last executing test programs: 3.384451312s ago: executing program 3 (id=5554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x10000, 0x800, 0x7, 0x3}, 0x33) 3.256580503s ago: executing program 3 (id=5556): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x101000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000007000000d7c900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='f2fs_lookup_extent_tree_start\x00', r3, 0x0, 0x7}, 0x18) io_setup(0x8, &(0x7f0000004200)) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x4) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.164031114s ago: executing program 0 (id=5559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) io_pgetevents(0x0, 0xffe, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x8}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000003040)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 2.916054175s ago: executing program 3 (id=5562): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='target_sequencer_start\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000001c000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200626f6e645f736c617665"], 0x44}}, 0x4000) socket(0x10, 0x803, 0x0) 2.609749607s ago: executing program 1 (id=5565): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x101000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000007000000d7c900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='f2fs_lookup_extent_tree_start\x00', r3, 0x0, 0x7}, 0x18) io_setup(0x8, &(0x7f0000004200)) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x4) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r7) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd70d9e06b1a253100000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24008004}, 0x814) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) unshare(0x2c060000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x161) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8241, 0x0) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000280)=""/99) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000980)=@chain={'key_or_keyring:', r6}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.487402698s ago: executing program 1 (id=5566): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x10000, 0x800, 0x7, 0x3}, 0x33) 1.613382752s ago: executing program 1 (id=5567): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000380), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) 1.558353892s ago: executing program 2 (id=5568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7800, 0x20, 0xc7, 0x5, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @remote, {[@noop, @ssrr={0x89, 0xb, 0xf8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp_addr={0x44, 0x14, 0x40, 0x1, 0xc, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7}]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x80000001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0xb, &(0x7f0000000780)) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 1.555135682s ago: executing program 0 (id=5569): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.552369852s ago: executing program 1 (id=5570): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000380), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) 1.550523992s ago: executing program 3 (id=5571): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11fc1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) 1.491778813s ago: executing program 4 (id=5572): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7800, 0x20, 0xc7, 0x5, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @remote, {[@noop, @ssrr={0x89, 0xb, 0xf8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp_addr={0x44, 0x14, 0x40, 0x1, 0xc, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7}]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x80000001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 1.467195673s ago: executing program 0 (id=5573): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffa}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaa}}, './file0\x00'}) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000001b41a30004000095000000000000000000000000e993594aba46d6cddcdb4d895fbeed9e8f1364fdef982abe15ceadab7a42f85f7515dbcfa7102fa9ad07dd141d8b26bb047f3bc78a27b1a2656d00b572a563c190b3a46300a96cb61c311214830dbd5c0aa704e63f381f3f161499234019a5f89b9322e25a7d32aa5698b059ca950f077ebc55de507eb20988e148925674ea4ac403bfa932b2202a2b868ca8972548f5623e29299d54be42b19dfc6afbe66d43feb6a9fdab8e81b7d8fecda5378461ce5532515a8e8aaa0caf2d701cce54966ec89de8a4068081bf974ccec3da2e30323c219fc7e89f4fd3745c6919f6"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x8, r7) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1.466604253s ago: executing program 3 (id=5574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000c0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES16=r0], 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffdaf, 0x0}, 0x4044041) close(r3) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/198, 0xc6}], 0x1}, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.362023433s ago: executing program 1 (id=5575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) io_pgetevents(0x0, 0xffe, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x8}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000003040)=ANY=[], 0x0) 1.300608154s ago: executing program 4 (id=5576): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x400, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010005009265406c09306903d800", [0x0, 0x1]}}) 1.298291934s ago: executing program 2 (id=5577): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b04000000000000ff007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100627269646765000028000280060006000004000005000700070000000500260001"], 0x58}}, 0x0) capget(&(0x7f0000001dc0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001e00)={0x6, 0x8, 0x1, 0x5, 0x6, 0x6}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x18}) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) dup2(r5, r5) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@random="cfdbccacc007", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @empty}, {0x1, 0x0, 0xc, 0x0, @opaque="b6757c5a"}}}}}, 0x0) 1.166656264s ago: executing program 4 (id=5578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) bpf$MAP_CREATE(0x0, 0x0, 0x2c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x0, 0x4, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x5) close_range(r8, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000300)=[{0x6, 0x4, 0x0, 0x7fff0001}]}) kexec_load(0x0, 0x0, 0x0, 0x0) fchdir(r2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x200000000000011d, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r10}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) unshare(0x64000600) 948.860155ms ago: executing program 4 (id=5579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu&&0&&\t') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) 927.721556ms ago: executing program 0 (id=5580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) io_pgetevents(0x0, 0xffe, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x8}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000003040)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 837.683486ms ago: executing program 4 (id=5581): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b04000000000000ff007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100627269646765000028000280060006000004000005000700070000000500260001"], 0x58}}, 0x0) capget(&(0x7f0000001dc0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001e00)={0x6, 0x8, 0x1, 0x5, 0x6, 0x6}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x18}) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) dup2(r5, r5) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@random="cfdbccacc007", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @empty}, {0x1, 0x0, 0xc, 0x0, @opaque="b6757c5a"}}}}}, 0x0) 612.966687ms ago: executing program 3 (id=5582): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='target_sequencer_start\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000001c000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200626f6e645f736c617665"], 0x44}}, 0x4000) socket(0x10, 0x803, 0x0) 608.815437ms ago: executing program 1 (id=5583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2c040000) 443.832408ms ago: executing program 2 (id=5584): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010005009265406c09306903d800", [0x0, 0x1]}}) 408.920188ms ago: executing program 2 (id=5585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/168, 0xa8) 274.758689ms ago: executing program 2 (id=5586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x1260, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) accept4$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_open_dev$vcsu(&(0x7f00000004c0), 0x4, 0x301100) 242.417049ms ago: executing program 0 (id=5587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) 189.233629ms ago: executing program 2 (id=5588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) rename(0x0, 0x0) syz_read_part_table(0x624, &(0x7f0000000640)="$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") r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="f6d9ff84b4280d0204d27e010006", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x1001f0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) 125.733979ms ago: executing program 0 (id=5589): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffa}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaa}}, './file0\x00'}) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000001b41a30004000095000000000000000000000000e993594aba46d6cddcdb4d895fbeed9e8f1364fdef982abe15ceadab7a42f85f7515dbcfa7102fa9ad07dd141d8b26bb047f3bc78a27b1a2656d00b572a563c190b3a46300a96cb61c311214830dbd5c0aa704e63f381f3f161499234019a5f89b9322e25a7d32aa5698b059ca950f077ebc55de507eb20988e148925674ea4ac403bfa932b2202a2b868ca8972548f5623e29299d54be42b19dfc6afbe66d43feb6a9fdab8e81b7d8fecda5378461ce5532515a8e8aaa0caf2d701cce54966ec89de8a4068081bf974ccec3da2e30323c219fc7e89f4fd3745c6919f6"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x8, r7) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 0s ago: executing program 4 (id=5590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r3, 0xb3d3e8a28760fb9b, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x20004144}, 0x200080c4) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)='i', 0x1}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x102) sendmsg$inet(r4, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): syscall=321 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 459.354967][ T29] audit: type=1326 audit(1749064736.265:30657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 459.378678][ T29] audit: type=1326 audit(1749064736.265:30658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 459.402302][ T29] audit: type=1326 audit(1749064736.265:30659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 459.425935][ T29] audit: type=1326 audit(1749064736.265:30660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.4.5097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 459.427425][T17690] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.5097: lblock 1 mapped to illegal pblock 1 (length 1) [ 459.464940][T17690] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5097: Failed to acquire dquot type 0 [ 459.476746][T17690] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.5097: Freeing blocks not in datazone - block = 0, count = 4096 [ 459.496868][T17690] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5097: Invalid inode bitmap blk 0 in block_group 0 [ 459.511450][T17690] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 459.622796][T17690] EXT4-fs (loop4): 1 orphan inode deleted [ 459.634114][T17690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.929946][ T1587] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 459.946889][ T1587] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 460.081779][T12706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.097624][T17698] loop1: detected capacity change from 0 to 2048 [ 460.104573][T17711] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 460.111172][T17711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.118766][T17711] vhci_hcd vhci_hcd.0: Device attached [ 460.310379][T17698] loop1: p1 < > p4 < > [ 460.360986][T17720] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 460.367717][T17720] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 460.375360][T17720] vhci_hcd vhci_hcd.0: Device attached [ 460.455632][T17711] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 460.462463][T17711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.470197][T17711] vhci_hcd vhci_hcd.0: Device attached [ 460.518749][T17726] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 460.521044][T17729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.525383][T17726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.525503][T17726] vhci_hcd vhci_hcd.0: Device attached [ 460.553316][T17720] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 460.559989][T17720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.560084][T17720] vhci_hcd vhci_hcd.0: Device attached [ 460.569806][T17711] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 460.569830][T17711] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 460.569871][T17711] vhci_hcd vhci_hcd.0: Device attached [ 460.570294][T17711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.570509][T17726] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 460.570530][T17726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.570552][T17726] vhci_hcd vhci_hcd.0: Device attached [ 460.570681][T17711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.571218][T17711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.571621][T17726] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 460.571647][T17726] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 460.571741][T17726] vhci_hcd vhci_hcd.0: Device attached [ 460.572730][T17726] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.573130][T17711] vhci_hcd