last executing test programs: 1.577702383s ago: executing program 3 (id=1745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 1.576274623s ago: executing program 1 (id=1746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x8, 0x0, 0x81, 0x2000, 0x1, 0x5824, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xd, &(0x7f00000008c0)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0xa, 0x50, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000200000ea5e"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ebffffff7a8a4bda4378e7f8ff05000000bfa200000000000007020000f8ffffff23d2000008000000b7040000f6000000850000004300000095", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r6}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 1.544056686s ago: executing program 3 (id=1748): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x1c0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.48083661s ago: executing program 3 (id=1749): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000502000002"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1.427162725s ago: executing program 3 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) uname(&(0x7f00000002c0)=""/229) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000280)={0xe, {0x6, 0x8, 0x9}}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="796100000000dd0000007ee7a0bedd1c8bc48a6f245e9b70e4d9441bfd171cbd82272d60029edf2d188a4bc6743c71c467edbfaf7d69ef76e0d6dccdbe27e04867dc458de7357311affa9d0e3a2d7f95a5434b0de0bdac2836f08e35f2086b0b5afe95"], 0x1c}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpid() sendto$inet6(r9, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.150048087s ago: executing program 2 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000400)={@private1, @mcast1, @private0, 0xfffffff7, 0x200, 0x5, 0x100, 0x38ad1111, 0x20000, r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1.102806251s ago: executing program 4 (id=1758): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149004001040800", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000a1ee08f6d6b9", 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000006b800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000080)='module_request\x00', r3}, 0x6d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1001) socketpair(0x0, 0x0, 0x2, &(0x7f0000001c00)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x9, 0x0) 1.084156802s ago: executing program 2 (id=1759): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000fc0)=""/83, 0x53}, {&(0x7f0000001040)=""/137, 0x89}, {&(0x7f0000001100)=""/23, 0x17}], 0x3, &(0x7f0000001180)=""/61, 0x3d}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket(0x2, 0x80805, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$autofs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="d2b6aa49", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) fchown(0xffffffffffffffff, 0x0, 0x0) 780.599387ms ago: executing program 0 (id=1762): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000ea0301040700000080000000070000050a0002000000000206000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830", 0xc5}], 0x1}}], 0x1, 0x400c0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 749.214999ms ago: executing program 0 (id=1763): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 689.278644ms ago: executing program 1 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830", 0xc5}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac1414000800050064010100100016800c0001000308010802000000060015000400000015e2ef4fdf503913f65b5e7d29ba999444b5245838628d688300c0b9a3947ec7451451efeecd23e86d6163fa7fcfb78d9f15c0ba21b1a91fd5"], 0x44}}, 0x0) 625.764379ms ago: executing program 0 (id=1765): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYRES64=r0], 0x38}}, 0x10) 621.26366ms ago: executing program 1 (id=1766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) 578.837973ms ago: executing program 1 (id=1767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) 577.772253ms ago: executing program 4 (id=1768): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 545.253886ms ago: executing program 4 (id=1769): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x3e}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x200c0d2, &(0x7f0000000400)={[{@usrjquota}]}, 0x21, 0x554, &(0x7f00000007c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000740)='console\x00', r7}, 0x18) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) unshare(0x64000600) r9 = socket$inet6(0x10, 0x2, 0x0) write(r9, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) 544.483176ms ago: executing program 0 (id=1770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 524.239228ms ago: executing program 1 (id=1771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x6) close(r0) 518.842498ms ago: executing program 3 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000502000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 486.87376ms ago: executing program 0 (id=1773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 476.129911ms ago: executing program 3 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x8, 0x0, 0x81, 0x2000, 0x1, 0x5824, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xd, &(0x7f00000008c0)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0xa, 0x50, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000200000ea5e"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ebffffff7a8a4bda4378e7f8ff05000000bfa200000000000007020000f8ffffff23d2000008000000b7040000f6000000850000004300000095", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r6}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 463.906942ms ago: executing program 1 (id=1775): prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e1885898ecbf498ff395c39576009559a276bc01a22a0baf76d47c5091036c5b4166fad7bd8325c03692da235d8ff6155dca6039658bef9e53f5a87f2a15cfde6924f2a732b6d2e8c44856d1698f29f35388fe3f5545af1cc6cdde31631c8388790e75ed81e2983f2bf416ec584d59"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_usbip_server_init(0x3) write$usbip_server(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002"], 0x30) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r7, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x0) shmctl$SHM_LOCK(r0, 0xb) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0xc0c, &(0x7f0000000200)={0x0, 0xb624, 0x10100, 0x800083, 0x305, 0x0, r7}, &(0x7f0000000100), &(0x7f00000007c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="e9e41952bdeab2e3bdd1a56b30f3555a04e425", 0x13) 348.344632ms ago: executing program 0 (id=1776): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149004001040800", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000a1ee08f6d6b9", 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000006b800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000080)='module_request\x00', r3}, 0x6d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1001) socketpair(0x0, 0x0, 0x2, &(0x7f0000001c00)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) timerfd_create(0x9, 0x0) 225.680081ms ago: executing program 4 (id=1777): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) 223.413221ms ago: executing program 2 (id=1778): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x18) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 129.337179ms ago: executing program 4 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x6) close(r0) 128.478039ms ago: executing program 2 (id=1780): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830", 0xc5}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac1414000800050064010100100016800c0001000308010802000000060015000400000015e2ef4fdf503913f65b5e7d29ba999444b5245838628d688300c0b9a3947ec7451451efeecd23e86d6163fa7fcfb78d9f15c0ba21b1a91fd5"], 0x44}}, 0x0) 93.083302ms ago: executing program 2 (id=1781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) uname(&(0x7f00000002c0)=""/229) socket$nl_route(0x10, 0x3, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xe, {0x6, 0x8, 0x9}}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796100000000dd0000007ee7a0bedd1c8bc48a6f245e9b70e4d9441bfd171cbd82272d60029edf2d188a4bc6743c71c467edbfaf7d69ef76e0d6dccdbe27e04867dc458de7357311affa9d0e3a2d7f95a5434b0de0bdac2836f08e35f2086b0b5afe95"], 0x1c}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpid() sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 51.581845ms ago: executing program 4 (id=1782): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000001c0)={0xa, 0x8000000003ff, 0x5, 0x6, 0x3, 0x0, [{0x2, 0x6, 0x6, '\x00', 0x1000}, {0x10009, 0x3, 0xffffffffffffffff, '\x00', 0x80}, {0x5e, 0x2, 0x4b, '\x00', 0x2000}]}) 0s ago: executing program 2 (id=1783): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") kernel console output (not intermixed with test programs): 6908800 is beyond EOD, truncated [ 84.018587][ T6132] loop4: p5 start 16908800 is beyond EOD, truncated [ 84.023126][ T6138] netlink: 256 bytes leftover after parsing attributes in process `syz.0.880'. [ 84.105094][ T6144] loop4: detected capacity change from 0 to 512 [ 84.114417][ T6145] loop0: detected capacity change from 0 to 256 [ 84.121359][ T6145] vfat: Unknown parameter '0000000000000000000000000000000000000000005' [ 84.131767][ T6144] EXT4-fs: Ignoring removed i_version option [ 84.158346][ T6144] EXT4-fs (loop4): 1 truncate cleaned up [ 84.268982][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 84.304015][ T6159] 9pnet_fd: Insufficient options for proto=fd [ 84.322632][ T6164] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 84.329701][ T6164] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.337438][ T6164] vhci_hcd vhci_hcd.0: Device attached [ 84.349282][ T6165] vhci_hcd: unknown pdu 2 [ 84.354553][ T160] vhci_hcd: stop threads [ 84.359071][ T160] vhci_hcd: release socket [ 84.364188][ T160] vhci_hcd: disconnect device [ 85.028155][ T6195] loop0: detected capacity change from 0 to 128 [ 85.035819][ T6195] FAT-fs (loop0): bogus number of reserved sectors [ 85.042731][ T6195] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 85.052321][ T6195] FAT-fs (loop0): Can't find a valid FAT filesystem [ 85.199708][ T6212] loop3: detected capacity change from 0 to 256 [ 85.207547][ T6212] vfat: Unknown parameter '0000000000000000000000000000000000000000005' [ 85.256609][ T6215] loop4: detected capacity change from 0 to 1024 [ 85.287087][ T6195] loop0: detected capacity change from 0 to 512 [ 85.296923][ T6195] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.311856][ T6195] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.902: invalid indirect mapped block 83886080 (level 1) [ 85.326454][ T6195] EXT4-fs (loop0): Remounting filesystem read-only [ 85.335057][ T6195] EXT4-fs (loop0): 1 orphan inode deleted [ 85.341814][ T6195] EXT4-fs (loop0): 1 truncate cleaned up [ 85.631904][ T6242] loop1: detected capacity change from 0 to 512 [ 85.641266][ T6242] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 85.649916][ T6242] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.918: invalid indirect mapped block 2683928664 (level 1) [ 85.664455][ T6242] EXT4-fs (loop1): Remounting filesystem read-only [ 85.673034][ T6242] EXT4-fs (loop1): 1 truncate cleaned up [ 85.976627][ T6246] 9pnet_fd: Insufficient options for proto=fd [ 86.126873][ T29] kauditd_printk_skb: 1036 callbacks suppressed [ 86.126886][ T29] audit: type=1326 audit(1755043860.499:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8d89ebe9 code=0x7ffc0000 [ 86.159189][ T6255] loop3: detected capacity change from 0 to 512 [ 86.160052][ T29] audit: type=1326 audit(1755043860.499:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8d89ebe9 code=0x7ffc0000 [ 86.189010][ T6255] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 86.190489][ T29] audit: type=1326 audit(1755043860.519:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fce8d89ebe9 code=0x7ffc0000 [ 86.200151][ T6255] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.923: invalid indirect mapped block 2683928664 (level 1) [ 86.223147][ T29] audit: type=1326 audit(1755043860.519:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce8d89ec23 code=0x7ffc0000 [ 86.223176][ T29] audit: type=1326 audit(1755043860.519:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fce8d89d69f code=0x7ffc0000 [ 86.223200][ T29] audit: type=1326 audit(1755043860.519:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fce8d89ec77 code=0x7ffc0000 [ 86.223280][ T29] audit: type=1326 audit(1755043860.539:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce8d89d550 code=0x7ffc0000 [ 86.223325][ T29] audit: type=1326 audit(1755043860.539:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce8d89e7eb code=0x7ffc0000 [ 86.224172][ T29] audit: type=1326 audit(1755043860.539:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fce8d89d84a code=0x7ffc0000 [ 86.240062][ T6255] EXT4-fs (loop3): Remounting filesystem read-only [ 86.261669][ T29] audit: type=1326 audit(1755043860.539:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fce8d89d84a code=0x7ffc0000 [ 86.413171][ T6255] EXT4-fs (loop3): 1 truncate cleaned up [ 86.468621][ T6260] loop2: detected capacity change from 0 to 512 [ 86.478710][ T6260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.498976][ T6264] loop1: detected capacity change from 0 to 2048 [ 86.525703][ T6260] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.925: Bad quota inum: 29696, type: 1 [ 86.537572][ T6260] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 86.555564][ T6260] EXT4-fs (loop2): mount failed [ 86.576073][ T6277] __nla_validate_parse: 9 callbacks suppressed [ 86.576087][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 86.577455][ T6260] validate_nla: 4 callbacks suppressed [ 86.577518][ T6260] netlink: 'syz.2.925': attribute type 2 has an invalid length. [ 86.605248][ T6260] netlink: 'syz.2.925': attribute type 8 has an invalid length. [ 86.613095][ T6260] netlink: 132 bytes leftover after parsing attributes in process `syz.2.925'. [ 86.625288][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 86.636748][ T6260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6260 comm=syz.2.925 [ 86.684724][ T6260] netlink: 'syz.2.925': attribute type 12 has an invalid length. [ 86.745127][ T6285] loop2: detected capacity change from 0 to 1024 [ 86.819643][ T6295] loop4: detected capacity change from 0 to 512 [ 86.826591][ T6295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.846907][ T6295] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.937: invalid indirect mapped block 4294967295 (level 0) [ 86.863733][ T6295] EXT4-fs (loop4): Remounting filesystem read-only [ 86.871756][ T6295] EXT4-fs (loop4): 1 orphan inode deleted [ 86.878072][ T6295] EXT4-fs (loop4): 1 truncate cleaned up [ 86.887734][ T6298] loop0: detected capacity change from 0 to 512 [ 86.931989][ T6298] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 86.941806][ T6298] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.938: invalid indirect mapped block 2683928664 (level 1) [ 86.973824][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 86.988494][ T6298] EXT4-fs (loop0): Remounting filesystem read-only [ 86.998909][ T6298] EXT4-fs (loop0): 1 truncate cleaned up [ 87.007790][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 87.017133][ T6312] loop3: detected capacity change from 0 to 512 [ 87.050082][ T6312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.070010][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 87.098072][ T6312] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.944: Bad quota inum: 29696, type: 1 [ 87.113191][ T6316] 9pnet_fd: Insufficient options for proto=fd [ 87.124405][ T6322] netlink: 332 bytes leftover after parsing attributes in process `syz.4.948'. [ 87.133802][ T6322] netlink: 'syz.4.948': attribute type 9 has an invalid length. [ 87.142200][ T6322] netlink: 108 bytes leftover after parsing attributes in process `syz.4.948'. [ 87.146496][ T6312] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 87.152122][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.948'. [ 87.177894][ T6312] EXT4-fs (loop3): mount failed [ 87.200296][ T6327] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 87.210760][ T6326] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 87.211514][ T6312] netlink: 'syz.3.944': attribute type 2 has an invalid length. [ 87.226362][ T6312] netlink: 'syz.3.944': attribute type 8 has an invalid length. [ 87.234970][ T6312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.944'. [ 87.260281][ T6312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6312 comm=syz.3.944 [ 87.327689][ T6333] netlink: 'syz.3.944': attribute type 12 has an invalid length. [ 87.335725][ T6332] loop0: detected capacity change from 0 to 512 [ 87.390268][ T6332] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 87.411139][ T6332] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.952: invalid indirect mapped block 2683928664 (level 1) [ 87.429294][ T6342] loop4: detected capacity change from 0 to 512 [ 87.446880][ T6332] EXT4-fs (loop0): Remounting filesystem read-only [ 87.454675][ T6342] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 87.454707][ T6332] EXT4-fs (loop0): 1 truncate cleaned up [ 87.469562][ T6342] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.956: invalid indirect mapped block 2683928664 (level 1) [ 87.485629][ T6342] EXT4-fs (loop4): Remounting filesystem read-only [ 87.492714][ T6342] EXT4-fs (loop4): 1 truncate cleaned up [ 87.627080][ T6358] loop0: detected capacity change from 0 to 1024 [ 87.644727][ T6362] FAULT_INJECTION: forcing a failure. [ 87.644727][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.653199][ T6358] EXT4-fs: Ignoring removed bh option [ 87.658393][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.1.965 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 87.658421][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.658432][ T6362] Call Trace: [ 87.658440][ T6362] [ 87.658446][ T6362] __dump_stack+0x1d/0x30 [ 87.658466][ T6362] dump_stack_lvl+0xe8/0x140 [ 87.658543][ T6362] dump_stack+0x15/0x1b [ 87.658575][ T6362] should_fail_ex+0x265/0x280 [ 87.658604][ T6362] should_fail+0xb/0x20 [ 87.658691][ T6362] should_fail_usercopy+0x1a/0x20 [ 87.658713][ T6362] _copy_from_user+0x1c/0xb0 [ 87.658739][ T6362] ___sys_sendmsg+0xc1/0x1d0 [ 87.658773][ T6362] __x64_sys_sendmsg+0xd4/0x160 [ 87.658841][ T6362] x64_sys_call+0x191e/0x2ff0 [ 87.658862][ T6362] do_syscall_64+0xd2/0x200 [ 87.658887][ T6362] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.658928][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.658950][ T6362] RIP: 0033:0x7fa863b2ebe9 [ 87.658965][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.658982][ T6362] RSP: 002b:00007fa862597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.659102][ T6362] RAX: ffffffffffffffda RBX: 00007fa863d55fa0 RCX: 00007fa863b2ebe9 [ 87.659115][ T6362] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 87.659128][ T6362] RBP: 00007fa862597090 R08: 0000000000000000 R09: 0000000000000000 [ 87.659160][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.659172][ T6362] R13: 00007fa863d56038 R14: 00007fa863d55fa0 R15: 00007ffe993d5088 [ 87.659191][ T6362] [ 87.760573][ T6367] loop3: detected capacity change from 0 to 512 [ 87.766415][ T6358] EXT4-fs: inline encryption not supported [ 87.812784][ T6367] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 87.839749][ T6358] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.864993][ T6367] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.968: invalid indirect mapped block 2683928664 (level 1) [ 87.891276][ T6367] EXT4-fs (loop3): Remounting filesystem read-only [ 87.901052][ T6358] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 87.912085][ T6367] EXT4-fs (loop3): 1 truncate cleaned up [ 87.921199][ T6358] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.963: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.938036][ T6358] EXT4-fs (loop0): Remounting filesystem read-only [ 87.940831][ T6376] loop2: detected capacity change from 0 to 512 [ 87.952857][ T6358] EXT4-fs (loop0): 1 orphan inode deleted [ 87.961224][ T6368] loop1: detected capacity change from 0 to 512 [ 87.992923][ T6368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.009097][ T6376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.024951][ T6376] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.969: invalid indirect mapped block 4294967295 (level 0) [ 88.045974][ T6376] EXT4-fs (loop2): Remounting filesystem read-only [ 88.053854][ T6376] EXT4-fs (loop2): 1 orphan inode deleted [ 88.059749][ T6376] EXT4-fs (loop2): 1 truncate cleaned up [ 88.084395][ T6368] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.966: Bad quota inum: 29696, type: 1 [ 88.097995][ T6368] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 88.135909][ T6368] EXT4-fs (loop1): mount failed [ 88.165581][ T6368] netlink: 'syz.1.966': attribute type 2 has an invalid length. [ 88.196218][ T6368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6368 comm=syz.1.966 [ 88.203439][ T6394] loop0: detected capacity change from 0 to 128 [ 88.234201][ T6394] FAT-fs (loop0): bogus number of reserved sectors [ 88.241299][ T6394] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 88.251085][ T6394] FAT-fs (loop0): Can't find a valid FAT filesystem [ 88.273094][ T6396] loop4: detected capacity change from 0 to 512 [ 88.280130][ T6396] EXT4-fs: Ignoring removed i_version option [ 88.290491][ T6396] EXT4-fs (loop4): 1 truncate cleaned up [ 88.373865][ T6404] loop4: detected capacity change from 0 to 1024 [ 88.423076][ T6406] loop3: detected capacity change from 0 to 2048 [ 88.440753][ T6404] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 88.461648][ T6408] loop1: detected capacity change from 0 to 512 [ 88.506381][ T6408] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 88.541730][ T6408] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.981: invalid indirect mapped block 2683928664 (level 1) [ 88.557286][ T6408] EXT4-fs (loop1): Remounting filesystem read-only [ 88.589525][ T6408] EXT4-fs (loop1): 1 truncate cleaned up [ 88.641612][ T6414] loop0: detected capacity change from 0 to 512 [ 88.652699][ T6414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.682381][ T6414] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.976: invalid indirect mapped block 83886080 (level 1) [ 88.698616][ T6414] EXT4-fs (loop0): Remounting filesystem read-only [ 88.705847][ T6414] EXT4-fs (loop0): 1 orphan inode deleted [ 88.712155][ T6414] EXT4-fs (loop0): 1 truncate cleaned up [ 88.813671][ T6429] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 88.820317][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.828195][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 88.834456][ T6430] vhci_hcd: unknown pdu 2 [ 88.839397][ T160] vhci_hcd: stop threads [ 88.843680][ T160] vhci_hcd: release socket [ 88.848164][ T160] vhci_hcd: disconnect device [ 89.052830][ T6437] loop2: detected capacity change from 0 to 2048 [ 89.100315][ T3292] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 89.105520][ T3292] loop2: partition table partially beyond EOD, truncated [ 89.119178][ T3292] loop2: p1 start 4278190080 is beyond EOD, truncated [ 89.125971][ T3292] loop2: p2 start 16908800 is beyond EOD, truncated [ 89.136115][ T3292] loop2: p5 start 16908800 is beyond EOD, truncated [ 89.147726][ T6437] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 89.153334][ T6437] loop2: partition table partially beyond EOD, truncated [ 89.163946][ T6437] loop2: p1 start 4278190080 is beyond EOD, truncated [ 89.171165][ T6437] loop2: p2 start 16908800 is beyond EOD, truncated [ 89.180270][ T6437] loop2: p5 start 16908800 is beyond EOD, truncated [ 89.242933][ T6446] loop0: detected capacity change from 0 to 512 [ 89.262922][ T6446] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 89.271922][ T6448] loop3: detected capacity change from 0 to 2048 [ 89.281571][ T6446] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.992: invalid indirect mapped block 2683928664 (level 1) [ 89.308245][ T6446] EXT4-fs (loop0): Remounting filesystem read-only [ 89.325663][ T6446] EXT4-fs (loop0): 1 truncate cleaned up [ 89.381754][ T6457] loop2: detected capacity change from 0 to 2048 [ 89.397198][ T6460] loop4: detected capacity change from 0 to 512 [ 89.405379][ T6460] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.428360][ T6460] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.997: invalid indirect mapped block 4294967295 (level 0) [ 89.444377][ T6460] EXT4-fs (loop4): Remounting filesystem read-only [ 89.454770][ T6460] EXT4-fs (loop4): 1 orphan inode deleted [ 89.461147][ T6460] EXT4-fs (loop4): 1 truncate cleaned up [ 90.319410][ T6493] loop3: detected capacity change from 0 to 1024 [ 90.689752][ T6538] loop0: detected capacity change from 0 to 512 [ 90.700490][ T6538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.714596][ T6534] loop4: detected capacity change from 0 to 2048 [ 90.725425][ T6538] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.1027: Bad quota inum: 29696, type: 1 [ 90.737668][ T6538] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 90.754699][ T6538] EXT4-fs (loop0): mount failed [ 90.770421][ T6534] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 90.776271][ T6534] loop4: partition table partially beyond EOD, truncated [ 90.788587][ T6534] loop4: p1 start 4278190080 is beyond EOD, truncated [ 90.795616][ T6534] loop4: p2 start 16908800 is beyond EOD, truncated [ 90.810257][ T6534] loop4: p5 start 16908800 is beyond EOD, truncated [ 90.829302][ T6538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6538 comm=syz.0.1027 [ 90.899141][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 90.918490][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 90.929465][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 91.021293][ T6553] 9pnet_fd: Insufficient options for proto=fd [ 91.162882][ T6564] loop0: detected capacity change from 0 to 2048 [ 91.221762][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 91.221778][ T29] audit: type=1326 audit(1755043865.599:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.253640][ T29] audit: type=1326 audit(1755043865.599:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.277863][ T29] audit: type=1326 audit(1755043865.599:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.302662][ T29] audit: type=1326 audit(1755043865.599:11060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.328510][ T29] audit: type=1326 audit(1755043865.599:11061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.352562][ T29] audit: type=1326 audit(1755043865.609:11062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.377087][ T29] audit: type=1326 audit(1755043865.609:11063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.461650][ T6581] loop1: detected capacity change from 0 to 512 [ 91.474068][ T29] audit: type=1326 audit(1755043865.849:11064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.498008][ T29] audit: type=1326 audit(1755043865.849:11065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.505292][ T6581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.522407][ T29] audit: type=1326 audit(1755043865.849:11066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 91.595484][ T6591] __nla_validate_parse: 23 callbacks suppressed [ 91.595500][ T6591] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1049'. [ 91.612834][ T6591] validate_nla: 7 callbacks suppressed [ 91.612848][ T6591] netlink: 'syz.3.1049': attribute type 9 has an invalid length. [ 91.626895][ T6591] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1049'. [ 91.628186][ T6581] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.1043: Bad quota inum: 29696, type: 1 [ 91.636274][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1049'. [ 91.650624][ T6581] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 91.672822][ T6581] EXT4-fs (loop1): mount failed [ 91.714204][ T6581] netlink: 'syz.1.1043': attribute type 2 has an invalid length. [ 91.722066][ T6581] netlink: 'syz.1.1043': attribute type 8 has an invalid length. [ 91.729978][ T6581] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1043'. [ 91.739204][ T6602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1051'. [ 91.753925][ T6581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6581 comm=syz.1.1043 [ 91.822139][ T6581] netlink: 'syz.1.1043': attribute type 12 has an invalid length. [ 91.903648][ T6617] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1058'. [ 91.917676][ T6617] netlink: 'syz.4.1058': attribute type 9 has an invalid length. [ 91.921801][ T6614] loop1: detected capacity change from 0 to 512 [ 91.925627][ T6617] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1058'. [ 91.942153][ T6617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1058'. [ 91.953316][ T6614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.008151][ T6614] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.1056: Bad quota inum: 29696, type: 1 [ 92.029408][ T6614] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 92.064747][ T6630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1063'. [ 92.076368][ T6614] EXT4-fs (loop1): mount failed [ 92.104953][ T6635] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1065'. [ 92.151747][ T6614] netlink: 'syz.1.1056': attribute type 2 has an invalid length. [ 92.160711][ T6614] netlink: 'syz.1.1056': attribute type 8 has an invalid length. [ 92.180835][ T6614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6614 comm=syz.1.1056 [ 92.244981][ T6646] netlink: 'syz.4.1070': attribute type 9 has an invalid length. [ 92.277094][ T6614] netlink: 'syz.1.1056': attribute type 12 has an invalid length. [ 92.383303][ T6662] 9pnet_fd: Insufficient options for proto=fd [ 92.557766][ T6682] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 92.564541][ T6682] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.573504][ T6682] vhci_hcd vhci_hcd.0: Device attached [ 92.580401][ T6683] vhci_hcd: unknown pdu 2 [ 92.587443][ T785] vhci_hcd: stop threads [ 92.591910][ T785] vhci_hcd: release socket [ 92.596577][ T785] vhci_hcd: disconnect device [ 92.841430][ T6697] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 92.848214][ T6697] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.855854][ T6697] vhci_hcd vhci_hcd.0: Device attached [ 92.863239][ T6698] usbip_core: unknown command [ 92.868725][ T6698] vhci_hcd: unknown pdu 117440512 [ 92.874234][ T6698] usbip_core: unknown command [ 92.880262][ T785] vhci_hcd: stop threads [ 92.885002][ T785] vhci_hcd: release socket [ 92.889559][ T785] vhci_hcd: disconnect device [ 93.486294][ T6735] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 93.492919][ T6735] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.500632][ T6735] vhci_hcd vhci_hcd.0: Device attached [ 93.507112][ T6736] vhci_hcd: unknown pdu 2 [ 93.517109][ T51] vhci_hcd: stop threads [ 93.524785][ T51] vhci_hcd: release socket [ 93.530297][ T51] vhci_hcd: disconnect device [ 93.541888][ T6742] loop2: detected capacity change from 0 to 512 [ 93.549906][ T6742] EXT4-fs: Ignoring removed i_version option [ 93.559313][ T6742] EXT4-fs (loop2): 1 truncate cleaned up [ 94.053746][ T6752] loop0: detected capacity change from 0 to 2048 [ 94.062535][ T6751] loop1: detected capacity change from 0 to 512 [ 94.070677][ T6751] EXT4-fs: Ignoring removed i_version option [ 94.079049][ T6751] EXT4-fs (loop1): 1 truncate cleaned up [ 94.116205][ T3292] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 94.121545][ T3292] loop0: partition table partially beyond EOD, truncated [ 94.129887][ T3292] loop0: p1 start 4278190080 is beyond EOD, truncated [ 94.136805][ T3292] loop0: p2 start 16908800 is beyond EOD, truncated [ 94.150370][ T3292] loop0: p5 start 16908800 is beyond EOD, truncated [ 94.161089][ T6752] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 94.166590][ T6752] loop0: partition table partially beyond EOD, truncated [ 94.174326][ T6759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 94.174592][ T6752] loop0: p1 start 4278190080 is beyond EOD, [ 94.181004][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.181149][ T6759] vhci_hcd vhci_hcd.0: Device attached [ 94.187533][ T6752] truncated [ 94.187542][ T6752] loop0: p2 start 16908800 is beyond EOD, truncated [ 94.199387][ T6752] loop0: p5 start 16908800 is beyond EOD, truncated [ 94.221440][ T6760] vhci_hcd: unknown pdu 2 [ 94.226709][ T6762] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 94.227301][ T785] vhci_hcd: stop threads [ 94.233232][ T6762] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.233343][ T6762] vhci_hcd vhci_hcd.0: Device attached [ 94.237535][ T785] vhci_hcd: release socket [ 94.251490][ T6763] usbip_core: unknown command [ 94.256455][ T785] vhci_hcd: disconnect device [ 94.266235][ T6763] vhci_hcd: unknown pdu 0 [ 94.270646][ T6763] usbip_core: unknown command [ 94.287924][ T785] vhci_hcd: stop threads [ 94.292322][ T785] vhci_hcd: release socket [ 94.296791][ T785] vhci_hcd: disconnect device [ 94.326239][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 94.337004][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 94.348705][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 94.414004][ T6772] netlink: 'syz.0.1114': attribute type 9 has an invalid length. [ 94.436358][ T6776] loop0: detected capacity change from 0 to 128 [ 94.444580][ T6776] FAT-fs (loop0): bogus number of reserved sectors [ 94.451593][ T6776] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 94.462025][ T6776] FAT-fs (loop0): Can't find a valid FAT filesystem [ 94.512576][ T6779] loop3: detected capacity change from 0 to 512 [ 94.533306][ T6779] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 94.548971][ T6779] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1115: invalid indirect mapped block 2683928664 (level 1) [ 