last executing test programs: 14.636664515s ago: executing program 1 (id=74): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8084000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x64}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040081}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32=r3, @ANYRESOCT=r3], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000814) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r5) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001fc0)={'ip6gre0\x00', &(0x7f0000001f40)={'syztnl1\x00', 0x0, 0x29, 0x9f, 0xb, 0x7fff, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x10, 0x3cd8, 0x1, 0x2}}) r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) 14.494707149s ago: executing program 3 (id=77): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd, 0x4000000}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 14.359753272s ago: executing program 1 (id=79): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x64}, @generic={0x3c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) 14.299218694s ago: executing program 3 (id=80): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xa, 0xa4, {0xa4, 0x21, "1bc0d0887fdbce2e7e9ef54ad37194ac36fcb5f16a38865612250be6a319cd4d21c6a492e867ec363092493f970ac23f9a16865ba23f40e8b314e3f5d55000cf09d958b24906abe9f41a29947e63f5b6aba5923fd542896a2a5220812c4651119aec486b54802e49b13983979ab367c8b6062fba3ba404eeb74f46a38e405c9756fe41648ec0831b2f4bf10f52bff0c4fda178191fe4a31e1007828b0ce60ba31fe5"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x787b}}}, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x20, 0x15, 0x26, "0f052ba004d3270b6de788872f0590b923701c4846af51d1363205167ac5e97cd2d56ce73c42"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x81, 0x1, 'X'}, &(0x7f00000006c0)={0x20, 0x82, 0x3, "f4131d"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "23cbd1"}, &(0x7f0000000740)={0x20, 0x84, 0x1, "96"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "408951"}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000008c0)={r1, &(0x7f0000000a40)='/~\x98\x89\xfd\xae\x81\xf7\xfd\xe8G/k\xa1\xf6\x83wd\\\xcb\xe4\x99\xf2T\xb9eE\x15\xfb\xba\x110\x98\xd0\fO\xb2\x17\x99\xbd\xfat\xf42D\x1c\xcc\x01\xf9q\x98\net\x83\x91,\x9e\xc0\x18\xfb\f\xb2\xa1\x00\x8c\x02\x00\x9b\xae\x18\xde\x7f\'\xe7\x14\xe3\xa3o\xed\x80\x18\x82\xc5\xfb\x8c\xa7.\xbe\x14\xfbP\xc9\xa8\xc4Y\xe7\x03\x98\xde\xef\x84I\r\xd5Q%\xe2t\xdd\xeb\xbb\xab!G\xca\x05o\xb4\xf9\fY\xb9\xf8)\x878\xdd\xb0)\x9c\xb1\xf4S\xb6(+\x9e\xe4\xb9yi\xd3\x9fEm\xc6c\xa9r\x82v\xb2\x8a\xaf@\x84\xb3:\xa1\x8cI\x18\x03{&\xb1\xa4\x17\xb6\xa9>B\xcd\xf8\xb20$\xd8\x83#\xe08\xcfk\x8f\xd6\xf6\x12\xba\xf7', 0x60000, &(0x7f0000000180)={@_ha_fsid={[0x9, 0x4]}, {0xfdcc, 0x7, 0x0, 0x8}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000880)}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x35}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x400c080) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.298892804s ago: executing program 1 (id=81): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0xa, 0xa4, {0xa4, 0x21, "1bc0d0887fdbce2e7e9ef54ad37194ac36fcb5f16a38865612250be6a319cd4d21c6a492e867ec363092493f970ac23f9a16865ba23f40e8b314e3f5d55000cf09d958b24906abe9f41a29947e63f5b6aba5923fd542896a2a5220812c4651119aec486b54802e49b13983979ab367c8b6062fba3ba404eeb74f46a38e405c9756fe41648ec0831b2f4bf10f52bff0c4fda178191fe4a31e1007828b0ce60ba31fe5"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x787b}}}, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x20, 0x15, 0x26, "0f052ba004d3270b6de788872f0590b923701c4846af51d1363205167ac5e97cd2d56ce73c42"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x81, 0x1, 'X'}, &(0x7f00000006c0)={0x20, 0x82, 0x3, "f4131d"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "23cbd1"}, &(0x7f0000000740)={0x20, 0x84, 0x1, "96"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "408951"}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000008c0)={r1, &(0x7f0000000a40)='/~\x98\x89\xfd\xae\x81\xf7\xfd\xe8G/k\xa1\xf6\x83wd\\\xcb\xe4\x99\xf2T\xb9eE\x15\xfb\xba\x110\x98\xd0\fO\xb2\x17\x99\xbd\xfat\xf42D\x1c\xcc\x01\xf9q\x98\net\x83\x91,\x9e\xc0\x18\xfb\f\xb2\xa1\x00\x8c\x02\x00\x9b\xae\x18\xde\x7f\'\xe7\x14\xe3\xa3o\xed\x80\x18\x82\xc5\xfb\x8c\xa7.\xbe\x14\xfbP\xc9\xa8\xc4Y\xe7\x03\x98\xde\xef\x84I\r\xd5Q%\xe2t\xdd\xeb\xbb\xab!G\xca\x05o\xb4\xf9\fY\xb9\xf8)\x878\xdd\xb0)\x9c\xb1\xf4S\xb6(+\x9e\xe4\xb9yi\xd3\x9fEm\xc6c\xa9r\x82v\xb2\x8a\xaf@\x84\xb3:\xa1\x8cI\x18\x03{&\xb1\xa4\x17\xb6\xa9>B\xcd\xf8\xb20$\xd8\x83#\xe08\xcfk\x8f\xd6\xf6\x12\xba\xf7', 0x60000, &(0x7f0000000180)={@_ha_fsid={[0x9, 0x4]}, {0xfdcc, 0x7, 0x0, 0x8}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000880)}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x35}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x400c080) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0xca460fbeb54f06a, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.298035774s ago: executing program 2 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="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", 0x470) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004300)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.235833549s ago: executing program 2 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)={0x4, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x5b}, 0x48) 13.20769687s ago: executing program 2 (id=96): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = io_uring_setup(0x4c15, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000480)=""/43, 0x2b}, {&(0x7f0000000580)=""/209, 0xd1}], 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000160001000000000000000000ac14140d0000000000000000e5ff0000fc000000000000000000000000000001fffe0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000200000000000a000002000000000000000000000000000000000c0015005c07350002000000"], 0x104}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x10100000, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x1, 0x7}}, 0x50) 12.934978957s ago: executing program 0 (id=105): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x280401c, &(0x7f0000000040)=ANY=[], 0xfd, 0x5532, &(0x7f0000005a80)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x1000404, &(0x7f0000000000), 0x1, 0x458, &(0x7f00000011c0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000004c0)=ANY=[], 0x98, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f00000000c0)='\x00', 0x240880, &(0x7f0000000100)={@align=0x1, {0xa, 0x1000, 0xab8, 0x4}}, 0xffffffc0, &(0x7f0000000200), &(0x7f0000000240)}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.757356011s ago: executing program 0 (id=106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x94) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x4001, 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$eJzs3d1rFOcaAPBnNpsYjcdEEDnnXBwEL47Fuvnqh4WC9rK0UqG9t0syBnHjSjYBkwrVi3rTOymUUqH0ttD7Xkr/gf4VQitIkdBelELKbGbjJu5uPkzcmP39YNb33ZnZd56deV7fmdnNBtCzTmUPhYj/RAxmxeGmecXIZ55aXW756e2pbDoWER//nkSSP9dYPsn/Hcor/46In7+IOFt4vt3a4tL1cqWSzuX10fnZm6O1xaVz12bLM+lMemNicvL8m5MT77z91q7F+trlP7/56OH75788vfz1j4+P30/iYhzN5zXH8QLuNFdOlf/OS/1xccOC47vQ2H6SdHsD2JG+PM/7I+sDhqMvz3rg4Ps8IlaAHpXIf+hRjXFA49x+l86DXxlP3ls9AarHPtAcf3H12kgM1s+Njiwn686MsvPdkV1oP2vjp98e3M+m6Hwd4vAmdYBtuXM3IsaKxef7/yTv/3ZurH7xuLONbfTa/z/QTQ+z8c/rrcZ/hbXxT7QY/wy1yN2d2Dz/C493oZm2svHfuy3Hv2td10hfXvtXfczXn1wdqqRjEXEsIs5ExNVrlXR8cPUaeivnlx+ttGu/efyXTVn7jbFgvh2Pi4fWrzNdni9HxMCLxp55cjfiv8VW8Sdr+z9psf+z9+PyFts4mT74X7t5m8e/t1a+j/h/y/3/7I5W0vn+5Gi2/8dWH1u28ce9k7+0a7/b8Wf7/0jn+EeS5vu1te238d3gX2m7eW3jXzvYWh//A8kn9XIjCW6V5+fnxiMGkg+ff37i2bqNemP5LP4zpzv3f62O/+zk69Mtxn/vxL22i+6H/T+9rf2/sZC9E21m5YVHH3z2bbv2t9b/vVEvncmfyfu/1vJjpcPmrCu86PsHAAAAAAAA+0khIo5GUiitlQuFUmn18x0n4kihUq3Nn71aXbgxHfXvyo5Ef6Fxp3u48XmIa5V0PP88bKM+saE+GRHHI+KrvsP1emmqWpnudvAAAAAAAAAAAAAAAAAAAACwTwy1+f5/5te+bm8dsOfqP2xwqNtbAXTDpj/5vxu/9ATsS5vmP3Bgrcv/pHvbAbx8TfnvKgD0GON/6F3yH3qX/IfeJf+hd20l/y++hO0AAAAAAAAAAAAAAAAAAAAAAAAAAACAA+LypUvZtLL89PZURCT5nwI+N53WrpdmF6ZKU9W5m6WZanWmkpamqrMRMdzp9SrV6s3xiVi4NTqf1uZHa4tLV2arCzeyly3PpFfS/pcUFwAAAAAAAAAAAAAAAAAAALxKaotL18uVSjp3IAo/FPfilS9Et+Pa48KFiDvZwbCj1Yv7JQqFNoW7ea5vb63u9ksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OyfAAAA///6mCm9") poll(0x0, 0x0, 0x1ad) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f00000016c0)=""/4111}, 0x20) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="1603d6"]}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@noblock_validity}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x454900, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 12.342600461s ago: executing program 2 (id=107): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x94) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x4001, 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") poll(0x0, 0x0, 0x1ad) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000140), &(0x7f00000016c0)=""/4111}, 0x20) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="1603d6"]}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@noblock_validity}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x454900, 0x0) inotify_add_watch(r1, 0x0, 0x619) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 11.97528409s ago: executing program 1 (id=112): prlimit64(0x0, 0x0, &(0x7f0000000180)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000380)={[{@grpid}, {@noblock_validity}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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") stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x4008011) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000400000000000000ff010000852000003547010085200000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000001000ffff2abd7b10ffdbdf250000000079f21cb9f382e9309128e50caa88d0258b23b8f5a6c03a096d3034daceef9c6962999b77c8047ee2bcc0a2200f4cccd261c49e9aefda2159a46adc6f089009935750a85b120e2069448e9dfd01d9cee6107ec260ef13f7f5835eb6d92fe4c3b94b70ed77b45d0e656575d5e8f60358cbd55306ef5db0e93d70bff8aa27b41dbd19fbad89f8a33cbd94cb35ffe7f6832d5ad4e0a4b264404d69e13835a75452fbdb1fcd46402ee80db0afe8596799323f1c72b5f18a339335f3680b3ef3ef9a0ce8f4f025b0549230d3a0692b8e9740a2f1c63c93cfc6bb6ba1d6c221f6", @ANYRES32=0x0, @ANYRES8, @ANYRES32=r4, @ANYBLOB="2cff83c571a01db35870d25c9cb3bfbc45eb93da486ec2035aa89fb134095d2dae3aca8bcbd26f3395b84a02f2202f6cb6de0621a7c6caf94903e6127058b2c05b9a763dec3c1413edb09e699188755f28ec2adedaf04829c0df37a4605541d8a9e34b71a8f0665b7adcb501b2add6950adb91857ba778455998d889f187cda960266300f62e207a5bb0b837b20ab5fed09302eaee6227f3f882d2daa3222c6aab88e6bd0fccbe488e8b"], 0x4c}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) 11.849802683s ago: executing program 4 (id=113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xc0, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x6}, {0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x100000000000001}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350758, 0x6}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) 11.757244605s ago: executing program 3 (id=114): syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @remote, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e2100e0}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) 11.703364016s ago: executing program 3 (id=115): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000018c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000001880)={&(0x7f0000000f00)={0x964, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x2}, 0x35, 0x78, 0x1, 0x3, 0x1d, 'syz1\x00', "cf4274a952ba38a520eb16197cbdccbe0537136a5a47445e0370ecb74ec60400", "827506fa58f331b26164ea659256bf26d57f40d001a3dc878f13e17b97f9758d", [{0x9, 0x3, {0x3, 0x1}}, {0x8, 0x7ff, {0x1, 0x9}}, {0x2, 0x1, {0x1, 0x1}}, {0x4, 0x7, {0x1, 0x56}}, {0x9, 0x2, {0x0, 0x9}}, {0x7, 0x2, {0x0, 0x1}}, {0xb0f1, 0x7, {0x1, 0x200}}, {0x2, 0x4, {0x1, 0x4}}, {0x7d1b, 0x2, {0x3, 0x2}}, {0x7a57, 0xffff, {0x0, 0x4}}, {0x7, 0x2, {0xb551cfc4f9de5e89, 0x9}}, {0x401, 0x2, {0x2, 0x2}}, {0x7ff, 0x31c, {0x0, 0x1}}, {0x8, 0x0, {0x1, 0x2}}, {0x0, 0x7, {0x1, 0x6419}}, {0x9, 0x8, {0x2, 0x6}}, {0x1000, 0x7, {0x3, 0x6}}, {0x6, 0x6, {0x3, 0x1}}, {0xc572, 0x4, {0x1, 0x9}}, {0x6, 0x3, {0x3, 0xfffffc01}}, {0x6, 0xce9, {0x0, 0x63a}}, {0x3, 0x9b, {0x3, 0x1}}, {0x446a, 0x6, {0x0, 0xd}}, {0x8, 0x8, {0x0, 0x40e}}, {0x4, 0xfff, {0x0, 0x6}}, {0x9, 0x8, {0x1, 0x7}}, {0x8001, 0x8001, {0x0, 0x9e3}}, {0x5, 0x0, {0x1, 0xd}}, {0x6f7b, 0x1ff, {0x1, 0x380000}}, {0xfff8, 0x8, {0x1, 0x40}}, {0x7251, 0x2, {0x2, 0x10}}, {0x6, 0x5, {0x1, 0x8}}, {0xffff, 0x3518, {0x0, 0x2}}, {0x0, 0x1, {0x0, 0x6}}, {0x8000, 0x5, {0x0, 0xf64c}}, {0xb, 0x4, {0x3, 0x1000}}, {0x5, 0x4, {0x2, 0x4}}, {0x9, 0x9, {0x1, 0x1}}, {0x1000, 0x3, {0x2}}, {0x5, 0x1, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{}, 0x6, 0x9, 0x2, 0xe, 0x1d, 'syz1\x00', "941c547359297ff9613fbb0c2ef76103a46a30ad7f73c9a6fe9f5b9a0535530d", "658bcd48d1308a95df677a211cf6d1ca568c75317cda411010d0673d9bbc1704", [{0xfff7, 0x8, {0x0, 0x8}}, {0x2, 0x7, {0x2, 0x80000001}}, {0x6, 0x0, {0x0, 0x2b79}}, {0xf, 0x6, {0x2, 0x8}}, {0x7, 0x2, {0x3, 0x1}}, {0x395, 0xf, {0x0, 0x8}}, {0xde, 0x6, {0x2, 0x2}}, {0x7, 0x7, {0x1, 0x5}}, {0x1, 0x0, {0x0, 0xf}}, {0x1, 0x5, {0x3, 0x40}}, {0xf, 0x1000, {0x2, 0x6}}, {0x1, 0xfff, {0x0, 0x3}}, {0x9, 0x5, {0x0, 0x6}}, {0x8, 0x0, {0x1, 0x8}}, {0x4, 0x2, {0x0, 0x1}}, {0x6, 0x4, {0x2, 0x3}}, {0x3, 0x400, {0x1, 0x400}}, {0x7fff, 0x1}, {0x0, 0x2583, {0x0, 0x5}}, {0x401, 0x4, {0x1, 0xba}}, {0x9, 0x3, {0x0, 0x7ff}}, {0x1, 0x9, {0x2, 0xffff}}, {0x6a, 0x1, {0x3, 0x3}}, {0x4, 0x2, {0x2, 0xf}}, {0x7fff, 0x0, {0x2, 0x1}}, {0xff, 0x10, {0x0, 0xfffffffb}}, {0x6, 0x5, {0x0, 0x7}}, {0x1, 0x4, {0x1, 0x6}}, {0x5, 0x8d4, {0x34297a96829ec71c, 0x40}}, {0xe4a, 0x528d, {0x3, 0x1000}}, {0x7fff, 0x2, {0x2, 0x6}}, {0x3, 0x6, {0x0, 0x100}}, {0x7, 0xc48, {0x2, 0x5}}, {0x7, 0x8, {0x3, 0x6}}, {0x3, 0x0, {0x0, 0x8000}}, {0x8, 0x8, {0x1, 0x5}}, {0x5, 0x5, {0x1, 0x1}}, {0x476, 0x7fff, {0x1, 0xfff}}, {0x47ce, 0x401, {0x3, 0x800}}, {0x9531, 0x3, {0x1, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x3, 0x7b8c}, 0x61, 0x9, 0x2, 0xb59, 0x19, 'syz0\x00', "6306dad285590916842ae8bb4a01ed874b2830a3745889f06f83eb7262c9bdc8", "ae384db25457c2c8f629551ea7c4352436b936f55a9aebfa01aaf58f5ed607ea", [{0x6, 0x9, {0x3, 0x1000}}, {0x1, 0x3, {0x0, 0x2}}, {0x5, 0x3, {0x1, 0x2}}, {0x6, 0x0, {0x2, 0x40}}, {0x5, 0x2, {0x3, 0x1}}, {0xfff, 0x100, {0x2, 0xeb}}, {0x1, 0x6, {0x2, 0x2}}, {0x2, 0x9, {0x3, 0x2}}, {0xb, 0x1, {0x2, 0xa6}}, {0x3, 0x7, {0x3}}, {0x8bd, 0x0, {0x0, 0x3}}, {0x6, 0x401, {0x1}}, {0xf77, 0x7, {0x3, 0x8}}, {0xff26, 0x1, {0x3, 0xf}}, {0x8, 0x0, {0x0, 0x1}}, {0x4, 0x4, {0x2, 0x28c0}}, {0x8000, 0x0, {0x1, 0xd}}, {0x8, 0x6, {0x2, 0x93}}, {0xffff, 0x4}, {0x0, 0x2, {0x1, 0xb}}, {0x1000, 0xd, {0x0, 0x1000}}, {0xfff9, 0x0, {0x1, 0x3}}, {0xe4b, 0x56d, {0x1, 0x41d}}, {0x9f, 0x4, {0x2, 0x8}}, {0x3, 0xff, {0x3, 0x8}}, {0x2, 0x48f, {0x3, 0x9}}, {0x8, 0x4, {0x0, 0x971}}, {0x40, 0x81, {0x2, 0x100}}, {0x2, 0x2, {0x1}}, {0x6, 0x8, {0x2, 0x51}}, {0x7, 0x3, {0x0, 0xfffffff9}}, {0xd6e, 0x8, {0x1, 0x7}}, {0x800, 0x1, {0x3, 0x7}}, {0x7ff, 0x81, {0x0, 0x9}}, {0x1, 0x533, {0x2, 0x7f}}, {0xcab6, 0x0, {0x1, 0xd}}, {0x6, 0x1, {0x0, 0x2335}}, {0x6, 0xa6d5, {0x2, 0x2}}, {0x6, 0x3, {0x2, 0x19a7}}, {0x6, 0x10, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x132d}, 0x8, 0x6, 0x8, 0x8, 0x14, 'syz0\x00', "74702b141cc3d1c333eb52ca4d90307ecbf82976f08d36529193d00ce5107252", "1e96d740fe12fdef5cdbe767fa0354f32e9dded6d381dc0f8103c44efaedc6ff", [{0x0, 0x8, {0x0, 0x4}}, {0x7f, 0x0, {0x2c10b8bafa8e68be, 0x6}}, {0x8, 0x80, {0x1, 0x28000000}}, {0x400, 0x8, {0x2, 0x5}}, {0x9, 0x7, {0x3, 0x9}}, {0x5, 0x81b, {0x0, 0x1}}, {0x2, 0x8, {0x2}}, {0x4, 0x0, {0x3, 0x1c4f}}, {0xe28e, 0xfffa, {0x1, 0x98}}, {0x3, 0x10, {0x0, 0x10000}}, {0xfffe, 0x6, {0x0, 0x9}}, {0x1ff, 0x9, {0x2, 0x3}}, {0x7, 0xaf28, {0x3, 0x7}}, {0x1, 0x3, {0x3, 0xc7}}, {0x9, 0x6}, {0x9db, 0x9c43, {0x2, 0x2}}, {0x1, 0x500, {0x1, 0xc}}, {0x1ff, 0x8, {0x3, 0x3}}, {0x0, 0x2, {0x3, 0x5}}, {0x5, 0x9, {0x3, 0x80000000}}, {0x9, 0x7, {0x1, 0x10000}}, {0x101, 0x2, {0x2, 0x20000}}, {0xf, 0x3, {0x2, 0x7}}, {0x2, 0x7fff, {0x2, 0x4}}, {0xef64, 0x5, {0x2, 0x400}}, {0x23e, 0x6bcf, {0x3, 0xfff}}, {0xe, 0x3, {0x2, 0x60}}, {0x4, 0x3, {0x2, 0x4}}, {0x4000, 0x40, {0x2, 0x5}}, {0x7ff, 0x6, {0x1, 0x7fffffff}}, {0xfff, 0xfbff, {0x3, 0x5}}, {0x9, 0xa, {0x2, 0x4}}, {0x1, 0xa, {0x3, 0x4}}, {0x737b, 0x200, {0x3, 0xbe}}, {0xe80, 0x3, {0x0, 0x3}}, {0x0, 0x4, {0x1}}, {0x6, 0xdeca, {0x1, 0x7}}, {0x8001, 0x2, {0x2, 0x9}}, {0x8, 0x3ff, {0x1, 0xe}}, {0x7, 0x8, {0x3, 0x6}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004e80)={0x2020}, 0x2020) chroot(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) truncate(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'security.', '\x00'}, &(0x7f0000000400)=""/174, 0xae) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 11.578382399s ago: executing program 4 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x8001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xffffffffffffff90, [@float={0xe, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x6, 0x7178e13d}}, @volatile={0x8}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x18b341, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000040)=0xfffc, &(0x7f0000000080)=0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 11.108851961s ago: executing program 1 (id=117): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = io_uring_setup(0x4c15, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000480)=""/43, 0x2b}, {&(0x7f0000000580)=""/209, 0xd1}], 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000160001000000000000000000ac14140d0000000000000000e5ff0000fc000000000000000000000000000001fffe0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000200000000000a000002000000000000000000000000000000000c0015005c07350002000000"], 0x104}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x10100000, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x1, 0x7}}, 0x50) 7.84977048s ago: executing program 2 (id=118): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x2c754362, 0x10001, 0x9, 0x7, 0x9, "01000000000000c002000000800000d8018780"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 