump_stack+0x1d/0x30 [ 219.811700][T13191] dump_stack_lvl+0xe8/0x140 [ 219.811722][T13191] dump_stack+0x15/0x1b [ 219.811739][T13191] should_fail_ex+0x265/0x280 [ 219.811819][T13191] should_failslab+0x8c/0xb0 [ 219.811855][T13191] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 219.811956][T13191] ? sidtab_sid2str_get+0xa0/0x130 [ 219.811994][T13191] kmemdup_noprof+0x2b/0x70 [ 219.812105][T13191] sidtab_sid2str_get+0xa0/0x130 [ 219.812145][T13191] security_sid_to_context_core+0x1eb/0x2e0 [ 219.812241][T13191] security_sid_to_context+0x27/0x40 [ 219.812274][T13191] selinux_lsmprop_to_secctx+0x67/0xf0 [ 219.812383][T13191] security_lsmprop_to_secctx+0x1a0/0x1c0 [ 219.812445][T13191] audit_log_subj_ctx+0xa4/0x3e0 [ 219.812470][T13191] ? skb_put+0xa9/0xf0 [ 219.812586][T13191] audit_log_task_context+0x48/0x70 [ 219.812620][T13191] audit_log_task+0xf4/0x250 [ 219.812657][T13191] ? kstrtouint+0x76/0xc0 [ 219.812695][T13191] audit_seccomp+0x61/0x100 [ 219.812766][T13191] ? __seccomp_filter+0x82d/0x1250 [ 219.812792][T13191] __seccomp_filter+0x83e/0x1250 [ 219.812824][T13191] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 219.812862][T13191] ? vfs_write+0x7e8/0x960 [ 219.812889][T13191] ? __rcu_read_unlock+0x4f/0x70 [ 219.812935][T13191] ? __fget_files+0x184/0x1c0 [ 219.812969][T13191] __secure_computing+0x82/0x150 [ 219.813000][T13191] syscall_trace_enter+0xcf/0x1e0 [ 219.813047][T13191] do_syscall_64+0xac/0x200 [ 219.813076][T13191] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 219.813137][T13191] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 219.813163][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.813190][T13191] RIP: 0033:0x7fa4db92eec9 [ 219.813208][T13191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.813306][T13191] RSP: 002b:00007fa4da38f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 219.813330][T13191] RAX: ffffffffffffffda RBX: 00007fa4dbb85fa0 RCX: 00007fa4db92eec9 [ 219.813345][T13191] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 000000000000011a [ 219.813360][T13191] RBP: 00007fa4da38f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.813384][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.813399][T13191] R13: 00007fa4dbb86038 R14: 00007fa4dbb85fa0 R15: 00007ffe2c92f9b8 [ 219.813422][T13191] [ 219.818533][T13194] loop2: detected capacity change from 0 to 1024 [ 219.863535][T13197] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 220.068968][T13194] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.114755][T13204] loop4: detected capacity change from 0 to 1024 [ 220.130237][T13204] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3338: Failed to acquire dquot type 0 [ 220.151606][T13204] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 220.176293][T13204] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3338: corrupted inode contents [ 220.189152][T13204] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #13: comm syz.4.3338: mark_inode_dirty error [ 220.200826][T13204] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3338: corrupted inode contents [ 220.215114][T13204] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3338: mark_inode_dirty error [ 220.236702][T13204] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3338: corrupted inode contents [ 220.257871][T13204] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 220.272247][T13204] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.3338: corrupted inode contents [ 220.291119][T13226] loop2: detected capacity change from 0 to 512 [ 220.298740][T13204] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.3338: mark_inode_dirty error [ 220.313473][T13204] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 220.314427][T13226] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.342684][T13204] EXT4-fs (loop4): 1 truncate cleaned up [ 220.355706][T13226] EXT4-fs (loop2): 1 truncate cleaned up [ 220.410257][T13227] loop1: detected capacity change from 0 to 1024 [ 220.424095][T13233] loop3: detected capacity change from 0 to 2048 [ 220.433408][T13227] EXT4-fs: Ignoring removed bh option [ 220.438454][T13233] ext4: Unknown parameter 'smackfsdef' [ 220.458457][T13233] vlan2: entered allmulticast mode [ 220.511126][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 220.511143][ T29] audit: type=1326 audit(2000000025.041:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.1.3349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed105eec9 code=0x0 [ 220.559863][T13237] loop2: detected capacity change from 0 to 512 [ 220.573775][ T29] audit: type=1326 audit(2000000025.081:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.597501][ T29] audit: type=1326 audit(2000000025.081:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.621016][ T29] audit: type=1326 audit(2000000025.081:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.644547][ T29] audit: type=1326 audit(2000000025.081:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.668154][ T29] audit: type=1326 audit(2000000025.081:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.691752][T13237] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.691764][ T29] audit: type=1326 audit(2000000025.081:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.725194][ T29] audit: type=1326 audit(2000000025.081:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.749173][ T29] audit: type=1326 audit(2000000025.081:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.772962][ T29] audit: type=1326 audit(2000000025.081:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.0.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 220.804988][T13237] EXT4-fs (loop2): 1 truncate cleaned up [ 220.813189][T11995] EXT4-fs unmount: 91 callbacks suppressed [ 220.813207][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.830120][T13237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.865524][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.888117][T13260] loop2: detected capacity change from 0 to 256 [ 220.900792][T13260] Invalid ELF header magic: != ELF [ 220.944075][T13267] loop2: detected capacity change from 0 to 2048 [ 220.950909][T13267] ext4: Unknown parameter 'smackfsdef' [ 220.974267][T13267] vlan2: entered allmulticast mode [ 221.248632][T13258] loop4: detected capacity change from 0 to 512 [ 221.258084][T13258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.270495][T13283] loop2: detected capacity change from 0 to 1024 [ 221.279103][T13258] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 221.284898][T13283] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3367: Failed to acquire dquot type 0 [ 221.299869][T13283] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 221.314660][T13283] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3367: corrupted inode contents [ 221.326856][T13283] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #13: comm syz.2.3367: mark_inode_dirty error [ 221.338466][T13283] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3367: corrupted inode contents [ 221.358824][T13283] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3367: mark_inode_dirty error [ 221.379886][T13283] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3367: corrupted inode contents [ 221.392610][T13283] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 221.402319][T13283] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.3367: corrupted inode contents [ 221.419432][T13283] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.3367: mark_inode_dirty error [ 221.436126][T13283] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 221.446475][T13283] EXT4-fs (loop2): 1 truncate cleaned up [ 221.452794][T13283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.482912][T13289] loop1: detected capacity change from 0 to 512 [ 221.489823][T13289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.501149][T13289] EXT4-fs (loop1): 1 truncate cleaned up [ 221.507269][T13289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.538008][T12708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.559146][T13292] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 221.573339][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.610478][T13296] bridge0: port 3(batadv1) entered blocking state [ 221.617081][T13296] bridge0: port 3(batadv1) entered disabled state [ 221.626777][T13296] batadv1: entered allmulticast mode [ 221.646075][T13296] batadv1: entered promiscuous mode [ 221.763874][T13299] loop3: detected capacity change from 0 to 512 [ 