94.584430][ T6784] loop2: detected capacity change from 0 to 2048 [ 94.587781][ T6779] EXT4-fs (loop3): Remounting filesystem read-only [ 94.600107][ T6779] EXT4-fs (loop3): 1 truncate cleaned up [ 94.679057][ T6785] loop0: detected capacity change from 0 to 512 [ 94.686321][ T6785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.698667][ T6785] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1116: invalid indirect mapped block 83886080 (level 1) [ 94.715174][ T6785] EXT4-fs (loop0): Remounting filesystem read-only [ 94.722851][ T6785] EXT4-fs (loop0): 1 orphan inode deleted [ 94.728829][ T6785] EXT4-fs (loop0): 1 truncate cleaned up [ 94.914080][ T6800] loop1: detected capacity change from 0 to 512 [ 94.925717][ T6800] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 94.934591][ T6800] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1122: invalid indirect mapped block 2683928664 (level 1) [ 94.949113][ T6800] EXT4-fs (loop1): Remounting filesystem read-only [ 94.955860][ T6800] EXT4-fs (loop1): 1 truncate cleaned up [ 94.989899][ T6804] 9pnet_fd: Insufficient options for proto=fd [ 95.044619][ T6810] loop1: detected capacity change from 0 to 1024 [ 95.141875][ T6817] loop1: detected capacity change from 0 to 2048 [ 95.178714][ T3292] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 95.184332][ T3292] loop1: partition table partially beyond EOD, truncated [ 95.191829][ T3292] loop1: p1 start 4278190080 is beyond EOD, truncated [ 95.198775][ T3292] loop1: p2 start 16908800 is beyond EOD, truncated [ 95.206368][ T3292] loop1: p5 start 16908800 is beyond EOD, truncated [ 95.216362][ T6817] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 95.221645][ T6817] loop1: partition table partially beyond EOD, truncated [ 95.229160][ T6817] loop1: p1 start 4278190080 is beyond EOD, truncated [ 95.236242][ T6817] loop1: p2 start 16908800 is beyond EOD, truncated [ 95.244279][ T6817] loop1: p5 start 16908800 is beyond EOD, truncated [ 95.283440][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 95.284515][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 95.296186][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 95.352001][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 95.591285][ T6842] loop2: detected capacity change from 0 to 2048 [ 95.638687][ T3292] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 95.644045][ T3292] loop2: partition table partially beyond EOD, truncated [ 95.672963][ T3292] loop2: p1 start 4278190080 is beyond EOD, truncated [ 95.679860][ T3292] loop2: p2 start 16908800 is beyond EOD, truncated [ 95.680093][ T6852] loop3: detected capacity change from 0 to 512 [ 95.698162][ T6853] loop1: detected capacity change from 0 to 2048 [ 95.706202][ T3292] loop2: p5 start 16908800 is beyond EOD, truncated [ 95.716837][ T6852] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 95.731147][ T6842] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 95.736654][ T6842] loop2: partition table partially beyond EOD, truncated [ 95.762819][ T6852] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1142: invalid indirect mapped block 2683928664 (level 1) [ 95.778908][ T6842] loop2: p1 start 4278190080 is beyond EOD, truncated [ 95.786306][ T6842] loop2: p2 start 16908800 is beyond EOD, truncated [ 95.799906][ T6860] loop0: detected capacity change from 0 to 512 [ 95.804834][ T6852] EXT4-fs (loop3): Remounting filesystem read-only [ 95.813918][ T6860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.821513][ T6852] EXT4-fs (loop3): 1 truncate cleaned up [ 95.838981][ T6842] loop2: p5 start 16908800 is beyond EOD, truncated [ 95.850261][ T6860] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.1147: Bad quota inum: 29696, type: 1 [ 95.865435][ T6860] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 95.885318][ T6860] EXT4-fs (loop0): mount failed [ 95.897008][ T2991] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 95.902655][ T2991] loop2: partition table partially beyond EOD, truncated [ 95.910119][ T2991] loop2: p1 start 4278190080 is beyond EOD, truncated [ 95.917085][ T2991] loop2: p2 start 16908800 is beyond EOD, truncated [ 95.928279][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6860 comm=syz.0.1147 [ 95.946959][ T2991] loop2: p5 start 16908800 is beyond EOD, truncated [ 95.976341][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 95.989863][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 95.995042][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 96.034754][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 96.037287][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 96.064837][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 96.072494][ T6878] loop0: detected capacity change from 0 to 512 [ 96.085820][ T6878] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.107558][ T6878] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1154: invalid indirect mapped block 4294967295 (level 0) [ 96.120968][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 96.127386][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 96.145950][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 96.161913][ T6878] EXT4-fs (loop0): Remounting filesystem read-only [ 96.168911][ T6878] EXT4-fs (loop0): 1 orphan inode deleted [ 96.175178][ T6878] EXT4-fs (loop0): 1 truncate cleaned up [ 96.280801][ T29] kauditd_printk_skb: 1419 callbacks suppressed [ 96.280816][ T29] audit: type=1326 audit(1755043870.659:12486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dec0ebe9 code=0x7ffc0000 [ 96.315406][ T29] audit: type=1326 audit(1755043870.659:12487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dec0ebe9 code=0x7ffc0000 [ 96.332945][ T6896] 9pnet_fd: Insufficient options for proto=fd [ 96.340614][ T29] audit: type=1326 audit(1755043870.659:12488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f73dec0ebe9 code=0x7ffc0000 [ 96.340644][ T29] audit: type=1326 audit(1755043870.699:12489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dec0ebe9 code=0x7ffc0000 [ 96.340668][ T29] audit: type=1326 audit(1755043870.699:12490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6893 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dec0ebe9 code=0x7ffc0000 [ 96.371452][ T6898] loop4: detected capacity change from 0 to 2048 [ 96.431518][ T29] audit: type=1326 audit(1755043870.799:12491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 96.462209][ T29] audit: type=1326 audit(1755043870.799:12492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 96.487611][ T29] audit: type=1326 audit(1755043870.799:12493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 96.512911][ T29] audit: type=1326 audit(1755043870.799:12494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 96.536985][ T29] audit: type=1326 audit(1755043870.809:12495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 96.580768][ T6901] loop0: detected capacity change from 0 to 2048 [ 96.607276][ T6898] __nla_validate_parse: 48 callbacks suppressed [ 96.607291][ T6898] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1162'. [ 96.648065][ T4567] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 96.653302][ T4567] loop0: partition table partially beyond EOD, truncated [ 96.661464][ T4567] loop0: p1 start 4278190080 is beyond EOD, truncated [ 96.668630][ T4567] loop0: p2 start 16908800 is beyond EOD, truncated [ 96.676690][ T4567] loop0: p5 start 16908800 is beyond EOD, truncated [ 96.677843][ T6913] loop3: detected capacity change from 0 to 512 [ 96.699582][ T6901] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 96.703103][ T6913] EXT4-fs: Ignoring removed i_version option [ 96.704955][ T6901] loop0: partition table partially beyond EOD, truncated [ 96.730183][ T6901] loop0: p1 start 4278190080 is beyond EOD, truncated [ 96.737725][ T6901] loop0: p2 start 16908800 is beyond EOD, truncated [ 96.746691][ T6901] loop0: p5 start 16908800 is beyond EOD, truncated [ 96.746935][ T6913] EXT4-fs (loop3): 1 truncate cleaned up [ 96.836308][ T6919] loop3: detected capacity change from 0 to 512 [ 96.857809][ T6919] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.891724][ T6919] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1168: invalid indirect mapped block 4294967295 (level 0) [ 96.908635][ T6924] loop0: detected capacity change from 0 to 2048 [ 96.913330][ T6919] EXT4-fs (loop3): Remounting filesystem read-only [ 96.934427][ T6919] EXT4-fs (loop3): 1 orphan inode deleted [ 96.941081][ T6919] EXT4-fs (loop3): 1 truncate cleaned up [ 96.946553][ T6924] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1170'. [ 97.070939][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 97.080016][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 97.089373][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 97.105107][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 97.114359][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 97.123394][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 97.146430][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 97.156634][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 97.527467][ T6966] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 97.534276][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.542029][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 97.548833][ T6967] usbip_core: unknown command [ 97.553634][ T6967] vhci_hcd: unknown pdu 0 [ 97.558103][ T6967] usbip_core: unknown command [ 97.564533][ T160] vhci_hcd: stop threads [ 97.569266][ T160] vhci_hcd: release socket [ 97.573850][ T160] vhci_hcd: disconnect device [ 97.628559][ T6973] loop1: detected capacity change from 0 to 2048 [ 97.640258][ T6973] EXT4-fs mount: 86 callbacks suppressed [ 97.640272][ T6973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.739924][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.785015][ T6982] loop0: detected capacity change from 0 to 512 [ 97.800067][ T6982] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 97.810168][ T6982] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1188: invalid indirect mapped block 2683928664 (level 1) [ 97.831018][ T6982] EXT4-fs (loop0): Remounting filesystem read-only [ 97.838011][ T6982] EXT4-fs (loop0): 1 truncate cleaned up [ 97.844698][ T6982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.864524][ T6985] loop3: detected capacity change from 0 to 512 [ 97.874330][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.890658][ T6985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.912265][ T6985] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1189: invalid indirect mapped block 4294967295 (level 0) [ 97.926262][ T6988] loop0: detected capacity change from 0 to 2048 [ 97.938880][ T6985] EXT4-fs (loop3): Remounting filesystem read-only [ 97.947140][ T6985] EXT4-fs (loop3): 1 orphan inode deleted [ 97.954686][ T6985] EXT4-fs (loop3): 1 truncate cleaned up [ 97.961964][ T6985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.963912][ T6988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.003756][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.126156][ T7009] loop4: detected capacity change from 0 to 2048 [ 98.152012][ T7009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.250268][ T7018] loop3: detected capacity change from 0 to 512 [ 98.263428][ T7018] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 98.275095][ T7018] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1200: invalid indirect mapped block 2683928664 (level 1) [ 98.293344][ T7018] EXT4-fs (loop3): Remounting filesystem read-only [ 98.300837][ T7018] EXT4-fs (loop3): 1 truncate cleaned up [ 98.307296][ T7018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.336176][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.461249][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.480210][ T7031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 98.487220][ T7031] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.495551][ T7031] vhci_hcd vhci_hcd.0: Device attached [ 98.503531][ T7032] vhci_hcd: unknown pdu 2 [ 98.512097][ T785] vhci_hcd: stop threads [ 98.517077][ T785] vhci_hcd: release socket [ 98.522360][ T785] vhci_hcd: disconnect device [ 98.614094][ T7040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 98.622576][ T7040] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.633831][ T7040] vhci_hcd vhci_hcd.0: Device attached [ 98.641206][ T7041] usbip_core: unknown command [ 98.647036][ T7041] vhci_hcd: unknown pdu 0 [ 98.651861][ T7041] usbip_core: unknown command [ 98.657215][ T4809] vhci_hcd: stop threads [ 98.662562][ T4809] vhci_hcd: release socket [ 98.667951][ T4809] vhci_hcd: disconnect device [ 98.752883][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.960553][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.076961][ T7075] validate_nla: 7 callbacks suppressed [ 99.076975][ T7075] netlink: 'syz.2.1221': attribute type 9 has an invalid length. [ 99.091348][ T7078] loop3: detected capacity change from 0 to 1024 [ 99.102938][ T7078] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 99.279509][ T7093] 9pnet_fd: Insufficient options for proto=fd [ 99.327577][ T7100] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 99.329531][ T7099] loop4: detected capacity change from 0 to 2048 [ 99.334522][ T7100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.350553][ T7100] vhci_hcd vhci_hcd.0: Device attached [ 99.365493][ T7101] vhci_hcd: unknown pdu 2 [ 99.370423][ T785] vhci_hcd: stop threads [ 99.374885][ T785] vhci_hcd: release socket [ 99.380201][ T785] vhci_hcd: disconnect device [ 99.393404][ T3292] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 99.399458][ T3292] loop4: partition table partially beyond EOD, truncated [ 99.409913][ T3292] loop4: p1 start 4278190080 is beyond EOD, truncated [ 99.418068][ T3292] loop4: p2 start 16908800 is beyond EOD, truncated [ 99.429727][ T3292] loop4: p5 start 16908800 is beyond EOD, truncated [ 99.443893][ T7099] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 99.450632][ T7099] loop4: partition table partially beyond EOD, truncated [ 99.463319][ T7109] loop3: detected capacity change from 0 to 512 [ 99.464165][ T7099] loop4: p1 start 4278190080 is beyond EOD, truncated [ 99.483382][ T7099] loop4: p2 start 16908800 is beyond EOD, truncated [ 99.484797][ T7109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.509021][ T7099] loop4: p5 start 16908800 is beyond EOD, truncated [ 99.576764][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 99.592903][ T7109] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1236: invalid indirect mapped block 4294967295 (level 0) [ 99.619801][ T7109] EXT4-fs (loop3): Remounting filesystem read-only [ 99.629274][ T7109] EXT4-fs (loop3): 1 orphan inode deleted [ 99.635752][ T7109] EXT4-fs (loop3): 1 truncate cleaned up [ 99.643069][ T7109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.669921][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.692087][ T7116] loop3: detected capacity change from 0 to 512 [ 99.702009][ T7116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.721459][ T7116] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.1238: Bad quota inum: 29696, type: 1 [ 99.733822][ T7116] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 99.750041][ T7116] EXT4-fs (loop3): mount failed [ 99.759364][ T7116] netlink: 'syz.3.1238': attribute type 2 has an invalid length. [ 99.767625][ T7116] netlink: 'syz.3.1238': attribute type 8 has an invalid length. [ 99.780830][ T7116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7116 comm=syz.3.1238 [ 99.822556][ T7116] netlink: 'syz.3.1238': attribute type 12 has an invalid length. [ 99.921515][ T7124] netlink: 'syz.3.1241': attribute type 9 has an invalid length. [ 99.930551][ T7124] netlink: 'syz.3.1241': attribute type 2 has an invalid length. [ 99.959878][ T7128] loop3: detected capacity change from 0 to 128 [ 99.967469][ T7128] FAT-fs (loop3): bogus number of reserved sectors [ 99.974456][ T7128] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 99.984174][ T7128] FAT-fs (loop3): Can't find a valid FAT filesystem [ 100.185868][ T7139] loop3: detected capacity change from 0 to 512 [ 100.196658][ T7139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.217804][ T7139] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1243: invalid indirect mapped block 83886080 (level 1) [ 100.235830][ T7139] EXT4-fs (loop3): Remounting filesystem read-only [ 100.255674][ T7144] netlink: 'syz.0.1248': attribute type 9 has an invalid length. [ 100.289369][ T7139] EXT4-fs (loop3): 1 orphan inode deleted [ 100.296799][ T7139] EXT4-fs (loop3): 1 truncate cleaned up [ 100.311632][ T7139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.351248][ T7149] loop1: detected capacity change from 0 to 1024 [ 100.380416][ T7149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.429667][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.464710][ T7164] netlink: 'syz.4.1256': attribute type 9 has an invalid length. [ 100.519665][ T7169] loop0: detected capacity change from 0 to 1024 [ 100.553161][ T7169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.565861][ T7171] 9pnet_fd: Insufficient options for proto=fd [ 100.604808][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.768216][ T7196] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 100.768891][ T7195] netlink: 'syz.4.1268': attribute type 9 has an invalid length. [ 100.775006][ T7196] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.775060][ T7196] vhci_hcd vhci_hcd.0: Device attached [ 100.822872][ T7197] usbip_core: unknown command [ 100.827848][ T7197] vhci_hcd: unknown pdu 0 [ 100.832590][ T7197] usbip_core: unknown command [ 100.842364][ T4809] vhci_hcd: stop threads [ 100.846884][ T4809] vhci_hcd: release socket [ 100.851680][ T4809] vhci_hcd: disconnect device [ 100.874674][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.940257][ T7208] loop3: detected capacity change from 0 to 512 [ 100.949775][ T7208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.975078][ T7208] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1273: invalid indirect mapped block 4294967295 (level 0) [ 101.008014][ T7210] 9pnet_fd: Insufficient options for proto=fd [ 101.031798][ T7208] EXT4-fs (loop3): Remounting filesystem read-only [ 101.041478][ T7208] EXT4-fs (loop3): 1 orphan inode deleted [ 101.047858][ T7208] EXT4-fs (loop3): 1 truncate cleaned up [ 101.054422][ T7208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.077380][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.103308][ T7216] loop3: detected capacity change from 0 to 1024 [ 101.110762][ T7216] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 101.295843][ T29] kauditd_printk_skb: 1270 callbacks suppressed [ 101.295874][ T29] audit: type=1326 audit(1755043875.669:13766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febbe925ba7 code=0x7ffc0000 [ 101.329074][ T29] audit: type=1326 audit(1755043875.669:13767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febbe8cadd9 code=0x7ffc0000 [ 101.356530][ T29] audit: type=1326 audit(1755043875.669:13768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe92ebe9 code=0x7ffc0000 [ 101.378444][ T7220] loop1: detected capacity change from 0 to 2048 [ 101.390827][ T29] audit: type=1326 audit(1755043875.689:13769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febbe925ba7 code=0x7ffc0000 [ 101.420686][ T29] audit: type=1326 audit(1755043875.689:13770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febbe8cadd9 code=0x7ffc0000 [ 101.446538][ T29] audit: type=1326 audit(1755043875.689:13771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe92ebe9 code=0x7ffc0000 [ 101.473456][ T29] audit: type=1326 audit(1755043875.709:13772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febbe925ba7 code=0x7ffc0000 [ 101.477855][ T7223] netlink: 'syz.3.1279': attribute type 9 has an invalid length. [ 101.499789][ T29] audit: type=1326 audit(1755043875.709:13773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febbe8cadd9 code=0x7ffc0000 [ 101.535236][ T29] audit: type=1326 audit(1755043875.709:13774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe92ebe9 code=0x7ffc0000 [ 101.559652][ T29] audit: type=1326 audit(1755043875.709:13775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febbe925ba7 code=0x7ffc0000 [ 101.586625][ T7220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.675300][ T7237] __nla_validate_parse: 57 callbacks suppressed [ 101.675311][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.691739][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.702204][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.709587][ T7238] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 101.718319][ T7238] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.726165][ T7238] vhci_hcd vhci_hcd.0: Device attached [ 101.735624][ T7239] vhci_hcd: unknown pdu 2 [ 101.735829][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.749860][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.760849][ T4809] vhci_hcd: stop threads [ 101.763571][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.765355][ T4809] vhci_hcd: release socket [ 101.780793][ T4809] vhci_hcd: disconnect device [ 101.804980][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.814599][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.825298][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 101.909188][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 102.065373][ T7267] loop2: detected capacity change from 0 to 512 [ 102.080200][ T7267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.113436][ T7267] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.1294: Bad quota inum: 29696, type: 1 [ 102.126100][ T7267] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 102.146871][ T7267] EXT4-fs (loop2): mount failed [ 102.167222][ T7267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7267 comm=syz.2.1294 [ 102.211235][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.345499][ T7295] loop0: detected capacity change from 0 to 128 [ 102.355241][ T7295] FAT-fs (loop0): bogus number of reserved sectors [ 102.362995][ T7295] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 102.374297][ T7295] FAT-fs (loop0): Can't find a valid FAT filesystem [ 102.475299][ T7306] loop1: detected capacity change from 0 to 512 [ 102.505745][ T7306] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 102.523022][ T7312] loop4: detected capacity change from 0 to 1024 [ 102.547929][ T7306] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1309: invalid indirect mapped block 2683928664 (level 1) [ 102.566637][ T7306] EXT4-fs (loop1): Remounting filesystem read-only [ 102.581538][ T7312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.599873][ T7306] EXT4-fs (loop1): 1 truncate cleaned up [ 102.607016][ T7306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.640818][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.654522][ T7319] loop2: detected capacity change from 0 to 2048 [ 102.664726][ T7320] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 102.671852][ T7320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.681374][ T7320] vhci_hcd vhci_hcd.0: Device attached [ 102.705022][ T7319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.726269][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.762884][ T7321] vhci_hcd: connection closed [ 102.766634][ T31] vhci_hcd: stop threads [ 102.772091][ T7295] loop0: detected capacity change from 0 to 512 [ 102.776274][ T31] vhci_hcd: release socket [ 102.790891][ T31] vhci_hcd: disconnect device [ 102.798087][ T7295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.828881][ T7295] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1306: invalid indirect mapped block 83886080 (level 1) [ 102.859414][ T7295] EXT4-fs (loop0): Remounting filesystem read-only [ 102.869557][ T7295] EXT4-fs (loop0): 1 orphan inode deleted [ 102.877231][ T7295] EXT4-fs (loop0): 1 truncate cleaned up [ 102.895680][ T7295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.002620][ T7356] loop4: detected capacity change from 0 to 512 [ 103.051757][ T7356] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 103.068879][ T7366] loop1: detected capacity change from 0 to 512 [ 103.073836][ T7356] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1328: invalid indirect mapped block 2683928664 (level 1) [ 103.080619][ T7366] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.090873][ T7356] EXT4-fs (loop4): Remounting filesystem read-only [ 103.110042][ T7356] EXT4-fs (loop4): 1 truncate cleaned up [ 103.112932][ T7366] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1330: invalid indirect mapped block 4294967295 (level 0) [ 103.117279][ T7356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.135468][ T7366] EXT4-fs (loop1): Remounting filesystem read-only [ 103.155890][ T7366] EXT4-fs (loop1): 1 orphan inode deleted [ 103.162216][ T7366] EXT4-fs (loop1): 1 truncate cleaned up [ 103.162595][ T7369] loop3: detected capacity change from 0 to 512 [ 103.172554][ T7366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.198202][ T7369] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 103.218584][ T7369] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1332: invalid indirect mapped block 2683928664 (level 1) [ 103.228080][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.246657][ T7369] EXT4-fs (loop3): Remounting filesystem read-only [ 103.254633][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.264517][ T7369] EXT4-fs (loop3): 1 truncate cleaned up [ 103.287990][ T7369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.310585][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.386960][ T7380] loop0: detected capacity change from 0 to 2048 [ 103.425089][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.425382][ T7380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.486833][ T7394] loop1: detected capacity change from 0 to 1024 [ 103.495223][ T7394] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 103.521776][ T7395] loop2: detected capacity change from 0 to 512 [ 103.530528][ T7395] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 103.544171][ T7395] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1341: invalid indirect mapped block 2683928664 (level 1) [ 103.560026][ T7395] EXT4-fs (loop2): Remounting filesystem read-only [ 103.568075][ T7395] EXT4-fs (loop2): 1 truncate cleaned up [ 103.578568][ T7395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.682475][ T7401] loop1: detected capacity change from 0 to 512 [ 103.693535][ T7401] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 103.703634][ T7401] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1344: invalid indirect mapped block 2683928664 (level 1) [ 103.719968][ T7401] EXT4-fs (loop1): Remounting filesystem read-only [ 103.727999][ T7401] EXT4-fs (loop1): 1 truncate cleaned up [ 103.735196][ T7401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.759030][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.791794][ T7406] loop1: detected capacity change from 0 to 128 [ 103.803579][ T7406] FAT-fs (loop1): bogus number of reserved sectors [ 103.810863][ T7406] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 103.821906][ T7406] FAT-fs (loop1): Can't find a valid FAT filesystem [ 103.910008][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.973126][ T7407] loop1: detected capacity change from 0 to 512 [ 103.983409][ T7407] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.002316][ T7407] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1346: invalid indirect mapped block 83886080 (level 1) [ 104.019288][ T7407] EXT4-fs (loop1): Remounting filesystem read-only [ 104.026458][ T7407] EXT4-fs (loop1): 1 orphan inode deleted [ 104.032692][ T7407] EXT4-fs (loop1): 1 truncate cleaned up [ 104.040177][ T7407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.213735][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.311265][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.393850][ T7429] loop0: detected capacity change from 0 to 2048 [ 104.433604][ T7429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.512270][ T7445] validate_nla: 7 callbacks suppressed [ 104.512305][ T7445] netlink: 'syz.4.1359': attribute type 9 has an invalid length. [ 104.588790][ T7454] loop2: detected capacity change from 0 to 512 [ 104.603243][ T7454] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 104.611741][ T7454] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1360: invalid indirect mapped block 2683928664 (level 1) [ 104.638618][ T7454] EXT4-fs (loop2): Remounting filesystem read-only [ 104.646017][ T7454] EXT4-fs (loop2): 1 truncate cleaned up [ 104.652844][ T7454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.706445][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.716250][ T7460] loop4: detected capacity change from 0 to 2048 [ 104.749297][ T7460] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 104.755302][ T7460] loop4: partition table partially beyond EOD, truncated [ 104.764038][ T7460] loop4: p1 start 4278190080 is beyond EOD, truncated [ 104.771264][ T7460] loop4: p2 start 16908800 is beyond EOD, truncated [ 104.785220][ T7460] loop4: p5 start 16908800 is beyond EOD, truncated [ 104.804161][ T2991] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 104.809956][ T2991] loop4: partition table partially beyond EOD, truncated [ 104.820086][ T2991] loop4: p1 start 4278190080 is beyond EOD, truncated [ 104.827091][ T2991] loop4: p2 start 16908800 is beyond EOD, truncated [ 104.835511][ T2991] loop4: p5 start 16908800 is beyond EOD, truncated [ 104.903189][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 104.903403][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 104.926213][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 104.942095][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 104.942256][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 104.977369][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 105.083989][ T7488] netlink: 'syz.4.1378': attribute type 9 has an invalid length. [ 105.104789][ T7490] netlink: 'syz.4.1379': attribute type 9 has an invalid length. [ 105.140756][ T7491] 9pnet_fd: Insufficient options for proto=fd [ 105.228142][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.296121][ T7508] loop4: detected capacity change from 0 to 512 [ 105.309312][ T7508] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 105.317770][ T7508] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1386: invalid indirect mapped block 2683928664 (level 1) [ 105.338695][ T7508] EXT4-fs (loop4): Remounting filesystem read-only [ 105.346728][ T7508] EXT4-fs (loop4): 1 truncate cleaned up [ 105.353576][ T7508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.376989][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.650589][ T7541] loop0: detected capacity change from 0 to 512 [ 105.657901][ T7540] 9pnet_fd: Insufficient options for proto=fd [ 105.698568][ T7541] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 105.707271][ T7541] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1399: invalid indirect mapped block 2683928664 (level 1) [ 105.722853][ T7541] EXT4-fs (loop0): Remounting filesystem read-only [ 105.730242][ T7541] EXT4-fs (loop0): 1 truncate cleaned up [ 105.736361][ T7541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.777036][ T7547] loop1: detected capacity change from 0 to 2048 [ 105.819168][ T3292] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 105.824452][ T3292] loop1: partition table partially beyond EOD, truncated [ 105.833348][ T3292] loop1: p1 start 4278190080 is beyond EOD, truncated [ 105.840188][ T3292] loop1: p2 start 16908800 is beyond EOD, truncated [ 105.848415][ T3292] loop1: p5 start 16908800 is beyond EOD, truncated [ 105.857576][ T7547] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 105.862865][ T7547] loop1: partition table partially beyond EOD, truncated [ 105.870343][ T7547] loop1: p1 start 4278190080 is beyond EOD, truncated [ 105.877299][ T7547] loop1: p2 start 16908800 is beyond EOD, truncated [ 105.886142][ T7547] loop1: p5 start 16908800 is beyond EOD, truncated [ 105.929627][ T7549] loop3: detected capacity change from 0 to 2048 [ 105.935103][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 105.941954][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 105.949224][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 105.974550][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 105.986632][ T7549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.091011][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.199218][ T7575] loop4: detected capacity change from 0 to 512 [ 106.211103][ T7575] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 106.220233][ T7575] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1412: invalid indirect mapped block 2683928664 (level 1) [ 106.235737][ T7575] EXT4-fs (loop4): Remounting filesystem read-only [ 106.242619][ T7575] EXT4-fs (loop4): 1 truncate cleaned up [ 106.248965][ T7575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.426700][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.462504][ T29] kauditd_printk_skb: 767 callbacks suppressed [ 106.462533][ T29] audit: type=1326 audit(1755043880.839:14543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.494989][ T29] audit: type=1326 audit(1755043880.839:14544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.521726][ T29] audit: type=1326 audit(1755043880.839:14545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.546009][ T29] audit: type=1326 audit(1755043880.899:14546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.571014][ T29] audit: type=1326 audit(1755043880.899:14547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.611227][ T7588] netlink: 'syz.2.1420': attribute type 9 has an invalid length. [ 106.653569][ T29] audit: type=1326 