7.758685522s ago: executing program 4 (id=119): getgroups(0x3, &(0x7f0000000840)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000008c0)={[{@grpjquota}, {@noblock_validity}, {@abort}, {@barrier_val}, {@jqfmt_vfsv0}, {@resgid={'resgid', 0x3d, r0}}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x505, &(0x7f0000000980)="$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") (fail_nth: 34) 7.757892422s ago: executing program 3 (id=120): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003090000240f"], 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_settime(0x0, 0x0, 0x0, 0x0) close(r5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180), 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400b595feffffff000000000a0046fd", @ANYRES32=r3, @ANYBLOB="1400020000000015000000000000ffff00000000140001"], 0x40}}, 0x0) 7.744496762s ago: executing program 0 (id=121): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 7.635633385s ago: executing program 0 (id=122): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) statx(0xffffffffffffffff, &(0x7f0000000980)='./file0/file0\x00', 0x400, 0x100, &(0x7f0000000ac0)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@acl}, {@noblock_validity}, {@abort}, {@barrier_val}, {@jqfmt_vfsv0}, {@resgid}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4f4, &(0x7f0000000240)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 7.117386047s ago: executing program 0 (id=123): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r2, &(0x7f0000000200), &(0x7f00000002c0)=0x6e, 0x800) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000100)={r4, r5/1000+10000}, 0x10) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002a40)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002c00)={'tunl0\x00', &(0x7f0000000340)={'sit0\x00', r9, 0x7800, 0x10, 0x9, 0xb, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @empty}}}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffe0, 0x2}, {0xfff1, 0xc}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r11, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) 7.117094337s ago: executing program 4 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031c00d3fc1400a8884788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.01431991s ago: executing program 4 (id=125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8084000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x64}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040081}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32=r3, @ANYRESOCT=r3], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000814) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r5) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001fc0)={'ip6gre0\x00', &(0x7f0000001f40)={'syztnl1\x00', 0x0, 0x29, 0x9f, 0xb, 0x7fff, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x10, 0x3cd8, 0x1, 0x2}}) r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsmount(r6, 0x1, 0xc) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) 6.936985442s ago: executing program 4 (id=126): syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bind$can_raw(r1, &(0x7f00000000c0), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x200, 0x15) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='N\x00', 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x7, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x13, 0x7, 0x0, 0x9, 0x4, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0x4, 0x8, 0x7, 0xf}, {0x10000, 0xe000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0x31, 0x8, 0x21, 0x80, 0x80, 0x0, 0x1, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0xd000, 0x0, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) write(r5, &(0x7f0000000100)='10\x00', 0x2) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)='100\x00', 0x3) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) 6.894288523s ago: executing program 1 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a007db38284cf09d4d554e01d"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x2, 0x1, 0x1}, 0x25, 0x2, 0x0, 0x0, "9c3ba9aafdb8bf766b78b7e83f7f2d16925034699d625f02bcfd7ec036fc6525beb48727dd025ecec3668c69a7c52a7db5db8fd11ce7e98d88822a31bdd4247a"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x31f) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x1, 0x7, 0x0, 0x7, 0x80000000, 0x4, {0x6, 0x3, 0x100000000, 0x0, 0x8000000000203, 0x55d, 0xfffffffa, 0x0, 0x80010000, 0x2000, 0x1002, 0x0, r4, 0x101, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000ac0)={0x50, 0x0, r3, {0x7, 0x2d, 0x3, 0x400, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x72) lstat(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x210000, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) 6.834461954s ago: executing program 2 (id=128): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x7f, 0x101c40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev\x00') read$FUSE(r1, &(0x7f0000001780)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000080)='/dev/mapper/control\x00', 0x14) lseek(r3, 0x0, 0x0) read(r3, &(0x7f0000000100), 0x14) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000007000)=@vmx={0x4, 0x0, 0x2080, {0x1002000, 0xffffffffffffffff, {0x2}}, {"d07ee51100", "00000000000000000000000000000000000000000000000000005155eb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081f4687700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009bbb7e1a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt/sys/net/ipv4/tcp_fastopen\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='7\x00', 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x1234, @loopback}, 0x10) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000037c0), 0x40600, 0x0) openat(r10, &(0x7f0000003800)='./proc_mnt/sys/net/ipv4/tcp_fastopen\x00', 0xa8080, 0x84) sendto$inet(r9, &(0x7f0000000000)="00112233", 0x4, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 852.751449ms ago: executing program 0 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xd}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000100000000000000000004008000"], 0x14}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000ffff2abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3148000023180000240012800b0001006272696467650000140002800800040007080100050019"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.276580][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.284691][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.292176][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.306010][ T287] device veth1_macvtap entered promiscuous mode [ 21.315777][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.323767][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.332140][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.340226][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.348551][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.356398][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.363939][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.378625][ T291] device veth0_vlan entered promiscuous mode [ 21.387834][ T289] device veth0_vlan entered promiscuous mode [ 21.395223][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.403674][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.412347][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.420598][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.429152][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.437098][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.445055][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.453068][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.461127][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.469114][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.477182][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.484659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.492118][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.499455][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.507023][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.514546][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.522189][ T290] device veth0_vlan entered promiscuous mode [ 21.535194][ T288] device veth0_vlan entered promiscuous mode [ 21.542749][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.551210][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.559499][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.567851][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.584507][ T291] device veth1_macvtap entered promiscuous mode [ 21.592639][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.600922][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.608977][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.618349][ T290] device veth1_macvtap entered promiscuous mode [ 21.629500][ T289] device veth1_macvtap entered promiscuous mode [ 21.630127][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 21.648340][ T288] device veth1_macvtap entered promiscuous mode [ 21.656257][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.664564][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.673040][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.681578][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.689125][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.697529][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.706040][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.714427][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.722956][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.731187][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.739238][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.746982][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.755314][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.763763][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.772141][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.804233][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.814153][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.822983][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.831602][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.839905][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.848316][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.875990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.907836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.179983][ T320] fuse: root generation should be zero [ 22.195580][ T329] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.223732][ T332] loop4: detected capacity change from 0 to 512 [ 22.247434][ T332] EXT4-fs: Ignoring removed bh option [ 22.251011][ T329] kvm: pic: non byte write [ 22.299847][ T338] device syzkaller0 entered promiscuous mode [ 22.307186][ T338] FAULT_INJECTION: forcing a failure. [ 22.307186][ T338] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 22.320526][ T338] CPU: 1 PID: 338 Comm: syz.4.9 Not tainted syzkaller #0 [ 22.327558][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 22.337608][ T338] Call Trace: [ 22.340874][ T338] [ 22.343796][ T338] __dump_stack+0x21/0x24 [ 22.348134][ T338] dump_stack_lvl+0x110/0x170 [ 22.352809][ T338] ? __cfi_dump_stack_lvl+0x8/0x8 [ 22.357830][ T338] ? kasan_save_alloc_info+0x1f/0x30 [ 22.363114][ T338] dump_stack+0x15/0x24 [ 22.367254][ T338] should_fail_ex+0x3bf/0x510 [ 22.371914][ T338] should_fail_alloc_page+0x61/0x90 [ 22.377095][ T338] prepare_alloc_pages+0x131/0x570 [ 22.382187][ T338] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 22.387373][ T338] __alloc_pages+0x15b/0x610 [ 22.391949][ T338] ? __cfi___alloc_pages+0x10/0x10 [ 22.397046][ T338] ? __kasan_check_write+0x14/0x20 [ 22.402137][ T338] ? __build_skb_around+0x24c/0x470 [ 22.407323][ T338] ? __alloc_skb+0x2d0/0x4a0 [ 22.411889][ T338] alloc_skb_with_frags+0x20c/0x620 [ 22.417070][ T338] sock_alloc_send_pskb+0x87f/0x9a0 [ 22.422253][ T338] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 22.427955][ T338] ? __cfi_slow_avc_audit+0x10/0x10 [ 22.433131][ T338] ? avc_has_perm_noaudit+0x30a/0x490 [ 22.438486][ T338] packet_sendmsg+0x36da/0x5280 [ 22.443320][ T338] ? avc_has_perm+0x1fb/0x250 [ 22.447976][ T338] ? avc_has_perm+0x220/0x250 [ 22.452638][ T338] ? _parse_integer+0x2a/0x40 [ 22.457299][ T338] ? __cfi_avc_has_perm+0x10/0x10 [ 22.462303][ T338] ? kstrtouint+0x74/0xe0 [ 22.466615][ T338] ? selinux_socket_sendmsg+0x22f/0x340 [ 22.472171][ T338] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 22.478050][ T338] ? __cfi_packet_sendmsg+0x10/0x10 [ 22.483255][ T338] ? __fget_files+0x2d1/0x330 [ 22.487914][ T338] ? security_socket_sendmsg+0x93/0xb0 [ 22.493354][ T338] __sys_sendto+0x4ac/0x660 [ 22.497838][ T338] ? __cfi___sys_sendto+0x10/0x10 [ 22.502843][ T338] ? ksys_write+0x1fa/0x260 [ 22.507326][ T338] ? __cfi_ksys_write+0x10/0x10 [ 22.512161][ T338] __x64_sys_sendto+0xe5/0x100 [ 22.516903][ T338] x64_sys_call+0x83/0x9a0 [ 22.521300][ T338] do_syscall_64+0x4c/0xa0 [ 22.525699][ T338] ? clear_bhb_loop+0x30/0x80 [ 22.530357][ T338] ? clear_bhb_loop+0x30/0x80 [ 22.535039][ T338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 22.540917][ T338] RIP: 0033:0x7faff559e019 [ 22.545331][ T338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.564929][ T338] RSP: 002b:00007faff648b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 22.573344][ T338] RAX: ffffffffffffffda RBX: 00007faff5825fa0 RCX: 00007faff559e019 [ 22.581297][ T338] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 22.589248][ T338] RBP: 00007faff648b090 R08: 0000200000000140 R09: 0000000000000014 [ 22.597197][ T338] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 22.605154][ T338] R13: 00007faff5826038 R14: 00007faff5825fa0 R15: 00007ffeef94b598 [ 22.613114][ T338] [ 22.617687][ T309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.670182][ T340] loop0: detected capacity change from 0 to 256 [ 22.680987][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.708762][ T342] kvm: pic: non byte write [ 22.810759][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 22.827372][ T309] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 22.832035][ T345] loop0: detected capacity change from 0 to 512 [ 22.835655][ T309] usb 2-1: config 8 has an invalid descriptor of length 119, skipping remainder of the config [ 22.842682][ T345] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 22.855469][ T309] usb 2-1: config 8 has no interface number 0 [ 22.860764][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 22.871900][ T345] EXT4-fs (loop0): invalid journal inode [ 22.877524][ T309] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 22.877574][ T345] EXT4-fs (loop0): can't get journal size [ 22.888936][ T309] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 22.897204][ T345] EXT4-fs (loop0): 1 truncate cleaned up [ 22.912291][ T309] usb 2-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 22.914259][ T345] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 22.923101][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.938697][ T309] usb 2-1: Product: syz [ 22.941214][ T19] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 22.943001][ T309] usb 2-1: Manufacturer: syz [ 22.953259][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.956788][ T309] usb 2-1: SerialNumber: syz [ 22.964830][ T19] usb 4-1: Product: syz [ 22.976607][ T19] usb 4-1: Manufacturer: syz [ 22.981687][ T19] usb 4-1: SerialNumber: syz [ 22.987712][ T345] EXT4-fs (loop0): unmounting filesystem. [ 23.019678][ T354] FAULT_INJECTION: forcing a failure. [ 23.019678][ T354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 23.033685][ T354] CPU: 0 PID: 354 Comm: syz.0.14 Not tainted syzkaller #0 [ 23.040814][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 23.050859][ T354] Call Trace: [ 23.054126][ T354] [ 23.057039][ T354] __dump_stack+0x21/0x24 [ 23.061359][ T354] dump_stack_lvl+0x110/0x170 [ 23.066017][ T354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 23.071021][ T354] ? __cfi_sched_clock_cpu+0x10/0x10 [ 23.076291][ T354] ? __alloc_pages+0x1fa/0x610 [ 23.081042][ T354] ? handle_mm_fault+0x1989/0x26b0 [ 23.086132][ T354] ? do_user_addr_fault+0x900/0x1030 [ 23.091398][ T354] ? exc_page_fault+0x51/0xb0 [ 23.096056][ T354] dump_stack+0x15/0x24 [ 23.100193][ T354] should_fail_ex+0x3bf/0x510 [ 23.104852][ T354] should_fail_alloc_page+0x61/0x90 [ 23.110036][ T354] prepare_alloc_pages+0x131/0x570 [ 23.115129][ T354] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 23.120309][ T354] ? get_nohz_timer_target+0x7a/0x560 [ 23.125662][ T354] __alloc_pages+0x15b/0x610 [ 23.130239][ T354] ? debug_smp_processor_id+0x17/0x20 [ 23.135589][ T354] ? __cfi___alloc_pages+0x10/0x10 [ 23.140685][ T354] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 23.146478][ T354] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 23.152274][ T354] ? dummy_timer+0x2f1e/0x3270 [ 23.157021][ T354] __folio_alloc+0x12/0x40 [ 23.161423][ T354] wp_page_copy+0x258/0x1490 [ 23.165994][ T354] ? __alloc_pages+0x610/0x610 [ 23.170746][ T354] ? cgroup_rstat_updated+0xf0/0x360 [ 23.176011][ T354] ? fault_dirty_shared_page+0x310/0x310 [ 23.181629][ T354] ? vm_normal_page+0x1eb/0x200 [ 23.186465][ T354] do_wp_page+0x9b5/0xf70 [ 23.190775][ T354] handle_mm_fault+0x114f/0x26b0 [ 23.195692][ T354] ? __cfi_handle_mm_fault+0x10/0x10 [ 23.200979][ T354] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 23.206158][ T354] do_user_addr_fault+0x900/0x1030 [ 23.211256][ T354] ? debug_smp_processor_id+0x17/0x20 [ 23.216608][ T354] exc_page_fault+0x51/0xb0 [ 23.221096][ T354] asm_exc_page_fault+0x27/0x30 [ 23.225932][ T354] RIP: 0033:0x7efdeb0551a3 [ 23.230324][ T354] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 23.249912][ T354] RSP: 002b:00007efdebffd470 EFLAGS: 00010202 [ 23.255964][ T354] RAX: 0000000000022008 RBX: 00007efdebffd530 RCX: 00007efde17f8000 [ 23.263913][ T354] RDX: 00007efdebffd6d0 RSI: 000000000000004f RDI: 00007efdebffd5d0 [ 23.271873][ T354] RBP: 000000000000004c R08: 0000000000000009 R09: 00000000000001c5 [ 23.279823][ T354] R10: 00000000000001cc R11: 00007efdebffd530 R12: 0000000000000001 [ 23.287770][ T354] R13: 00007efdeb254fa0 R14: 00000000000000f2 R15: 00007efdebffd5d0 [ 23.295725][ T354] [ 23.310530][ T354] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 23.313600][ T313] loop1: detected capacity change from 0 to 128 [ 23.320679][ T354] loop0: detected capacity change from 0 to 512 [ 23.331482][ T354] EXT4-fs: Invalid gid value -1 [ 23.336617][ T313] ======================================================= [ 23.336617][ T313] WARNING: The mand mount option has been deprecated and [ 23.336617][ T313] and is ignored by this kernel. Remove the mand [ 23.336617][ T313] option from the mount to silence this warning. [ 23.336617][ T313] ======================================================= [ 23.374743][ T313] EXT4-fs (loop1): Test dummy encryption mode enabled [ 23.384145][ T313] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 23.410793][ T313] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 23.418201][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 23.418214][ T28] audit: type=1400 audit(1785781001.031:127): avc: denied { prog_load } for pid=357 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.447912][ T28] audit: type=1400 audit(1785781001.061:128): avc: denied { perfmon } for pid=357 comm="syz.0.15" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 23.469686][ T28] audit: type=1400 audit(1785781001.061:129): avc: denied { prog_run } for pid=357 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 23.490979][ T313] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 23.501959][ T326] process 'syz.3.4' launched '/dev/fd/-1' with NULL argv: empty string added [ 23.503757][ T28] audit: type=1400 audit(1785781001.061:130): avc: denied { create } for pid=312 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.550408][ T19] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 23.569014][ T19] usb 4-1: USB disconnect, device number 2 [ 23.594251][ T28] audit: type=1400 audit(1785781001.111:131): avc: denied { read write open } for pid=312 comm="syz.1.2" path="/0/mnt/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.632512][ T309] hub 2-1:8.223: bad descriptor, ignoring hub [ 23.647923][ T309] hub: probe of 2-1:8.223 failed with error -5 [ 23.650801][ T28] audit: type=1400 audit(1785781001.121:132): avc: denied { setattr } for pid=312 comm="syz.1.2" path="/0/mnt/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.683543][ T309] usb 2-1: USB disconnect, device number 2 [ 23.701552][ T28] audit: type=1400 audit(1785781001.151:133): avc: denied { mmap_zero } for pid=312 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 23.730770][ T28] audit: type=1400 audit(1785781001.231:134): avc: denied { create } for pid=312 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.750162][ T368] loop0: detected capacity change from 0 to 40427 [ 23.779586][ T368] F2FS-fs (loop0): invalid crc value [ 23.790323][ T368] F2FS-fs (loop0): Found nat_bits in checkpoint [ 23.796767][ T28] audit: type=1400 audit(1785781001.231:135): avc: denied { ioctl } for pid=312 comm="syz.1.2" path="/0/mnt/file1" dev="loop1" ino=12 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.838499][ T368] F2FS-fs (loop0): Start checkpoint disabled! [ 23.850794][ T368] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 23.852228][ T28] audit: type=1400 audit(1785781001.251:136): avc: denied { name_bind } for pid=373 comm="syz.4.20" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 23.869059][ T368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 23.919596][ T368] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 23.959203][ T314] kworker/u4:3: attempt to access beyond end of device [ 23.959203][ T314] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 23.973204][ T314] kworker/u4:3: attempt to access beyond end of device [ 23.973204][ T314] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 24.037336][ T384] loop4: detected capacity change from 0 to 256 [ 24.060168][ T387] loop0: detected capacity change from 0 to 128 [ 24.084436][ T387] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 24.102977][ T387] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 24.112560][ T387] FAT-fs (loop0): Filesystem has been set read-only [ 24.119225][ T387] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 24.172668][ T401] device syzkaller0 entered promiscuous mode [ 24.215202][ T408] kvm: pic: non byte write [ 24.226839][ T405] kvm: pic: non byte write [ 24.270314][ T290] EXT4-fs (loop1): unmounting filesystem. [ 24.304063][ T422] loop1: detected capacity change from 0 to 256 [ 24.326893][ T433] loop4: detected capacity change from 0 to 256 [ 24.335676][ T433] exfat: Deprecated parameter 'namecase' [ 24.343251][ T433] exfat: Deprecated parameter 'utf8' [ 24.365161][ T433] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 24.392473][ T422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 24.408531][ T422] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.503000][ T290] EXT4-fs (loop1): unmounting filesystem. [ 24.538268][ T448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 24.550447][ T448] device dummy0 entered promiscuous mode [ 24.556708][ T448] device macsec1 entered promiscuous mode [ 24.565173][ T448] device dummy0 left promiscuous mode [ 24.650763][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.669983][ T451] device syzkaller0 entered promiscuous mode [ 24.741490][ T327] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 24.792362][ T458] kvm: pic: non byte write [ 24.830847][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 24.837591][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 24.853952][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1007 [ 24.864024][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 24.876556][ T19] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 24.885865][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.893925][ T19] usb 5-1: Product: syz [ 24.898210][ T19] usb 5-1: Manufacturer: syz [ 24.902844][ T19] usb 5-1: SerialNumber: syz [ 24.908536][ T433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 24.915985][ T433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 24.933003][ T464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 24.956442][ T464] xt_CT: No such helper "syz0" [ 24.969622][ T290] EXT4-fs (loop1): unmounting filesystem. [ 25.061715][ T473] exfat: Deprecated parameter 'namecase' [ 25.067458][ T473] exfat: Deprecated parameter 'utf8' [ 25.075151][ T473] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 25.165480][ T477] EXT4-fs: dax option not supported [ 25.186521][ T477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 25.221818][ T481] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 25.238646][ T481] EXT4-fs (loop1): 1 truncate cleaned up [ 25.244511][ T481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.356363][ T493] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 25.365136][ T493] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.385257][ T290] EXT4-fs (loop1): unmounting filesystem. [ 25.385542][ T496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=496 comm=syz.0.62 [ 25.414674][ T493] EXT4-fs (loop3): orphan cleanup on readonly fs [ 25.421655][ T493] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.60: Allocating blocks 41-42 which overlap fs metadata [ 25.433931][ T496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'. [ 25.437992][ T493] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.60: Failed to acquire dquot type 0 [ 25.448231][ T496] device syzkaller0 entered promiscuous mode [ 25.455729][ T493] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 25.465937][ T496] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 25.475684][ T493] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #12: comm syz.3.60: corrupted inode contents [ 25.495534][ T493] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #12: comm syz.3.60: mark_inode_dirty error [ 25.506778][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.514339][ T493] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #12: comm syz.3.60: corrupted inode contents [ 25.526180][ T493] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.60: mark_inode_dirty error [ 25.537531][ T493] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #12: comm syz.3.60: corrupted inode contents [ 25.549394][ T493] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 25.558171][ T493] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #12: comm syz.3.60: corrupted inode contents [ 25.570009][ T493] EXT4-fs error (device loop3): ext4_truncate:4327: inode #12: comm syz.3.60: mark_inode_dirty error [ 25.581157][ T493] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 25.590233][ T493] EXT4-fs (loop3): 1 truncate cleaned up [ 25.595968][ T493] EXT4-fs (loop3): pa ffff88811498a5e8: logic 1, phys. 41, len 23 [ 25.603816][ T493] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 25.614064][ T493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.632734][ T493] EXT4-fs error (device loop3): __ext4_remount:6637: comm syz.3.60: Abort forced by user [ 25.642741][ T493] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 25.654645][ T288] EXT4-fs (loop3): unmounting filesystem. [ 25.662452][ T501] kvm: pic: non byte write [ 25.700858][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.740755][ T60] usb 3-1: device descriptor read/64, error -71 [ 25.803786][ T508] exfat: Bad value for 'errors' [ 25.811875][ T508] netlink: 'syz.3.66': attribute type 6 has an invalid length. [ 25.819516][ T508] netlink: 'syz.3.66': attribute type 7 has an invalid length. [ 25.827303][ T508] netlink: 'syz.3.66': attribute type 8 has an invalid length. [ 25.834979][ T508] netlink: 'syz.3.66': attribute type 15 has an invalid length. [ 25.881801][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.892784][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.902556][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.915489][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.924533][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.933030][ T6] usb 2-1: config 0 descriptor?? [ 26.010753][ T60] usb 3-1: device descriptor read/64, error -71 [ 26.290811][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.341893][ T498] EXT4-fs (loop1): bad s_min_extra_isize: 65535 [ 26.399335][ T498] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 26.470859][ T60] usb 3-1: device descriptor read/64, error -71 [ 26.521479][ T513] xt_NFQUEUE: number of total queues is 0 [ 26.780933][ T60] usb 3-1: device descriptor read/64, error -71 [ 26.911367][ T60] usb usb3-port1: attempt power cycle [ 27.167772][ T6] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x7 [ 27.175287][ T6] plantronics 0003:047F:FFFF.0001: item fetching failed at offset 14/15 [ 27.183860][ T6] plantronics 0003:047F:FFFF.0001: parse failed [ 27.190138][ T6] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 27.251924][ T515] set_capacity_and_notify: 13 callbacks suppressed [ 27.251938][ T515] loop3: detected capacity change from 0 to 2048 [ 27.338208][ T19] usb 5-1: USB disconnect, device number 2 [ 28.350706][ C0] sched: RT throttling activated [ 28.370758][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.342718][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 29.401853][ T521] loop4: detected capacity change from 0 to 256 [ 29.408727][ T521] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.424892][ T24] usb 2-1: USB disconnect, device number 3 [ 29.425004][ T103] loop3: p1 < > p4 < > [ 29.436458][ T521] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 29.446429][ T521] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 29.469268][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 29.469281][ T28] audit: type=1400 audit(1785781007.081:191): avc: denied { write } for pid=524 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.496073][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.513758][ T327] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 29.531181][ T528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=528 comm=syz.1.74 [ 29.543612][ T28] audit: type=1400 audit(1785781007.151:192): avc: denied { map } for pid=520 comm="syz.4.69" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.546666][ T355] udevd[355]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 29.571921][ T532] loop2: detected capacity change from 0 to 512 [ 29.584483][ T308] udevd[308]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 29.584487][ T60] usb 3-1: device not accepting address 4, error -71 [ 29.594515][ T532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 29.609628][ T532] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 29.624248][ T28] audit: type=1400 audit(1785781007.151:193): avc: denied { read write } for pid=520 comm="syz.4.69" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.628609][ T537] loop4: detected capacity change from 0 to 256 [ 29.650925][ T535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.74'. [ 29.664395][ T532] EXT4-fs (loop2): orphan cleanup on readonly fs [ 29.673378][ T532] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.75: Allocating blocks 41-42 which overlap fs metadata [ 29.686113][ T528] device syzkaller0 entered promiscuous mode [ 29.687552][ T532] Quota error (device loop2): write_blk: dquota write failed [ 29.700276][ T532] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 29.710304][ T532] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.75: Failed to acquire dquot type 0 [ 29.721543][ T532] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 29.735988][ T532] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #12: comm syz.2.75: corrupted inode contents [ 29.747799][ T532] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #12: comm syz.2.75: mark_inode_dirty error [ 29.760214][ T532] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #12: comm syz.2.75: corrupted inode contents [ 29.772214][ T532] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.75: mark_inode_dirty error [ 29.783585][ T532] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #12: comm syz.2.75: corrupted inode contents [ 29.783662][ T540] netlink: 'syz.3.77': attribute type 3 has an invalid length. [ 29.803122][ T532] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 29.804465][ T540] netlink: 'syz.3.77': attribute type 3 has an invalid length. [ 29.812275][ T532] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #12: comm syz.2.75: corrupted inode contents [ 29.831046][ T532] EXT4-fs error (device loop2): ext4_truncate:4327: inode #12: comm syz.2.75: mark_inode_dirty error [ 29.842192][ T532] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 29.851363][ T532] EXT4-fs (loop2): 1 truncate cleaned up [ 29.857097][ T532] EXT4-fs (loop2): pa ffff88811498af18: logic 1, phys. 41, len 23 [ 29.864982][ T532] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 29.875168][ T532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.892575][ T532] EXT4-fs error (device loop2): __ext4_remount:6637: comm syz.2.75: Abort forced by user [ 29.902562][ T532] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 29.915384][ T289] EXT4-fs (loop2): unmounting filesystem. [ 29.946444][ T555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.84'. [ 29.975371][ T552] kvm: pic: non byte write [ 29.985214][ T28] audit: type=1400 audit(1785781007.601:194): avc: denied { search } for pid=556 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.000445][ T558] loop4: detected capacity change from 0 to 8192 [ 30.010308][ T28] audit: type=1400 audit(1785781007.621:195): avc: denied { read } for pid=559 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.014143][ T558] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 30.036964][ T28] audit: type=1400 audit(1785781007.621:196): avc: denied { open } for pid=559 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.069221][ T28] audit: type=1400 audit(1785781007.621:197): avc: denied { getattr } for pid=559 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.094416][ T28] audit: type=1400 audit(1785781007.621:198): avc: denied { getattr } for pid=559 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.129848][ T327] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.190996][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.200762][ T318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.289686][ T573] netlink: 'syz.4.85': attribute type 32 has an invalid length. [ 30.372589][ T578] netlink: 96 bytes leftover after parsing attributes in process `syz.0.87'. [ 30.382892][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.397537][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.409202][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.421239][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 30.430336][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.438787][ T24] usb 2-1: Product: syz [ 30.443068][ T24] usb 2-1: Manufacturer: syz [ 30.447711][ T24] usb 2-1: SerialNumber: syz [ 30.454137][ T24] usb 2-1: selecting invalid altsetting 1 [ 30.459994][ T24] usb 2-1: unit 6 not found! [ 30.462208][ T318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.478379][ T318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.492600][ T318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.493614][ T587] loop0: detected capacity change from 0 to 512 [ 30.503005][ T318] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 30.512163][ T587] EXT4-fs: Invalid gid value -1 [ 30.524840][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.536211][ T318] usb 4-1: Product: syz [ 30.540448][ T318] usb 4-1: Manufacturer: syz [ 30.547141][ T318] usb 4-1: SerialNumber: syz [ 30.557116][ T318] usb 4-1: selecting invalid altsetting 1 [ 30.572252][ T592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.92'. [ 30.587847][ T592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=592 comm=syz.0.92 [ 30.712776][ T595] loop0: detected capacity change from 0 to 512 [ 30.719931][ T595] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.728721][ T595] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.742587][ T595] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.749724][ T595] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.93: Allocating blocks 41-42 which overlap fs metadata [ 30.763460][ T595] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.93: Failed to acquire dquot type 0 [ 30.775063][ T595] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 30.789634][ T595] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.93: corrupted inode contents [ 30.801429][ T595] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #12: comm syz.0.93: mark_inode_dirty error [ 30.838145][ T595] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.93: corrupted inode contents [ 30.850822][ T595] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.93: mark_inode_dirty error [ 30.862185][ T595] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.93: corrupted inode contents [ 30.874029][ T595] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 30.882779][ T595] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.93: corrupted inode contents [ 30.894603][ T595] EXT4-fs error (device loop0): ext4_truncate:4327: inode #12: comm syz.0.93: mark_inode_dirty error [ 30.908600][ T595] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 30.909443][ T598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.94'. [ 30.926918][ T595] EXT4-fs (loop0): 1 truncate cleaned up [ 30.932660][ T595] EXT4-fs (loop0): pa ffff88811498adc8: logic 1, phys. 41, len 23 [ 30.940496][ T595] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 30.950688][ T595] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.963138][ T595] EXT4-fs error (device loop0): __ext4_remount:6637: comm syz.0.93: Abort forced by user [ 30.974157][ T595] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 31.007532][ T287] EXT4-fs (loop0): unmounting filesystem. [ 31.117111][ T607] loop0: detected capacity change from 0 to 8192 [ 31.358875][ T624] loop0: detected capacity change from 0 to 40427 [ 31.365880][ T624] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 31.373418][ T624] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 31.382461][ T624] F2FS-fs (loop0): invalid crc value [ 31.389229][ T624] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 31.411367][ T624] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.418465][ T624] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.432360][ T626] f2fs_ckpt-7:0: attempt to access beyond end of device [ 31.432360][ T626] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.511957][ T24] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 31.512098][ T318] usb 4-1: unit 6 not found! [ 31.528408][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.718215][ T24] usb 2-1: USB disconnect, device number 4 [ 31.770764][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.929793][ T318] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 31.938385][ T318] usb 4-1: USB disconnect, device number 3 [ 31.946087][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.950844][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 31.967921][ T19] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.978948][ T19] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.988802][ T19] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 32.001820][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.008405][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 32.017477][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.027053][ T19] usb 1-1: config 0 descriptor?? [ 32.062352][ T636] loop4: detected capacity change from 0 to 256 [ 32.150755][ T60] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.194783][ T642] F2FS-fs (loop4): invalid crc value [ 32.201401][ T642] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.227388][ T642] F2FS-fs (loop4): Start checkpoint disabled! [ 32.240963][ T642] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 32.257022][ T642] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 32.264986][ T632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.281247][ T642] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 32.295789][ T642] syz.4.111: attempt to access beyond end of device [ 32.295789][ T642] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 32.329511][ T314] kworker/u4:3: attempt to access beyond end of device [ 32.329511][ T314] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 32.343568][ T314] kworker/u4:3: attempt to access beyond end of device [ 32.343568][ T314] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 32.356250][ T651] set_capacity_and_notify: 2 callbacks suppressed [ 32.356268][ T651] loop1: detected capacity change from 0 to 4096 [ 32.358350][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 32.370523][ T651] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.379226][ T314] kworker/u4:3: attempt to access beyond end of device [ 32.379226][ T314] loop4: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 32.383747][ T651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.398173][ T60] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.440777][ T60] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.466444][ T60] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 32.516242][ T657] loop3: detected capacity change from 0 to 512 [ 32.545926][ T60] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.546701][ T659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 32.552615][ T60] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 32.552639][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.554080][ T60] usb 3-1: config 0 descriptor?? [ 32.572495][ T657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.594280][ T651] netlink: 44 bytes leftover after parsing attributes in process `syz.1.112'. [ 32.600008][ T657] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.619594][ T657] capability: warning: `syz.3.115' uses deprecated v2 capabilities in a way that may be insecure [ 32.724547][ T19] hid (null): report_id 915 is invalid [ 32.740470][ T19] hid (null): invalid report_size 6778482 [ 32.830176][ T634] loop2: detected capacity change from 0 to 1024 [ 32.841093][ T664] loop4: detected capacity change from 0 to 40427 [ 32.859318][ T664] F2FS-fs (loop4): invalid crc value [ 32.876728][ T664] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.907167][ T634] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.935086][ T664] F2FS-fs (loop4): Start checkpoint disabled! [ 32.941636][ T664] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 32.959934][ T664] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 33.007751][ T664] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 33.032728][ T664] syz.4.116: attempt to access beyond end of device [ 33.032728][ T664] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 33.079866][ T19] usb 1-1: USB disconnect, device number 2 [ 36.363385][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 36.377645][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 36.391843][ T60] usb 3-1: USB disconnect, device number 6 [ 36.394577][ T289] EXT4-fs (loop2): unmounting filesystem. [ 36.404148][ T290] EXT4-fs (loop1): unmounting filesystem. [ 36.435062][ T8] kworker/u4:0: attempt to access beyond end of device [ 36.435062][ T8] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 36.467292][ T8] kworker/u4:0: attempt to access beyond end of device [ 36.467292][ T8] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 36.481528][ T8] kworker/u4:0: attempt to access beyond end of device [ 36.481528][ T8] loop4: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 36.482313][ T288] EXT4-fs (loop3): unmounting filesystem. [ 36.512343][ T287] EXT4-fs (loop0): unmounting filesystem. [ 36.550673][ T699] loop0: detected capacity change from 0 to 256 [ 36.591730][ T702] loop0: detected capacity change from 0 to 512 [ 36.598759][ T702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.603387][ T704] FAULT_INJECTION: forcing a failure. [ 36.603387][ T704] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 36.608069][ T702] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.622090][ T704] CPU: 0 PID: 704 Comm: syz.4.119 Not tainted syzkaller #0 [ 36.636969][ T704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.646242][ T702] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.647027][ T704] Call Trace: [ 36.647034][ T704] [ 36.654057][ T702] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.122: Allocating blocks 41-42 which overlap fs metadata [ 36.656615][ T704] __dump_stack+0x21/0x24 [ 36.656640][ T704] dump_stack_lvl+0x110/0x170 [ 36.659785][ T702] __quota_error: 24 callbacks suppressed [ 36.659797][ T702] Quota error (device loop0): write_blk: dquota write failed [ 36.673074][ T704] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.673102][ T704] ? folio_add_lru+0x2d6/0x650 [ 36.673124][ T704] dump_stack+0x15/0x24 [ 36.677457][ T702] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 36.682090][ T704] should_fail_ex+0x3bf/0x510 [ 36.682107][ T704] should_fail_alloc_page+0x61/0x90 [ 36.682126][ T704] prepare_alloc_pages+0x131/0x570 [ 36.682144][ T704] ? get_delayacct_enabled+0x19/0x30 [ 36.687763][ T702] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.122: Failed to acquire dquot type 0 [ 36.695096][ T704] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 36.695120][ T704] __alloc_pages+0x15b/0x610 [ 36.700880][ T702] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, [ 36.704855][ T704] ? __cfi___alloc_pages+0x10/0x10 [ 36.708987][ T702] inode 12: block 14: [ 36.718847][ T704] ? folio_add_lru+0x2d6/0x650 [ 36.718870][ T704] ? memcg_rstat_updated+0x56/0x110 [ 36.718892][ T704] __folio_alloc+0x12/0x40 [ 36.723556][ T702] freeing already freed block (bit 14); block bitmap corrupt. [ 36.728721][ T704] handle_mm_fault+0x1989/0x26b0 [ 36.733868][ T702] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.122: corrupted inode contents [ 36.739059][ T704] ? __cfi_handle_mm_fault+0x10/0x10 [ 36.750345][ T702] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #12: comm syz.0.122: mark_inode_dirty error [ 36.755305][ T704] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 36.755328][ T704] do_user_addr_fault+0x900/0x1030 [ 36.760018][ T702] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.122: corrupted inode contents [ 36.767406][ T704] ? debug_smp_processor_id+0x17/0x20 [ 36.767427][ T704] exc_page_fault+0x51/0xb0 [ 36.772700][ T702] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.122: mark_inode_dirty error [ 36.776478][ T704] asm_exc_page_fault+0x27/0x30 [ 36.781403][ T702] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.122: corrupted inode contents [ 36.786385][ T704] RIP: 0033:0x7faff54551a3 [ 36.786402][ T704] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 36.786414][ T704] RSP: 002b:00007faff648a470 EFLAGS: 00010202 [ 36.790974][ T702] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 36.798229][ T704] [ 36.798234][ T704] RAX: 0000000000023000 RBX: 00007faff648a530 RCX: 00007fafebbf8000 [ 36.803327][ T702] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.122: corrupted inode contents [ 36.814865][ T704] RDX: 00007faff648a6d0 RSI: 0000000000000003 RDI: 00007faff648a5d0 [ 36.814877][ T704] RBP: 0000000000000064 R08: 0000000000000007 R09: 0000000000000044 [ 36.814885][ T704] R10: 0000000000000050 R11: 00007faff648a530 R12: 0000000000000001 [ 36.814895][ T704] R13: 00007faff5654fa0 R14: 0000000000000073 R15: 00007faff648a5d0 [ 36.814908][ T704] [ 36.820337][ T702] EXT4-fs error (device loop0): ext4_truncate:4327: inode #12: comm syz.0.122: mark_inode_dirty error [ 36.833246][ T704] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 36.836704][ T702] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 36.843830][ T704] loop4: detected capacity change from 0 to 512 [ 36.854098][ T702] EXT4-fs (loop0): 1 truncate cleaned up [ 36.892461][ T704] EXT4-fs: Invalid gid value -1 [ 36.895941][ T702] EXT4-fs (loop0): pa ffff88811498a9d8: logic 1, phys. 41, len 23 [ 36.980757][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.984072][ T702] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 37.056274][ T702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.073294][ T702] EXT4-fs error (device loop0): __ext4_remount:6637: comm syz.0.122: Abort forced by user [ 37.083535][ T702] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 37.097203][ T287] EXT4-fs (loop0): unmounting filesystem. [ 37.102249][ T707] device syzkaller0 entered promiscuous mode [ 37.159584][ T711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=711 comm=syz.4.125 [ 37.160777][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 37.177573][ T711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.125'. [ 37.189150][ T19] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 37.199939][ T711] device syzkaller0 entered promiscuous mode [ 37.206248][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.216394][ T19] usb 4-1: Product: syz [ 37.220653][ T19] usb 4-1: Manufacturer: syz [ 37.228934][ T19] usb 4-1: SerialNumber: syz [ 37.293034][ T28] audit: type=1400 audit(1785781014.911:221): avc: denied { mounton } for pid=714 comm="syz.4.126" path="/33/file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.325023][ T28] audit: type=1400 audit(1785781014.941:222): avc: denied { mount } for pid=714 comm="syz.4.126" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 37.358784][ T28] audit: type=1400 audit(1785781014.971:223): avc: denied { append } for pid=720 comm="syz.2.128" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.387676][ T715] FAULT_INJECTION: forcing a failure. [ 37.387676][ T715] name failslab, interval 1, probability 100, space 0, times 10 [ 37.387741][ T722] FAULT_INJECTION: forcing a failure. [ 37.387741][ T722] name failslab, interval 1, probability 100, space 0, times 10 [ 37.400808][ T721] FAULT_INJECTION: forcing a failure. [ 37.400808][ T721] name failslab, interval 1, probability 100, space 0, times 10 [ 37.413723][ T717] FAULT_INJECTION: forcing a failure. [ 37.413723][ T717] name failslab, interval 1, probability 100, space 0, times 10 [ 37.426615][ T715] CPU: 1 PID: 715 Comm: syz.4.126 Not tainted syzkaller #0 [ 37.446586][ T715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.456652][ T715] Call Trace: [ 37.459929][ T715] [ 37.462851][ T715] __dump_stack+0x21/0x24 [ 37.463777][ T720] FAULT_INJECTION: forcing a failure. [ 37.463777][ T720] name failslab, interval 1, probability 100, space 0, times 9 [ 37.467176][ T715] dump_stack_lvl+0x110/0x170 [ 37.480892][ T92] FAULT_INJECTION: forcing a failure. [ 37.480892][ T92] name failslab, interval 1, probability 100, space 0, times 9 [ 37.484575][ T715] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.498296][ T698] FAULT_INJECTION: forcing a failure. [ 37.498296][ T698] name failslab, interval 1, probability 100, space 0, times 9 [ 37.502349][ T715] ? __schedule+0xbea/0x14b0 [ 37.502376][ T715] dump_stack+0x15/0x24 [ 37.523818][ T715] should_fail_ex+0x3bf/0x510 [ 37.528488][ T715] __should_failslab+0xac/0xf0 [ 37.533248][ T715] should_failslab+0x9/0x20 [ 37.537747][ T715] __kmem_cache_alloc_node+0x3d/0x2d0 [ 37.543119][ T715] ? __get_vm_area_node+0x12c/0x360 [ 37.548304][ T715] ? kernel_text_address+0xa0/0xd0 [ 37.553410][ T715] ? __get_vm_area_node+0x12c/0x360 [ 37.558595][ T715] kmalloc_node_trace+0x26/0xb0 [ 37.563435][ T715] __get_vm_area_node+0x12c/0x360 [ 37.568447][ T715] __vmalloc_node_range+0x326/0x1440 [ 37.573723][ T715] ? __vcalloc+0x36/0x50 [ 37.577963][ T715] ? __stack_depot_save+0x36/0x490 [ 37.583079][ T715] ? kasan_save_alloc_info+0x1f/0x30 [ 37.588377][ T715] ? kmalloc_trace+0x40/0xb0 [ 37.590872][ C0] FAULT_INJECTION: forcing a failure. [ 37.590872][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 37.592966][ T715] ? kvm_vm_ioctl+0x8d4/0xb00 [ 37.610361][ T715] ? __se_sys_ioctl+0x12f/0x1b0 [ 37.615205][ T715] ? x64_sys_call+0x58b/0x9a0 [ 37.619873][ T715] ? do_syscall_64+0x4c/0xa0 [ 37.624453][ T715] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.630521][ T715] ? __cfi___vmalloc_node_range+0x10/0x10 [ 37.636231][ T715] ? __vcalloc+0x36/0x50 [ 37.640459][ T715] __vmalloc+0x79/0x90 [ 37.644525][ T715] ? __vcalloc+0x36/0x50 [ 37.648755][ T715] __vcalloc+0x36/0x50 [ 37.652810][ T715] kvm_arch_prepare_memory_region+0x2dc/0xe90 [ 37.658869][ T715] ? __cfi_mutex_lock+0x10/0x10 [ 37.663712][ T715] kvm_set_memslot+0x611/0x1160 [ 37.668555][ T715] ? kasan_save_alloc_info+0x1f/0x30 [ 37.673827][ T715] __kvm_set_memory_region+0x722/0x8c0 [ 37.679281][ T715] kvm_vm_ioctl_set_memory_region+0x74/0xa0 [ 37.685167][ T715] kvm_vm_ioctl+0x8d4/0xb00 [ 37.689665][ T715] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 37.694706][ T715] ? folio_add_lru+0x2d6/0x650 [ 37.699467][ T715] ? memcg_rstat_updated+0x56/0x110 [ 37.704659][ T715] ? ioctl_has_perm+0x1b8/0x4f0 [ 37.709503][ T715] ? memcpy+0x56/0x70 [ 37.713477][ T715] ? has_cap_mac_admin+0x370/0x370 [ 37.718583][ T715] ? handle_mm_fault+0x18d8/0x26b0 [ 37.723684][ T715] ? selinux_file_ioctl+0x3ad/0x4c0 [ 37.728873][ T715] ? __cfi_handle_mm_fault+0x10/0x10 [ 37.734148][ T715] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 37.739686][ T715] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 37.744871][ T715] ? __fget_files+0x2d1/0x330 [ 37.749536][ T715] ? security_file_ioctl+0x95/0xc0 [ 37.754637][ T715] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 37.759652][ T715] __se_sys_ioctl+0x12f/0x1b0 [ 37.764319][ T715] __x64_sys_ioctl+0x7b/0x90 [ 37.768896][ T715] x64_sys_call+0x58b/0x9a0 [ 37.773385][ T715] do_syscall_64+0x4c/0xa0 [ 37.777796][ T715] ? clear_bhb_loop+0x30/0x80 [ 37.782464][ T715] ? clear_bhb_loop+0x30/0x80 [ 37.787130][ T715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.793014][ T715] RIP: 0033:0x7faff559dcab [ 37.797418][ T715] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 37.817012][ T715] RSP: 002b:00007faff6489450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.825419][ T715] RAX: ffffffffffffffda RBX: 0000200000fe8000 RCX: 00007faff559dcab [ 37.833383][ T715] RDX: 00007faff6489bd0 RSI: 000000004020ae46 RDI: 0000000000000008 [ 37.841343][ T715] RBP: 