221.772884][T13299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 221.782782][T13299] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 221.916050][T13313] loop3: detected capacity change from 0 to 256 [ 221.943396][T13313] Invalid ELF header magic: != ELF [ 222.004290][T13318] loop1: detected capacity change from 0 to 1024 [ 222.014666][T13318] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.022776][T13318] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 222.043661][T13318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.061521][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.121611][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 222.130948][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 222.134733][T13328] loop2: detected capacity change from 0 to 512 [ 222.148921][T12708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.200549][T13328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.233611][T13328] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.767502][T12620] usb 5-1: enqueue for inactive port 0 [ 222.784250][T13341] loop4: detected capacity change from 0 to 2048 [ 222.793468][T12620] usb 5-1: enqueue for inactive port 0 [ 222.807162][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.830029][T13341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.866050][T13341] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.3388: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 222.888026][T12620] vhci_hcd: vhci_device speed not set [ 222.906288][T13351] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3389'. [ 222.924822][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.958910][T13353] Invalid ELF header magic: != ELF [ 223.023764][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3393'. [ 223.037043][T13355] loop4: detected capacity change from 0 to 512 [ 223.057237][T13355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.110651][T13355] EXT4-fs (loop4): 1 truncate cleaned up [ 223.123546][T13355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.185746][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.199495][T13365] loop1: detected capacity change from 0 to 256 [ 223.239514][T13365] Invalid ELF header magic: != ELF [ 223.249700][T13363] loop3: detected capacity change from 0 to 512 [ 223.280782][T13363] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 223.327386][T13374] FAULT_INJECTION: forcing a failure. [ 223.327386][T13374] name failslab, interval 1, probability 0, space 0, times 0 [ 223.340121][T13374] CPU: 0 UID: 0 PID: 13374 Comm: syz.1.3400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.340157][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.340175][T13374] Call Trace: [ 223.340182][T13374] [ 223.340191][T13374] __dump_stack+0x1d/0x30 [ 223.340221][T13374] dump_stack_lvl+0xe8/0x140 [ 223.340247][T13374] dump_stack+0x15/0x1b [ 223.340359][T13374] should_fail_ex+0x265/0x280 [ 223.340444][T13374] should_failslab+0x8c/0xb0 [ 223.340483][T13374] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 223.340601][T13374] ? sidtab_sid2str_get+0xa0/0x130 [ 223.340676][T13374] kmemdup_noprof+0x2b/0x70 [ 223.340708][T13374] sidtab_sid2str_get+0xa0/0x130 [ 223.340819][T13374] security_sid_to_context_core+0x1eb/0x2e0 [ 223.340861][T13374] security_sid_to_context+0x27/0x40 [ 223.340899][T13374] selinux_lsmprop_to_secctx+0x67/0xf0 [ 223.340983][T13374] security_lsmprop_to_secctx+0x1a0/0x1c0 [ 223.341081][T13374] audit_log_subj_ctx+0xa4/0x3e0 [ 223.341115][T13374] ? skb_put+0xa9/0xf0 [ 223.341152][T13374] audit_log_task_context+0x48/0x70 [ 223.341229][T13374] audit_log_task+0xf4/0x250 [ 223.341335][T13374] ? kstrtouint+0x76/0xc0 [ 223.341380][T13374] audit_seccomp+0x61/0x100 [ 223.341421][T13374] ? __seccomp_filter+0x82d/0x1250 [ 223.341456][T13374] __seccomp_filter+0x83e/0x1250 [ 223.341504][T13374] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.341543][T13374] ? vfs_write+0x7e8/0x960 [ 223.341637][T13374] ? __rcu_read_unlock+0x4f/0x70 [ 223.341671][T13374] ? __fget_files+0x184/0x1c0 [ 223.341711][T13374] __secure_computing+0x82/0x150 [ 223.341747][T13374] syscall_trace_enter+0xcf/0x1e0 [ 223.341791][T13374] do_syscall_64+0xac/0x200 [ 223.341838][T13374] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.341875][T13374] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.341906][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.341937][T13374] RIP: 0033:0x7f4ed105eec9 [ 223.341958][T13374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.341985][T13374] RSP: 002b:00007f4ecfac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.342011][T13374] RAX: ffffffffffffffda RBX: 00007f4ed12b5fa0 RCX: 00007f4ed105eec9 [ 223.342029][T13374] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 223.342048][T13374] RBP: 00007f4ecfac7090 R08: 0000000000000000 R09: 0000000000000000 [ 223.342064][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.342103][T13374] R13: 00007f4ed12b6038 R14: 00007f4ed12b5fa0 R15: 00007ffdb29d3928 [ 223.342132][T13374] [ 223.776506][T13392] loop1: detected capacity change from 0 to 512 [ 223.807470][T13392] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.838227][T13392] EXT4-fs (loop1): 1 truncate cleaned up [ 223.858378][T13392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.880511][T13401] loop3: detected capacity change from 0 to 2048 [ 223.915769][T13401] EXT4-fs (loop3): failed to initialize system zone (-117) [ 223.935849][T13401] EXT4-fs (loop3): mount failed [ 223.965072][T12708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.014545][T13414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3416'. [ 224.064982][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 224.073937][T13414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3416'. [ 224.083226][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 224.092138][T13414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3416'. [ 224.172072][T13427] loop3: detected capacity change from 0 to 2048 [ 224.189098][T13427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.213087][T12208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.632937][T13444] loop4: detected capacity change from 0 to 512 [ 224.639623][T13444] ext4: Unknown parameter 'euid' [ 224.723277][T13447] loop4: detected capacity change from 0 to 2048 [ 224.738707][T13447] EXT4-fs (loop4): failed to initialize system zone (-117) [ 224.746109][T13447] EXT4-fs (loop4): mount failed [ 224.807321][T13463] loop4: detected capacity change from 0 to 2048 [ 224.814275][T13463] ext4: Unknown parameter 'smackfsdef' [ 224.827094][T13463] vlan0: entered allmulticast mode [ 224.956640][T13479] loop1: detected capacity change from 0 to 2048 [ 224.963874][T13479] ext4: Unknown parameter 'smackfsdef' [ 224.982005][T13479] vlan2: entered allmulticast mode [ 225.173022][T13503] loop1: detected capacity change from 0 to 128 [ 225.187219][T13507] loop3: detected capacity change from 0 to 1024 [ 225.194964][T13503] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.207408][T13503] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.212323][T13507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 225.253146][T13507] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.273155][T13514] loop2: detected capacity change from 0 to 1024 [ 225.290546][T12708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.299395][T13514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 225.311966][T13514] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.323203][T12208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 225.343640][T12402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 225.378851][T13526] FAULT_INJECTION: forcing a failure. [ 225.378851][T13526] name failslab, interval 1, probability 0, space 0, times 0 [ 225.391657][T13526] CPU: 0 UID: 0 PID: 13526 Comm: syz.3.3459 Not tainted syzkaller #0 PREEMPT(voluntary) [ 225.391686][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.391699][T13526] Call Trace: [ 225.391706][T13526] [ 225.391717][T13526] __dump_stack+0x1d/0x30 [ 225.391837][T13526] dump_stack_lvl+0xe8/0x140 [ 225.391938][T13526] dump_stack+0x15/0x1b [ 225.391960][T13526] should_fail_ex+0x265/0x280 [ 225.391994][T13526] should_failslab+0x8c/0xb0 [ 225.392094][T13526] kmem_cache_alloc_noprof+0x50/0x480 [ 225.392130][T13526] ? getname_flags+0x80/0x3b0 [ 225.392166][T13526] getname_flags+0x80/0x3b0 [ 225.392228][T13526] do_sys_openat2+0x60/0x110 [ 225.392269][T13526] __x64_sys_openat+0xf2/0x120 [ 225.392313][T13526] x64_sys_call+0x2eab/0x3000 [ 225.392361][T13526] do_syscall_64+0xd2/0x200 [ 225.392385][T13526] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 225.392412][T13526] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 225.392436][T13526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.392477][T13526] RIP: 0033:0x7fdbb8c1d710 [ 225.392492][T13526] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 225.392513][T13526] RSP: 002b:00007fdbb7684ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 225.392538][T13526] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdbb8c1d710 [ 225.392554][T13526] RDX: 0000000000000002 RSI: 00007fdbb8ca1c6c RDI: 00000000ffffff9c [ 225.392573][T13526] RBP: 00007fdbb8ca1c6c R08: 0000000000000000 R09: 0000000000000000 [ 225.392586][T13526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 225.392598][T13526] R13: 000000000000006f R14: 0000200000000080 R15: 00007ffccf6236e8 [ 225.392616][T13526] [ 225.582636][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 225.582654][ T29] audit: type=1400 audit(2000000030.111:8752): avc: denied { create } for pid=13523 comm="syz.2.