vhci_hcd.0: port 0 already used [ 460.573763][T17726] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 460.573785][T17726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.573806][T17726] vhci_hcd vhci_hcd.0: Device attached [ 460.580059][T17730] vhci_hcd: connection closed [ 460.580285][T17717] vhci_hcd: connection closed [ 460.588191][T17712] vhci_hcd: connection closed [ 460.714490][T17732] vhci_hcd: connection closed [ 460.719481][T17721] vhci_hcd: connection closed [ 460.726756][T17743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.740586][T17743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.749045][ T1587] vhci_hcd: stop threads [ 460.753465][ T1587] vhci_hcd: release socket [ 460.757951][ T1587] vhci_hcd: disconnect device [ 460.764351][ T1587] vhci_hcd: stop threads [ 460.768658][ T1587] vhci_hcd: release socket [ 460.773251][ T1587] vhci_hcd: disconnect device [ 460.786194][T17726] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 460.792942][T17726] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 460.800821][T17726] vhci_hcd vhci_hcd.0: Device attached [ 460.808046][ T1587] vhci_hcd: stop threads [ 460.812405][ T1587] vhci_hcd: release socket [ 460.813561][T17743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.816852][ T1587] vhci_hcd: disconnect device [ 460.835087][ T1587] vhci_hcd: stop threads [ 460.839390][ T1587] vhci_hcd: release socket [ 460.843953][ T1587] vhci_hcd: disconnect device [ 460.848873][ T3391] usb 1-1: new low-speed USB device number 12 using vhci_hcd [ 460.857629][ T3391] usb 1-1: enqueue for inactive port 0 [ 460.863363][ T3391] usb 1-1: enqueue for inactive port 0 [ 460.868911][ T3391] usb 1-1: enqueue for inactive port 0 [ 460.880047][ T1587] vhci_hcd: stop threads [ 460.884393][ T1587] vhci_hcd: release socket [ 460.888838][ T1587] vhci_hcd: disconnect device [ 460.893735][ T3392] usb 5-1: new low-speed USB device number 9 using vhci_hcd [ 460.901313][T17745] vhci_hcd vhci_hcd.0: port 0 already used [ 460.915556][T17742] vhci_hcd: connection closed [ 460.915756][ T1587] vhci_hcd: stop threads [ 460.922362][T17727] vhci_hcd: connection reset by peer [ 460.924799][ T1587] vhci_hcd: release socket [ 460.930132][T17736] vhci_hcd: connection closed [ 460.934548][ T1587] vhci_hcd: disconnect device [ 460.934696][T17734] vhci_hcd: connection closed [ 460.944932][T17740] vhci_hcd: connection closed [ 460.945550][ T3391] vhci_hcd: vhci_device speed not set [ 460.961390][ T1587] vhci_hcd: stop threads [ 460.965721][ T1587] vhci_hcd: release socket [ 460.970205][ T1587] vhci_hcd: disconnect device [ 460.997273][ T1587] vhci_hcd: stop threads [ 461.001579][ T1587] vhci_hcd: release socket [ 461.006078][ T1587] vhci_hcd: disconnect device [ 461.011220][ T1587] vhci_hcd: stop threads [ 461.015601][ T1587] vhci_hcd: release socket [ 461.020035][ T1587] vhci_hcd: disconnect device [ 461.025658][ T1587] vhci_hcd: stop threads [ 461.029935][ T1587] vhci_hcd: release socket [ 461.034491][ T1587] vhci_hcd: disconnect device [ 461.181991][T17762] SELinux: failed to load policy [ 461.226911][T17771] netlink: 'syz.1.5116': attribute type 21 has an invalid length. [ 461.235205][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5116'. [ 461.352051][T17780] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 461.358631][T17780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.366312][T17780] vhci_hcd vhci_hcd.0: Device attached [ 461.375451][T17780] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 461.382126][T17780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.389677][T17780] vhci_hcd vhci_hcd.0: Device attached [ 461.397530][T17780] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 461.404219][T17780] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 461.411886][T17780] vhci_hcd vhci_hcd.0: Device attached [ 461.419102][T17780] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.428610][T17780] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 461.435260][T17780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.442954][T17780] vhci_hcd vhci_hcd.0: Device attached [ 461.450803][T17780] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 461.457452][T17780] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 461.465229][T17780] vhci_hcd vhci_hcd.0: Device attached [ 461.471971][T17780] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.480838][T17780] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.489790][T17780] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.500381][T17780] vhci_hcd vhci_hcd.0: port 0 already used [ 461.514757][T17791] vhci_hcd: connection closed [ 461.514974][T17787] vhci_hcd: connection closed [ 461.515026][ T1587] vhci_hcd: stop threads [ 461.519919][T17785] vhci_hcd: connection closed [ 461.524486][ T1587] vhci_hcd: release socket [ 461.529102][T17781] vhci_hcd: connection closed [ 461.533511][ T1587] vhci_hcd: disconnect device [ 461.533606][T17783] vhci_hcd: connection closed [ 461.550812][T17799] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 461.562058][T17799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.569775][T17799] vhci_hcd vhci_hcd.0: Device attached [ 461.575505][ T1587] vhci_hcd: stop threads [ 461.580059][ T1587] vhci_hcd: release socket [ 461.584588][ T1587] vhci_hcd: disconnect device [ 461.585167][T17799] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 461.595900][T17799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.603577][T17799] vhci_hcd vhci_hcd.0: Device attached [ 461.609196][ T1587] vhci_hcd: stop threads [ 461.611194][T17799] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 461.613520][ T1587] vhci_hcd: release socket [ 461.620074][T17799] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 461.624576][ T1587] vhci_hcd: disconnect device [ 461.632202][T17799] vhci_hcd vhci_hcd.0: Device attached [ 461.638912][ T1587] vhci_hcd: stop threads [ 461.646694][ T1587] vhci_hcd: release socket [ 461.647440][T17799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.651140][ T1587] vhci_hcd: disconnect device [ 461.660458][T17799] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 461.670727][T17799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.672170][ T3391] vhci_hcd: vhci_device speed not set [ 461.678270][T17799] vhci_hcd vhci_hcd.0: Device attached [ 461.685949][ T1587] vhci_hcd: stop threads [ 461.691252][T17799] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21) [ 461.693372][ T1587] vhci_hcd: release socket [ 461.699899][T17799] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 461.700049][T17799] vhci_hcd vhci_hcd.0: Device attached [ 461.701224][T17799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.704598][ T1587] vhci_hcd: disconnect device [ 461.713605][T17799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.740670][T17799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 461.749829][T17799] vhci_hcd vhci_hcd.0: port 0 already used [ 461.759694][T17812] vhci_hcd: connection closed [ 461.759733][T17810] vhci_hcd: connection closed [ 461.760145][T17808] vhci_hcd: connection closed [ 461.764492][T17800] vhci_hcd: connection closed [ 461.769770][ T1587] vhci_hcd: stop threads [ 461.774100][T17804] vhci_hcd: connection closed [ 461.778642][ T1587] vhci_hcd: release socket [ 461.778654][ T1587] vhci_hcd: disconnect device [ 461.797092][ T1587] vhci_hcd: stop threads [ 461.801380][ T1587] vhci_hcd: release socket [ 461.806045][ T1587] vhci_hcd: disconnect device [ 461.812584][ T1587] vhci_hcd: stop threads [ 461.816870][ T1587] vhci_hcd: release socket [ 461.821495][ T1587] vhci_hcd: disconnect device [ 461.828357][ T1587] vhci_hcd: stop threads [ 461.832693][ T1587] vhci_hcd: release socket [ 461.837225][ T1587] vhci_hcd: disconnect device [ 461.839562][T17818] loop2: detected capacity change from 0 to 512 [ 461.841988][ T9] usb 9-1: new low-speed USB device number 13 using vhci_hcd [ 461.856214][ T9] usb 9-1: enqueue for inactive port 0 [ 461.856488][T17818] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 461.861704][ T9] usb 9-1: enqueue for inactive port 0 [ 461.861723][ T9] usb 9-1: enqueue for inactive port 0 [ 461.861986][ T1587] vhci_hcd: stop threads [ 461.884656][T17818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.885685][ T1587] vhci_hcd: release socket [ 461.899848][T17818] ext4 filesystem being mounted at /479/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.902550][ T1587] vhci_hcd: disconnect device [ 461.922386][ T9] vhci_hcd: vhci_device speed not set [ 461.986658][T10887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.076763][T17833] loop2: detected capacity change from 0 to 512 [ 462.083522][T17836] FAULT_INJECTION: forcing a failure. [ 462.083522][T17836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.083918][T17834] loop0: detected capacity change from 0 to 1024 [ 462.096731][T17836] CPU: 1 UID: 0 PID: 17836 Comm: syz.1.5133 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 462.096766][T17836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.096837][T17836] Call Trace: [ 462.096849][T17836] [ 462.096860][T17836] __dump_stack+0x1d/0x30 [ 462.096889][T17836] dump_stack_lvl+0xe8/0x140 [ 462.096990][T17836] dump_stack+0x15/0x1b [ 462.097013][T17836] should_fail_ex+0x265/0x280 [ 462.097042][T17836] should_fail+0xb/0x20 [ 462.097063][T17836] should_fail_usercopy+0x1a/0x20 [ 462.097093][T17836] _copy_from_user+0x1c/0xb0 [ 462.097127][T17836] __sys_bpf+0x178/0x790 [ 462.097179][T17836] __x64_sys_bpf+0x41/0x50 [ 462.097218][T17836] x64_sys_call+0x2478/0x2fb0 [ 462.097269][T17836] do_syscall_64+0xd2/0x200 [ 462.097307][T17836] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 462.097344][T17836] ? clear_bhb_loop+0x40/0x90 [ 462.097378][T17836] ? clear_bhb_loop+0x40/0x90 [ 462.097453][T17836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.097482][T17836] RIP: 0033:0x7fa1c742e929 [ 462.097504][T17836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.097563][T17836] RSP: 002b:00007fa1c5a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.097588][T17836] RAX: ffffffffffffffda RBX: 00007fa1c7655fa0 RCX: 00007fa1c742e929 [ 462.097605][T17836] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 462.097622][T17836] RBP: 00007fa1c5a97090 R08: 0000000000000000 R09: 0000000000000000 [ 462.097639][T17836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.097655][T17836] R13: 0000000000000000 R14: 00007fa1c7655fa0 R15: 00007ffe969da828 [ 462.097705][T17836] [ 462.165033][T17833] EXT4-fs (loop2): orphan cleanup on readonly fs [ 462.172853][ T10] usb usb8-port1: attempt power cycle [ 462.179584][T17833] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5131: Failed to acquire dquot type 1 [ 462.215436][T17834] EXT4-fs: Ignoring removed oldalloc option [ 462.229003][T17833] EXT4-fs (loop2): 1 truncate cleaned up [ 462.236888][T17834] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 462.324937][T17833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.362094][T17834] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 462.378875][T10887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.529887][T17875] loop1: detected capacity change from 0 to 1024 [ 462.537214][T17875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 462.545538][T17875] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.656730][T17875] EXT4-fs (loop1): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.703461][T12130] EXT4-fs (loop1): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 462.714442][T17865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.724968][T17865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.006809][T17891] random: crng reseeded on system resumption [ 463.440512][T17895] loop9: detected capacity change from 0 to 7 [ 463.450072][T17895] Buffer I/O error on dev loop9, logical block 0, async page read [ 463.458102][T17895] Buffer I/O error on dev loop9, logical block 0, async page read [ 463.466019][T17895] loop9: unable to read partition table [ 463.481682][T17895] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 463.481682][T17895] U) failed (rc=-5) [ 464.487465][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 464.493736][ T29] audit: type=1400 audit(1749064740.635:30980): avc: denied { read write } for pid=17899 comm="syz.0.5155" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 464.519370][ T29] audit: type=1400 audit(1749064740.635:30981): avc: denied { open } for pid=17899 comm="syz.0.5155" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 464.965612][ T29] audit: type=1326 audit(1749064741.985:30982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 464.989339][ T29] audit: type=1326 audit(1749064741.985:30983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 465.142844][ T29] audit: type=1326 audit(1749064742.045:30984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85834dd290 code=0x7ffc0000 [ 465.167228][ T29] audit: type=1326 audit(1749064742.045:30985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 465.190865][ T29] audit: type=1326 audit(1749064742.045:30986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 465.215944][ T29] audit: type=1326 audit(1749064742.045:30987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 465.239622][ T29] audit: type=1326 audit(1749064742.045:30988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 465.265241][ T29] audit: type=1326 audit(1749064742.045:30989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 465.299878][T17922] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 465.318718][T17933] FAULT_INJECTION: forcing a failure. [ 465.318718][T17933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.327292][T17922] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 465.331922][T17933] CPU: 1 UID: 0 PID: 17933 Comm: syz.1.5164 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 465.331963][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.331981][T17933] Call Trace: [ 465.331989][T17933] [ 465.331999][T17933] __dump_stack+0x1d/0x30 [ 465.332066][T17933] dump_stack_lvl+0xe8/0x140 [ 465.332093][T17933] dump_stack+0x15/0x1b [ 465.332116][T17933] should_fail_ex+0x265/0x280 [ 465.332143][T17933] should_fail+0xb/0x20 [ 465.332211][T17933] should_fail_usercopy+0x1a/0x20 [ 465.332291][T17933] _copy_from_user+0x1c/0xb0 [ 465.332325][T17933] copy_clone_args_from_user+0x14f/0x490 [ 465.332370][T17933] ? kstrtouint+0x76/0xc0 [ 465.332507][T17933] __se_sys_clone3+0x6f/0x200 [ 465.332598][T17933] __x64_sys_clone3+0x31/0x40 [ 465.332710][T17933] x64_sys_call+0x10c9/0x2fb0 [ 465.332739][T17933] do_syscall_64+0xd2/0x200 [ 465.332777][T17933] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 465.332803][T17933] ? clear_bhb_loop+0x40/0x90 [ 465.332896][T17933] ? clear_bhb_loop+0x40/0x90 [ 465.332925][T17933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.332953][T17933] RIP: 0033:0x7fa1c742e929 [ 465.332974][T17933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.332998][T17933] RSP: 002b:00007fa1c5a54f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 465.333079][T17933] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa1c742e929 [ 465.333095][T17933] RDX: 00007fa1c5a54f20 RSI: 0000000000000058 RDI: 00007fa1c5a54f20 [ 465.333112][T17933] RBP: 00007fa1c5a55090 R08: 0000000000000000 R09: 0000000000000058 [ 465.333189][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.333205][T17933] R13: 0000000000000000 R14: 00007fa1c7656160 R15: 00007ffe969da828 [ 465.333231][T17933] [ 465.470161][T17935] netlink: 'syz.0.5163': attribute type 21 has an invalid length. [ 465.967686][T17964] loop4: detected capacity change from 0 to 2048 [ 465.989438][ T3392] usb 5-1: enqueue for inactive port 0 [ 465.995927][ T3392] usb 5-1: enqueue for inactive port 0 [ 466.062343][ T3392] vhci_hcd: vhci_device speed not set [ 466.202801][ T10] usb usb8-port1: unable to enumerate USB device [ 466.328150][T17970] loop9: detected capacity change from 0 to 7 [ 466.355887][T17970] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.379805][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5182'. [ 466.389599][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5182'. [ 466.423067][T17970] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.431208][T17970] loop9: unable to read partition table [ 466.479284][T17970] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 466.479284][T17970] U) failed (rc=-5) [ 466.857596][T18000] can0: slcan on ptm0. [ 466.886712][ T23] IPVS: starting estimator thread 0... [ 466.903430][T18006] loop0: detected capacity change from 0 to 512 [ 466.934333][T18006] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 466.961695][T18011] loop9: detected capacity change from 0 to 7 [ 466.969277][T18011] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.977611][T18011] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.985509][T18011] loop9: unable to read partition table [ 466.991780][T18011] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 466.991780][T18011] U) failed (rc=-5) [ 467.028290][T18015] loop2: detected capacity change from 0 to 512 [ 467.035657][T18015] EXT4-fs: Ignoring removed mblk_io_submit option [ 467.055385][T18004] IPVS: using max 1920 ests per chain, 96000 per kthread [ 467.063914][T18015] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 467.076680][T18006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.089642][T18006] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 467.109473][T18015] EXT4-fs (loop2): 1 truncate cleaned up [ 467.116963][T18015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.155056][T18015] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 467.161618][T18015] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.169280][T18015] vhci_hcd vhci_hcd.0: Device attached [ 467.232909][T18021] IPv6: Can't replace route, no match found [ 467.249366][T18015] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5198'. [ 467.283512][T18020] loop1: detected capacity change from 0 to 2048 [ 467.324039][T18018] vhci_hcd: connection closed [ 467.324210][ T6325] vhci_hcd: stop threads [ 467.324650][T18020] loop1: p1 < > p4 < > [ 467.328943][ T6325] vhci_hcd: release socket [ 467.341877][ T6325] vhci_hcd: disconnect device [ 467.410190][T12582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.613659][T17984] can0 (unregistered): slcan off ptm0. [ 467.843867][T10887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.916878][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5204'. [ 467.937355][T18038] loop2: detected capacity change from 0 to 128 [ 467.950224][T18038] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 467.975366][T18038] ext4 filesystem being mounted at /497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 468.154819][T18046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.226196][T18046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.237867][ T10] usb usb8-port1: attempt power cycle [ 468.275613][T18046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.299095][T18056] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5213'. [ 468.308672][T18056] hsr_slave_0: left promiscuous mode [ 468.314586][T18056] hsr_slave_1: left promiscuous mode [ 468.388735][T18046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.492183][T18046] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.511930][T18046] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.527977][T18046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.544183][T18046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.653325][T18065] loop4: detected capacity change from 0 to 1024 [ 468.662424][T18065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.669454][T18065] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.766924][T10887] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.782206][T18068] netlink: 'syz.3.5217': attribute type 2 has an invalid length. [ 468.797571][T18065] EXT4-fs (loop4): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.832023][T18068] bridge: RTM_NEWNEIGH with invalid ether address [ 468.872429][T12706] EXT4-fs (loop4): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 468.898870][T18078] loop9: detected capacity change from 0 to 7 [ 468.905890][T18078] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.914985][T18078] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.922885][T18078] loop9: unable to read partition table [ 468.923338][T18080] loop4: detected capacity change from 0 to 1024 [ 468.928898][T18078] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 468.928898][T18078] U) failed (rc=-5) [ 468.938896][T18080] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 468.960036][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5219'. [ 468.976309][T18081] loop3: detected capacity change from 0 to 128 [ 468.985372][T18080] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.5220: lblock 1 mapped to illegal pblock 1 (length 1) [ 469.002225][T18081] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.003653][T18080] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5220: Failed to acquire dquot type 0 [ 469.014606][T18081] ext4 filesystem being mounted at /492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 469.029828][T18080] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.5220: Freeing blocks not in datazone - block = 0, count = 4096 [ 469.075442][T18080] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5220: Invalid inode bitmap blk 0 in block_group 0 [ 469.088675][T18080] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 469.098714][ T3414] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 469.114404][ T3414] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 469.126128][T18080] EXT4-fs (loop4): 1 orphan inode deleted [ 469.137329][T18080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.171204][T18080] blktrace: Concurrent blktraces are not allowed on sg0 [ 469.200142][T12706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.221506][T18094] loop0: detected capacity change from 0 to 512 [ 469.229123][T18094] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 469.255595][T18094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.270036][T18094] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 469.352129][T18105] loop4: detected capacity change from 0 to 128 [ 469.360693][T18105] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.373191][T18105] ext4 filesystem being mounted at /425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 469.375080][T12582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.493936][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 469.493951][ T29] audit: type=1326 audit(1749064746.525:31462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.533221][ T29] audit: type=1326 audit(1749064746.525:31463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.576741][ T29] audit: type=1326 audit(1749064746.605:31464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.601319][ T29] audit: type=1326 audit(1749064746.625:31465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.625630][ T29] audit: type=1326 audit(1749064746.625:31466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.649446][ T29] audit: type=1326 audit(1749064746.625:31467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.673828][ T29] audit: type=1326 audit(1749064746.625:31468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.697453][ T29] audit: type=1326 audit(1749064746.625:31469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.721767][ T29] audit: type=1326 audit(1749064746.655:31470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.746108][ T29] audit: type=1326 audit(1749064746.655:31471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18107 comm="syz.0.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 469.787074][ T9889] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 469.829170][T18113] loop3: detected capacity change from 0 to 1024 [ 469.836285][T18113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 469.843999][T18113] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.855635][T18113] EXT4-fs (loop3): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.894645][ T9889] EXT4-fs (loop3): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 469.942440][T18123] loop0: detected capacity change from 0 to 1024 [ 469.950234][T18123] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 469.970925][T18123] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.5236: lblock 1 mapped to illegal pblock 1 (length 1) [ 469.988599][T18123] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5236: Failed to acquire dquot type 0 [ 470.000257][T18123] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.5236: Freeing blocks not in datazone - block = 0, count = 4096 [ 470.016522][T18123] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.5236: Invalid inode bitmap blk 0 in block_group 0 [ 470.029821][T18123] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 470.038808][ T37] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 470.062636][T18123] EXT4-fs (loop0): 1 orphan inode deleted [ 470.071796][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 470.086524][T18123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.108572][T18123] blktrace: Concurrent blktraces are not allowed on sg0 [ 470.254614][T12706] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.304863][T12582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.391878][T18139] loop1: detected capacity change from 0 to 512 [ 470.412547][ T10] usb usb8-port1: unable to enumerate USB device [ 470.421418][T18139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.465348][T18139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.526326][T18139] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.547076][T18152] loop0: detected capacity change from 0 to 1024 [ 470.556373][T18152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 470.571487][T18152] EXT4-fs: Ignoring removed mblk_io_submit option [ 470.597955][T18152] EXT4-fs (loop0): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.615772][T18139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.642789][T12582] EXT4-fs (loop0): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 470.728339][T18163] loop0: detected capacity change from 0 to 512 [ 470.737122][T18163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 470.748394][T18163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec099, mo2=0002] [ 470.758271][T18163] System zones: 1-12 [ 470.763081][T18163] EXT4-fs (loop0): 1 truncate cleaned up [ 470.769253][T18163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.793656][T18166] loop2: detected capacity change from 0 to 512 [ 470.801839][T18166] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 470.804314][T12130] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.826319][T18166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.844398][T18166] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.851566][T18171] loop1: detected capacity change from 0 to 1024 [ 470.862175][T18171] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.875107][T18171] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.5251: lblock 1 mapped to illegal pblock 1 (length 1) [ 470.890425][T18171] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.5251: Failed to acquire dquot type 0 [ 470.903914][T18171] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.5251: Freeing blocks not in datazone - block = 0, count = 4096 [ 470.918779][T18171] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.5251: Invalid inode bitmap blk 0 in block_group 0 [ 470.932015][ T1587] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 470.932354][T18171] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 470.955386][ T1587] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 470.956754][T18171] EXT4-fs (loop1): 1 orphan inode deleted [ 470.974775][T18171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.996566][T18171] blktrace: Concurrent blktraces are not allowed on sg0 [ 471.017500][T12130] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.028279][T10887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.106819][T18184] FAULT_INJECTION: forcing a failure. [ 471.106819][T18184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.119980][T18184] CPU: 1 UID: 0 PID: 18184 Comm: syz.2.5257 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 471.120016][T18184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.120033][T18184] Call Trace: [ 471.120042][T18184] [ 