0000000000000008 R08: 0000000000000001 R09: 000000000000007c [ 37.849390][ T715] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000fec00000 [ 37.857348][ T715] R13: 00007faff6489bd0 R14: 0000200000fef000 R15: 0000000000000007 [ 37.865325][ T715] [ 37.868334][ C0] CPU: 0 PID: 722 Comm: syz.4.126 Not tainted syzkaller #0 [ 37.875532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.885577][ C0] Call Trace: [ 37.888841][ C0] [ 37.891670][ C0] __dump_stack+0x21/0x24 [ 37.895989][ C0] dump_stack_lvl+0x110/0x170 [ 37.900651][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.905661][ C0] dump_stack+0x15/0x24 [ 37.909829][ C0] should_fail_ex+0x3bf/0x510 [ 37.914486][ C0] ? build_skb+0x2a/0x220 [ 37.918799][ C0] __should_failslab+0xac/0xf0 [ 37.923546][ C0] should_failslab+0x9/0x20 [ 37.928032][ C0] kmem_cache_alloc+0x3b/0x320 [ 37.932784][ C0] ? detach_entity_load_avg+0x790/0x790 [ 37.938315][ C0] build_skb+0x2a/0x220 [ 37.942453][ C0] page_to_skb+0x12d/0xb50 [ 37.946858][ C0] receive_buf+0x469/0x4890 [ 37.951354][ C0] ? enqueue_task_fair+0x18d8/0x1d70 [ 37.956621][ C0] ? virtnet_poll_tx+0x550/0x550 [ 37.961543][ C0] ? __kasan_check_write+0x14/0x20 [ 37.966635][ C0] ? resched_curr+0x114/0x3a0 [ 37.971297][ C0] ? virtqueue_get_buf_ctx+0x47a/0xcf0 [ 37.976740][ C0] ? detach_buf_split+0x890/0xa90 [ 37.981750][ C0] ? virtqueue_get_buf+0x1f/0x30 [ 37.986673][ C0] ? virtqueue_get_buf_ctx+0x6bc/0xcf0 [ 37.992119][ C0] virtnet_poll+0x5c9/0x1150 [ 37.996699][ C0] ? __cfi_virtnet_poll+0x10/0x10 [ 38.001709][ C0] __napi_poll+0xcd/0x5d0 [ 38.006029][ C0] net_rx_action+0x4a3/0xa90 [ 38.010601][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 38.015692][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 38.020882][ C0] ? irqtime_account_irq+0x75/0x240 [ 38.026067][ C0] handle_softirqs+0x1d7/0x600 [ 38.030817][ C0] __irq_exit_rcu+0x52/0xf0 [ 38.035306][ C0] irq_exit_rcu+0x9/0x10 [ 38.039532][ C0] common_interrupt+0xbe/0xe0 [ 38.044196][ C0] [ 38.047369][ C0] [ 38.050280][ C0] asm_common_interrupt+0x27/0x40 [ 38.055294][ C0] RIP: 0010:preempt_schedule_irq+0xa5/0x120 [ 38.061175][ C0] Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 d1 fb 4c fc fb bf 01 00 00 00 46 e5 ff ff fa bf 01 00 00 00 e8 7b fd 4c fc 65 48 8b 1d c3 d4 [ 38.080762][ C0] RSP: 0018:ffffc90010d2f500 EFLAGS: 00000246 [ 38.086813][ C0] RAX: 1ffff110228af159 RBX: ffffc90010d2f5d8 RCX: ffffffff87b7b100 [ 38.094765][ C0] RDX: 1ffffffff0f6e600 RSI: 0000000000000000 RDI: 0000000000000001 [ 38.102726][ C0] RBP: ffffc90010d2f588 R08: ffffffff87b73008 R09: ffffffff87b73018 [ 38.110679][ C0] R10: ffffffff87b73003 R11: 1ffffffff0f6e600 R12: 0000000000000000 [ 38.118635][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920021a5ea0 [ 38.126596][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 38.132304][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 38.137669][ C0] raw_irqentry_exit_cond_resched+0x29/0x30 [ 38.143551][ C0] irqentry_exit+0x37/0x40 [ 38.147949][ C0] sysvec_apic_timer_interrupt+0x64/0xc0 [ 38.153568][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 38.159537][ C0] RIP: 0010:kasan_check_range+0x5f/0x2a0 [ 38.165157][ C0] Code: 02 00 00 49 bd 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 <49> c1 e9 03 4b 8d 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85 [ 38.184746][ C0] RSP: 0018:ffffc90010d2f688 EFLAGS: 00000a02 [ 38.190797][ C0] RAX: ffffffff8157d401 RBX: ffffffff860afda0 RCX: ffffffff8157d43c [ 38.198751][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 38.206702][ C0] RBP: ffffc90010d2f6b0 R08: ffffffff8711b9c3 R09: ffffffff8711b9c3 [ 38.214656][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 38.222609][ C0] R13: dffffc0000000001 R14: 1ffffffff0e23738 R15: 1ffff920021a5edc [ 38.230599][ C0] ? kmsg_dump_rewind+0xa1/0xb0 [ 38.235443][ C0] ? __printk_cpu_sync_wait+0x1c/0x40 [ 38.240800][ C0] __kasan_check_read+0x11/0x20 [ 38.245634][ C0] __printk_cpu_sync_wait+0x1c/0x40 [ 38.250819][ C0] dump_stack_lvl+0xce/0x170 [ 38.255406][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.260442][ C0] ? release_sock+0x169/0x1c0 [ 38.265100][ C0] dump_stack+0x15/0x24 [ 38.269240][ C0] should_fail_ex+0x3bf/0x510 [ 38.273904][ C0] __should_failslab+0xac/0xf0 [ 38.278659][ C0] should_failslab+0x9/0x20 [ 38.283144][ C0] kmem_cache_alloc_node+0x42/0x330 [ 38.288330][ C0] ? __alloc_skb+0xe8/0x4a0 [ 38.292815][ C0] __alloc_skb+0xe8/0x4a0 [ 38.297124][ C0] netlink_sendmsg+0x635/0xbd0 [ 38.301869][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 38.307137][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 38.312579][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 38.317846][ C0] ____sys_sendmsg+0x5fb/0x9c0 [ 38.322599][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 38.327610][ C0] ? import_iovec+0x7c/0xb0 [ 38.332096][ C0] ___sys_sendmsg+0x2a2/0x360 [ 38.336757][ C0] ? __sys_sendmsg+0x290/0x290 [ 38.341514][ C0] ? vfs_write+0xa51/0xd00 [ 38.345919][ C0] ? __fdget+0x19c/0x220 [ 38.350148][ C0] __x64_sys_sendmsg+0x20d/0x2e0 [ 38.355071][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 38.360519][ C0] ? __kasan_check_write+0x14/0x20 [ 38.365615][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 38.371237][ C0] ? switch_fpu_return+0xe/0x10 [ 38.376074][ C0] x64_sys_call+0x171/0x9a0 [ 38.380566][ C0] do_syscall_64+0x4c/0xa0 [ 38.384969][ C0] ? clear_bhb_loop+0x30/0x80 [ 38.389623][ C0] ? clear_bhb_loop+0x30/0x80 [ 38.394282][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.400165][ C0] RIP: 0033:0x7faff559e019 [ 38.404558][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.424152][ C0] RSP: 002b:00007faff646a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.432563][ C0] RAX: ffffffffffffffda RBX: 00007faff5826090 RCX: 00007faff559e019 [ 38.440518][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 38.448470][ C0] RBP: 00007faff563500c R08: 0000000000000000 R09: 0000000000000000 [ 38.456422][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.460720][ C1] FAULT_INJECTION: forcing a failure. [ 38.460720][ C1] name failslab, interval 1, probability 100, space 0, times 9 [ 38.464373][ C0] R13: 00007faff5826128 R14: 00007faff5826090 R15: 00007ffeef94b598 [ 38.485058][ C0] [ 38.488060][ C1] CPU: 1 PID: 478 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 38.488121][ C0] FAULT_INJECTION: forcing a failure. [ 38.488121][ C0] name failslab, interval 1, probability 100, space 0, times 8 [ 38.495501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.495513][ C1] Workqueue: events_unbound toggle_allocation_gate [ 38.524743][ C1] Call Trace: [ 38.528006][ C1] [ 38.530834][ C1] __dump_stack+0x21/0x24 [ 38.535157][ C1] dump_stack_lvl+0x110/0x170 [ 38.539834][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.544863][ C1] ? hrtimer_active+0x1ea/0x200 [ 38.549721][ C1] dump_stack+0x15/0x24 [ 38.553873][ C1] should_fail_ex+0x3bf/0x510 [ 38.558543][ C1] __should_failslab+0xac/0xf0 [ 38.563301][ C1] should_failslab+0x9/0x20 [ 38.567796][ C1] kmem_cache_alloc_node+0x42/0x330 [ 38.572987][ C1] ? __alloc_skb+0xe8/0x4a0 [ 38.577479][ C1] __alloc_skb+0xe8/0x4a0 [ 38.581794][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 38.587258][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 38.593838][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 38.600242][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 38.607342][ C1] call_timer_fn+0x46/0x2a0 [ 38.611838][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 38.618941][ C1] __run_timers+0x646/0x9b0 [ 38.623442][ C1] ? calc_index+0x200/0x200 [ 38.627938][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 38.633133][ C1] run_timer_softirq+0x6a/0xf0 [ 38.637889][ C1] handle_softirqs+0x1d7/0x600 [ 38.642652][ C1] __irq_exit_rcu+0x52/0xf0 [ 38.647142][ C1] irq_exit_rcu+0x9/0x10 [ 38.651380][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 38.657054][ C1] [ 38.659969][ C1] [ 38.662884][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 38.668864][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 38.675466][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 38.695063][ C1] RSP: 0018:ffffc9000f197840 EFLAGS: 00000293 [ 38.701118][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: ffff8881194f5100 [ 38.709079][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 38.717034][ C1] RBP: ffffc9000f197978 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 38.724994][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 38.732953][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 38.740916][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 38.746197][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 38.752191][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 38.757208][ C1] ? smp_call_function_many+0x40/0x40 [ 38.762568][ C1] ? kmem_cache_alloc_bulk+0xf8/0x3c0 [ 38.767933][ C1] ? text_poke+0x30/0x30 [ 38.772168][ C1] ? text_poke_loc_init+0x105/0x560 [ 38.777359][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 38.782378][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 38.787517][ C1] text_poke_bp_batch+0x1cf/0x600 [ 38.792553][ C1] ? text_poke_loc_init+0x560/0x560 [ 38.797759][ C1] ? __kasan_check_write+0x14/0x20 [ 38.802863][ C1] ? mutex_lock+0x93/0x1b0 [ 38.807272][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 38.812116][ C1] ? text_poke_queue+0xde/0x1a0 [ 38.816954][ C1] text_poke_finish+0x1a/0x30 [ 38.821651][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 38.827627][ C1] __jump_label_update+0x38f/0x3b0 [ 38.832741][ C1] jump_label_update+0x39b/0x450 [ 38.837691][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 38.843594][ C1] static_key_enable+0x1a/0x30 [ 38.848352][ C1] toggle_allocation_gate+0xba/0x440 [ 38.853627][ C1] ? __cfi_toggle_allocation_gate+0x10/0x10 [ 38.859510][ C1] ? ttwu_do_wakeup+0x468/0x490 [ 38.864375][ C1] ? ttwu_do_activate+0x179/0x2a0 [ 38.869411][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 38.875228][ C1] ? try_to_wake_up+0x622/0x1250 [ 38.880161][ C1] process_one_work+0x717/0xc30 [ 38.885004][ C1] worker_thread+0xa4d/0x11d0 [ 38.889671][ C1] kthread+0x281/0x320 [ 38.893726][ C1] ? __cfi_worker_thread+0x10/0x10 [ 38.898826][ C1] ? __cfi_kthread+0x10/0x10 [ 38.903412][ C1] ret_from_fork+0x1f/0x30 [ 38.907823][ C1] [ 38.910833][ C0] CPU: 0 PID: 722 Comm: syz.4.126 Not tainted syzkaller #0 [ 38.910854][ C1] FAULT_INJECTION: forcing a failure. [ 38.910854][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 38.918027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.940782][ C0] Call Trace: [ 38.944047][ C0] [ 38.946877][ C0] __dump_stack+0x21/0x24 [ 38.951199][ C0] dump_stack_lvl+0x110/0x170 [ 38.955866][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.960882][ C0] dump_stack+0x15/0x24 [ 38.965027][ C0] should_fail_ex+0x3bf/0x510 [ 38.969692][ C0] ? build_skb+0x2a/0x220 [ 38.974006][ C0] __should_failslab+0xac/0xf0 [ 38.978760][ C0] should_failslab+0x9/0x20 [ 38.983250][ C0] kmem_cache_alloc+0x3b/0x320 [ 38.988008][ C0] build_skb+0x2a/0x220 [ 38.992154][ C0] page_to_skb+0x12d/0xb50 [ 38.996564][ C0] receive_buf+0x469/0x4890 [ 39.001058][ C0] ? enqueue_task_fair+0x18d8/0x1d70 [ 39.006334][ C0] ? virtnet_poll_tx+0x550/0x550 [ 39.011269][ C0] ? __kasan_check_write+0x14/0x20 [ 39.016372][ C0] ? resched_curr+0x114/0x3a0 [ 39.021039][ C0] ? virtqueue_get_buf_ctx+0x47a/0xcf0 [ 39.026489][ C0] ? detach_buf_split+0x890/0xa90 [ 39.031506][ C0] ? virtqueue_get_buf+0x1f/0x30 [ 39.036434][ C0] ? virtqueue_get_buf_ctx+0x6bc/0xcf0 [ 39.041880][ C0] virtnet_poll+0x5c9/0x1150 [ 39.046465][ C0] ? __cfi_virtnet_poll+0x10/0x10 [ 39.051482][ C0] __napi_poll+0xcd/0x5d0 [ 39.055811][ C0] net_rx_action+0x4a3/0xa90 [ 39.060388][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 39.065511][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 39.070705][ C0] ? irqtime_account_irq+0x75/0x240 [ 39.075899][ C0] handle_softirqs+0x1d7/0x600 [ 39.080654][ C0] __irq_exit_rcu+0x52/0xf0 [ 39.085149][ C0] irq_exit_rcu+0x9/0x10 [ 39.089377][ C0] common_interrupt+0xbe/0xe0 [ 39.094048][ C0] [ 39.096965][ C0] [ 39.099881][ C0] asm_common_interrupt+0x27/0x40 [ 39.104901][ C0] RIP: 0010:preempt_schedule_irq+0xa5/0x120 [ 39.110789][ C0] Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 d1 fb 4c fc fb bf 01 00 00 00 46 e5 ff ff fa bf 01 00 00 00 e8 7b fd 4c fc 65 48 8b 1d c3 d4 [ 39.130383][ C0] RSP: 0018:ffffc90010d2f500 EFLAGS: 00000246 [ 39.136438][ C0] RAX: 1ffff110228af159 RBX: ffffc90010d2f5d8 RCX: ffffffff87b7b100 [ 39.144400][ C0] RDX: 1ffffffff0f6e600 RSI: 0000000000000000 RDI: 0000000000000001 [ 39.152362][ C0] RBP: ffffc90010d2f588 R08: ffffffff87b73008 R09: ffffffff87b73018 [ 39.160321][ C0] R10: ffffffff87b73003 R11: 1ffffffff0f6e600 R12: 0000000000000000 [ 39.168285][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920021a5ea0 [ 39.176248][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 39.181961][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 39.187327][ C0] raw_irqentry_exit_cond_resched+0x29/0x30 [ 39.193214][ C0] irqentry_exit+0x37/0x40 [ 39.197618][ C0] sysvec_apic_timer_interrupt+0x64/0xc0 [ 39.203245][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 39.209221][ C0] RIP: 0010:kasan_check_range+0x5f/0x2a0 [ 39.214846][ C0] Code: 02 00 00 49 bd 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 <49> c1 e9 03 4b 8d 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85 [ 39.234464][ C0] RSP: 0018:ffffc90010d2f688 EFLAGS: 00000a02 [ 39.240516][ C0] RAX: ffffffff8157d401 RBX: ffffffff860afda0 RCX: ffffffff8157d43c [ 39.248471][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 39.256428][ C0] RBP: ffffc90010d2f6b0 R08: ffffffff8711b9c3 R09: ffffffff8711b9c3 [ 39.264385][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 39.272349][ C0] R13: dffffc0000000001 R14: 1ffffffff0e23738 R15: 1ffff920021a5edc [ 39.280310][ C0] ? kmsg_dump_rewind+0xa1/0xb0 [ 39.285161][ C0] ? __printk_cpu_sync_wait+0x1c/0x40 [ 39.290528][ C0] __kasan_check_read+0x11/0x20 [ 39.295367][ C0] __printk_cpu_sync_wait+0x1c/0x40 [ 39.300560][ C0] dump_stack_lvl+0xce/0x170 [ 39.305141][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.310158][ C0] ? release_sock+0x169/0x1c0 [ 39.314823][ C0] dump_stack+0x15/0x24 [ 39.318974][ C0] should_fail_ex+0x3bf/0x510 [ 39.323638][ C0] __should_failslab+0xac/0xf0 [ 39.328395][ C0] should_failslab+0x9/0x20 [ 39.332883][ C0] kmem_cache_alloc_node+0x42/0x330 [ 39.338079][ C0] ? __alloc_skb+0xe8/0x4a0 [ 39.342569][ C0] __alloc_skb+0xe8/0x4a0 [ 39.346890][ C0] netlink_sendmsg+0x635/0xbd0 [ 39.351643][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 39.356927][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 39.362376][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 39.367650][ C0] ____sys_sendmsg+0x5fb/0x9c0 [ 39.372407][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 39.377424][ C0] ? import_iovec+0x7c/0xb0 [ 39.381911][ C0] ___sys_sendmsg+0x2a2/0x360 [ 39.386576][ C0] ? __sys_sendmsg+0x290/0x290 [ 39.391337][ C0] ? vfs_write+0xa51/0xd00 [ 39.395744][ C0] ? __fdget+0x19c/0x220 [ 39.399972][ C0] __x64_sys_sendmsg+0x20d/0x2e0 [ 39.404901][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 39.410351][ C0] ? __kasan_check_write+0x14/0x20 [ 39.415447][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 39.421071][ C0] ? switch_fpu_return+0xe/0x10 [ 39.425915][ C0] x64_sys_call+0x171/0x9a0 [ 39.430407][ C0] do_syscall_64+0x4c/0xa0 [ 39.434813][ C0] ? clear_bhb_loop+0x30/0x80 [ 39.439474][ C0] ? clear_bhb_loop+0x30/0x80 [ 39.444134][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.450023][ C0] RIP: 0033:0x7faff559e019 [ 39.454421][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.474030][ C0] RSP: 002b:00007faff646a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.482430][ C0] RAX: ffffffffffffffda RBX: 00007faff5826090 RCX: 00007faff559e019 [ 39.490388][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 39.498345][ C0] RBP: 00007faff563500c R08: 0000000000000000 R09: 0000000000000000 [ 39.506301][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.514262][ C0] R13: 00007faff5826128 R14: 00007faff5826090 R15: 00007ffeef94b598 [ 39.522226][ C0] [ 39.525230][ C1] CPU: 1 PID: 478 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 39.525266][ C0] FAULT_INJECTION: forcing a failure. [ 39.525266][ C0] name failslab, interval 1, probability 100, space 0, times 6 [ 39.532682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.532693][ C1] Workqueue: events_unbound toggle_allocation_gate [ 39.561933][ C1] Call Trace: [ 39.565200][ C1] [ 39.568030][ C1] __dump_stack+0x21/0x24 [ 39.572349][ C1] dump_stack_lvl+0x110/0x170 [ 39.577015][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.582030][ C1] ? hrtimer_active+0x1ea/0x200 [ 39.586875][ C1] dump_stack+0x15/0x24 [ 39.591019][ C1] should_fail_ex+0x3bf/0x510 [ 39.595682][ C1] __should_failslab+0xac/0xf0 [ 39.600438][ C1] should_failslab+0x9/0x20 [ 39.604928][ C1] kmem_cache_alloc_node+0x42/0x330 [ 39.610122][ C1] ? __alloc_skb+0xe8/0x4a0 [ 39.614613][ C1] __alloc_skb+0xe8/0x4a0 [ 39.618928][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 39.624379][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 39.630959][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 39.637370][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 39.644471][ C1] call_timer_fn+0x46/0x2a0 [ 39.648965][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 39.656067][ C1] __run_timers+0x646/0x9b0 [ 39.660563][ C1] ? calc_index+0x200/0x200 [ 39.665057][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 39.670255][ C1] run_timer_softirq+0x6a/0xf0 [ 39.675046][ C1] handle_softirqs+0x1d7/0x600 [ 39.679801][ C1] __irq_exit_rcu+0x52/0xf0 [ 39.684295][ C1] irq_exit_rcu+0x9/0x10 [ 39.688524][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 39.694156][ C1] [ 39.697075][ C1] [ 39.699992][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 39.705968][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 39.712548][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 39.732140][ C1] RSP: 0018:ffffc9000f197840 EFLAGS: 00000293 [ 39.738197][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: ffff8881194f5100 [ 39.746158][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 39.754113][ C1] RBP: ffffc9000f197978 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 39.762075][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 39.770033][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 39.777992][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 39.783280][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 39.789256][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 39.794275][ C1] ? smp_call_function_many+0x40/0x40 [ 39.799636][ C1] ? kmem_cache_alloc_bulk+0xf8/0x3c0 [ 39.805000][ C1] ? text_poke+0x30/0x30 [ 39.809234][ C1] ? text_poke_loc_init+0x105/0x560 [ 39.814424][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 39.819473][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 39.824578][ C1] text_poke_bp_batch+0x1cf/0x600 [ 39.829595][ C1] ? text_poke_loc_init+0x560/0x560 [ 39.834783][ C1] ? __kasan_check_write+0x14/0x20 [ 39.839886][ C1] ? mutex_lock+0x93/0x1b0 [ 39.844296][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 39.849143][ C1] ? text_poke_queue+0xde/0x1a0 [ 39.853981][ C1] text_poke_finish+0x1a/0x30 [ 39.858652][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 39.864626][ C1] __jump_label_update+0x38f/0x3b0 [ 39.869733][ C1] jump_label_update+0x39b/0x450 [ 39.874667][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 39.880550][ C1] static_key_enable+0x1a/0x30 [ 39.885307][ C1] toggle_allocation_gate+0xba/0x440 [ 39.890584][ C1] ? __cfi_toggle_allocation_gate+0x10/0x10 [ 39.896465][ C1] ? ttwu_do_wakeup+0x468/0x490 [ 39.901308][ C1] ? ttwu_do_activate+0x179/0x2a0 [ 39.906328][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 39.912125][ C1] ? try_to_wake_up+0x622/0x1250 [ 39.917052][ C1] process_one_work+0x717/0xc30 [ 39.921896][ C1] worker_thread+0xa4d/0x11d0 [ 39.926585][ C1] kthread+0x281/0x320 [ 39.930645][ C1] ? __cfi_worker_thread+0x10/0x10 [ 39.935747][ C1] ? __cfi_kthread+0x10/0x10 [ 39.940326][ C1] ret_from_fork+0x1f/0x30 [ 39.944735][ C1] [ 39.947738][ C0] CPU: 0 PID: 722 Comm: syz.4.126 Not tainted syzkaller #0 [ 39.947760][ C1] FAULT_INJECTION: forcing a failure. [ 39.947760][ C1] name failslab, interval 1, probability 100, space 0, times 5 [ 39.954930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.954941][ C0] Call Trace: [ 39.954947][ C0] [ 39.983776][ C0] __dump_stack+0x21/0x24 [ 39.988101][ C0] dump_stack_lvl+0x110/0x170 [ 39.992775][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.997789][ C0] dump_stack+0x15/0x24 [ 40.001936][ C0] should_fail_ex+0x3bf/0x510 [ 40.006602][ C0] ? build_skb+0x2a/0x220 [ 40.010918][ C0] __should_failslab+0xac/0xf0 [ 40.015676][ C0] should_failslab+0x9/0x20 [ 40.020168][ C0] kmem_cache_alloc+0x3b/0x320 [ 40.024929][ C0] build_skb+0x2a/0x220 [ 40.029072][ C0] page_to_skb+0x12d/0xb50 [ 40.033486][ C0] receive_buf+0x469/0x4890 [ 40.037983][ C0] ? enqueue_task_fair+0x18d8/0x1d70 [ 40.043255][ C0] ? virtnet_poll_tx+0x550/0x550 [ 40.048198][ C0] ? __kasan_check_write+0x14/0x20 [ 40.053296][ C0] ? resched_curr+0x114/0x3a0 [ 40.057960][ C0] ? virtqueue_get_buf_ctx+0x47a/0xcf0 [ 40.063410][ C0] ? detach_buf_split+0x890/0xa90 [ 40.068425][ C0] ? virtqueue_get_buf+0x1f/0x30 [ 40.073352][ C0] ? virtqueue_get_buf_ctx+0x6bc/0xcf0 [ 40.078803][ C0] virtnet_poll+0x5c9/0x1150 [ 40.083393][ C0] ? __cfi_virtnet_poll+0x10/0x10 [ 40.088415][ C0] __napi_poll+0xcd/0x5d0 [ 40.092738][ C0] net_rx_action+0x4a3/0xa90 [ 40.097316][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 40.102415][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 40.107609][ C0] ? irqtime_account_irq+0x75/0x240 [ 40.112799][ C0] handle_softirqs+0x1d7/0x600 [ 40.117551][ C0] __irq_exit_rcu+0x52/0xf0 [ 40.122043][ C0] irq_exit_rcu+0x9/0x10 [ 40.126277][ C0] common_interrupt+0xbe/0xe0 [ 40.130949][ C0] [ 40.133870][ C0] [ 40.136790][ C0] asm_common_interrupt+0x27/0x40 [ 40.141806][ C0] RIP: 0010:preempt_schedule_irq+0xa5/0x120 [ 40.147695][ C0] Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 d1 fb 4c fc fb bf 01 00 00 00 46 e5 ff ff fa bf 01 00 00 00 e8 7b fd 4c fc 65 48 8b 1d c3 d4 [ 40.167292][ C0] RSP: 0018:ffffc90010d2f500 EFLAGS: 00000246 [ 40.173351][ C0] RAX: 1ffff110228af159 RBX: ffffc90010d2f5d8 RCX: ffffffff87b7b100 [ 40.181312][ C0] RDX: 1ffffffff0f6e600 RSI: 0000000000000000 RDI: 0000000000000001 [ 40.189274][ C0] RBP: ffffc90010d2f588 R08: ffffffff87b73008 R09: ffffffff87b73018 [ 40.197236][ C0] R10: ffffffff87b73003 R11: 1ffffffff0f6e600 R12: 0000000000000000 [ 40.205198][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920021a5ea0 [ 40.213183][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 40.218900][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 40.224270][ C0] raw_irqentry_exit_cond_resched+0x29/0x30 [ 40.230153][ C0] irqentry_exit+0x37/0x40 [ 40.234559][ C0] sysvec_apic_timer_interrupt+0x64/0xc0 [ 40.240190][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 40.246165][ C0] RIP: 0010:kasan_check_range+0x5f/0x2a0 [ 40.251821][ C0] Code: 02 00 00 49 bd 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 <49> c1 e9 03 4b 8d 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85 [ 40.271419][ C0] RSP: 0018:ffffc90010d2f688 EFLAGS: 00000a02 [ 40.277476][ C0] RAX: ffffffff8157d401 RBX: ffffffff860afda0 RCX: ffffffff8157d43c [ 40.285438][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 40.293392][ C0] RBP: ffffc90010d2f6b0 R08: ffffffff8711b9c3 R09: ffffffff8711b9c3 [ 40.301353][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 40.309310][ C0] R13: dffffc0000000001 R14: 1ffffffff0e23738 R15: 1ffff920021a5edc [ 40.317280][ C0] ? kmsg_dump_rewind+0xa1/0xb0 [ 40.322129][ C0] ? __printk_cpu_sync_wait+0x1c/0x40 [ 40.327499][ C0] __kasan_check_read+0x11/0x20 [ 40.332339][ C0] __printk_cpu_sync_wait+0x1c/0x40 [ 40.337530][ C0] dump_stack_lvl+0xce/0x170 [ 40.342113][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.347129][ C0] ? release_sock+0x169/0x1c0 [ 40.351791][ C0] dump_stack+0x15/0x24 [ 40.355937][ C0] should_fail_ex+0x3bf/0x510 [ 40.360600][ C0] __should_failslab+0xac/0xf0 [ 40.365358][ C0] should_failslab+0x9/0x20 [ 40.369848][ C0] kmem_cache_alloc_node+0x42/0x330 [ 40.375041][ C0] ? __alloc_skb+0xe8/0x4a0 [ 40.379530][ C0] __alloc_skb+0xe8/0x4a0 [ 40.383846][ C0] netlink_sendmsg+0x635/0xbd0 [ 40.388600][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 40.393875][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 40.399328][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 40.404603][ C0] ____sys_sendmsg+0x5fb/0x9c0 [ 40.409363][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 40.414379][ C0] ? import_iovec+0x7c/0xb0 [ 40.418870][ C0] ___sys_sendmsg+0x2a2/0x360 [ 40.423539][ C0] ? __sys_sendmsg+0x290/0x290 [ 40.428295][ C0] ? vfs_write+0xa51/0xd00 [ 40.432699][ C0] ? __fdget+0x19c/0x220 [ 40.436929][ C0] __x64_sys_sendmsg+0x20d/0x2e0 [ 40.441861][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 40.447318][ C0] ? __kasan_check_write+0x14/0x20 [ 40.452419][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 40.458044][ C0] ? switch_fpu_return+0xe/0x10 [ 40.462885][ C0] x64_sys_call+0x171/0x9a0 [ 40.467376][ C0] do_syscall_64+0x4c/0xa0 [ 40.471782][ C0] ? clear_bhb_loop+0x30/0x80 [ 40.476448][ C0] ? clear_bhb_loop+0x30/0x80 [ 40.481108][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.486998][ C0] RIP: 0033:0x7faff559e019 [ 40.491401][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.511034][ C0] RSP: 002b:00007faff646a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.519440][ C0] RAX: ffffffffffffffda RBX: 00007faff5826090 RCX: 00007faff559e019 [ 40.527400][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 40.535357][ C0] RBP: 00007faff563500c R08: 0000000000000000 R09: 0000000000000000 [ 40.543317][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.551271][ C0] R13: 00007faff5826128 R14: 00007faff5826090 R15: 00007ffeef94b598 [ 40.559234][ C0] [ 40.562249][ C1] CPU: 1 PID: 478 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 40.562302][ C0] FAULT_INJECTION: forcing a failure. [ 40.562302][ C0] name failslab, interval 1, probability 100, space 0, times 4 [ 40.569697][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.592455][ C1] Workqueue: events_unbound toggle_allocation_gate [ 40.598954][ C1] Call Trace: [ 40.602222][ C1] [ 40.605054][ C1] __dump_stack+0x21/0x24 [ 40.609384][ C1] dump_stack_lvl+0x110/0x170 [ 40.614050][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.619067][ C1] ? hrtimer_active+0x1ea/0x200 [ 40.623912][ C1] dump_stack+0x15/0x24 [ 40.628058][ C1] should_fail_ex+0x3bf/0x510 [ 40.632724][ C1] __should_failslab+0xac/0xf0 [ 40.637486][ C1] should_failslab+0x9/0x20 [ 40.641975][ C1] kmem_cache_alloc_node+0x42/0x330 [ 40.647168][ C1] ? __alloc_skb+0xe8/0x4a0 [ 40.651661][ C1] __alloc_skb+0xe8/0x4a0 [ 40.655979][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 40.661429][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 40.668013][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 40.674425][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 40.681528][ C1] call_timer_fn+0x46/0x2a0 [ 40.686022][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 40.693124][ C1] __run_timers+0x646/0x9b0 [ 40.697623][ C1] ? calc_index+0x200/0x200 [ 40.702119][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 40.707313][ C1] run_timer_softirq+0x6a/0xf0 [ 40.712066][ C1] handle_softirqs+0x1d7/0x600 [ 40.716820][ C1] __irq_exit_rcu+0x52/0xf0 [ 40.721313][ C1] irq_exit_rcu+0x9/0x10 [ 40.725541][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 40.731171][ C1] [ 40.734087][ C1] [ 40.737002][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 40.742978][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 40.749566][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 40.769157][ C1] RSP: 0018:ffffc9000f197840 EFLAGS: 00000293 [ 40.775213][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: ffff8881194f5100 [ 40.783170][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 40.791125][ C1] RBP: ffffc9000f197978 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 40.799082][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 40.807037][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 40.814999][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 40.820285][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 40.826262][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 40.831277][ C1] ? smp_call_function_many+0x40/0x40 [ 40.836640][ C1] ? kmem_cache_alloc_bulk+0xf8/0x3c0 [ 40.842007][ C1] ? text_poke+0x30/0x30 [ 40.846241][ C1] ? text_poke_loc_init+0x105/0x560 [ 40.851429][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 40.856445][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 40.861548][ C1] text_poke_bp_batch+0x1cf/0x600 [ 40.866567][ C1] ? text_poke_loc_init+0x560/0x560 [ 40.871757][ C1] ? __kasan_check_write+0x14/0x20 [ 40.876855][ C1] ? mutex_lock+0x93/0x1b0 [ 40.881268][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 40.886118][ C1] ? text_poke_queue+0xde/0x1a0 [ 40.890962][ C1] text_poke_finish+0x1a/0x30 [ 40.895635][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 40.901610][ C1] __jump_label_update+0x38f/0x3b0 [ 40.906721][ C1] jump_label_update+0x39b/0x450 [ 40.911656][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 40.917543][ C1] static_key_enable+0x1a/0x30 [ 40.922298][ C1] toggle_allocation_gate+0xba/0x440 [ 40.927575][ C1] ? __cfi_toggle_allocation_gate+0x10/0x10 [ 40.933458][ C1] ? ttwu_do_wakeup+0x468/0x490 [ 40.938304][ C1] ? ttwu_do_activate+0x179/0x2a0 [ 40.943322][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 40.949125][ C1] ? try_to_wake_up+0x622/0x1250 [ 40.954058][ C1] process_one_work+0x717/0xc30 [ 40.958913][ C1] worker_thread+0xa4d/0x11d0 [ 40.963580][ C1] kthread+0x281/0x320 [ 40.967637][ C1] ? __cfi_worker_thread+0x10/0x10 [ 40.972733][ C1] ? __cfi_kthread+0x10/0x10 [ 40.977315][ C1] ret_from_fork+0x1f/0x30 [ 40.981732][ C1] [ 40.984737][ C0] CPU: 0 PID: 722 Comm: syz.4.126 Not tainted syzkaller #0 [ 40.984757][ C1] FAULT_INJECTION: forcing a failure. [ 40.984757][ C1] name failslab, interval 1, probability 100, space 0, times 3 [ 40.991926][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.991937][ C0] Call Trace: [ 40.991943][ C0] [ 40.991949][ C0] __dump_stack+0x21/0x24 [ 41.025091][ C0] dump_stack_lvl+0x110/0x170 [ 41.029759][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.034774][ C0] dump_stack+0x15/0x24 [ 41.038920][ C0] should_fail_ex+0x3bf/0x510 [ 41.043583][ C0] ? build_skb+0x2a/0x220 [ 41.047898][ C0] __should_failslab+0xac/0xf0 [ 41.052651][ C0] should_failslab+0x9/0x20 [ 41.057143][ C0] kmem_cache_alloc+0x3b/0x320 [ 41.061915][ C0] build_skb+0x2a/0x220 [ 41.066058][ C0] page_to_skb+0x12d/0xb50 [ 41.070472][ C0] receive_buf+0x469/0x4890 [ 41.074967][ C0] ? enqueue_task_fair+0x18d8/0x1d70 [ 41.080244][ C0] ? virtnet_poll_tx+0x550/0x550 [ 41.085176][ C0] ? __kasan_check_write+0x14/0x20 [ 41.090279][ C0] ? resched_curr+0x114/0x3a0 [ 41.094942][ C0] ? virtqueue_get_buf_ctx+0x47a/0xcf0 [ 41.100390][ C0] ? detach_buf_split+0x890/0xa90 [ 41.105416][ C0] ? virtqueue_get_buf+0x1f/0x30 [ 41.110362][ C0] ? virtqueue_get_buf_ctx+0x6bc/0xcf0 [ 41.115822][ C0] virtnet_poll+0x5c9/0x1150 [ 41.120417][ C0] ? __cfi_virtnet_poll+0x10/0x10 [ 41.125440][ C0] __napi_poll+0xcd/0x5d0 [ 41.129766][ C0] net_rx_action+0x4a3/0xa90 [ 41.134341][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 41.139439][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 41.144630][ C0] ? irqtime_account_irq+0x75/0x240 [ 41.149823][ C0] handle_softirqs+0x1d7/0x600 [ 41.154579][ C0] __irq_exit_rcu+0x52/0xf0 [ 41.159071][ C0] irq_exit_rcu+0x9/0x10 [ 41.163305][ C0] common_interrupt+0xbe/0xe0 [ 41.167978][ C0] [ 41.170893][ C0] [ 41.173812][ C0] asm_common_interrupt+0x27/0x40 [ 41.178830][ C0] RIP: 0010:preempt_schedule_irq+0xa5/0x120 [ 41.184718][ C0] Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 d1 fb 4c fc fb bf 01 00 00 00 46 e5 ff ff fa bf 01 00 00 00 e8 7b fd 4c fc 65 48 8b 1d c3 d4 [ 41.204319][ C0] RSP: 0018:ffffc90010d2f500 EFLAGS: 00000246 [ 41.210375][ C0] RAX: 1ffff110228af159 RBX: ffffc90010d2f5d8 RCX: ffffffff87b7b100 [ 41.218335][ C0] RDX: 1ffffffff0f6e600 RSI: 0000000000000000 RDI: 0000000000000001 [ 41.226291][ C0] RBP: ffffc90010d2f588 R08: ffffffff87b73008 R09: ffffffff87b73018 [ 41.234283][ C0] R10: ffffffff87b73003 R11: 1ffffffff0f6e600 R12: 0000000000000000 [ 41.242242][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920021a5ea0 [ 41.250205][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 41.255923][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 41.261289][ C0] raw_irqentry_exit_cond_resched+0x29/0x30 [ 41.267172][ C0] irqentry_exit+0x37/0x40 [ 41.271577][ C0] sysvec_apic_timer_interrupt+0x64/0xc0 [ 41.277208][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 41.283189][ C0] RIP: 0010:kasan_check_range+0x5f/0x2a0 [ 41.288822][ C0] Code: 02 00 00 49 bd 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 <49> c1 e9 03 4b 8d 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85 [ 41.308412][ C0] RSP: 0018:ffffc90010d2f688 EFLAGS: 00000a02 [ 41.314469][ C0] RAX: ffffffff8157d401 RBX: ffffffff860afda0 RCX: ffffffff8157d43c [ 41.322432][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 41.330391][ C0] RBP: ffffc90010d2f6b0 R08: ffffffff8711b9c3 R09: ffffffff8711b9c3 [ 41.338351][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 41.346312][ C0] R13: dffffc0000000001 R14: 1ffffffff0e23738 R15: 1ffff920021a5edc [ 41.354276][ C0] ? kmsg_dump_rewind+0xa1/0xb0 [ 41.359127][ C0] ? __printk_cpu_sync_wait+0x1c/0x40 [ 41.364493][ C0] __kasan_check_read+0x11/0x20 [ 41.369331][ C0] __printk_cpu_sync_wait+0x1c/0x40 [ 41.374523][ C0] dump_stack_lvl+0xce/0x170 [ 41.379104][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.384119][ C0] ? release_sock+0x169/0x1c0 [ 41.388786][ C0] dump_stack+0x15/0x24 [ 41.392932][ C0] should_fail_ex+0x3bf/0x510 [ 41.397601][ C0] __should_failslab+0xac/0xf0 [ 41.402359][ C0] should_failslab+0x9/0x20 [ 41.406849][ C0] kmem_cache_alloc_node+0x42/0x330 [ 41.412039][ C0] ? __alloc_skb+0xe8/0x4a0 [ 41.416530][ C0] __alloc_skb+0xe8/0x4a0 [ 41.420854][ C0] netlink_sendmsg+0x635/0xbd0 [ 41.425627][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 41.430914][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 41.436368][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 41.441639][ C0] ____sys_sendmsg+0x5fb/0x9c0 [ 41.446402][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 41.451416][ C0] ? import_iovec+0x7c/0xb0 [ 41.455907][ C0] ___sys_sendmsg+0x2a2/0x360 [ 41.460575][ C0] ? __sys_sendmsg+0x290/0x290 [ 41.465332][ C0] ? vfs_write+0xa51/0xd00 [ 41.469738][ C0] ? __fdget+0x19c/0x220 [ 41.473978][ C0] __x64_sys_sendmsg+0x20d/0x2e0 [ 41.478928][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 41.484398][ C0] ? __kasan_check_write+0x14/0x20 [ 41.489505][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 41.495128][ C0] ? switch_fpu_return+0xe/0x10 [ 41.499970][ C0] x64_sys_call+0x171/0x9a0 [ 41.504467][ C0] do_syscall_64+0x4c/0xa0 [ 41.508879][ C0] ? clear_bhb_loop+0x30/0x80 [ 41.513542][ C0] ? clear_bhb_loop+0x30/0x80 [ 41.518207][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.524095][ C0] RIP: 0033:0x7faff559e019 [ 41.528502][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.548126][ C0] RSP: 002b:00007faff646a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.556542][ C0] RAX: ffffffffffffffda RBX: 00007faff5826090 RCX: 00007faff559e019 [ 41.564520][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 41.572492][ C0] RBP: 00007faff563500c R08: 0000000000000000 R09: 0000000000000000 [ 41.580465][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.588434][ C0] R13: 00007faff5826128 R14: 00007faff5826090 R15: 00007ffeef94b598 [ 41.596414][ C0] [ 41.599433][ C1] CPU: 1 PID: 478 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 41.599474][ C0] FAULT_INJECTION: forcing a failure. [ 41.599474][ C0] name failslab, interval 1, probability 100, space 0, times 2 [ 41.606888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.606899][ C1] Workqueue: events_unbound toggle_allocation_gate [ 41.636148][ C1] Call Trace: [ 41.639413][ C1] [ 41.642243][ C1] __dump_stack+0x21/0x24 [ 41.646567][ C1] dump_stack_lvl+0x110/0x170 [ 41.651240][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.656258][ C1] ? hrtimer_active+0x1ea/0x200 [ 41.661104][ C1] dump_stack+0x15/0x24 [ 41.665253][ C1] should_fail_ex+0x3bf/0x510 [ 41.669917][ C1] __should_failslab+0xac/0xf0 [ 41.674673][ C1] should_failslab+0x9/0x20 [ 41.679169][ C1] kmem_cache_alloc_node+0x42/0x330 [ 41.684362][ C1] ? __alloc_skb+0xe8/0x4a0 [ 41.688855][ C1] __alloc_skb+0xe8/0x4a0 [ 41.693174][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 41.698629][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 41.705211][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 41.711622][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 41.718730][ C1] call_timer_fn+0x46/0x2a0 [ 41.723227][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 41.730330][ C1] __run_timers+0x646/0x9b0 [ 41.734832][ C1] ? calc_index+0x200/0x200 [ 41.739329][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 41.744524][ C1] run_timer_softirq+0x6a/0xf0 [ 41.749281][ C1] handle_softirqs+0x1d7/0x600 [ 41.754036][ C1] __irq_exit_rcu+0x52/0xf0 [ 41.758526][ C1] irq_exit_rcu+0x9/0x10 [ 41.762758][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 41.768390][ C1] [ 41.771306][ C1] [ 41.774228][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 41.780207][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 41.786791][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 41.806389][ C1] RSP: 0018:ffffc9000f197840 EFLAGS: 00000293 [ 41.812448][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: ffff8881194f5100 [ 41.820422][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 41.828388][ C1] RBP: ffffc9000f197978 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 41.836351][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 41.844312][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 41.852274][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 41.857558][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 41.863536][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 41.868553][ C1] ? smp_call_function_many+0x40/0x40 [ 41.873913][ C1] ? kmem_cache_alloc_bulk+0xf8/0x3c0 [ 41.879280][ C1] ? text_poke+0x30/0x30 [ 41.883515][ C1] ? text_poke_loc_init+0x105/0x560 [ 41.888710][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 41.893724][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 41.898827][ C1] text_poke_bp_batch+0x1cf/0x600 [ 41.903842][ C1] ? text_poke_loc_init+0x560/0x560 [ 41.909032][ C1] ? __kasan_check_write+0x14/0x20 [ 41.914131][ C1] ? mutex_lock+0x93/0x1b0 [ 41.918545][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 41.923388][ C1] ? text_poke_queue+0xde/0x1a0 [ 41.928227][ C1] text_poke_finish+0x1a/0x30 [ 41.932894][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 41.938870][ C1] __jump_label_update+0x38f/0x3b0 [ 41.944004][ C1] jump_label_update+0x39b/0x450 [ 41.948930][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 41.954812][ C1] static_key_enable+0x1a/0x30 [ 41.959566][ C1] toggle_allocation_gate+0xba/0x440 [ 41.964839][ C1] ? __cfi_toggle_allocation_gate+0x10/0x10 [ 41.970723][ C1] ? ttwu_do_wakeup+0x468/0x490 [ 41.975569][ C1] ? ttwu_do_activate+0x179/0x2a0 [ 41.980585][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 41.986385][ C1] ? try_to_wake_up+0x622/0x1250 [ 41.991313][ C1] process_one_work+0x717/0xc30 [ 41.996155][ C1] worker_thread+0xa4d/0x11d0 [ 42.000824][ C1] kthread+0x281/0x320 [ 42.004883][ C1] ? __cfi_worker_thread+0x10/0x10 [ 42.009986][ C1] ? __cfi_kthread+0x10/0x10 [ 42.014565][ C1] ret_from_fork+0x1f/0x30 [ 42.018975][ C1] [ 42.021982][ C0] CPU: 0 PID: 722 Comm: syz.4.126 Not tainted syzkaller #0 [ 42.022003][ C1] FAULT_INJECTION: forcing a failure. [ 42.022003][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 42.029175][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.051926][ C0] Call Trace: [ 42.055210][ C0] [ 42.058043][ C0] __dump_stack+0x21/0x24 [ 42.062364][ C0] dump_stack_lvl+0x110/0x170 [ 42.067032][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.072048][ C0] dump_stack+0x15/0x24 [ 42.076195][ C0] should_fail_ex+0x3bf/0x510 [ 42.080860][ C0] ? build_skb+0x2a/0x220 [ 42.085179][ C0] __should_failslab+0xac/0xf0 [ 42.089940][ C0] should_failslab+0x9/0x20 [ 42.094432][ C0] kmem_cache_alloc+0x3b/0x320 [ 42.099195][ C0] build_skb+0x2a/0x220 [ 42.103338][ C0] page_to_skb+0x12d/0xb50 [ 42.107745][ C0] receive_buf+0x469/0x4890 [ 42.112240][ C0] ? enqueue_task_fair+0x18d8/0x1d70 [ 42.117516][ C0] ? virtnet_poll_tx+0x550/0x550 [ 42.122446][ C0] ? __kasan_check_write+0x14/0x20 [ 42.127546][ C0] ? resched_curr+0x114/0x3a0 [ 42.132211][ C0] ? virtqueue_get_buf_ctx+0x47a/0xcf0 [ 42.137660][ C0] ? detach_buf_split+0x890/0xa90 [ 42.142677][ C0] ? virtqueue_get_buf+0x1f/0x30 [ 42.147604][ C0] ? virtqueue_get_buf_ctx+0x6bc/0xcf0 [ 42.153052][ C0] virtnet_poll+0x5c9/0x1150 [ 42.157638][ C0] ? __cfi_virtnet_poll+0x10/0x10 [ 42.162660][ C0] __napi_poll+0xcd/0x5d0 [ 42.166987][ C0] net_rx_action+0x4a3/0xa90 [ 42.171565][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 42.176667][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 42.181862][ C0] ? irqtime_account_irq+0x75/0x240 [ 42.187057][ C0] handle_softirqs+0x1d7/0x600 [ 42.191811][ C0] __irq_exit_rcu+0x52/0xf0 [ 42.196306][ C0] irq_exit_rcu+0x9/0x10 [ 42.200539][ C0] common_interrupt+0xbe/0xe0 [ 42.205211][ C0] [ 42.208129][ C0] [ 42.211044][ C0] asm_common_interrupt+0x27/0x40 [ 42.216063][ C0] RIP: 0010:preempt_schedule_irq+0xa5/0x120 [ 42.221951][ C0] Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 d1 fb 4c fc fb bf 01 00 00 00 46 e5 ff ff fa bf 01 00 00 00 e8 7b fd 4c fc 65 48 8b 1d c3 d4 [ 42.241546][ C0] RSP: 0018:ffffc90010d2f500 EFLAGS: 00000246 [ 42.247605][ C0] RAX: 1ffff110228af159 RBX: ffffc90010d2f5d8 RCX: ffffffff87b7b100 [ 42.255579][ C0] RDX: 1ffffffff0f6e600 RSI: 0000000000000000 RDI: 0000000000000001 [ 42.263542][ C0] RBP: ffffc90010d2f588 R08: ffffffff87b73008 R09: ffffffff87b73018 [ 42.271512][ C0] R10: ffffffff87b73003 R11: 1ffffffff0f6e600 R12: 0000000000000000 [ 42.279489][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920021a5ea0 [ 42.287467][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 42.293186][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 42.298553][ C0] raw_irqentry_exit_cond_resched+0x29/0x30 [ 42.304440][ C0] irqentry_exit+0x37/0x40 [ 42.308844][ C0] sysvec_apic_timer_interrupt+0x64/0xc0 [ 42.314472][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 42.320451][ C0] RIP: 0010:kasan_check_range+0x5f/0x2a0 [ 42.326081][ C0] Code: 02 00 00 49 bd 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 <49> c1 e9 03 4b 8d 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85 [ 42.345672][ C0] RSP: 0018:ffffc90010d2f688 EFLAGS: 00000a02 [ 42.351727][ C0] RAX: ffffffff8157d401 RBX: ffffffff860afda0 RCX: ffffffff8157d43c [ 42.359783][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 42.367753][ C0] RBP: ffffc90010d2f6b0 R08: ffffffff8711b9c3 R09: ffffffff8711b9c3 [ 42.375718][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 42.383686][ C0] R13: dffffc0000000001 R14: 1ffffffff0e23738 R15: 1ffff920021a5edc [ 42.391659][ C0] ? kmsg_dump_rewind+0xa1/0xb0 [ 42.396520][ C0] ? __printk_cpu_sync_wait+0x1c/0x40 [ 42.401886][ C0] __kasan_check_read+0x11/0x20 [ 42.406721][ C0] __printk_cpu_sync_wait+0x1c/0x40 [ 42.411912][ C0] dump_stack_lvl+0xce/0x170 [ 42.416494][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.421507][ C0] ? release_sock+0x169/0x1c0 [ 42.426172][ C0] dump_stack+0x15/0x24 [ 42.430313][ C0] should_fail_ex+0x3bf/0x510 [ 42.434975][ C0] __should_failslab+0xac/0xf0 [ 42.439734][ C0] should_failslab+0x9/0x20 [ 42.444224][ C0] kmem_cache_alloc_node+0x42/0x330 [ 42.449413][ C0] ? __alloc_skb+0xe8/0x4a0 [ 42.453898][ C0] __alloc_skb+0xe8/0x4a0 [ 42.458211][ C0] netlink_sendmsg+0x635/0xbd0 [ 42.462965][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 42.468238][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 42.473686][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 42.478962][ C0] ____sys_sendmsg+0x5fb/0x9c0 [ 42.483716][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 42.488732][ C0] ? import_iovec+0x7c/0xb0 [ 42.493222][ C0] ___sys_sendmsg+0x2a2/0x360 [ 42.497891][ C0] ? __sys_sendmsg+0x290/0x290 [ 42.502646][ C0] ? vfs_write+0xa51/0xd00 [ 42.507053][ C0] ? __fdget+0x19c/0x220 [ 42.511281][ C0] __x64_sys_sendmsg+0x20d/0x2e0 [ 42.516211][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 42.521661][ C0] ? __kasan_check_write+0x14/0x20 [ 42.526760][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 42.532381][ C0] ? switch_fpu_return+0xe/0x10 [ 42.537243][ C0] x64_sys_call+0x171/0x9a0 [ 42.541736][ C0] do_syscall_64+0x4c/0xa0 [ 42.546140][ C0] ? clear_bhb_loop+0x30/0x80 [ 42.550803][ C0] ? clear_bhb_loop+0x30/0x80 [ 42.555465][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.561354][ C0] RIP: 0033:0x7faff559e019 [ 42.565753][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.585350][ C0] RSP: 002b:00007faff646a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.593762][ C0] RAX: ffffffffffffffda RBX: 00007faff5826090 RCX: 00007faff559e019 [ 42.601804][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 42.609757][ C0] RBP: 00007faff563500c R08: 0000000000000000 R09: 0000000000000000 [ 42.617711][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.625665][ C0] R13: 00007faff5826128 R14: 00007faff5826090 R15: 00007ffeef94b598 [ 42.633628][ C0] [ 42.636633][ C1] CPU: 1 PID: 478 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 42.642437][ T19] snd-usb-audio: probe of 4-1:1.0 failed with error -32 [ 42.644087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.661045][ C1] Workqueue: events_unbound toggle_allocation_gate [ 42.667559][ C1] Call Trace: [ 42.670823][ C1] [ 42.673654][ C1] __dump_stack+0x21/0x24 [ 42.677979][ C1] dump_stack_lvl+0x110/0x170 [ 42.682643][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.687661][ C1] ? hrtimer_active+0x1ea/0x200 [ 42.692514][ C1] dump_stack+0x15/0x24 [ 42.696666][ C1] should_fail_ex+0x3bf/0x510 [ 42.699628][ T28] audit: type=1400 audit(1785781015.001:224): avc: denied { write } for pid=720 comm="syz.2.128" name="dev" dev="proc" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.701351][ C1] __should_failslab+0xac/0xf0 [ 42.701378][ C1] should_failslab+0x9/0x20 [ 42.732807][ C1] kmem_cache_alloc_node+0x42/0x330 [ 42.738012][ C1] ? __alloc_skb+0xe8/0x4a0 [ 42.742509][ C1] __alloc_skb+0xe8/0x4a0 [ 42.746828][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 42.752278][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 42.758858][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 42.765262][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 42.772366][ C1] call_timer_fn+0x46/0x2a0 [ 42.776864][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 42.783973][ C1] __run_timers+0x646/0x9b0 [ 42.788475][ C1] ? calc_index+0x200/0x200 [ 42.792967][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 42.798162][ C1] run_timer_softirq+0x6a/0xf0 [ 42.802916][ C1] handle_softirqs+0x1d7/0x600 [ 42.807670][ C1] __irq_exit_rcu+0x52/0xf0 [ 42.812165][ C1] irq_exit_rcu+0x9/0x10 [ 42.816399][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 42.822029][ C1] [ 42.824943][ C1] [ 42.827858][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 42.833843][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 42.840426][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 42.860021][ C1] RSP: 0018:ffffc9000f197840 EFLAGS: 00000293 [ 42.866082][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: ffff8881194f5100 [ 42.874043][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 42.882000][ C1] RBP: ffffc9000f197978 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 42.889962][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 42.897946][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 42.905907][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 42.911188][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 42.917165][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 42.922185][ C1] ? smp_call_function_many+0x40/0x40 [ 42.927544][ C1] ? kmem_cache_alloc_bulk+0xf8/0x3c0 [ 42.932908][ C1] ? text_poke+0x30/0x30 [ 42.937141][ C1] ? text_poke_loc_init+0x105/0x560 [ 42.942329][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 42.947344][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 42.952442][ C1] text_poke_bp_batch+0x1cf/0x600 [ 42.957458][ C1] ? text_poke_loc_init+0x560/0x560 [ 42.962643][ C1] ? __kasan_check_write+0x14/0x20 [ 42.967750][ C1] ? mutex_lock+0x93/0x1b0 [ 42.972158][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 42.977002][ C1] ? text_poke_queue+0xde/0x1a0 [ 42.981860][ C1] text_poke_finish+0x1a/0x30 [ 42.986525][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 42.992499][ C1] __jump_label_update+0x38f/0x3b0 [ 42.997604][ C1] jump_label_update+0x39b/0x450 [ 43.002531][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 43.008415][ C1] static_key_enable+0x1a/0x30 [ 43.013171][ C1] toggle_allocation_gate+0xba/0x440 [ 43.018450][ C1] ? __cfi_toggle_allocation_gate+0x10/0x10 [ 43.024332][ C1] ? ttwu_do_wakeup+0x468/0x490 [ 43.029179][ C1] ? ttwu_do_activate+0x179/0x2a0 [ 43.034198][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 43.039998][ C1] ? try_to_wake_up+0x622/0x1250 [ 43.044930][ C1] process_one_work+0x717/0xc30 [ 43.049769][ C1] worker_thread+0xa4d/0x11d0 [ 43.054437][ C1] kthread+0x281/0x320 [ 43.058496][ C1] ? __cfi_worker_thread+0x10/0x10 [ 43.063594][ C1] ? __cfi_kthread+0x10/0x10 [ 43.068181][ C1] ret_from_fork+0x1f/0x30 [ 43.072592][ C1] [ 43.075599][ T698] CPU: 0 PID: 698 Comm: syz.3.120 Not tainted syzkaller #0 [ 43.082800][ T698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.092845][ T698] Call Trace: [ 43.096107][ T698] [ 43.099023][ T698] __dump_stack+0x21/0x24 [ 43.103344][ T698] dump_stack_lvl+0x110/0x170 [ 43.108009][ T698] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.113021][ T698] dump_stack+0x15/0x24 [ 43.117167][ T698] should_fail_ex+0x3bf/0x510 [ 43.121831][ T698] ? jbd2__journal_start+0x13d/0x6e0 [ 43.127105][ T698] __should_failslab+0xac/0xf0 [ 43.131855][ T698] should_failslab+0x9/0x20 [ 43.136340][ T698] kmem_cache_alloc+0x3b/0x320 [ 43.141090][ T698] jbd2__journal_start+0x13d/0x6e0 [ 43.146197][ T698] __ext4_journal_start_sb+0x242/0x4a0 [ 43.151647][ T698] ext4_dirty_inode+0x8f/0x100 [ 43.156401][ T698] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 43.161764][ T698] __mark_inode_dirty+0x1fd/0x9c0 [ 43.166811][ T698] ? memcpy+0x56/0x70 [ 43.170781][ T698] __file_update_time+0x245/0x270 [ 43.175799][ T698] file_update_time+0x2f3/0x370 [ 43.180640][ T698] ? __cfi_file_update_time+0x10/0x10 [ 43.186005][ T698] ? __kasan_check_read+0x11/0x20 [ 43.191013][ T698] ? filemap_fault+0xf87/0x1370 [ 43.195852][ T698] ext4_page_mkwrite+0x2cf/0x1340 [ 43.200864][ T698] ? __cfi_filemap_fault+0x10/0x10 [ 43.205964][ T698] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 43.211414][ T698] ? __kasan_check_write+0x14/0x20 [ 43.216510][ T698] ? folio_unlock+0x4f/0x60 [ 43.220999][ T698] do_fault+0xd5b/0x1e30 [ 43.225227][ T698] ? pte_marker_clear+0x220/0x220 [ 43.230237][ T698] ? __kasan_check_read+0x11/0x20 [ 43.235250][ T698] handle_mm_fault+0x1363/0x26b0 [ 43.240179][ T698] ? __cfi_handle_mm_fault+0x10/0x10 [ 43.245466][ T698] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 43.250653][ T698] ? debug_smp_processor_id+0x17/0x20 [ 43.256012][ T698] ? irqtime_account_irq+0x17c/0x240 [ 43.261287][ T698] do_user_addr_fault+0x900/0x1030 [ 43.266386][ T698] ? handle_softirqs+0x543/0x600 [ 43.271315][ T698] exc_page_fault+0x51/0xb0 [ 43.275821][ T698] asm_exc_page_fault+0x27/0x30 [ 43.280683][ T698] RIP: 0033:0x7fdcc2e72740 [ 43.285090][ T698] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 e1 92 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 43.304681][ T698] RSP: 002b:00007ffd14c23c80 EFLAGS: 00010202 [ 43.310734][ T698] RAX: 0000001b2ed24000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 43.318689][ T698] RDX: 0000001b2ed23ffc RSI: 00000000003ffde8 RDI: 00007fdcc3d55700 [ 43.326644][ T698] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fdcc3212000 [ 43.334601][ T698] R10: 00007fdcc3d55700 R11: 0000000000000000 R12: 0000000000000000 [ 43.342565][ T698] R13: 0000000000001e87 R14: ffffffff812f1638 R15: 00007fdcc3d55720 [ 43.350537][ T698] ? fpregs_restore_userregs+0x108/0x260 [ 43.356169][ T698] [ 43.359175][ T92] CPU: 1 PID: 92 Comm: klogd Not tainted syzkaller #0 [ 43.365939][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.375984][ T92] Call Trace: [ 43.379252][ T92] [ 43.382167][ T92] __dump_stack+0x21/0x24 [ 43.386488][ T92] dump_stack_lvl+0x110/0x170 [ 43.391155][ T92] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.396169][ T92] dump_stack+0x15/0x24 [ 43.400316][ T92] should_fail_ex+0x3bf/0x510 [ 43.404981][ T92] __should_failslab+0xac/0xf0 [ 43.409734][ T92] should_failslab+0x9/0x20 [ 43.414244][ T92] kmem_cache_alloc_node+0x42/0x330 [ 43.419440][ T92] ? __alloc_skb+0xe8/0x4a0 [ 43.423930][ T92] ? kasan_set_track+0x60/0x70 [ 43.428686][ T92] __alloc_skb+0xe8/0x4a0 [ 43.433001][ T92] ? do_syscall_64+0x4c/0xa0 [ 43.437583][ T92] alloc_skb_with_frags+0xa8/0x620 [ 43.442679][ T92] ? memcpy+0x56/0x70 [ 43.446653][ T92] sock_alloc_send_pskb+0x87f/0x9a0 [ 43.451842][ T92] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 43.457553][ T92] ? __kasan_check_write+0x14/0x20 [ 43.462659][ T92] ? _raw_spin_lock+0x94/0xf0 [ 43.467331][ T92] ? __cfi__raw_spin_lock+0x10/0x10 [ 43.472518][ T92] unix_dgram_sendmsg+0x5c1/0x1710 [ 43.477624][ T92] ? selinux_socket_sendmsg+0x22f/0x340 [ 43.483158][ T92] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 43.489040][ T92] ? kfree+0x6f/0xf0 [ 43.492921][ T92] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 43.498461][ T92] ? security_socket_sendmsg+0x93/0xb0 [ 43.503924][ T92] __sys_sendto+0x4ac/0x660 [ 