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 225.593195][T13525] lo: entered promiscuous mode [ 225.685962][T13532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.694623][T13532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.010276][T13541] loop3: detected capacity change from 0 to 512 [ 226.036875][T13539] loop4: detected capacity change from 0 to 512 [ 226.045089][T13541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.057788][T13541] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.069529][ T29] audit: type=1400 audit(2000000030.601:8753): avc: denied { remount } for pid=13540 comm="syz.3.3465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 226.087792][T13541] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 226.098495][T13539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.098576][T13541] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3465: corrupted xattr block 33: e_value out of bounds [ 226.111399][T13539] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.135660][T13541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 226.239681][ T29] audit: type=1326 audit(2000000030.771:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 226.263347][ T29] audit: type=1326 audit(2000000030.771:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 226.273768][T13551] Invalid ELF header magic: != ELF [ 226.286913][ T29] audit: type=1326 audit(2000000030.771:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 226.315883][ T29] audit: type=1326 audit(2000000030.771:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4db92ef03 code=0x7ffc0000 [ 226.339527][ T29] audit: type=1326 audit(2000000030.771:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4db92d97f code=0x7ffc0000 [ 226.357737][T13556] bridge0: entered promiscuous mode [ 226.365645][ T29] audit: type=1326 audit(2000000030.771:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa4db92ef57 code=0x7ffc0000 [ 226.370851][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.391591][ T29] audit: type=1326 audit(2000000030.791:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4db92d710 code=0x7ffc0000 [ 226.415763][T13556] macsec1: entered promiscuous mode [ 226.424972][ T29] audit: type=1326 audit(2000000030.791:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4db92db2a code=0x7ffc0000 [ 226.440633][T13556] bridge0: port 3(macsec1) entered blocking state [ 226.460490][T13556] bridge0: port 3(macsec1) entered disabled state [ 226.468699][T13556] macsec1: entered allmulticast mode [ 226.474049][T13556] bridge0: entered allmulticast mode [ 226.513682][T13556] macsec1: left allmulticast mode [ 226.518841][T13556] bridge0: left allmulticast mode [ 226.524675][T13556] bridge0: left promiscuous mode [ 226.531550][T13555] loop1: detected capacity change from 0 to 2048 [ 226.600528][T13571] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3469'. [ 226.658533][T13555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.683136][T12708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.693461][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.700921][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.708439][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.715874][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.723328][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.730789][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.738342][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.744810][T13576] program syz.2.3471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.745958][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.762389][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.769895][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 226.778907][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 226.853501][T13541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.919389][T13589] loop3: detected capacity change from 0 to 1024 [ 226.949737][T13589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.972355][T13589] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.017675][T12208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.040478][T13594] loop3: detected capacity change from 0 to 128 [ 227.051747][T13594] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.073521][T13594] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.203627][T12208] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.251313][T13600] loop3: detected capacity change from 0 to 256 [ 227.263447][T13600] Invalid ELF header magic: != ELF [ 227.550783][T13624] loop4: detected capacity change from 0 to 2048 [ 227.568354][T13624] EXT4-fs (loop4): failed to initialize system zone (-117) [ 227.575803][T13624] EXT4-fs (loop4): mount failed [ 228.004270][T13633] netlink: 24 bytes leftover after parsing attributes in process `'. [ 228.049995][T13636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.072296][T13638] loop3: detected capacity change from 0 to 128 [ 228.081482][T13638] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.093969][T13638] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.135782][T13641] loop4: detected capacity change from 0 to 2048 [ 228.143707][T12208] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.160084][T13641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.181024][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 228.193267][T13640] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 228.243276][T13649] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 228.462739][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.746914][T13663] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 228.753491][T13663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.761058][T13663] vhci_hcd vhci_hcd.0: Device attached [ 229.007379][ T10] usb 1-1: new low-speed USB device number 5 using vhci_hcd [ 229.214724][T13674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3505'. [ 229.223783][T13674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3505'. [ 229.249036][T13676] loop1: detected capacity change from 0 to 256 [ 229.443838][T12620] IPVS: starting estimator thread 0... [ 229.456727][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3508'. [ 229.529344][T13688] loop1: detected capacity change from 0 to 1024 [ 229.537350][T13686] IPVS: using max 1920 ests per chain, 96000 per kthread [ 229.665533][T13666] vhci_hcd: connection reset by peer [ 229.708065][ T12] vhci_hcd: stop threads [ 229.712434][ T12] vhci_hcd: release socket [ 229.716959][ T12] vhci_hcd: disconnect device [ 230.148986][T13688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.161466][T13688] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.185668][T12708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.458690][T13709] FAULT_INJECTION: forcing a failure. [ 230.458690][T13709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.471866][T13709] CPU: 0 UID: 0 PID: 13709 Comm: syz.4.3516 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.471903][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.471991][T13709] Call Trace: [ 230.472068][T13709] [ 230.472077][T13709] __dump_stack+0x1d/0x30 [ 230.472099][T13709] dump_stack_lvl+0xe8/0x140 [ 230.472119][T13709] dump_stack+0x15/0x1b [ 230.472135][T13709] should_fail_ex+0x265/0x280 [ 230.472243][T13709] should_fail+0xb/0x20 [ 230.472275][T13709] should_fail_usercopy+0x1a/0x20 [ 230.472361][T13709] _copy_from_user+0x1c/0xb0 [ 230.472392][T13709] __sys_bpf+0x183/0x7c0 [ 230.472440][T13709] __x64_sys_bpf+0x41/0x50 [ 230.472564][T13709] x64_sys_call+0x2aee/0x3000 [ 230.472586][T13709] do_syscall_64+0xd2/0x200 [ 230.472640][T13709] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 230.472702][T13709] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 230.472730][T13709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.472759][T13709] RIP: 0033:0x7f0a3721eec9 [ 230.472779][T13709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.472878][T13709] RSP: 002b:00007f0a35c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.472903][T13709] RAX: ffffffffffffffda RBX: 00007f0a37475fa0 RCX: 00007f0a3721eec9 [ 230.472921][T13709] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 230.472938][T13709] RBP: 00007f0a35c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.472960][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.472976][T13709] R13: 00007f0a37476038 R14: 00007f0a37475fa0 R15: 00007ffc9f60de78 [ 230.473002][T13709] [ 230.705522][T13702] loop3: detected capacity change from 0 to 2048 [ 230.727579][T13712] ref_ctr_offset mismatch. inode: 0x328 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 230.779014][T13718] loop1: detected capacity change from 0 to 512 [ 230.798164][T13721] loop4: detected capacity change from 0 to 1024 [ 230.805638][T13702] EXT4-fs (loop3): failed to initialize system zone (-117) [ 230.815436][T13702] EXT4-fs (loop3): mount failed [ 230.828160][T13721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.889363][T13721] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.948945][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 230.948992][ T29] audit: type=1400 audit(2000000035.471:8906): avc: denied { execute } for pid=13731 comm="syz.3.3525" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 231.003218][T13732] netlink: 'syz.3.3525': attribute type 10 has an invalid length. [ 231.021366][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 231.053225][T13732] team0 (unregistering): Port device team_slave_0 removed [ 231.057827][T13738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.076494][T13732] team0 (unregistering): Port device team_slave_1 removed [ 231.139021][ T29] audit: type=1326 audit(2000000035.671:8907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4db92eec9 code=0x0 [ 231.172184][T13746] loop4: detected capacity change from 0 to 2048 [ 231.208634][T13746] EXT4-fs (loop4): failed to initialize system zone (-117) [ 231.234112][T13746] EXT4-fs (loop4): mount failed [ 231.245321][ T29] audit: type=1326 audit(2000000035.772:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 231.269017][ T29] audit: type=1326 audit(2000000035.772:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 231.282124][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3536'. [ 231.292653][ T29] audit: type=1326 audit(2000000035.772:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 231.325046][ T29] audit: type=1326 audit(2000000035.772:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 231.348592][ T29] audit: type=1326 audit(2000000035.772:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 231.372091][ T29] audit: type=1326 audit(2000000035.772:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 231.395764][ T29] audit: type=1326 audit(2000000035.772:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 231.419259][ T29] audit: type=1326 audit(2000000035.772:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.3.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 231.446269][T13759] veth0_macvtap: left promiscuous mode [ 231.516630][T13769] loop4: detected capacity change from 0 to 512 [ 231.523715][T13769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 231.537975][T13769] EXT4-fs (loop4): 1 truncate cleaned up [ 231.544234][T13769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.576704][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.663072][T13777] FAULT_INJECTION: forcing a failure. [ 231.663072][T13777] name failslab, interval 1, probability 0, space 0, times 0 [ 231.675774][T13777] CPU: 1 UID: 0 PID: 13777 Comm: syz.4.3542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.675811][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.675824][T13777] Call Trace: [ 231.675829][T13777] [ 231.675836][T13777] __dump_stack+0x1d/0x30 [ 231.675855][T13777] dump_stack_lvl+0xe8/0x140 [ 231.675873][T13777] dump_stack+0x15/0x1b [ 231.675888][T13777] should_fail_ex+0x265/0x280 [ 231.676026][T13777] should_failslab+0x8c/0xb0 [ 231.676064][T13777] __kvmalloc_node_noprof+0x12e/0x670 [ 231.676095][T13777] ? traverse+0xa2/0x3a0 [ 231.676183][T13777] traverse+0xa2/0x3a0 [ 231.676210][T13777] ? terminate_walk+0x27f/0x2a0 [ 231.676237][T13777] seq_read_iter+0x85f/0x950 [ 231.676312][T13777] ? _parse_integer_limit+0x170/0x190 [ 231.676346][T13777] seq_read+0x270/0x2b0 [ 231.676380][T13777] ? __pfx_seq_read+0x10/0x10 [ 231.676428][T13777] proc_reg_read+0x128/0x1c0 [ 231.676465][T13777] ? __pfx_proc_reg_read+0x10/0x10 [ 231.676510][T13777] vfs_readv+0x3f8/0x690 [ 231.676630][T13777] __x64_sys_preadv+0xfd/0x1c0 [ 231.676655][T13777] x64_sys_call+0x282e/0x3000 [ 231.676675][T13777] do_syscall_64+0xd2/0x200 [ 231.676697][T13777] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.676788][T13777] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 231.676815][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.676848][T13777] RIP: 0033:0x7f0a3721eec9 [ 231.676869][T13777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.676893][T13777] RSP: 002b:00007f0a35c7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 231.676917][T13777] RAX: ffffffffffffffda RBX: 00007f0a37475fa0 RCX: 00007f0a3721eec9 [ 231.676929][T13777] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003 [ 231.676941][T13777] RBP: 00007f0a35c7f090 R08: 000000000000d215 R09: 0000000000000000 [ 231.676952][T13777] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 231.676983][T13777] R13: 00007f0a37476038 R14: 00007f0a37475fa0 R15: 00007ffc9f60de78 [ 231.677000][T13777] [ 231.981737][T13789] FAULT_INJECTION: forcing a failure. [ 231.981737][T13789] name failslab, interval 1, probability 0, space 0, times 0 [ 231.994549][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.4.3545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.994593][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.994611][T13789] Call Trace: [ 231.994620][T13789] [ 231.994631][T13789] __dump_stack+0x1d/0x30 [ 231.994663][T13789] dump_stack_lvl+0xe8/0x140 [ 231.994689][T13789] dump_stack+0x15/0x1b [ 231.994747][T13789] should_fail_ex+0x265/0x280 [ 231.994783][T13789] should_failslab+0x8c/0xb0 [ 231.994896][T13789] __kmalloc_noprof+0xa5/0x570 [ 231.994933][T13789] ? sctp_make_abort_user+0x17b/0x3a0 [ 231.994970][T13789] sctp_make_abort_user+0x17b/0x3a0 [ 231.995004][T13789] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 231.995116][T13789] sctp_sendmsg+0x10bb/0x18d0 [ 231.995164][T13789] ? __pfx_sctp_sendmsg+0x10/0x10 [ 231.995206][T13789] inet_sendmsg+0xc2/0xd0 [ 231.995313][T13789] __sock_sendmsg+0x102/0x180 [ 231.995335][T13789] ____sys_sendmsg+0x31e/0x4e0 [ 231.995371][T13789] ___sys_sendmsg+0x17b/0x1d0 [ 231.995499][T13789] __x64_sys_sendmsg+0xd4/0x160 [ 231.995538][T13789] x64_sys_call+0x191e/0x3000 [ 231.995565][T13789] do_syscall_64+0xd2/0x200 [ 231.995598][T13789] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.995675][T13789] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 231.995757][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.995779][T13789] RIP: 0033:0x7f0a3721eec9 [ 231.995868][T13789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.995929][T13789] RSP: 002b:00007f0a35c5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.995955][T13789] RAX: ffffffffffffffda RBX: 00007f0a37476090 RCX: 00007f0a3721eec9 [ 231.995972][T13789] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 231.995989][T13789] RBP: 00007f0a35c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 231.996005][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.996018][T13789] R13: 00007f0a37476128 R14: 00007f0a37476090 R15: 00007ffc9f60de78 [ 231.996038][T13789] [ 232.308544][T13801] loop3: detected capacity change from 0 to 512 [ 232.316938][T13801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.335452][T13804] loop1: detected capacity change from 0 to 2048 [ 232.392524][T13804] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 232.402055][T13804] FAT-fs (loop1): Filesystem has been set read-only [ 232.410443][T13801] EXT4-fs (loop3): 1 truncate cleaned up [ 232.416726][T13801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.442341][T13808] loop2: detected capacity change from 0 to 128 [ 232.458439][T13808] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.478107][T12208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.509329][T13804] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 232.520420][T13808] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.554885][T13804] SELinux: failed to load policy [ 232.575148][T12402] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.627673][T13820] loop2: detected capacity change from 0 to 2048 [ 232.644291][T13820] ext4: Unknown parameter 'smackfsdef' [ 232.666911][T13820] vlan2: entered allmulticast mode [ 232.745025][T13828] loop3: detected capacity change from 0 to 2048 [ 232.783281][T13828] ext4: Unknown parameter 'smackfsdef' [ 232.833526][T13828] vlan2: entered allmulticast mode [ 232.954158][T13835] loop4: detected capacity change from 0 to 164 [ 232.978426][T13836] loop3: detected capacity change from 0 to 2048 [ 232.985400][T13836] ext4: Unknown parameter 'smackfsdef' [ 233.007981][T13835] syz.4.3564: attempt to access beyond end of device [ 233.007981][T13835] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 233.033190][T13835] syz.4.3564: attempt to access beyond end of device [ 233.033190][T13835] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 233.051269][T13838] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 233.080086][T13836] vlan2: entered allmulticast mode [ 233.213905][T13844] loop1: detected capacity change from 0 to 128 [ 233.232426][T13844] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.273059][T13844] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.421716][T12708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.522930][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 233.585893][T13861] loop4: detected capacity change from 0 to 2048 [ 233.601105][T13861] ext4: Unknown parameter 'smackfsdef' [ 233.648615][T13861] vlan0: entered allmulticast mode [ 233.655050][T13867] loop1: detected capacity change from 0 to 512 [ 233.669114][T13867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.680739][T13867] EXT4-fs (loop1): 1 truncate cleaned up [ 233.685629][T13869] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 233.686841][T13867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.701303][T13872] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3577'. [ 233.719485][T13869] SELinux: failed to load policy [ 233.742260][T12708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.763226][T13876] loop1: detected capacity change from 0 to 512 [ 233.772087][T13876] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3581: error while reading EA inode 32 err=-116 [ 233.786846][T13876] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3581: error while reading EA inode 32 err=-116 [ 233.799915][T13876] EXT4-fs (loop1): 1 orphan inode deleted [ 233.801226][T13879] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3580'. [ 233.806185][T13876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.886559][T13880] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.3581: unexpected EA_INODE flag [ 233.956943][T12708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.032119][T13882] loop1: detected capacity change from 0 to 164 [ 234.061096][T13882] syz.1.3582: attempt to access beyond end of device [ 234.061096][T13882] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 234.076707][T13882] syz.1.3582: attempt to access beyond end of device [ 234.076707][T13882] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 234.107274][ T10] usb 1-1: enqueue for inactive port 0 [ 234.113168][ T10] usb 1-1: enqueue for inactive port 0 [ 234.189176][ T10] vhci_hcd: vhci_device speed not set [ 234.225305][T13888] loop3: detected capacity change from 0 to 512 [ 234.234063][T13888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 234.261818][T13888] EXT4-fs (loop3): 1 truncate cleaned up [ 234.268136][T13888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.299628][T12208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.810377][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 234.840528][T13909] FAULT_INJECTION: forcing a failure. [ 234.840528][T13909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.853880][T13909] CPU: 0 UID: 0 PID: 13909 Comm: syz.3.3593 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.853906][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.853918][T13909] Call Trace: [ 234.853923][T13909] [ 234.853930][T13909] __dump_stack+0x1d/0x30 [ 234.854004][T13909] dump_stack_lvl+0xe8/0x140 [ 234.854022][T13909] dump_stack+0x15/0x1b [ 234.854037][T13909] should_fail_ex+0x265/0x280 [ 234.854105][T13909] should_fail+0xb/0x20 [ 234.854185][T13909] should_fail_usercopy+0x1a/0x20 [ 234.854204][T13909] _copy_to_user+0x20/0xa0 [ 234.854232][T13909] simple_read_from_buffer+0xb5/0x130 [ 234.854264][T13909] proc_fail_nth_read+0x10e/0x150 [ 234.854329][T13909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.854355][T13909] vfs_read+0x1a5/0x770 [ 234.854377][T13909] ? __sys_bind+0x1ea/0x2a0 [ 234.854412][T13909] ksys_read+0xda/0x1a0 [ 234.854468][T13909] __x64_sys_read+0x40/0x50 [ 234.854489][T13909] x64_sys_call+0x27c0/0x3000 [ 234.854509][T13909] do_syscall_64+0xd2/0x200 [ 234.854609][T13909] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.854635][T13909] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 234.854742][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.854761][T13909] RIP: 0033:0x7fdbb8c1d8dc [ 234.854775][T13909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 234.854847][T13909] RSP: 002b:00007fdbb7687030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.854864][T13909] RAX: ffffffffffffffda RBX: 00007fdbb8e75fa0 RCX: 00007fdbb8c1d8dc [ 234.854876][T13909] RDX: 000000000000000f RSI: 00007fdbb76870a0 RDI: 0000000000000004 [ 234.854886][T13909] RBP: 00007fdbb7687090 R08: 0000000000000000 R09: 0000000000000000 [ 234.854897][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.854908][T13909] R13: 00007fdbb8e76038 R14: 00007fdbb8e75fa0 R15: 00007ffccf6236e8 [ 234.854979][T13909] [ 235.156035][T13918] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3595'. [ 235.165235][T13917] loop3: detected capacity change from 0 to 512 [ 235.186264][T13917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.201806][T13917] EXT4-fs (loop3): 1 truncate cleaned up [ 235.210262][T13917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.243568][T12208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.372149][T13924] SELinux: failed to load policy [ 235.761273][ T1038] hid_parser_main: 31 callbacks suppressed [ 235.761374][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.774655][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.782160][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.789607][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.797139][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.804582][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.812172][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.819643][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.827141][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.834665][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 235.844914][ T1038] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 235.856423][T13932] program syz.4.3599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.012184][T13945] loop1: detected capacity change from 0 to 128 [ 236.020316][T13945] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.032860][T13945] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.167343][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 236.167362][ T29] audit: type=1400 audit(2000000040.702:9170): avc: denied { unmount } for pid=12402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 236.211843][ T29] audit: type=1326 audit(2000000040.742:9171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.3.3609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbb8c1eec9 code=0x0 [ 236.235956][T12708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.260627][T13958] loop1: detected capacity change from 0 to 1024 [ 236.280236][T13958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.296656][ T29] audit: type=1400 audit(2000000040.822:9172): avc: denied { write } for pid=13957 comm="syz.1.3610" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 236.320129][ T29] audit: type=1400 audit(2000000040.822:9173): avc: denied { ioctl } for pid=13957 comm="syz.1.3610" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 236.343877][ T29] audit: type=1400 audit(2000000040.822:9174): avc: denied { watch watch_reads } for pid=13957 comm="syz.1.3610" path="/83/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.576937][ T29] audit: type=1400 audit(2000000041.102:9175): avc: denied { ioctl } for pid=13957 comm="syz.1.3610" path="/83/file1/memory.events" dev="loop1" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 236.703818][T13976] loop4: detected capacity change from 0 to 2048 [ 236.731559][T13976] EXT4-fs (loop4): failed to initialize system zone (-117) [ 236.739009][T13976] EXT4-fs (loop4): mount failed [ 237.082385][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 237.106148][ T29] audit: type=1326 audit(2000000041.622:9176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13984 comm="syz.3.