471.120052][T18184] __dump_stack+0x1d/0x30 [ 471.120147][T18184] dump_stack_lvl+0xe8/0x140 [ 471.120176][T18184] dump_stack+0x15/0x1b [ 471.120198][T18184] should_fail_ex+0x265/0x280 [ 471.120224][T18184] should_fail+0xb/0x20 [ 471.120245][T18184] should_fail_usercopy+0x1a/0x20 [ 471.120274][T18184] _copy_from_user+0x1c/0xb0 [ 471.120377][T18184] ___sys_sendmsg+0xc1/0x1d0 [ 471.120424][T18184] __x64_sys_sendmsg+0xd4/0x160 [ 471.120467][T18184] x64_sys_call+0x2999/0x2fb0 [ 471.120530][T18184] do_syscall_64+0xd2/0x200 [ 471.120559][T18184] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 471.120601][T18184] ? clear_bhb_loop+0x40/0x90 [ 471.120626][T18184] ? clear_bhb_loop+0x40/0x90 [ 471.120647][T18184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.120669][T18184] RIP: 0033:0x7f85834de929 [ 471.120684][T18184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.120708][T18184] RSP: 002b:00007f8581b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.120732][T18184] RAX: ffffffffffffffda RBX: 00007f8583705fa0 RCX: 00007f85834de929 [ 471.120819][T18184] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 471.120865][T18184] RBP: 00007f8581b47090 R08: 0000000000000000 R09: 0000000000000000 [ 471.120880][T18184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.120894][T18184] R13: 0000000000000000 R14: 00007f8583705fa0 R15: 00007ffccb4b1978 [ 471.120916][T18184] [ 471.350177][T18186] loop1: detected capacity change from 0 to 1024 [ 471.357491][T18186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 471.367080][T18186] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.388351][T18186] EXT4-fs (loop1): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.446457][T12130] EXT4-fs (loop1): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 471.480703][T18198] loop4: detected capacity change from 0 to 1024 [ 471.488027][T18198] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 471.501550][T18198] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.5263: lblock 1 mapped to illegal pblock 1 (length 1) [ 471.517853][T18198] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5263: Failed to acquire dquot type 0 [ 471.521095][T18200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.530239][T18198] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.5263: Freeing blocks not in datazone - block = 0, count = 4096 [ 471.538051][T18200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.570605][T18198] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5263: Invalid inode bitmap blk 0 in block_group 0 [ 471.610795][T18198] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 471.620328][T18198] EXT4-fs (loop4): 1 orphan inode deleted [ 471.629341][T18198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.656611][T18198] blktrace: Concurrent blktraces are not allowed on sg0 [ 471.949625][ T37] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 471.964611][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 471.977323][T12706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.977425][T12582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.053243][T18219] loop0: detected capacity change from 0 to 512 [ 472.060871][T18219] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 472.075062][T18219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.088580][T18219] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 472.095037][T18223] loop4: detected capacity change from 0 to 512 [ 472.106098][T18223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 472.135701][T18223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.148461][T18223] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 472.189366][T12582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.203797][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5271'. [ 472.272663][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5271'. [ 472.287220][T18229] loop0: detected capacity change from 0 to 1024 [ 472.294868][T18229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 472.303253][T18229] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.313480][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5271'. [ 472.347230][T18229] EXT4-fs (loop0): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.428517][T12582] EXT4-fs (loop0): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 472.439310][T12706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.604059][T18261] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5283'. [ 472.634875][T18259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.665547][T18259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.684654][T18271] loop0: detected capacity change from 0 to 1024 [ 472.701777][T18271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 472.710667][T18271] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.743487][T18271] EXT4-fs (loop0): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.873344][T12582] EXT4-fs (loop0): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 472.900726][T18286] bridge0: port 3(macvlan2) entered blocking state [ 472.907450][T18286] bridge0: port 3(macvlan2) entered disabled state [ 472.930373][T18286] macvlan2: entered allmulticast mode [ 472.935856][T18286] bridge0: entered allmulticast mode [ 472.942052][T18286] macvlan2: left allmulticast mode [ 472.947324][T18286] bridge0: left allmulticast mode [ 472.968272][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5289'. [ 473.157175][T18307] netlink: 22 bytes leftover after parsing attributes in process `syz.2.5299'. [ 473.172895][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x1 [ 473.180389][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.187841][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.196057][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.203549][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.211195][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.218810][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x4 [ 473.226882][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.234361][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.241765][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.249331][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x2 [ 473.257588][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.265229][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.272688][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x4 [ 473.280186][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.288341][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.288341][T18314] loop4: detected capacity change from 0 to 1024 [ 473.288691][T18314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 473.295787][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x2 [ 473.295823][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.304096][T18314] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.308744][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.334091][T18314] EXT4-fs (loop4): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.338023][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.358630][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.358661][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.374133][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.381603][ T10] hid-generic 0006:0000:0000.0017: unknown main item tag 0x0 [ 473.389742][ T10] hid-generic 0006:0000:0000.0017: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 473.475252][T12706] EXT4-fs (loop4): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 473.567847][T18332] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 473.574476][T18332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.582227][T18332] vhci_hcd vhci_hcd.0: Device attached [ 473.605589][T18332] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 473.612235][T18332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.619810][T18332] vhci_hcd vhci_hcd.0: Device attached [ 473.642148][T18332] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 473.647652][T18347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.648794][T18332] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 473.657417][T18347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.665601][T18332] vhci_hcd vhci_hcd.0: Device attached [ 473.685632][T18332] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 473.689847][T18350] loop9: detected capacity change from 0 to 7 [ 473.701352][T18350] Buffer I/O error on dev loop9, logical block 0, async page read [ 473.709653][T18332] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 473.711181][T18350] Buffer I/O error on dev loop9, logical block 0, async page read [ 473.716259][T18332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.716338][T18332] vhci_hcd vhci_hcd.0: Device attached [ 473.737417][T18350] loop9: unable to read partition table [ 473.743425][T18350] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 473.743425][T18350] U) failed (rc=-5) [ 473.759204][T18332] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 473.765886][T18332] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 473.773627][T18332] vhci_hcd vhci_hcd.0: Device attached [ 473.842846][ T3391] usb 7-1: new low-speed USB device number 14 using vhci_hcd [ 473.854068][T18332] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 473.866090][T18332] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 473.880264][T18332] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 473.882042][T18360] netlink: 22 bytes leftover after parsing attributes in process `syz.0.5315'. [ 473.890822][T18332] vhci_hcd vhci_hcd.0: port 0 already used [ 473.912164][T18356] vhci_hcd: connection closed [ 473.912427][T18352] vhci_hcd: connection closed [ 473.913627][ T37] vhci_hcd: stop threads [ 473.917830][T18337] vhci_hcd: connection closed [ 473.921841][ T37] vhci_hcd: release socket [ 473.935300][ T37] vhci_hcd: disconnect device [ 473.935388][T18333] vhci_hcd: connection reset by peer [ 473.950467][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x1 [ 473.958078][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 473.966257][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 473.973750][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 473.981150][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 473.988642][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 473.996731][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x4 [ 474.004207][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.011776][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.019329][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.027437][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x2 [ 474.034875][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.042302][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.049690][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x4 [ 474.057806][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.065302][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.072717][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x2 [ 474.080155][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.088306][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.095810][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.103250][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.110692][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.118807][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.126242][ T10] hid-generic 0006:0000:0000.0018: unknown main item tag 0x0 [ 474.144282][T18349] vhci_hcd: connection closed [ 474.165967][T18362] loop2: detected capacity change from 0 to 1024 [ 474.180255][T18362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 474.187352][T18362] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.196497][ T10] hid-generic 0006:0000:0000.0018: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 474.241454][T18362] EXT4-fs (loop2): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.361544][T10887] EXT4-fs (loop2): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 474.368840][ T37] vhci_hcd: stop threads [ 474.374838][ T37] vhci_hcd: release socket [ 474.379280][ T37] vhci_hcd: disconnect device [ 474.384724][ T37] vhci_hcd: stop threads [ 474.388998][ T37] vhci_hcd: release socket [ 474.393548][ T37] vhci_hcd: disconnect device [ 474.398692][ T37] vhci_hcd: stop threads [ 474.403023][ T37] vhci_hcd: release socket [ 474.407452][ T37] vhci_hcd: disconnect device [ 474.412467][ T37] vhci_hcd: stop threads [ 474.416733][ T37] vhci_hcd: release socket [ 474.421194][ T37] vhci_hcd: disconnect device [ 475.327139][ T29] kauditd_printk_skb: 738 callbacks suppressed [ 475.327157][ T29] audit: type=1326 audit(1749064752.355:32201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.371388][T18393] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5327'. [ 475.413402][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x1 [ 475.420936][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.428421][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.435937][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.443419][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.450908][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.458324][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x4 [ 475.465802][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.473227][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.480636][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.488125][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x2 [ 475.495562][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.503044][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.510445][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x4 [ 475.517885][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.525380][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.532782][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x2 [ 475.540246][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.547693][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.555124][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.562609][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.569992][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.577452][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.584953][T11414] hid-generic 