audit(1755043881.029:14548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.678389][ T29] audit: type=1326 audit(1755043881.029:14549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.704917][ T29] audit: type=1326 audit(1755043881.029:14550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.730773][ T29] audit: type=1326 audit(1755043881.029:14551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.755408][ T29] audit: type=1326 audit(1755043881.029:14552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 106.791261][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.794933][ T7592] loop2: detected capacity change from 0 to 512 [ 106.822765][ T7592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.846443][ T7592] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.1422: Bad quota inum: 29696, type: 1 [ 106.848681][ T7602] __nla_validate_parse: 48 callbacks suppressed [ 106.848703][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 106.860400][ T7592] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 106.899204][ T7592] EXT4-fs (loop2): mount failed [ 106.909847][ T7592] netlink: 'syz.2.1422': attribute type 2 has an invalid length. [ 106.918134][ T7592] netlink: 'syz.2.1422': attribute type 8 has an invalid length. [ 106.927168][ T7592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1422'. [ 106.941165][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7592 comm=syz.2.1422 [ 106.957202][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 106.969186][ T7606] loop3: detected capacity change from 0 to 512 [ 106.981797][ T7606] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 106.982569][ T7605] 9pnet_fd: Insufficient options for proto=fd [ 106.998222][ T7606] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1427: invalid indirect mapped block 2683928664 (level 1) [ 107.019389][ T7606] EXT4-fs (loop3): Remounting filesystem read-only [ 107.030990][ T7606] EXT4-fs (loop3): 1 truncate cleaned up [ 107.049425][ T7606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.065481][ T7592] netlink: 'syz.2.1422': attribute type 12 has an invalid length. [ 107.077173][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.152677][ T7614] loop2: detected capacity change from 0 to 128 [ 107.161084][ T7614] FAT-fs (loop2): bogus number of reserved sectors [ 107.168882][ T7614] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 107.179203][ T7614] FAT-fs (loop2): Can't find a valid FAT filesystem [ 107.370897][ T7639] loop1: detected capacity change from 0 to 512 [ 107.375180][ T7640] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 107.385516][ T7640] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.393837][ T7640] vhci_hcd vhci_hcd.0: Device attached [ 107.399462][ T7639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.404714][ T7639] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1442: invalid indirect mapped block 4294967295 (level 0) [ 107.425151][ T7641] vhci_hcd: unknown pdu 2 [ 107.430073][ T7634] loop2: detected capacity change from 0 to 512 [ 107.430918][ T785] vhci_hcd: stop threads [ 107.437351][ T7634] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.442961][ T785] vhci_hcd: release socket [ 107.455493][ T7639] EXT4-fs (loop1): Remounting filesystem read-only [ 107.459108][ T785] vhci_hcd: disconnect device [ 107.479029][ T7634] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1430: invalid indirect mapped block 83886080 (level 1) [ 107.481720][ T7639] EXT4-fs (loop1): 1 orphan inode deleted [ 107.501179][ T7639] EXT4-fs (loop1): 1 truncate cleaned up [ 107.512051][ T7639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.518061][ T7634] EXT4-fs (loop2): Remounting filesystem read-only [ 107.534573][ T7634] EXT4-fs (loop2): 1 orphan inode deleted [ 107.541683][ T7634] EXT4-fs (loop2): 1 truncate cleaned up [ 107.549917][ T7634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.564212][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.731366][ T7656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1446'. [ 107.753932][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.797291][ T7663] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1449'. [ 107.809633][ T7663] netlink: 'syz.0.1449': attribute type 9 has an invalid length. [ 107.817851][ T7663] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1449'. [ 107.828434][ T7663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1449'. [ 107.850872][ T7667] loop1: detected capacity change from 0 to 512 [ 107.877212][ T7667] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 107.905211][ T7667] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1451: invalid indirect mapped block 2683928664 (level 1) [ 107.921563][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 107.926034][ T7667] EXT4-fs (loop1): Remounting filesystem read-only [ 107.941070][ T7667] EXT4-fs (loop1): 1 truncate cleaned up [ 107.994450][ T7683] loop0: detected capacity change from 0 to 128 [ 108.012486][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 108.024105][ T7683] FAT-fs (loop0): bogus number of reserved sectors [ 108.031570][ T7683] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 108.041883][ T7683] FAT-fs (loop0): Can't find a valid FAT filesystem [ 108.067030][ T7687] 9pnet_fd: Insufficient options for proto=fd [ 108.161736][ T7697] loop1: detected capacity change from 0 to 1024 [ 108.237924][ T7702] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1465'. [ 108.250159][ T7702] netlink: 'syz.1.1465': attribute type 9 has an invalid length. [ 108.284534][ T7683] loop0: detected capacity change from 0 to 512 [ 108.295969][ T7683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.311017][ T7683] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1458: invalid indirect mapped block 83886080 (level 1) [ 108.329140][ T7683] EXT4-fs (loop0): Remounting filesystem read-only [ 108.329764][ T7707] loop4: detected capacity change from 0 to 512 [ 108.337498][ T7683] EXT4-fs (loop0): 1 orphan inode deleted [ 108.347280][ T7707] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 108.352328][ T7683] EXT4-fs (loop0): 1 truncate cleaned up [ 108.373374][ T7707] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1466: invalid indirect mapped block 2683928664 (level 1) [ 108.394139][ T7707] EXT4-fs (loop4): Remounting filesystem read-only [ 108.401832][ T7707] EXT4-fs (loop4): 1 truncate cleaned up [ 108.832903][ T7718] netlink: 'syz.3.1469': attribute type 9 has an invalid length. [ 108.859981][ T7720] loop3: detected capacity change from 0 to 1024 [ 108.980100][ T7727] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 108.986790][ T7727] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.994907][ T7731] loop0: detected capacity change from 0 to 1024 [ 108.994943][ T7727] vhci_hcd vhci_hcd.0: Device attached [ 109.007626][ T7731] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 109.021346][ T7729] vhci_hcd: unknown pdu 2 [ 109.026329][ T785] vhci_hcd: stop threads [ 109.031032][ T785] vhci_hcd: release socket [ 109.035502][ T785] vhci_hcd: disconnect device [ 109.175757][ T7745] loop4: detected capacity change from 0 to 128 [ 109.193026][ T7745] FAT-fs (loop4): bogus number of reserved sectors [ 109.200372][ T7745] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 109.208085][ T7749] loop1: detected capacity change from 0 to 128 [ 109.210866][ T7745] FAT-fs (loop4): Can't find a valid FAT filesystem [ 109.228096][ T7749] FAT-fs (loop1): bogus number of reserved sectors [ 109.234827][ T7749] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 109.244934][ T7749] FAT-fs (loop1): Can't find a valid FAT filesystem [ 109.310681][ T7753] loop2: detected capacity change from 0 to 512 [ 109.344773][ T7753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.380335][ T7753] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.1484: Bad quota inum: 29696, type: 1 [ 109.416829][ T7753] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 109.478291][ T7753] EXT4-fs (loop2): mount failed [ 109.503465][ T7753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7753 comm=syz.2.1484 [ 109.520504][ T7766] loop0: detected capacity change from 0 to 512 [ 109.538224][ T7749] loop1: detected capacity change from 0 to 512 [ 109.539784][ T7766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.563590][ T7753] validate_nla: 2 callbacks suppressed [ 109.563607][ T7753] netlink: 'syz.2.1484': attribute type 12 has an invalid length. [ 109.578567][ T7749] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.593922][ T7766] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1488: invalid indirect mapped block 4294967295 (level 0) [ 109.614201][ T7749] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1482: invalid indirect mapped block 83886080 (level 1) [ 109.629124][ T7761] loop4: detected capacity change from 0 to 512 [ 109.636701][ T7766] EXT4-fs (loop0): Remounting filesystem read-only [ 109.645305][ T7761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.657140][ T7749] EXT4-fs (loop1): Remounting filesystem read-only [ 109.664227][ T7749] EXT4-fs (loop1): 1 orphan inode deleted [ 109.664516][ T7766] EXT4-fs (loop0): 1 orphan inode deleted [ 109.670175][ T7749] EXT4-fs (loop1): 1 truncate cleaned up [ 109.682982][ T7766] EXT4-fs (loop0): 1 truncate cleaned up [ 109.704079][ T7761] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1480: invalid indirect mapped block 83886080 (level 1) [ 109.729568][ T7761] EXT4-fs (loop4): Remounting filesystem read-only [ 109.738985][ T7761] EXT4-fs (loop4): 1 orphan inode deleted [ 109.745028][ T7761] EXT4-fs (loop4): 1 truncate cleaned up [ 109.808204][ T7786] loop0: detected capacity change from 0 to 2048 [ 109.906199][ T7795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 109.913562][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.921712][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 109.929913][ T7797] vhci_hcd: unknown pdu 2 [ 109.934942][ T785] vhci_hcd: stop threads [ 109.942321][ T785] vhci_hcd: release socket [ 109.947022][ T785] vhci_hcd: disconnect device [ 110.056193][ T7800] loop4: detected capacity change from 0 to 128 [ 110.069780][ T7800] FAT-fs (loop4): bogus number of reserved sectors [ 110.077115][ T7800] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 110.089409][ T7800] FAT-fs (loop4): Can't find a valid FAT filesystem [ 110.134303][ T7802] loop1: detected capacity change from 0 to 512 [ 110.162615][ T7802] EXT4-fs: Ignoring removed i_version option [ 110.171980][ T7802] EXT4-fs (loop1): 1 truncate cleaned up [ 110.210829][ T7805] netlink: 'syz.1.1499': attribute type 9 has an invalid length. [ 110.293228][ T7806] loop4: detected capacity change from 0 to 512 [ 110.302490][ T7806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.319475][ T7806] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1497: invalid indirect mapped block 83886080 (level 1) [ 110.338809][ T7806] EXT4-fs (loop4): Remounting filesystem read-only [ 110.348665][ T7806] EXT4-fs (loop4): 1 orphan inode deleted [ 110.356017][ T7806] EXT4-fs (loop4): 1 truncate cleaned up [ 110.496472][ T7823] loop2: detected capacity change from 0 to 1024 [ 110.674949][ T7834] loop3: detected capacity change from 0 to 2048 [ 110.709240][ T7834] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 110.715086][ T7834] loop3: partition