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 237.129804][ T29] audit: type=1326 audit(2000000041.622:9177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13984 comm="syz.3.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 237.153948][T13985] loop3: detected capacity change from 0 to 256 [ 237.174158][T13985] Invalid ELF header magic: != ELF [ 237.216512][T13991] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 237.222351][ T29] audit: type=1326 audit(2000000041.622:9178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13984 comm="syz.3.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdbb8c1eec9 code=0x7ffc0000 [ 237.250619][ T29] audit: type=1326 audit(2000000041.622:9179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13984 comm="syz.3.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbb8c1ef03 code=0x7ffc0000 [ 237.279701][ T3462] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 237.280404][T13991] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3623'. [ 237.310383][ T3462] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 237.323064][ T3462] EXT4-fs (loop1): This should not happen!! Data will be lost [ 237.323064][ T3462] [ 237.332783][ T3462] EXT4-fs (loop1): Total free blocks count 0 [ 237.338824][ T3462] EXT4-fs (loop1): Free/Dirty block details [ 237.344720][ T3462] EXT4-fs (loop1): free_blocks=68451041280 [ 237.350549][ T3462] EXT4-fs (loop1): dirty_blocks=16400 [ 237.355926][ T3462] EXT4-fs (loop1): Block reservation details [ 237.361978][ T3462] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 237.378043][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 237.389998][T13999] netlink: 'syz.0.3627': attribute type 10 has an invalid length. [ 237.398945][T13999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3627'. [ 237.409147][T13999] batman_adv: batadv0: Adding interface: veth1_vlan [ 237.415841][T13999] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.442009][T13999] batman_adv: batadv0: Interface activated: veth1_vlan [ 237.488056][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 237.499871][T14003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3629'. [ 237.500751][T14001] loop3: detected capacity change from 0 to 2048 [ 237.515660][T14001] ext4: Unknown parameter 'smackfsdef' [ 237.599200][T14011] loop1: detected capacity change from 0 to 128 [ 237.614275][T14011] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.616294][T14015] loop3: detected capacity change from 0 to 256 [ 237.636464][T14015] Invalid ELF header magic: != ELF [ 237.701330][T14017] loop3: detected capacity change from 0 to 2048 [ 237.731739][T14017] EXT4-fs (loop3): failed to initialize system zone (-117) [ 237.739282][T14017] EXT4-fs (loop3): mount failed [ 237.873684][T14026] loop3: detected capacity change from 0 to 512 [ 237.881457][T14026] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.893142][T14030] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 237.902107][T14028] loop4: detected capacity change from 0 to 512 [ 237.911406][T14028] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 237.917305][T14026] EXT4-fs (loop3): 1 truncate cleaned up [ 237.929809][T14033] loop1: detected capacity change from 0 to 2048 [ 237.931760][T14028] EXT4-fs (loop4): 1 truncate cleaned up [ 237.972618][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'. [ 237.984958][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3642'. [ 237.994491][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'. [ 238.063542][T14047] loop3: detected capacity change from 0 to 128 [ 238.088582][T14047] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.213351][T14061] tipc: Can't bind to reserved service type 1 [ 238.273056][T14064] option changes via remount are deprecated (pid=14063 comm=syz.1.3651) [ 238.294019][T14065] loop4: detected capacity change from 0 to 512 [ 238.305052][T14065] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 238.347218][T14065] EXT4-fs (loop4): 1 truncate cleaned up [ 238.536475][T14084] loop4: detected capacity change from 0 to 128 [ 238.559656][T14084] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.893546][T14104] loop1: detected capacity change from 0 to 512 [ 238.901076][T14104] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 238.915065][T14104] EXT4-fs (loop1): 1 truncate cleaned up [ 239.010057][T14115] ref_ctr_offset mismatch. inode: 0x385 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 239.110409][T14123] loop2: detected capacity change from 0 to 2048 [ 239.117895][T14123] ext4: Unknown parameter 'smackfsdef' [ 239.118139][T14119] bridge_slave_0: left promiscuous mode [ 239.129217][T14119] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.142710][T14119] bridge_slave_1: left allmulticast mode [ 239.148513][T14119] bridge_slave_1: left promiscuous mode [ 239.154230][T14119] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.173312][T14124] netlink: 'syz.1.3671': attribute type 10 has an invalid length. [ 239.183976][T14119] bond0: (slave bond_slave_0): Releasing backup interface [ 239.201073][T14119] bond0: (slave bond_slave_1): Releasing backup interface [ 239.213884][T14119] team0: Port device team_slave_0 removed [ 239.229868][T14119] team0: Port device team_slave_1 removed [ 239.238588][T14119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.246202][T14119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.255551][T14131] netlink: 'syz.4.3674': attribute type 10 has an invalid length. [ 239.257925][T14119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.271137][T14119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.282031][T14119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.318980][T14124] batman_adv: batadv0: Adding interface: veth1_vlan [ 239.325627][T14124] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.351768][T14124] batman_adv: batadv0: Interface activated: veth1_vlan [ 239.392691][T14127] bridge_slave_0: left promiscuous mode [ 239.398501][T14127] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.418625][T14127] bridge_slave_1: left allmulticast mode [ 239.424431][T14127] bridge_slave_1: left promiscuous mode [ 239.430189][T14127] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.455871][T14127] bond0: (slave bond_slave_0): Releasing backup interface [ 239.464424][T14139] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 239.470983][T14139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.478649][T14139] vhci_hcd vhci_hcd.0: Device attached [ 239.485016][T14127] bond0: (slave bond_slave_1): Releasing backup interface [ 239.514812][T14127] team0: Port device team_slave_0 removed [ 239.533924][T14127] team0: Port device team_slave_1 removed [ 239.541658][T14127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.549146][T14127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.558081][T14127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.565503][T14127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.578124][T14127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.604989][T14131] batman_adv: batadv0: Adding interface: veth1_vlan [ 239.611669][T14131] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.703091][T14131] batman_adv: batadv0: Interface activated: veth1_vlan [ 239.727247][ T1038] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 239.820910][T14156] loop4: detected capacity change from 0 to 2048 [ 239.828801][T14156] ext4: Unknown parameter 'smackfsdef' [ 239.924828][T14162] program