0006:0000:0000.0019: unknown main item tag 0x0 [ 475.592337][ T29] audit: type=1326 audit(1749064752.385:32202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.616755][T11414] hid-generic 0006:0000:0000.0019: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 475.616773][ T29] audit: type=1326 audit(1749064752.385:32203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.616805][ T29] audit: type=1326 audit(1749064752.385:32204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.616874][ T29] audit: type=1326 audit(1749064752.385:32205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.699327][ T29] audit: type=1326 audit(1749064752.385:32206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.723356][ T29] audit: type=1326 audit(1749064752.385:32207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.747741][ T29] audit: type=1326 audit(1749064752.385:32208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.772181][ T29] audit: type=1326 audit(1749064752.395:32209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.796370][ T29] audit: type=1326 audit(1749064752.395:32210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 475.860843][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5334'. [ 475.883837][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5334'. [ 476.012005][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x1 [ 476.019611][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.027273][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.035482][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.042988][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.050417][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.057942][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x4 [ 476.065545][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.073705][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.081179][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.088741][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x2 [ 476.096182][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.104379][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.111865][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x4 [ 476.119338][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.126765][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.134947][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x2 [ 476.142458][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.149919][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.157369][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.165480][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.173155][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.180756][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.188198][ T1037] hid-generic 0006:0000:0000.001A: unknown main item tag 0x0 [ 476.213653][ T1037] hid-generic 0006:0000:0000.001A: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 476.509076][T18468] loop9: detected capacity change from 0 to 7 [ 476.531347][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x1 [ 476.536599][T18468] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.538823][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.554228][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.561659][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.569200][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.576663][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.577300][T18468] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.584086][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x4 [ 476.584119][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584144][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584238][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584259][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x2 [ 476.584283][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584311][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584351][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x4 [ 476.584374][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584396][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584482][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x2 [ 476.584507][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584561][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584587][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584613][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584641][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.584844][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.592623][T18468] loop9: unable to read partition table [ 476.599971][ T3458] hid-generic 0006:0000:0000.001B: unknown main item tag 0x0 [ 476.731927][T18468] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 476.731927][T18468] U) failed (rc=-5) [ 476.753247][ T3458] hid-generic 0006:0000:0000.001B: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 476.839669][T18479] loop3: detected capacity change from 0 to 1024 [ 476.846531][T18479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.864366][T18480] loop4: detected capacity change from 0 to 2048 [ 476.871623][T18479] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.941948][T18480] loop4: p1 < > p4 < > [ 476.964124][T18479] EXT4-fs (loop3): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.039421][T18488] netlink: 'syz.1.5365': attribute type 1 has an invalid length. [ 477.048995][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x1 [ 477.056439][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.063864][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.071257][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.078738][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.086207][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.093615][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x4 [ 477.101009][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.108457][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.115861][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.123285][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x2 [ 477.130751][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.138220][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.145708][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x4 [ 477.153114][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.160521][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.167996][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x2 [ 477.175391][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.182800][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.190202][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.197697][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.205142][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.212546][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.220010][ T23] hid-generic 0006:0000:0000.001C: unknown main item tag 0x0 [ 477.275198][T18488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.298042][ T9889] EXT4-fs (loop3): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 477.311826][T18485] bond1: (slave veth3): Enslaving as an active interface with a down link [ 477.329243][ T23] hid-generic 0006:0000:0000.001C: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 477.357767][T18485] bond1: (slave veth0_to_bond): making interface the new active one [ 477.370084][T18485] veth0_to_bond: entered promiscuous mode [ 477.376212][T18485] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 477.397747][T18497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.407094][T18497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.425297][T18499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 477.431936][T18499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.439533][T18499] vhci_hcd vhci_hcd.0: Device attached [ 477.447860][T18499] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 477.454493][T18499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.462750][T18499] vhci_hcd vhci_hcd.0: Device attached [ 477.480934][T18499] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 477.487726][T18499] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 477.496069][T18499] vhci_hcd vhci_hcd.0: Device attached [ 477.503899][T18499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 477.513311][T18499] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 477.519955][T18499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.528250][T18499] vhci_hcd vhci_hcd.0: Device attached [ 477.540152][T18515] __nla_validate_parse: 2 callbacks suppressed [ 477.540245][T18515] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5374'. [ 477.557860][T18499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 477.564665][T18499] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 477.572591][T18499] vhci_hcd vhci_hcd.0: Device attached [ 477.575385][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x1 [ 477.581578][T18499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 477.585584][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.585609][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.585634][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.585661][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.585758][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.585780][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x4 [ 477.585803][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.585828][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.585850][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.585904][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x2 [ 477.585996][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.586020][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.586045][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x4 [ 477.586068][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.586095][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.586142][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x2 [ 477.586165][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.586190][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.586217][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.586244][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.586265][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.596865][T18499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 477.601730][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.610745][T18499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 477.616520][ T23] hid-generic 0006:0000:0000.001D: unknown main item tag 0x0 [ 477.618807][ T23] hid-generic 0006:0000:0000.001D: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 477.636276][T18499] vhci_hcd vhci_hcd.0: port 0 already used [ 477.801621][ T3392] usb 5-1: new high-speed USB device number 10 using vhci_hcd [ 477.810940][T18513] vhci_hcd: connection closed [ 477.811492][T18500] vhci_hcd: connection reset by peer [ 477.821630][T18504] vhci_hcd: connection closed [ 477.821794][T18511] vhci_hcd: connection closed [ 477.824338][ T1587] vhci_hcd: stop threads [ 477.830074][T18508] vhci_hcd: connection closed [ 477.831152][ T1587] vhci_hcd: release socket [ 477.845046][ T1587] vhci_hcd: disconnect device [ 477.890139][ T1587] vhci_hcd: stop threads [ 477.894469][ T1587] vhci_hcd: release socket [ 477.898927][ T1587] vhci_hcd: disconnect device [ 477.910314][ T1587] vhci_hcd: stop threads [ 477.914646][ T1587] vhci_hcd: release socket [ 477.919149][ T1587] vhci_hcd: disconnect device [ 478.004311][ T1587] vhci_hcd: stop threads [ 478.008621][ T1587] vhci_hcd: release socket [ 478.013079][ T1587] vhci_hcd: disconnect device [ 478.033284][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x1 [ 478.040752][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.048218][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.055626][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.063086][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.070553][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.077998][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x4 [ 478.085412][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.092824][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.100227][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.107641][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x2 [ 478.115116][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.122657][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.130079][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x4 [ 478.137558][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.144974][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.152389][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x2 [ 478.159918][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.167397][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.174794][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.182301][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.189701][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.197123][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.204529][ T3458] hid-generic 0006:0000:0000.001E: unknown main item tag 0x0 [ 478.213569][ T1587] vhci_hcd: stop threads [ 478.217847][ T1587] vhci_hcd: release socket [ 478.222452][ T1587] vhci_hcd: disconnect device [ 478.230390][T18533] loop4: detected capacity change from 0 to 128 [ 478.239168][T18533] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.252641][T18533] ext4 filesystem being mounted at /451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.353533][ T3458] hid-generic 0006:0000:0000.001E: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 478.408379][T18542] loop0: detected capacity change from 0 to 128 [ 478.416812][T18542] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.430284][T18542] ext4 filesystem being mounted at /403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.483439][T18544] loop1: detected capacity change from 0 to 2048 [ 478.523503][T18544] loop1: p1 < > p4 < > [ 479.200114][ T3391] usb 7-1: enqueue for