43.508437][ T92] ? __cfi___sys_sendto+0x10/0x10 [ 43.513461][ T92] ? __cfi_do_syslog+0x10/0x10 [ 43.518215][ T92] ? tick_program_event+0xa3/0x120 [ 43.523318][ T92] ? __this_cpu_preempt_check+0x13/0x20 [ 43.528875][ T92] ? xfd_validate_state+0x70/0x150 [ 43.533991][ T92] ? __kasan_check_write+0x14/0x20 [ 43.539112][ T92] __x64_sys_sendto+0xe5/0x100 [ 43.543878][ T92] x64_sys_call+0x83/0x9a0 [ 43.548288][ T92] do_syscall_64+0x4c/0xa0 [ 43.552692][ T92] ? clear_bhb_loop+0x30/0x80 [ 43.557355][ T92] ? clear_bhb_loop+0x30/0x80 [ 43.562019][ T92] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.567902][ T92] RIP: 0033:0x7fbd9bbc0407 [ 43.572303][ T92] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 43.591897][ T92] RSP: 002b:00007fff99490b00 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 43.600307][ T92] RAX: ffffffffffffffda RBX: 00007fbd9ba70c80 RCX: 00007fbd9bbc0407 [ 43.608267][ T92] RDX: 0000000000000055 RSI: 00007fff99490c40 RDI: 0000000000000003 [ 43.616223][ T92] RBP: 00007fff99491070 R08: 0000000000000000 R09: 0000000000000000 [ 43.624189][ T92] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff99491088 [ 43.632152][ T92] R13: 00007fff99490c40 R14: 000000000000003a R15: 00007fff99490c40 [ 43.640129][ T92] [ 43.643137][ T721] CPU: 0 PID: 721 Comm: syz.2.128 Not tainted syzkaller #0 [ 43.650338][ T721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.660388][ T721] Call Trace: [ 43.663677][ T721] [ 43.666596][ T721] __dump_stack+0x21/0x24 [ 43.670917][ T721] dump_stack_lvl+0x110/0x170 [ 43.675583][ T721] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.680601][ T721] ? __cfi_futex_wake+0x10/0x10 [ 43.685437][ T721] dump_stack+0x15/0x24 [ 43.689580][ T721] should_fail_ex+0x3bf/0x510 [ 43.694246][ T721] ? getname_flags+0xba/0x510 [ 43.698906][ T721] __should_failslab+0xac/0xf0 [ 43.703657][ T721] should_failslab+0x9/0x20 [ 43.708142][ T721] kmem_cache_alloc+0x3b/0x320 [ 43.712925][ T721] getname_flags+0xba/0x510 [ 43.717409][ T721] getname+0x19/0x20 [ 43.721285][ T721] do_sys_openat2+0xeb/0x820 [ 43.725862][ T721] ? __se_sys_futex+0x136/0x310 [ 43.730698][ T721] ? do_sys_open+0xe0/0xe0 [ 43.735102][ T721] ? __this_cpu_preempt_check+0x13/0x20 [ 43.740633][ T721] ? xfd_validate_state+0x70/0x150 [ 43.745731][ T721] __x64_sys_openat+0x136/0x160 [ 43.750594][ T721] x64_sys_call+0x783/0x9a0 [ 43.755082][ T721] do_syscall_64+0x4c/0xa0 [ 43.759483][ T721] ? clear_bhb_loop+0x30/0x80 [ 43.764142][ T721] ? clear_bhb_loop+0x30/0x80 [ 43.768803][ T721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.774684][ T721] RIP: 0033:0x7f0a26f9e019 [ 43.779082][ T721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.798758][ T721] RSP: 002b:00007f0a27f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.807155][ T721] RAX: ffffffffffffffda RBX: 00007f0a27225fa0 RCX: 00007f0a26f9e019 [ 43.815109][ T721] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 43.823062][ T721] RBP: 00007f0a2703500c R08: 0000000000000000 R09: 0000000000000000 [ 43.831018][ T721] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 43.838973][ T721] R13: 00007f0a27226038 R14: 00007f0a27225fa0 R15: 00007ffe969c2f68 [ 43.846932][ T721] [ 43.850715][ T725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 43.851448][ T717] CPU: 0 PID: 717 Comm: syz.1.127 Not tainted syzkaller #0 [ 43.866773][ T717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.876825][ T717] Call Trace: [ 43.880097][ T717] [ 43.883022][ T717] __dump_stack+0x21/0x24 [ 43.887355][ T717] dump_stack_lvl+0x110/0x170 [ 43.892032][ T717] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.897063][ T717] dump_stack+0x15/0x24 [ 43.901223][ T717] should_fail_ex+0x3bf/0x510 [ 43.905898][ T717] ? mas_alloc_nodes+0x2d8/0x850 [ 43.910831][ T717] __should_failslab+0xac/0xf0 [ 43.915596][ T717] should_failslab+0x9/0x20 [ 43.920091][ T717] kmem_cache_alloc+0x3b/0x320 [ 43.924840][ T717] mas_alloc_nodes+0x2d8/0x850 [ 43.929587][ T717] mas_preallocate+0xe3d/0x1430 [ 43.934419][ T717] ? __cfi_mas_preallocate+0x10/0x10 [ 43.939688][ T717] ? rwsem_write_trylock+0x136/0x300 [ 43.944964][ T717] vma_expand+0x437/0xad0 [ 43.949281][ T717] mmap_region+0xf04/0x2130 [ 43.953769][ T717] ? should_fail+0xb/0x10 [ 43.958094][ T717] ? __cfi_mmap_region+0x10/0x10 [ 43.963020][ T717] ? cap_mmap_addr+0x165/0x2e0 [ 43.967764][ T717] ? futex_wake+0x5b7/0x8e0 [ 43.972252][ T717] ? get_unmapped_area+0x30c/0x370 [ 43.977355][ T717] do_mmap+0x858/0xdd0 [ 43.981412][ T717] ? __cfi_do_mmap+0x10/0x10 [ 43.985983][ T717] ? do_futex+0x2bf/0x430 [ 43.990292][ T717] ? _copy_from_user+0x8f/0xc0 [ 43.995041][ T717] vm_mmap_pgoff+0x206/0x3f0 [ 43.999615][ T717] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 44.004733][ T717] ? __x64_sys_futex+0x100/0x100 [ 44.009654][ T717] ? xfd_validate_state+0x70/0x150 [ 44.014752][ T717] ksys_mmap_pgoff+0xf6/0x1d0 [ 44.019417][ T717] __x64_sys_mmap+0xfa/0x110 [ 44.023990][ T717] x64_sys_call+0x8fd/0x9a0 [ 44.028476][ T717] do_syscall_64+0x4c/0xa0 [ 44.032875][ T717] ? clear_bhb_loop+0x30/0x80 [ 44.037535][ T717] ? clear_bhb_loop+0x30/0x80 [ 44.042198][ T717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.048076][ T717] RIP: 0033:0x7fcd9ff9dd82 [ 44.052470][ T717] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 44.072057][ T717] RSP: 002b:00007ffe5b169448 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 44.080455][ T717] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd9ff9dd82 [ 44.088412][ T717] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 44.096365][ T717] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 44.104353][ T717] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe5b1695b0 [ 44.112308][ T717] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 44.120267][ T717] [ 44.123449][ T715] syz.4.126: vmalloc error: size 4, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 44.126174][ T722] CPU: 1 PID: 722 Comm: syz.4.126 Not tainted syzkaller #0 [ 44.144025][ T295] usb 4-1: USB disconnect, device number 4 [ 44.146135][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.161960][ T722] Call Trace: [ 44.165235][ T722] [ 44.168153][ T722] __dump_stack+0x21/0x24 [ 44.172479][ T722] dump_stack_lvl+0x110/0x170 [ 44.177144][ T722] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.182158][ T722] ? release_sock+0x169/0x1c0 [ 44.186824][ T722] dump_stack+0x15/0x24 [ 44.190968][ T722] should_fail_ex+0x3bf/0x510 [ 44.195630][ T722] __should_failslab+0xac/0xf0 [ 44.200385][ T722] should_failslab+0x9/0x20 [ 44.204876][ T722] kmem_cache_alloc_node+0x42/0x330 [ 44.210079][ T722] ? __alloc_skb+0xe8/0x4a0 [ 44.214579][ T722] __alloc_skb+0xe8/0x4a0 [ 44.218925][ T722] netlink_sendmsg+0x635/0xbd0 [ 44.223699][ T722] ? __cfi_netlink_sendmsg+0x10/0x10 [ 44.228982][ T722] ? security_socket_sendmsg+0x93/0xb0 [ 44.234434][ T722] ? __cfi_netlink_sendmsg+0x10/0x10 [ 44.239708][ T722] ____sys_sendmsg+0x5fb/0x9c0 [ 44.244463][ T722] ? __sys_sendmsg_sock+0x40/0x40 [ 44.249477][ T722] ? import_iovec+0x7c/0xb0 [ 44.253970][ T722] ___sys_sendmsg+0x2a2/0x360 [ 44.258637][ T722] ? __sys_sendmsg+0x290/0x290 [ 44.263392][ T722] ? vfs_write+0xa51/0xd00 [ 44.267799][ T722] ? __fdget+0x19c/0x220 [ 44.272027][ T722] __x64_sys_sendmsg+0x20d/0x2e0 [ 44.276960][ T722] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 44.282411][ T722] ? __kasan_check_write+0x14/0x20 [ 44.285882][ T717] ------------[ cut here ]------------ [ 44.287505][ T722] ? fpregs_restore_userregs+0x128/0x260 [ 44.292973][ T717] kernel BUG at mm/mmap.c:2854! [ 44.298547][ T722] ? switch_fpu_return+0xe/0x10 [ 44.298569][ T722] x64_sys_call+0x171/0x9a0 [ 44.312687][ T722] do_syscall_64+0x4c/0xa0 [ 44.317102][ T722] ? clear_bhb_loop+0x30/0x80 [ 44.321771][ T722] ? clear_bhb_loop+0x30/0x80 [ 44.323557][ T717] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 44.326436][ T722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.332484][ T717] CPU: 0 PID: 717 Comm: syz.1.127 Not tainted syzkaller #0 [ 44.338346][ T722] RIP: 0033:0x7faff559e019 [ 44.345509][ T717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.349898][ T722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.359928][ T717] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 44.379508][ T722] RSP: 002b:00007faff646a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.384858][ T717] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 44.384875][ T717] RSP: 0018:ffffc90010747a40 EFLAGS: 00010293 [ 44.393334][ T722] RAX: ffffffffffffffda RBX: 00007faff5826090 RCX: 00007faff559e019 [ 44.412913][ T717] [ 44.412919][ T717] RAX: ffffffff81adab58 RBX: 00007fcda0e5a000 RCX: ffff88810ff51440 [ 44.418972][ T722] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 44.426919][ T717] RDX: 0000000000000000 RSI: 00007fcda0e59fff RDI: 00007fcda0e5a000 [ 44.429221][ T722] RBP: 00007faff563500c R08: 0000000000000000 R09: 0000000000000000 [ 44.437163][ T717] RBP: ffffc90010747c30 R08: ffff88810ff51440 R09: 0000000000000003 [ 44.445109][ T722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.453056][ T717] R10: 0000000000000003 R11: 0000000000000000 R12: 00007fcda0e59fff [ 44.461000][ T722] R13: 00007faff5826128 R14: 00007faff5826090 R15: 00007ffeef94b598 [ 44.468948][ T717] R13: 00007fcda0e5a000 R14: dffffc0000000000 R15: 00007fcda0e39000 [ 44.476910][ T722] [ 44.484856][ T717] FS: 0000555585a73500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 44.493253][ T727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=727 comm=syz.0.129 [ 44.500754][ T717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.500773][ T717] CR2: 00007ffd14c24030 CR3: 000000010e80e000 CR4: 00000000003526b0 [ 44.500787][ T717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.500794][ T717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.500803][ T717] Call Trace: [ 44.500808][ T717] [ 44.500814][ T717] ? should_fail+0xb/0x10 [ 44.500836][ T717] ? __cfi_mmap_region+0x10/0x10 [ 44.500857][ T717] ? cap_mmap_addr+0x165/0x2e0 [ 44.575739][ T717] ? futex_wake+0x5b7/0x8e0 [ 44.580243][ T717] ? get_unmapped_area+0x30c/0x370 [ 44.585354][ T717] do_mmap+0x858/0xdd0 [ 44.589417][ T717] ? __cfi_do_mmap+0x10/0x10 [ 44.593992][ T717] ? do_futex+0x2bf/0x430 [ 44.598305][ T717] ? _copy_from_user+0x8f/0xc0 [ 44.603057][ T717] vm_mmap_pgoff+0x206/0x3f0 [ 44.607629][ T717] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 44.612718][ T717] ? __x64_sys_futex+0x100/0x100 [ 44.617634][ T717] ? xfd_validate_state+0x70/0x150 [ 44.622731][ T717] ksys_mmap_pgoff+0xf6/0x1d0 [ 44.627393][ T717] __x64_sys_mmap+0xfa/0x110 [ 44.631963][ T717] x64_sys_call+0x8fd/0x9a0 [ 44.636448][ T717] do_syscall_64+0x4c/0xa0 [ 44.640848][ T717] ? clear_bhb_loop+0x30/0x80 [ 44.645502][ T717] ? clear_bhb_loop+0x30/0x80 [ 44.650160][ T717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.656037][ T717] RIP: 0033:0x7fcd9ff9dd82 [ 44.660441][ T717] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 44.680043][ T717] RSP: 002b:00007ffe5b169448 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 44.688448][ T717] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd9ff9dd82 [ 44.696410][ T717] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 44.704359][ T717] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 44.712311][ T717] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe5b1695b0 [ 44.720261][ T717] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 44.728217][ T717] [ 44.731215][ T717] Modules linked in: [ 44.738415][ T720] CPU: 1 PID: 720 Comm: syz.2.128 Tainted: G D syzkaller #0 [ 44.747125][ T720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.757182][ T720] Call Trace: [ 44.760467][ T720] [ 44.763393][ T720] __dump_stack+0x21/0x24 [ 44.767722][ T720] dump_stack_lvl+0x110/0x170 [ 44.772390][ T720] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.777406][ T720] dump_stack+0x15/0x24 [ 44.781558][ T720] should_fail_ex+0x3bf/0x510 [ 44.786220][ T720] ? mas_alloc_nodes+0x2d8/0x850 [ 44.791147][ T720] __should_failslab+0xac/0xf0 [ 44.795901][ T720] should_failslab+0x9/0x20 [ 44.800390][ T720] kmem_cache_alloc+0x3b/0x320 [ 44.805147][ T720] mas_alloc_nodes+0x2d8/0x850 [ 44.809900][ T720] mas_preallocate+0xe3d/0x1430 [ 44.814737][ T720] ? __cfi_mas_preallocate+0x10/0x10 [ 44.820009][ T720] ? rwsem_write_trylock+0x136/0x300 [ 44.825286][ T720] vma_expand+0x437/0xad0 [ 44.829608][ T720] mmap_region+0xf04/0x2130 [ 44.834100][ T720] ? should_fail+0xb/0x10 [ 44.838418][ T720] ? __cfi_mmap_region+0x10/0x10 [ 44.843349][ T720] ? cap_mmap_addr+0x165/0x2e0 [ 44.848094][ T720] ? futex_wake+0x5b7/0x8e0 [ 44.852584][ T720] ? get_unmapped_area+0x30c/0x370 [ 44.857687][ T720] do_mmap+0x858/0xdd0 [ 44.861754][ T720] ? __cfi_do_mmap+0x10/0x10 [ 44.866333][ T720] ? do_futex+0x2bf/0x430 [ 44.870648][ T720] ? _copy_from_user+0x8f/0xc0 [ 44.875404][ T720] vm_mmap_pgoff+0x206/0x3f0 [ 44.879984][ T720] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 44.885078][ T720] ? __x64_sys_futex+0x100/0x100 [ 44.890003][ T720] ? xfd_validate_state+0x70/0x150 [ 44.895106][ T720] ksys_mmap_pgoff+0xf6/0x1d0 [ 44.899817][ T720] __x64_sys_mmap+0xfa/0x110 [ 44.904398][ T720] x64_sys_call+0x8fd/0x9a0 [ 44.908895][ T720] do_syscall_64+0x4c/0xa0 [ 44.913294][ T720] ? clear_bhb_loop+0x30/0x80 [ 44.917951][ T720] ? clear_bhb_loop+0x30/0x80 [ 44.922604][ T720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.928483][ T720] RIP: 0033:0x7f0a26f9dd82 [ 44.932879][ T720] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 44.952466][ T720] RSP: 002b:00007ffe969c2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 44.960861][ T720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a26f9dd82 [ 44.968814][ T720] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 44.976804][ T720] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 44.984804][ T720] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe969c3060 [ 44.992764][ T720] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 45.000723][ T720] [ 45.004964][ T717] ---[ end trace 0000000000000000 ]--- [ 45.005366][ T720] ------------[ cut here ]------------ [ 45.015914][ T720] kernel BUG at mm/mmap.c:2854! [ 45.021100][ T720] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 45.021254][ T717] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 45.027164][ T720] CPU: 0 PID: 720 Comm: syz.2.128 Tainted: G D syzkaller #0 [ 45.027183][ T720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.040131][ T717] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 45.041172][ T720] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 45.041198][ T720] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 45.062011][ T717] RSP: 0018:ffffc90010747a40 EFLAGS: 00010293 [ 45.070813][ T720] RSP: 0018:ffffc90010e8fa40 EFLAGS: 00010293 [ 45.070831][ T720] RAX: ffffffff81adab58 RBX: 00007f0a27f03000 RCX: ffff88811457bcc0 [ 45.070842][ T720] RDX: 0000000000000000 RSI: 00007f0a27f02fff RDI: 00007f0a27f03000 [ 45.070853][ T720] RBP: ffffc90010e8fc30 R08: ffff88811457bcc0 R09: 0000000000000003 [ 45.082817][ T717] [ 45.095775][ T720] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f0a27f02fff [ 45.095792][ T720] R13: 00007f0a27f03000 R14: dffffc0000000000 R15: 00007f0a27ee2000 [ 45.095803][ T720] FS: 0000555575291500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.095816][ T720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.095827][ T720] CR2: 00007efdeb1eb700 CR3: 000000011e7a8000 CR4: 00000000003526b0 [ 45.102196][ T717] RAX: ffffffff81adab58 RBX: 00007fcda0e5a000 RCX: ffff88810ff51440 [ 45.107912][ T720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.107924][ T720] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.116070][ T717] RDX: 0000000000000000 RSI: 00007fcda0e59fff RDI: 00007fcda0e5a000 [ 45.123818][ T720] Call Trace: [ 45.123825][ T720] [ 45.123831][ T720] ? should_fail+0xb/0x10 [ 45.123853][ T720] ? __cfi_mmap_region+0x10/0x10 [ 45.132152][ T717] RBP: ffffc90010747c30 R08: ffff88810ff51440 R09: 0000000000000003 [ 45.134102][ T720] ? cap_mmap_addr+0x165/0x2e0 [ 45.142521][ T717] R10: 0000000000000003 R11: 0000000000000000 R12: 00007fcda0e59fff [ 45.150292][ T720] ? futex_wake+0x5b7/0x8e0 [ 45.159399][ T717] R13: 00007fcda0e5a000 R14: dffffc0000000000 R15: 00007fcda0e39000 [ 45.165790][ T720] ? get_unmapped_area+0x30c/0x370 [ 45.165815][ T720] do_mmap+0x858/0xdd0 [ 45.173969][ T717] FS: 0000555585a73500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.181718][ T720] ? __cfi_do_mmap+0x10/0x10 [ 45.181741][ T720] ? do_futex+0x2bf/0x430 [ 45.181755][ T720] ? _copy_from_user+0x8f/0xc0 [ 45.181774][ T720] vm_mmap_pgoff+0x206/0x3f0 [ 45.190012][ T717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.197705][ T720] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 45.197724][ T720] ? __x64_sys_futex+0x100/0x100 [ 45.197738][ T720] ? xfd_validate_state+0x70/0x150 [ 45.205926][ T717] CR2: 00007efdeb3ef2f8 CR3: 000000010e80e000 CR4: 00000000003526a0 [ 45.208948][ T720] ksys_mmap_pgoff+0xf6/0x1d0 [ 45.212012][ T717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.216169][ T720] __x64_sys_mmap+0xfa/0x110 [ 45.221250][ T717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.229051][ T720] x64_sys_call+0x8fd/0x9a0 [ 45.234026][ T717] Kernel panic - not syncing: Fatal exception [ 45.241753][ T720] do_syscall_64+0x4c/0xa0 [ 45.241777][ T720] ? clear_bhb_loop+0x30/0x80 [ 45.241791][ T720] ? clear_bhb_loop+0x30/0x80 [ 45.241804][ T720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.241824][ T720] RIP: 0033:0x7f0a26f9dd82 [ 45.241837][ T720] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 45.241851][ T720] RSP: 002b:00007ffe969c2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 45.241867][ T720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a26f9dd82 [ 45.241878][ T720] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 45.241888][ T720] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 45.241897][ T720] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe969c3060 [ 45.241907][ T720] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 45.241921][ T720] [ 45.241925][ T720] Modules linked in: [ 45.246553][ T717] Kernel Offset: disabled [ 45.458512][ T717] Rebooting in 86400 seconds..