syz.2.3688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.928081][T14165] __nla_validate_parse: 8 callbacks suppressed [ 239.928104][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3689'. [ 239.983379][T14168] loop4: detected capacity change from 0 to 1024 [ 240.002723][T14171] loop2: detected capacity change from 0 to 2048 [ 240.011013][T14168] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.046559][T14165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.055155][T14171] EXT4-fs (loop2): failed to initialize system zone (-117) [ 240.065006][T14176] bond1 (unregistering): Released all slaves [ 240.070264][T14171] EXT4-fs (loop2): mount failed [ 240.108472][T14180] loop4: detected capacity change from 0 to 128 [ 240.134545][T14180] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.200378][T14183] loop2: detected capacity change from 0 to 128 [ 240.219787][T14183] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.236238][T14141] vhci_hcd: connection reset by peer [ 240.252179][ T2036] vhci_hcd: stop threads [ 240.256519][ T2036] vhci_hcd: release socket [ 240.260993][ T2036] vhci_hcd: disconnect device [ 240.320075][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3696'. [ 240.333652][T14186] bridge_slave_0: left promiscuous mode [ 240.339444][T14186] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.350643][T14189] netlink: 'syz.0.3695': attribute type 10 has an invalid length. [ 240.358522][T14189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3695'. [ 240.378962][T14186] bridge_slave_1: left allmulticast mode [ 240.384697][T14186] bridge_slave_1: left promiscuous mode [ 240.390406][T14186] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.401046][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 240.413828][T12708] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 240.424833][T12708] CPU: 0 UID: 0 PID: 12708 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.424861][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.424874][T12708] Call Trace: [ 240.424880][T12708] [ 240.424889][T12708] __dump_stack+0x1d/0x30 [ 240.424964][T12708] dump_stack_lvl+0xe8/0x140 [ 240.424986][T12708] dump_stack+0x15/0x1b [ 240.425005][T12708] dump_header+0x81/0x220 [ 240.425072][T12708] oom_kill_process+0x342/0x400 [ 240.425111][T12708] out_of_memory+0x979/0xb80 [ 240.425193][T12708] try_charge_memcg+0x5e6/0x9e0 [ 240.425217][T12708] ? should_fail_ex+0x30/0x280 [ 240.425269][T12708] charge_memcg+0x51/0xc0 [ 240.425290][T12708] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 240.425315][T12708] __read_swap_cache_async+0x17b/0x2d0 [ 240.425424][T12708] swap_cluster_readahead+0x262/0x3c0 [ 240.425451][T12708] swapin_readahead+0xde/0x6f0 [ 240.425470][T12708] ? next_uptodate_folio+0x81c/0x890 [ 240.425557][T12708] ? percpu_counter_add_batch+0xb6/0x130 [ 240.425608][T12708] ? __rcu_read_unlock+0x4f/0x70 [ 240.425633][T12708] ? swap_cache_get_folio+0x277/0x280 [ 240.425741][T12708] do_swap_page+0x2ae/0x2370 [ 240.425761][T12708] ? fput+0x8f/0xc0 [ 240.425824][T12708] ? css_rstat_updated+0xb7/0x240 [ 240.425859][T12708] ? __pfx_default_wake_function+0x10/0x10 [ 240.425888][T12708] handle_mm_fault+0x9a5/0x2be0 [ 240.425927][T12708] ? vma_start_read+0x141/0x1f0 [ 240.425982][T12708] do_user_addr_fault+0x630/0x1080 [ 240.426025][T12708] exc_page_fault+0x62/0xa0 [ 240.426047][T12708] asm_exc_page_fault+0x26/0x30 [ 240.426068][T12708] RIP: 0033:0x7f4ed0f35db7 [ 240.426085][T12708] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 39 7c 24 [ 240.426162][T12708] RSP: 002b:00007ffdb29d3cb0 EFLAGS: 00010202 [ 240.426179][T12708] RAX: 0000001b2e824000 RBX: 00000000000000e7 RCX: 000000000003a980 [ 240.426192][T12708] RDX: 000000000c21b300 RSI: 00007ffdb29d3d40 RDI: 0000000000000008 [ 240.426206][T12708] RBP: 00007ffdb29d3cec R08: 000000002e474d66 R09: 7fffffffffffffff [ 240.426219][T12708] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 240.426232][T12708] R13: 00000000000927c0 R14: 000000000003ac4f R15: 00007ffdb29d3d40 [ 240.426276][T12708] [ 240.426316][T12708] memory: usage 307200kB, limit 307200kB, failcnt 24883 [ 240.606756][T14191] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3695'. [ 240.610588][T12708] memory+swap: usage 228608kB, limit 9007199254740988kB, failcnt 0 [ 240.618612][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 240.626551][T12708] kmem: usage 228096kB, limit 9007199254740988kB, failcnt 0 [ 240.626570][T12708] Memory cgroup stats for /syz1: [ 240.696405][T12708] cache 0 [ 240.704466][T12708] rss 0 [ 240.707273][T12708] shmem 0 [ 240.710277][T12708] mapped_file 0 [ 240.713756][T12708] dirty 0 [ 240.716723][T12708] writeback 0 [ 240.720016][T12708] workingset_refault_anon 8546 [ 240.724782][T12708] workingset_refault_file 2261 [ 240.729585][T12708] swap 192512 [ 240.732941][T12708] swapcached 4096 [ 240.736582][T12708] pgpgin 310763 [ 240.740065][T12708] pgpgout 310735 [ 240.743660][T12708] pgfault 302121 [ 240.747344][T12708] pgmajfault 1187 [ 240.750986][T12708] inactive_anon 0 [ 240.754625][T12708] active_anon 4096 [ 240.758376][T12708] inactive_file 0 [ 240.762077][T12708] active_file 110592 [ 240.765977][T12708] unevictable 0 [ 240.769480][T12708] hierarchical_memory_limit 314572800 [ 240.774859][T12708] hierarchical_memsw_limit 9223372036854771712 [ 240.781066][T12708] total_cache 0 [ 240.784539][T12708] total_rss 0 [ 240.787866][T12708] total_shmem 0 [ 240.791513][T12708] total_mapped_file 0 [ 240.795505][T12708] total_dirty 0 [ 240.799011][T12708] total_writeback 0 [ 240.800322][T14197] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 240.802833][T12708] total_workingset_refault_anon 8546 [ 240.802848][T12708] total_workingset_refault_file 2261 [ 240.822048][T12708] total_swap 192512 [ 240.825969][T12708] total_swapcached 4096 [ 240.830139][T12708] total_pgpgin 310763 [ 240.834233][T12708] total_pgpgout 310735 [ 240.838369][T12708] total_pgfault 302121 [ 240.842458][T12708] total_pgmajfault 1187 [ 240.846637][T12708] total_inactive_anon 0 [ 240.848466][T14186] bond0: (slave bond_slave_0): Releasing backup interface [ 240.851018][T12708] total_active_anon 4096 [ 240.862372][T12708] total_inactive_file 0 [ 240.866533][T12708] total_active_file 110592 [ 240.870961][T12708] total_unevictable 0 [ 240.874938][T12708] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3678,pid=14135,uid=0 [ 240.889680][T12708] Memory cgroup out of memory: Killed process 14135 (syz.1.3678) total-vm:93956kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 240.909710][T14186] bond0: (slave bond_slave_1): Releasing backup interface [ 240.928414][T14186] team0: Port device team_slave_0 removed [ 240.938266][T14186] team0: Port device team_slave_1 removed [ 240.944981][T14186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.952451][T14186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.962823][T14186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.970266][T14186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.981377][T14186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.076359][T14209] program syz.2.3702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.097505][T14207] loop4: detected capacity change from 0 to 512 [ 241.104511][T14207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.118158][T14207] EXT4-fs (loop4): 1 truncate cleaned up [ 241.195944][T14215] loop4: detected capacity change from 0 to 512 [ 241.205156][T14215] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.215231][T14220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3707'. [ 241.217600][T14215] EXT4-fs (loop4): 1 truncate cleaned up [ 241.225240][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3708'. [ 241.379953][T14228] loop4: detected capacity change from 0 to 2048 [ 241.397826][T14228] EXT4-fs (loop4): failed to initialize system zone (-117) [ 241.405277][T14228] EXT4-fs (loop4): mount failed [ 241.438153][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3711'. [ 241.832726][T14246] program syz.1.3716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.889662][T14248] loop1: detected capacity change from 0 to 512 [ 241.898423][T14248] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 241.913215][T14252] ref_ctr_offset mismatch. inode: 0x3ee offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 241.913767][T14248] EXT4-fs (loop1): 1 truncate cleaned up [ 242.013052][T14257] loop1: detected capacity change from 0 to 512 [ 242.027380][T14257] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 242.063581][T14257] EXT4-fs (loop1): 1 truncate