inactive port 0 [ 479.205705][ T3391] usb 7-1: enqueue for inactive port 0 [ 479.272339][ T3391] vhci_hcd: vhci_device speed not set [ 479.376549][T12706] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.394509][T12582] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.623584][T18558] loop0: detected capacity change from 0 to 1024 [ 479.630419][T18558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.638337][T18558] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.340620][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 480.340634][ T29] audit: type=1326 audit(1749064757.365:32660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73e6e258e7 code=0x7ffc0000 [ 480.398701][ T29] audit: type=1326 audit(1749064757.395:32661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e6dcab19 code=0x7ffc0000 [ 480.423036][ T29] audit: type=1326 audit(1749064757.395:32662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73e6e258e7 code=0x7ffc0000 [ 480.446747][ T29] audit: type=1326 audit(1749064757.395:32663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e6dcab19 code=0x7ffc0000 [ 480.471038][ T29] audit: type=1326 audit(1749064757.395:32664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 480.494792][ T29] audit: type=1326 audit(1749064757.415:32665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73e6e258e7 code=0x7ffc0000 [ 480.519127][ T29] audit: type=1326 audit(1749064757.415:32666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e6dcab19 code=0x7ffc0000 [ 480.543500][ T29] audit: type=1326 audit(1749064757.415:32667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f73e6e2e929 code=0x7ffc0000 [ 480.567157][ T29] audit: type=1326 audit(1749064757.425:32668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73e6e258e7 code=0x7ffc0000 [ 480.591476][ T29] audit: type=1326 audit(1749064757.425:32669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e6dcab19 code=0x7ffc0000 [ 480.658474][T18580] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 480.665155][T18580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.673505][T18580] vhci_hcd vhci_hcd.0: Device attached [ 480.691779][T18580] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 480.698477][T18580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.706194][T18580] vhci_hcd vhci_hcd.0: Device attached [ 480.716672][T18580] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 480.723327][T18580] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 480.731108][T18580] vhci_hcd vhci_hcd.0: Device attached [ 480.773701][T18597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 480.792357][T18580] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 480.799014][T18580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.806640][T18580] vhci_hcd vhci_hcd.0: Device attached [ 480.824304][T18580] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 480.831011][T18580] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 480.838948][T18580] vhci_hcd vhci_hcd.0: Device attached [ 480.862766][T18580] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 480.874182][T18580] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 480.883946][T18580] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 480.893993][T18606] FAULT_INJECTION: forcing a failure. [ 480.893993][T18606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.907134][T18606] CPU: 1 UID: 0 PID: 18606 Comm: syz.4.5400 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 480.907165][T18606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.907177][T18606] Call Trace: [ 480.907184][T18606] [ 480.907191][T18606] __dump_stack+0x1d/0x30 [ 480.907277][T18606] dump_stack_lvl+0xe8/0x140 [ 480.907302][T18606] dump_stack+0x15/0x1b [ 480.907322][T18606] should_fail_ex+0x265/0x280 [ 480.907366][T18606] should_fail+0xb/0x20 [ 480.907387][T18606] should_fail_usercopy+0x1a/0x20 [ 480.907423][T18606] _copy_from_user+0x1c/0xb0 [ 480.907481][T18606] __sys_bpf+0x178/0x790 [ 480.907532][T18606] __x64_sys_bpf+0x41/0x50 [ 480.907570][T18606] x64_sys_call+0x2478/0x2fb0 [ 480.907598][T18606] do_syscall_64+0xd2/0x200 [ 480.907698][T18606] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 480.907725][T18606] ? clear_bhb_loop+0x40/0x90 [ 480.907745][T18606] ? clear_bhb_loop+0x40/0x90 [ 480.907766][T18606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.907842][T18606] RIP: 0033:0x7f8fb097e929 [ 480.907858][T18606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.907880][T18606] RSP: 002b:00007f8faefe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.907902][T18606] RAX: ffffffffffffffda RBX: 00007f8fb0ba5fa0 RCX: 00007f8fb097e929 [ 480.907917][T18606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001d [ 480.907959][T18606] RBP: 00007f8faefe7090 R08: 0000000000000000 R09: 0000000000000000 [ 480.907992][T18606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.908006][T18606] R13: 0000000000000000 R14: 00007f8fb0ba5fa0 R15: 00007ffec2b81b38 [ 480.908031][T18606] [ 480.920699][T18609] bridge0: port 3(macvlan2) entered blocking state [ 481.083114][T18580] vhci_hcd vhci_hcd.0: port 0 already used [ 481.088238][T18609] bridge0: port 3(macvlan2) entered disabled state [ 481.094244][T18600] vhci_hcd: connection closed [ 481.098645][T18587] vhci_hcd: connection closed [ 481.113223][T18609] macvlan2: entered allmulticast mode [ 481.123046][T18591] vhci_hcd: connection closed [ 481.124957][T18609] bridge0: entered allmulticast mode [ 481.128122][T18612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.131987][T18602] vhci_hcd: connection closed [ 481.135449][T18583] vhci_hcd: connection closed [ 481.148563][ T3458] usb 8-1: SetAddress Request (48) to port 0 [ 481.148721][T18612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.167899][ T6325] vhci_hcd: stop threads [ 481.169828][ T3458] usb 8-1: new SuperSpeed USB device number 48 using vhci_hcd [ 481.172151][ T6325] vhci_hcd: release socket [ 481.172172][ T6325] vhci_hcd: disconnect device [ 481.181140][T18609] macvlan2: left allmulticast mode [ 481.184656][ T6325] vhci_hcd: stop threads [ 481.188723][T18609] bridge0: left allmulticast mode [ 481.194621][ T6325] vhci_hcd: release socket [ 481.207785][ T6325] vhci_hcd: disconnect device [ 481.218962][ T6325] vhci_hcd: stop threads [ 481.224006][ T6325] vhci_hcd: release socket [ 481.228614][ T6325] vhci_hcd: disconnect device [ 481.230468][T18603] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 481.267344][T18623] loop0: detected capacity change from 0 to 2048 [ 481.277081][ T6325] vhci_hcd: stop threads [ 481.281364][ T6325] vhci_hcd: release socket [ 481.286541][ T6325] vhci_hcd: disconnect device [ 481.294786][ T6325] vhci_hcd: stop threads [ 481.299063][ T6325] vhci_hcd: release socket [ 481.303533][ T6325] vhci_hcd: disconnect device [ 481.348717][T18623] loop0: p1 < > p4 < > [ 481.976880][T18652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.985620][T18652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.474341][T18669] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 482.480947][T18669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.489347][T18669] vhci_hcd vhci_hcd.0: Device attached [ 482.599318][T18674] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 482.606034][T18674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.614290][T18674] vhci_hcd vhci_hcd.0: Device attached [ 482.657333][T18669] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 482.663987][T18669] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 482.671688][T18669] vhci_hcd vhci_hcd.0: Device attached [ 482.728294][T18681] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 482.761663][T18669] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 482.768404][T18669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.776677][T18669] vhci_hcd vhci_hcd.0: Device attached [ 482.823807][T18674] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 482.830460][T18674] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 482.838931][T18674] vhci_hcd vhci_hcd.0: Device attached [ 482.932717][T18669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 482.941448][T18669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 482.958534][ T3392] vhci_hcd: vhci_device speed not set [ 482.992607][T18674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 483.048453][T18669] vhci_hcd vhci_hcd.0: port 0 already used [ 483.063822][T18685] vhci_hcd: connection closed [ 483.063955][T18682] vhci_hcd: connection closed [ 483.069099][T18679] vhci_hcd: connection closed [ 483.075424][T18675] vhci_hcd: connection closed [ 483.080464][T18670] vhci_hcd: connection closed [ 483.085363][ T5784] vhci_hcd: stop threads [ 483.094389][ T5784] vhci_hcd: release socket [ 483.098895][ T5784] vhci_hcd: disconnect device [ 483.105845][ T5784] vhci_hcd: stop threads [ 483.110210][ T5784] vhci_hcd: release socket [ 483.114769][ T5784] vhci_hcd: disconnect device [ 483.119948][ T5784] vhci_hcd: stop threads [ 483.124251][ T5784] vhci_hcd: release socket [ 483.128683][ T5784] vhci_hcd: disconnect device [ 483.151467][ T5784] vhci_hcd: stop threads [ 483.155926][ T5784] vhci_hcd: release socket [ 483.160356][ T5784] vhci_hcd: disconnect device [ 483.177274][ T5784] vhci_hcd: stop threads [ 483.181568][ T5784] vhci_hcd: release socket [ 483.186247][ T5784] vhci_hcd: disconnect device [ 483.254275][T18705] loop1: detected capacity change from 0 to 2048 [ 483.293261][T18705] loop1: p1 < > p4 < > [ 483.730149][T18722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5431'. [ 483.749675][T18722] loop2: detected capacity change from 0 to 128 [ 483.773292][T18722] ext4 filesystem being mounted at /546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 483.805514][T18709] loop0: detected capacity change from 0 to 65536 [ 483.949858][T18735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.958664][T18735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.985498][T18732] loop3: detected capacity change from 0 to 2048 [ 484.074220][T18732] loop3: p1 < > p4 < > [ 484.152509][T18751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.163824][T18751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.835234][T18768] bridge0: entered promiscuous mode [ 484.868415][T18768] bridge0: port 3(macvlan3) entered blocking state [ 484.875112][T18768] bridge0: port 3(macvlan3) entered disabled state [ 484.897519][T18768] macvlan3: entered allmulticast mode [ 484.902987][T18768] bridge0: entered allmulticast mode [ 484.911418][T18768] macvlan3: left allmulticast mode [ 484.916689][T18768] bridge0: left allmulticast mode [ 484.919354][T18768] bridge0: left promiscuous mode [ 484.937035][T18770] bridge0: port 3(macvlan2) entered blocking state [ 484.943765][T18770] bridge0: port 3(macvlan2) entered disabled state [ 484.950552][T18770] macvlan2: entered allmulticast mode [ 484.956069][T18770] bridge0: entered allmulticast mode [ 484.962517][T18770] macvlan2: left allmulticast mode [ 484.967739][T18770] bridge0: left allmulticast mode [ 485.033571][T18778] loop2: detected capacity change from 0 to 1024 [ 485.041012][T18778] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 485.055695][T18778] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.5450: lblock 1 mapped to illegal pblock 1 (length 1) [ 485.070133][T18778] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5450: Failed to acquire dquot type 0 [ 485.099914][T18778] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.5450: Freeing blocks not in datazone - block = 0, count = 4096 [ 485.114052][T18778] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.5450: Invalid inode bitmap blk 0 in block_group 0 [ 485.132745][T18778] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 485.138775][ T1587] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 485.155868][T18778] EXT4-fs (loop2): 1 orphan inode deleted [ 485.184285][T18778] blktrace: Concurrent blktraces are not allowed on sg0 [ 485.198672][ T1587] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 485.234787][T18785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.254097][T18785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.281093][T18797] loop9: detected capacity change from 0 to 7 [ 485.288109][T18797] Buffer I/O error on dev loop9, logical block 0, async page read [ 485.296422][T18797] Buffer I/O error on dev loop9, logical block 0, async page read [ 485.304327][T18797] loop9: unable to read partition table [ 485.310181][T18797] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 485.310181][T18797] U) failed (rc=-5) [ 485.562133][ T29] kauditd_printk_skb: 708 callbacks suppressed [ 485.562150][ T29] audit: type=1326 audit(1749064762.585:33375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18800 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b197e929 code=0x7ffc0000 [ 485.614494][T18820] loop3: detected capacity change from 0 to 2048 [ 485.629091][T18819] loop2: detected capacity change from 0 to 1024 [ 486.445475][ T10] usb usb6-port1: attempt power cycle [ 486.464430][ T29] audit: type=1326 audit(1749064762.595:33376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.488317][ T29] audit: type=1326 audit(1749064762.595:33377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.512928][ T29] audit: type=1326 audit(1749064762.595:33378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.518595][ T3458] usb 8-1: device descriptor read/8, error -110 [ 486.536541][ T29] audit: type=1326 audit(1749064762.595:33379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.567074][ T29] audit: type=1326 audit(1749064762.595:33380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.591388][ T29] audit: type=1326 audit(1749064762.595:33381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.591424][ T29] audit: type=1326 audit(1749064762.595:33382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.591451][ T29] audit: type=1326 audit(1749064762.595:33383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.591510][ T29] audit: type=1326 audit(1749064762.595:33384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.2.