cleaned up [ 242.073092][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 242.073110][ T29] audit: type=1326 audit(2000000046.592:9571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 242.172198][ T29] audit: type=1326 audit(2000000046.612:9572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 242.196010][ T29] audit: type=1326 audit(2000000046.612:9573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 242.219609][ T29] audit: type=1326 audit(2000000046.612:9574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 242.243146][ T29] audit: type=1326 audit(2000000046.612:9575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4db92eec9 code=0x7ffc0000 [ 242.266865][ T29] audit: type=1326 audit(2000000046.612:9576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4db92ef03 code=0x7ffc0000 [ 242.290214][ T29] audit: type=1326 audit(2000000046.612:9577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4db92d97f code=0x7ffc0000 [ 242.313628][ T29] audit: type=1326 audit(2000000046.612:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa4db92ef57 code=0x7ffc0000 [ 242.337065][ T29] audit: type=1326 audit(2000000046.632:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4db92d710 code=0x7ffc0000 [ 242.360625][ T29] audit: type=1326 audit(2000000046.632:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.0.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4db92db2a code=0x7ffc0000 [ 242.411462][T14273] SELinux: failed to load policy [ 242.508994][T14276] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 242.537299][T14276] SELinux: failed to load policy [ 242.603332][T14284] ref_ctr_offset mismatch. inode: 0x23d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 242.709597][T14287] loop2: detected capacity change from 0 to 128 [ 242.727499][T14287] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.855091][T14293] loop2: detected capacity change from 0 to 128 [ 242.865778][T14293] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.897937][T14296] loop4: detected capacity change from 0 to 2048 [ 242.909626][T14296] EXT4-fs (loop4): failed to initialize system zone (-117) [ 242.917585][T14296] EXT4-fs (loop4): mount failed [ 242.972500][T14305] loop2: detected capacity change from 0 to 164 [ 242.986957][ T36] hid_parser_main: 72 callbacks suppressed [ 242.986986][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.000309][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.007784][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.015199][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.022785][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.027814][T14305] syz.2.3739: attempt to access beyond end of device [ 243.027814][T14305] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 243.030283][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.030316][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.030417][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.030449][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.030479][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 243.031854][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 243.051359][T14305] syz.2.3739: attempt to access beyond end of device [ 243.051359][T14305] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 243.133931][T14313] ref_ctr_offset mismatch. inode: 0x418 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 243.253495][T14318] loop4: detected capacity change from 0 to 1024 [ 243.279295][T14318] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.292343][T14324] loop3: detected capacity change from 0 to 128 [ 243.308211][T14324] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.348773][T14327] Invalid ELF header magic: != ELF [ 243.430129][T14336] loop4: detected capacity change from 0 to 2048 [ 243.453868][T14338] loop3: detected capacity change from 0 to 164 [ 243.457300][T14336] ext4: Unknown parameter 'smackfsdef' [ 243.488660][T14338] syz.3.3752: attempt to access beyond end of device [ 243.488660][T14338] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 243.493643][T14336] vlan0: entered allmulticast mode [ 243.516737][T14338] syz.3.3752: attempt to access beyond end of device [ 243.516737][T14338] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 243.574580][T14341] loop3: detected capacity change from 0 to 128 [ 243.594097][T14341] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.684786][T14352] loop3: detected capacity change from 0 to 1024 [ 243.690300][T14350] loop2: detected capacity change from 0 to 2048 [ 243.716449][T14351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.734169][T14356] netlink: 'syz.1.3758': attribute type 10 has an invalid length. [ 243.749200][T14350] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 243.758695][T14350] FAT-fs (loop2): Filesystem has been set read-only [ 243.778261][T14358] loop1: detected capacity change from 0 to 512 [ 243.785812][T14352] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.798074][T14345] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 243.817869][T14358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3761: error while reading EA inode 32 err=-116 [ 243.838144][T14345] SELinux: failed to load policy [ 243.845171][T14358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3761: error while reading EA inode 32 err=-116 [ 243.859908][T14358] EXT4-fs (loop1): 1 orphan inode deleted [ 243.903127][T14367] loop4: detected capacity change from 0 to 1024 [ 243.920281][T14367] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.932087][T14373] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.3761: unexpected EA_INODE flag [ 243.996750][T14377] loop4: detected capacity change from 0 to 128 [ 244.008783][T14377] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.113747][T14370] ================================================================== [ 244.121881][T14370] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 244.130840][T14370] [ 244.133189][T14370] read to 0xffff88811adc47a0 of 4 bytes by task 14383 on cpu 0: [ 244.140824][T14370] selinux_inode_permission+0x334/0x740 [ 244.146393][T14370] security_inode_permission+0x6d/0xb0 [ 244.151864][T14370] inode_permission+0x106/0x310 [ 244.156736][T14370] link_path_walk+0x162/0x900 [ 244.161427][T14370] path_openat+0x1de/0x2170 [ 244.165936][T14370] do_filp_open+0x109/0x230 [ 244.170454][T14370] io_openat2+0x272/0x390 [ 244.174796][T14370] io_openat+0x1b/0x30 [ 244.178874][T14370] __io_issue_sqe+0xfb/0x2e0 [ 244.183487][T14370] io_issue_sqe+0x56/0xa80 [ 244.187925][T14370] io_wq_submit_work+0x3f7/0x5f0 [ 244.192880][T14370] io_worker_handle_work+0x44e/0x9b0 [ 244.198199][T14370] io_wq_worker+0x22e/0x860 [ 244.202721][T14370] ret_from_fork+0x122/0x1b0 [ 244.207324][T14370] ret_from_fork_asm+0x1a/0x30 [ 244.212106][T14370] [ 244.214434][T14370] write to 0xffff88811adc47a0 of 4 bytes by task 14370 on cpu 1: [ 244.222154][T14370] selinux_inode_permission+0x3ac/0x740 [ 244.227712][T14370] security_inode_permission+0x6d/0xb0 [ 244.233181][T14370] inode_permission+0x106/0x310 [ 244.238048][T14370] link_path_walk+0x162/0x900 [ 244.242740][T14370] path_openat+0x1de/0x2170 [ 244.247250][T14370] do_filp_open+0x109/0x230 [ 244.251758][T14370] io_openat2+0x272/0x390 [ 244.256103][T14370] io_openat+0x1b/0x30 [ 244.260181][T14370] __io_issue_sqe+0xfb/0x2e0 [ 244.264794][T14370] io_issue_sqe+0x56/0xa80 [ 244.269228][T14370] io_submit_sqes+0x675/0x1060 [ 244.274101][T14370] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 244.279672][T14370] __x64_sys_io_uring_enter+0x78/0x90 [ 244.285075][T14370] x64_sys_call+0x2df0/0x3000 [ 244.289761][T14370] do_syscall_64+0xd2/0x200 [ 244.294278][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.300203][T14370] [ 244.302530][T14370] value changed: 0x00000000 -> 0x00000001 [ 244.308249][T14370] [ 244.310574][T14370] Reported by Kernel Concurrency Sanitizer on: [ 244.316730][T14370] CPU: 1 UID: 0 PID: 14370 Comm: syz.3.3765 Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.326546][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.336607][T14370] ================================================================== [ 244.382784][T14385] loop4: detected capacity change from 0 to 2048 [ 244.393506][T14385] ext4: Unknown parameter 'smackfsdef' [ 244.411261][T14385] vlan0: entered allmulticast mode [ 244.746505][ T1038] usb 3-1: enqueue for inactive port 0 [ 244.752117][ T1038] usb 3-1: enqueue for inactive port 0 [ 244.826510][ T1038] vhci_hcd: vhci_device speed not set