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 486.594380][T18819] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 486.624770][T18820] loop3: p1 < > p4 < > [ 486.653004][T18819] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.5465: lblock 1 mapped to illegal pblock 1 (length 1) [ 486.731420][ T3458] usb 8-1: new SuperSpeed USB device number 48 using vhci_hcd [ 486.739029][T18819] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5465: Failed to acquire dquot type 0 [ 486.752310][ T3458] usb 8-1: enqueue for inactive port 0 [ 486.757883][ T3458] usb 8-1: enqueue for inactive port 0 [ 486.764614][ T3458] usb 8-1: enqueue for inactive port 0 [ 486.774484][T18819] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.5465: Freeing blocks not in datazone - block = 0, count = 4096 [ 486.789529][T18819] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.5465: Invalid inode bitmap blk 0 in block_group 0 [ 486.802513][ T1587] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 486.818330][T18819] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 486.827109][ T1587] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 486.841207][T18819] EXT4-fs (loop2): 1 orphan inode deleted [ 486.856431][T18819] blktrace: Concurrent blktraces are not allowed on sg0 [ 486.865768][T18832] loop9: detected capacity change from 0 to 7 [ 486.904295][T18832] Buffer I/O error on dev loop9, logical block 0, async page read [ 486.932341][T18832] Buffer I/O error on dev loop9, logical block 0, async page read [ 486.940437][T18832] loop9: unable to read partition table [ 486.942991][T18838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5472'. [ 486.983218][T18832] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 486.983218][T18832] U) failed (rc=-5) [ 487.095650][T18846] netlink: 'syz.1.5475': attribute type 1 has an invalid length. [ 487.253062][T18846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.273922][T18849] bond2: (slave veth5): Enslaving as an active interface with a down link [ 488.792197][ T3458] usb usb8-port1: attempt power cycle [ 488.881679][ T3391] vhci_hcd: vhci_device speed not set [ 488.890682][T18852] bond1: (slave veth0_to_bond): Releasing active interface [ 488.934745][T18856] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 488.941310][T18856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.948922][T18856] vhci_hcd vhci_hcd.0: Device attached [ 488.956737][T18852] veth0_to_bond: left promiscuous mode [ 488.966430][T18856] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 488.973072][T18856] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.980697][T18858] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 488.987371][T18858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.994950][T18856] vhci_hcd vhci_hcd.0: Device attached [ 488.995663][T18858] vhci_hcd vhci_hcd.0: Device attached [ 489.012155][T18852] bond2: (slave veth0_to_bond): making interface the new active one [ 489.023603][T18858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.034802][T18858] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 489.035630][T18868] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 489.041432][T18858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.047929][T18868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.059805][T18858] vhci_hcd vhci_hcd.0: Device attached [ 489.066510][T18868] vhci_hcd vhci_hcd.0: Device attached [ 489.083443][T18852] veth0_to_bond: entered promiscuous mode [ 489.090459][T18852] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 489.101118][T18868] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 489.107745][T18868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.115541][T18868] vhci_hcd vhci_hcd.0: Device attached [ 489.123752][T18866] bridge0: entered promiscuous mode [ 489.130443][T18866] bridge0: port 3(macvlan3) entered blocking state [ 489.137123][T18866] bridge0: port 3(macvlan3) entered disabled state [ 489.145943][T18868] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 489.146068][T18866] macvlan3: entered allmulticast mode [ 489.152638][T18868] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 489.152716][T18868] vhci_hcd vhci_hcd.0: Device attached [ 489.158047][T18866] bridge0: entered allmulticast mode [ 489.166176][T18858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.185589][T18856] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 489.192298][T18856] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 489.195990][T18858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.200025][T18856] vhci_hcd vhci_hcd.0: Device attached [ 489.214539][T18866] macvlan3: left allmulticast mode [ 489.219691][T18866] bridge0: left allmulticast mode [ 489.225989][T18879] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.227006][T18866] bridge0: left promiscuous mode [ 489.240302][T18858] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(23) [ 489.246995][T18858] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 489.254667][T18858] vhci_hcd vhci_hcd.0: Device attached [ 489.274283][T18868] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 489.277864][T18880] vhci_hcd: connection closed [ 489.280926][T18868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.280974][T18868] vhci_hcd vhci_hcd.0: Device attached [ 489.286179][T18863] vhci_hcd: connection closed [ 489.294105][T18869] vhci_hcd: connection closed [ 489.303041][T18857] vhci_hcd: connection closed [ 489.303668][T18875] vhci_hcd: connection closed [ 489.308402][T18860] vhci_hcd: connection closed [ 489.313059][ T10] usb 6-1: SetAddress Request (21) to port 0 [ 489.317829][ T23] usb 9-1: new low-speed USB device number 14 using vhci_hcd [ 489.326301][ T1587] vhci_hcd: stop threads [ 489.340297][ T1587] vhci_hcd: release socket [ 489.344919][ T1587] vhci_hcd: disconnect device [ 489.355205][ T10] usb 6-1: new SuperSpeed USB device number 21 using vhci_hcd [ 489.363330][ T1587] vhci_hcd: stop threads [ 489.363611][T18868] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21) [ 489.367581][ T1587] vhci_hcd: release socket [ 489.367598][ T1587] vhci_hcd: disconnect device [ 489.368137][ T1587] vhci_hcd: stop threads [ 489.374208][T18868] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 489.374298][T18868] vhci_hcd vhci_hcd.0: Device attached [ 489.378690][ T1587] vhci_hcd: release socket [ 489.378707][ T1587] vhci_hcd: disconnect device [ 489.380369][ T1587] vhci_hcd: stop threads [ 489.408405][T18879] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.410624][ T1587] vhci_hcd: release socket [ 489.428314][ T1587] vhci_hcd: disconnect device [ 489.436543][T18878] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 489.461202][ T1587] vhci_hcd: stop threads [ 489.465622][ T1587] vhci_hcd: release socket [ 489.470324][ T1587] vhci_hcd: disconnect device [ 489.473462][T18890] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 489.477943][ T1587] vhci_hcd: stop threads [ 489.488271][ T1587] vhci_hcd: release socket [ 489.492794][ T1587] vhci_hcd: disconnect device [ 489.497773][T18868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 489.511026][T18868] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(29) [ 489.517797][T18868] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 489.525691][T18868] vhci_hcd vhci_hcd.0: Device attached [ 489.548520][T18893] vhci_hcd: connection closed [ 489.554226][ T1587] vhci_hcd: stop threads [ 489.563865][ T1587] vhci_hcd: release socket [ 489.568308][ T1587] vhci_hcd: disconnect device [ 489.574552][T18887] vhci_hcd: connection closed [ 489.574686][T18882] vhci_hcd: connection closed [ 489.579553][T18876] vhci_hcd: connection closed [ 489.585096][T18873] vhci_hcd: connection closed [ 489.590071][T18871] vhci_hcd: connection reset by peer [ 489.614501][ T1587] vhci_hcd: stop threads [ 489.618845][ T1587] vhci_hcd: release socket [ 489.624170][ T1587] vhci_hcd: disconnect device [ 489.636333][ T1587] vhci_hcd: stop threads [ 489.640793][ T1587] vhci_hcd: release socket [ 489.645346][ T1587] vhci_hcd: disconnect device [ 489.691187][ T1587] vhci_hcd: stop threads [ 489.695604][ T1587] vhci_hcd: release socket [ 489.700079][ T1587] vhci_hcd: disconnect device [ 489.710688][ T1587] vhci_hcd: stop threads [ 489.715033][ T1587] vhci_hcd: release socket [ 489.719500][ T1587] vhci_hcd: disconnect device [ 489.747713][ T1587] vhci_hcd: stop threads [ 489.752003][ T1587] vhci_hcd: release socket [ 489.756468][ T1587] vhci_hcd: disconnect device [ 490.050725][T18908] loop9: detected capacity change from 0 to 7 [ 490.071505][T18908] Buffer I/O error on dev loop9, logical block 0, async page read [ 490.099014][T18911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5487'. [ 490.118216][T18908] Buffer I/O error on dev loop9, logical block 0, async page read [ 490.126153][T18908] loop9: unable to read partition table [ 490.178988][T18912] loop0: detected capacity change from 0 to 128 [ 490.231893][T18908] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 490.231893][T18908] U) failed (rc=-5) [ 490.275691][T18912] EXT4-fs mount: 8 callbacks suppressed [ 490.275718][T18912] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.459781][T18912] ext4 filesystem being mounted at /434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 490.468373][T18916] netlink: 22 bytes leftover after parsing attributes in process `syz.1.5489'. [ 490.540879][T18919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.556023][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x1 [ 490.563709][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.571123][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.578582][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.586715][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.594164][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.595832][T18919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.601561][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x4 [ 490.612123][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 490.612141][ T29] audit: type=1326 audit(1749064767.585:33902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.617476][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.622929][ T29] audit: type=1326 audit(1749064767.585:33903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.647206][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.653784][ T29] audit: type=1326 audit(1749064767.585:33904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.678117][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.684716][ T29] audit: type=1326 audit(1749064767.585:33905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.684744][ T29] audit: type=1326 audit(1749064767.585:33906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.708999][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x2 [ 490.715604][ T29] audit: type=1326 audit(1749064767.585:33907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.739881][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.762664][ T29] audit: type=1326 audit(1749064767.585:33908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.762705][ T29] audit: type=1326 audit(1749064767.585:33909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.768268][ T29] audit: type=1326 audit(1749064767.795:33910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.770702][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.794250][ T29] audit: type=1326 audit(1749064767.795:33911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18914 comm="syz.1.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c742e929 code=0x7ffc0000 [ 490.906225][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x4 [ 490.913648][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.921048][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.928558][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x2 [ 490.936755][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.944198][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.951604][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.959047][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.967214][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.974666][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.982117][ T3395] hid-generic 0006:0000:0000.001F: unknown main item tag 0x0 [ 490.995160][T12582] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.104167][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5493'. [ 491.124895][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5493'. [ 491.135087][ T3395] hid-generic 0006:0000:0000.001F: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 491.156355][T18929] loop0: detected capacity change from 0 to 2048 [ 491.165997][T18931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.175417][T18931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.203277][T18929] loop0: p1 < > p4 < > [ 491.335296][T18950] netlink: 'syz.0.5495': attribute type 1 has an invalid length. [ 491.354768][T18950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.782858][ T3458] usb usb8-port1: unable to enumerate USB device [ 491.869973][T18970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.880459][T18970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.914238][T18968] loop4: detected capacity change from 0 to 2048 [ 491.962685][T18968] loop4: p1 < > p4 < > [ 492.314704][T18993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.323292][T18993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.661376][T19004] loop2: detected capacity change from 0 to 512 [ 492.668536][T19004] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 492.678478][T19004] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 492.687620][T19004] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 492.698473][T19017] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5522'. [ 492.710456][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x1 [ 492.717946][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.725416][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.732835][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.740355][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.747790][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.755201][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x4 [ 492.762638][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.770039][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.777507][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.785013][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x2 [ 492.792568][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.799961][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.807400][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x4 [ 492.814808][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.822410][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.829810][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x2 [ 492.837222][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.844635][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.852014][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.859415][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.866807][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.874212][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.881596][ T3458] hid-generic 0006:0000:0000.0020: unknown main item tag 0x0 [ 492.944740][ T3458] hid-generic 0006:0000:0000.0020: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 493.730248][T19026] netlink: 'syz.4.5526': attribute type 1 has an invalid length. [ 493.835504][T19026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.861765][T19030] bond1: (slave veth3): Enslaving as an active interface with a down link [ 493.886900][T19026] bond1: (slave veth0_to_bond): making interface the new active one [ 493.896438][T19026] veth0_to_bond: entered promiscuous mode [ 493.925813][T19026] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 494.376835][T19054] loop3: detected capacity change from 0 to 1024 [ 494.383332][ T23] usb 9-1: enqueue for inactive port 0 [ 494.388836][ T23] usb 9-1: enqueue for inactive port 0 [ 494.402417][T19054] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 494.415508][T19050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.424735][T19050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.425538][T19054] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.5537: lblock 1 mapped to illegal pblock 1 (length 1) [ 494.450566][T19066] netlink: 22 bytes leftover after parsing attributes in process `syz.4.5539'. [ 494.462978][ T10] usb 6-1: device descriptor read/8, error -110 [ 494.470120][T19054] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5537: Failed to acquire dquot type 0 [ 494.483768][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x1 [ 494.491219][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.499465][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.506952][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.514386][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.521863][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.529973][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x4 [ 494.537428][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.544877][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.552969][ T23] vhci_hcd: vhci_device speed not set [ 494.555524][T19054] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.5537: Freeing blocks not in datazone - block = 0, count = 4096 [ 494.558368][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.573342][T19054] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.5537: Invalid inode bitmap blk 0 in block_group 0 [ 494.579075][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x2 [ 494.593385][T19054] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 494.599736][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.609548][T19054] EXT4-fs (loop3): 1 orphan inode deleted [ 494.615760][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.622309][T19054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.629632][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x4 [ 494.648852][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.656982][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.664421][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x2 [ 494.671210][T19054] blktrace: Concurrent blktraces are not allowed on sg0 [ 494.671805][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.671833][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.694425][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.701836][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.709347][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.717398][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.725009][ T3395] hid-generic 0006:0000:0000.0021: unknown main item tag 0x0 [ 494.781317][ T51] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 494.782315][ T10] usb 6-1: new SuperSpeed USB device number 21 using vhci_hcd [ 494.804829][ T3395] hid-generic 0006:0000:0000.0021: hidraw0: VIRTUAL HID vfaffff.00 Device [syz0] on syz1 [ 494.815302][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 494.830005][ T9889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.224688][ T10] usb 6-1: enqueue for inactive port 0 [ 495.230228][ T10] usb 6-1: enqueue for inactive port 0 [ 495.236242][ T10] usb 6-1: enqueue for inactive port 0 [ 495.256215][T19081] netlink: 'syz.0.5545': attribute type 1 has an invalid length. [ 495.276379][T19081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.368594][T19081] bond2: (slave veth3): Enslaving as an active interface with a down link [ 495.412362][ T3392] vhci_hcd: vhci_device speed not set [ 495.438472][T19081] bond2: (slave veth0_to_bond): making interface the new active one [ 495.461553][T19081] veth0_to_bond: entered promiscuous mode [ 495.470558][T19081] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 495.927051][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 495.927142][ T29] audit: type=1326 audit(1749064772.955:34269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19107 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 496.066134][ T29] audit: type=1326 audit(1749064772.985:34270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19107 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 496.090076][ T29] audit: type=1326 audit(1749064772.985:34271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19107 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 496.113917][ T29] audit: type=1326 audit(1749064772.985:34272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19107 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb097e929 code=0x7ffc0000 [ 496.138010][T19115] netlink: 22 bytes leftover after parsing attributes in process `syz.4.5557'. [ 496.192526][T19118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.203560][T19118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.212635][T19126] netlink: 'syz.2.5558': attribute type 1 has an invalid length. [ 496.227982][T19126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.246365][T19129] FAULT_INJECTION: forcing a failure. [ 496.246365][T19129] name failslab, interval 1, probability 0, space 0, times 0 [ 496.259193][T19129] CPU: 1 UID: 0 PID: 19129 Comm: syz.4.5561 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 496.259255][T19129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.259270][T19129] Call Trace: [ 496.259278][T19129] [ 496.259287][T19129] __dump_stack+0x1d/0x30 [ 496.259339][T19129] dump_stack_lvl+0xe8/0x140 [ 496.259365][T19129] dump_stack+0x15/0x1b [ 496.259384][T19129] should_fail_ex+0x265/0x280 [ 496.259403][T19129] should_failslab+0x8c/0xb0 [ 496.259425][T19129] kmem_cache_alloc_node_noprof+0x57/0x320 [ 496.259493][T19129] ? __alloc_skb+0x101/0x320 [ 496.259518][T19129] __alloc_skb+0x101/0x320 [ 496.259612][T19129] netlink_alloc_large_skb+0xba/0xf0 [ 496.259641][T19129] netlink_sendmsg+0x3cf/0x6b0 [ 496.259670][T19129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.259697][T19129] __sock_sendmsg+0x145/0x180 [ 496.259782][T19129] ____sys_sendmsg+0x31e/0x4e0 [ 496.259812][T19129] ___sys_sendmsg+0x17b/0x1d0 [ 496.259853][T19129] __x64_sys_sendmsg+0xd4/0x160 [ 496.259909][T19129] x64_sys_call+0x2999/0x2fb0 [ 496.259975][T19129] do_syscall_64+0xd2/0x200 [ 496.260014][T19129] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 496.260039][T19129] ? clear_bhb_loop+0x40/0x90 [ 496.260057][T19129] ? clear_bhb_loop+0x40/0x90 [ 496.260119][T19129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.260265][T19129] RIP: 0033:0x7f8fb097e929 [ 496.260279][T19129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.260296][T19129] RSP: 002b:00007f8faefe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.260312][T19129] RAX: ffffffffffffffda RBX: 00007f8fb0ba5fa0 RCX: 00007f8fb097e929 [ 496.260323][T19129] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 496.260356][T19129] RBP: 00007f8faefe7090 R08: 0000000000000000 R09: 0000000000000000 [ 496.260367][T19129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.260378][T19129] R13: 0000000000000000 R14: 00007f8fb0ba5fa0 R15: 00007ffec2b81b38 [ 496.260396][T19129] [ 496.263723][T19126] bond1: (slave veth3): Enslaving as an active interface with a down link [ 496.617325][T19134] bond1: (slave veth0_to_bond): making interface the new active one [ 496.662615][T19134] veth0_to_bond: entered promiscuous mode [ 496.681722][T19134] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 497.795931][ T29] audit: type=1326 audit(1749064774.825:34273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 497.822313][ T29] audit: type=1326 audit(1749064774.845:34274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 497.846057][ T29] audit: type=1326 audit(1749064774.845:34275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 497.869737][ T29] audit: type=1326 audit(1749064774.845:34276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 497.893333][ T29] audit: type=1326 audit(1749064774.845:34277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 497.917028][ T29] audit: type=1326 audit(1749064774.845:34278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f85834de929 code=0x7ffc0000 [ 497.987526][T19168] loop9: detected capacity change from 0 to 7 [ 497.994765][T19168] Buffer I/O error on dev loop9, logical block 0, async page read [ 498.004027][T19168] Buffer I/O error on dev loop9, logical block 0, async page read [ 498.011910][T19168] loop9: unable to read partition table [ 498.019289][T19170] netlink: 'syz.3.5574': attribute type 1 has an invalid length. [ 498.021481][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5577'. [ 498.037807][T19168] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 498.037807][T19168] U) failed (rc=-5) [ 498.064131][T19175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.073515][T19170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.080410][T19175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.096887][T19177] loop2: detected capacity change from 0 to 128 [ 498.117503][T19180] bond1: (slave veth5): Enslaving as an active interface with a down link [ 498.132605][T19177] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 498.151623][T19177] ext4 filesystem being mounted at /571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 498.156392][T19170] bond1: (slave veth0_to_bond): making interface the new active one [ 498.194018][T19170] veth0_to_bond: entered promiscuous mode [ 498.199959][T19170] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 498.368072][T19188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.376749][T19188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.433354][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5581'. [ 498.448236][T19196] loop4: detected capacity change from 0 to 128 [ 498.457011][T19196] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 498.469297][T19196] ext4 filesystem being mounted at /493/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 498.816047][T10887] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 499.269282][T12706] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 499.302386][T19217] loop2: detected capacity change from 0 to 2048 [ 499.344358][T19217] loop2: p1 < > p4 < > [ 499.377931][T12706] ================================================================== [ 499.386070][T12706] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 499.393656][T12706] [ 499.396034][T12706] read-write to 0xffff888237d25e68 of 1 bytes by task 19216 on cpu 1: [ 499.404203][T12706] folio_add_lru+0xa5/0x1f0 [ 499.408746][T12706] shmem_get_folio_gfp+0x7ab/0xd60 [ 499.413903][T12706] shmem_fault+0xf6/0x250 [ 499.418256][T12706] __do_fault+0xbc/0x200 [ 499.422520][T12706] handle_mm_fault+0xf78/0x2be0 [ 499.427380][T12706] __get_user_pages+0x1036/0x1fb0 [ 499.432412][T12706] __mm_populate+0x243/0x3a0 [ 499.437012][T12706] vm_mmap_pgoff+0x232/0x2e0 [ 499.441614][T12706] ksys_mmap_pgoff+0xc2/0x310 [ 499.446298][T12706] x64_sys_call+0x1602/0x2fb0 [ 499.450983][T12706] do_syscall_64+0xd2/0x200 [ 499.455503][T12706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.461404][T12706] [ 499.463728][T12706] read to 0xffff888237d25e68 of 1 bytes by task 12706 on cpu 0: [ 499.471361][T12706] __lru_add_drain_all+0x12b/0x3f0 [ 499.476479][T12706] lru_add_drain_all+0x10/0x20 [ 499.481246][T12706] invalidate_bdev+0x47/0x70 [ 499.485847][T12706] ext4_put_super+0x624/0x7d0 [ 499.490538][T12706] generic_shutdown_super+0xe6/0x210 [ 499.495841][T12706] kill_block_super+0x2a/0x70 [ 499.500524][T12706] ext4_kill_sb+0x42/0x80 [ 499.504864][T12706] deactivate_locked_super+0x75/0x1c0 [ 499.510254][T12706] deactivate_super+0x97/0xa0 [ 499.514949][T12706] cleanup_mnt+0x269/0x2e0 [ 499.519396][T12706] __cleanup_mnt+0x19/0x20 [ 499.523824][T12706] task_work_run+0x12e/0x1a0 [ 499.528423][T12706] exit_to_user_mode_loop+0xe4/0x100 [ 499.533720][T12706] do_syscall_64+0x1d6/0x200 [ 499.538328][T12706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.544226][T12706] [ 499.546547][T12706] value changed: 0x13 -> 0x14 [ 499.551218][T12706] [ 499.553541][T12706] Reported by Kernel Concurrency Sanitizer on: [ 499.559699][T12706] CPU: 0 UID: 0 PID: 12706 Comm: syz-executor Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 499.572030][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.582089][T12706] ================================================================== [ 502.662355][ T12] veth0_to_bond: left promiscuous mode [ 506.612409][ T51] veth0_to_bond: left promiscuous mode [ 508.062352][ T12] veth0_to_bond: left promiscuous mode [ 508.992386][ T5784] veth0_to_bond: left promiscuous mode