table partially beyond EOD, truncated [ 110.733254][ T7834] loop3: p1 start 4278190080 is beyond EOD, truncated [ 110.739524][ T7842] loop1: detected capacity change from 0 to 1024 [ 110.740285][ T7834] loop3: p2 start 16908800 is beyond EOD, truncated [ 110.765294][ T7834] loop3: p5 start 16908800 is beyond EOD, truncated [ 110.812925][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 110.814495][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 110.826638][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 110.954121][ T7854] loop1: detected capacity change from 0 to 1024 [ 111.094340][ T7871] loop1: detected capacity change from 0 to 512 [ 111.120160][ T7871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.146804][ T7871] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1524: invalid indirect mapped block 4294967295 (level 0) [ 111.180183][ T7871] EXT4-fs (loop1): Remounting filesystem read-only [ 111.194382][ T7871] EXT4-fs (loop1): 1 orphan inode deleted [ 111.202594][ T7871] EXT4-fs (loop1): 1 truncate cleaned up [ 111.205609][ T7876] loop4: detected capacity change from 0 to 512 [ 111.259681][ T7876] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 111.261558][ T7884] loop3: detected capacity change from 0 to 128 [ 111.279150][ T7876] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1526: invalid indirect mapped block 2683928664 (level 1) [ 111.284304][ T7884] FAT-fs (loop3): bogus number of reserved sectors [ 111.296155][ T7876] EXT4-fs (loop4): Remounting filesystem read-only [ 111.301820][ T7884] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 111.310168][ T7876] EXT4-fs (loop4): 1 truncate cleaned up [ 111.320149][ T7884] FAT-fs (loop3): Can't find a valid FAT filesystem [ 111.429479][ T7890] loop1: detected capacity change from 0 to 512 [ 111.447562][ T7890] EXT4-fs: Ignoring removed i_version option [ 111.468551][ T29] kauditd_printk_skb: 977 callbacks suppressed [ 111.468567][ T29] audit: type=1326 audit(1755043885.839:15530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 111.474600][ T7890] EXT4-fs (loop1): 1 truncate cleaned up [ 111.482686][ T29] audit: type=1326 audit(1755043885.849:15531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c45ba7 code=0x7ffc0000 [ 111.535410][ T29] audit: type=1326 audit(1755043885.849:15532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c97beadd9 code=0x7ffc0000 [ 111.560170][ T29] audit: type=1326 audit(1755043885.849:15533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 111.560186][ T7896] loop3: detected capacity change from 0 to 512 [ 111.597783][ T7896] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.619922][ T29] audit: type=1326 audit(1755043885.889:15534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c45ba7 code=0x7ffc0000 [ 111.620654][ T7901] loop0: detected capacity change from 0 to 512 [ 111.644681][ T29] audit: type=1326 audit(1755043885.889:15535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c97beadd9 code=0x7ffc0000 [ 111.652380][ T7897] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 111.676810][ T29] audit: type=1326 audit(1755043885.889:15536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 111.683623][ T7897] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.684439][ T7897] vhci_hcd vhci_hcd.0: Device attached [ 111.708024][ T29] audit: type=1326 audit(1755043885.919:15537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c45ba7 code=0x7ffc0000 [ 111.708058][ T29] audit: type=1326 audit(1755043885.919:15538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c97beadd9 code=0x7ffc0000 [ 111.708086][ T29] audit: type=1326 audit(1755043885.919:15539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 111.747924][ T7901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.810719][ T7896] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1531: invalid indirect mapped block 83886080 (level 1) [ 111.825457][ T7896] EXT4-fs (loop3): Remounting filesystem read-only [ 111.825941][ T7901] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.1536: Bad quota inum: 29696, type: 1 [ 111.851092][ T7896] EXT4-fs (loop3): 1 orphan inode deleted [ 111.852173][ T7901] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 111.856949][ T7896] EXT4-fs (loop3): 1 truncate cleaned up [ 111.862306][ T7900] vhci_hcd: connection closed [ 111.878676][ T7901] EXT4-fs (loop0): mount failed [ 111.883461][ T4809] vhci_hcd: stop threads [ 111.894073][ T7908] __nla_validate_parse: 20 callbacks suppressed [ 111.894089][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'. [ 111.897184][ T4809] vhci_hcd: release socket [ 111.897195][ T4809] vhci_hcd: disconnect device [ 111.937375][ T7901] netlink: 'syz.0.1536': attribute type 2 has an invalid length. [ 111.947851][ T7901] netlink: 'syz.0.1536': attribute type 8 has an invalid length. [ 111.956212][ T7901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1536'. [ 111.989365][ T7901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7901 comm=syz.0.1536 [ 112.061177][ T7920] netlink: 'syz.0.1536': attribute type 12 has an invalid length. [ 112.110508][ T7923] loop4: detected capacity change from 0 to 512 [ 112.115762][ T7925] loop1: detected capacity change from 0 to 128 [ 112.128714][ T7925] FAT-fs (loop1): bogus number of reserved sectors [ 112.136250][ T7925] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 112.145950][ T7925] FAT-fs (loop1): Can't find a valid FAT filesystem [ 112.163032][ T7923] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 112.176016][ T7923] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1539: invalid indirect mapped block 2683928664 (level 1) [ 112.240736][ T7923] EXT4-fs (loop4): Remounting filesystem read-only [ 112.249912][ T7923] EXT4-fs (loop4): 1 truncate cleaned up [ 112.308734][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 112.428118][ T7947] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1553'. [ 112.443828][ T7939] loop1: detected capacity change from 0 to 512 [ 112.451914][ T7939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.465473][ T7939] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1544: invalid indirect mapped block 83886080 (level 1) [ 112.492193][ T7950] loop3: detected capacity change from 0 to 512 [ 112.503092][ T7939] EXT4-fs (loop1): Remounting filesystem read-only [ 112.511943][ T7950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.524627][ T7939] EXT4-fs (loop1): 1 orphan inode deleted [ 112.527384][ T7952] loop2: detected capacity change from 0 to 2048 [ 112.532433][ T7939] EXT4-fs (loop1): 1 truncate cleaned up [ 112.549971][ T7950] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.1554: Bad quota inum: 29696, type: 1 [ 112.564314][ T7950] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 112.581374][ T7950] EXT4-fs (loop3): mount failed [ 112.588548][ T3292] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 112.594267][ T3292] loop2: partition table partially beyond EOD, truncated [ 112.602505][ T3292] loop2: p1 start 4278190080 is beyond EOD, truncated [ 112.607722][ T7950] netlink: 'syz.3.1554': attribute type 2 has an invalid length. [ 112.609320][ T3292] loop2: p2 start 16908800 is beyond EOD, truncated [ 112.618973][ T7950] netlink: 'syz.3.1554': attribute type 8 has an invalid length. [ 112.628709][ T3292] loop2: p5 start 16908800 is beyond EOD, truncated [ 112.636277][ T7950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1554'. [ 112.667794][ T7952] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 112.673917][ T7952] loop2: partition table partially beyond EOD, truncated [ 112.682044][ T7952] loop2: p1 start 4278190080 is beyond EOD, truncated [ 112.690332][ T7952] loop2: p2 start 16908800 is beyond EOD, truncated [ 112.699514][ T7952] loop2: p5 start 16908800 is beyond EOD, truncated [ 112.700450][ T7950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7950 comm=syz.3.1554 [ 112.747476][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 112.764780][ T7958] loop2: detected capacity change from 0 to 128 [ 112.776591][ T7958] FAT-fs (loop2): bogus number of reserved sectors [ 112.777409][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 112.788458][ T7958] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 112.812288][ T7958] FAT-fs (loop2): Can't find a valid FAT filesystem [ 112.821261][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 113.060507][ T7965] loop2: detected capacity change from 0 to 512 [ 113.070244][ T7965] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.088974][ T7965] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1556: invalid indirect mapped block 83886080 (level 1) [ 113.130236][ T7965] EXT4-fs (loop2): Remounting filesystem read-only [ 113.141964][ T7965] EXT4-fs (loop2): 1 orphan inode deleted [ 113.148213][ T7965] EXT4-fs (loop2): 1 truncate cleaned up [ 113.156767][ T7978] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 113.164368][ T7978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.173687][ T7978] vhci_hcd vhci_hcd.0: Device attached [ 113.196984][ T7979] vhci_hcd: unknown pdu 2 [ 113.204641][ T785] vhci_hcd: stop threads [ 113.212327][ T785] vhci_hcd: release socket [ 113.217481][ T785] vhci_hcd: disconnect device [ 113.227423][ T7985] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 113.265809][ T7988] loop0: detected capacity change from 0 to 2048 [ 113.273469][ T7989] loop1: detected capacity change from 0 to 2048 [ 113.288491][ T3292] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 113.294224][ T3292] loop1: partition table partially beyond EOD, truncated [ 113.302942][ T3292] loop1: p1 start 4278190080 is beyond EOD, truncated [ 113.303567][ T7988] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1567'. [ 113.310353][ T3292] loop1: p2 start 16908800 is beyond EOD, truncated [ 113.332871][ T3292] loop1: p5 start 16908800 is beyond EOD, truncated [ 113.346956][ T7989] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 113.353028][ T7989] loop1: partition table partially beyond EOD, truncated [ 113.363606][ T7989] loop1: p1 start 4278190080 is beyond EOD, truncated [ 113.372813][ T7989] loop1: p2 start 16908800 is beyond EOD, truncated [ 113.384493][ T7989] loop1: p5 start 16908800 is beyond EOD, truncated [ 113.405364][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 113.406511][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 113.418086][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 113.445084][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 113.513743][ T7999] loop1: detected capacity change from 0 to 512 [ 113.523928][ T7999] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 113.533290][ T7999] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1568: invalid indirect mapped block 2683928664 (level 1) [ 113.549158][ T7999] EXT4-fs (loop1): Remounting filesystem read-only [ 113.556920][ T7999] EXT4-fs (loop1): 1 truncate cleaned up [ 113.671114][ T8004] loop2: detected capacity change from 0 to 128 [ 113.685583][ T8004] FAT-fs (loop2): bogus number of reserved sectors [ 113.693830][ T8004] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 113.705561][ T8004] FAT-fs (loop2): Can't find a valid FAT filesystem [ 113.807411][ T8012] loop4: detected capacity change from 0 to 512 [ 113.823054][ T8012] EXT4-fs: Ignoring removed i_version option [ 113.849022][ T8012] EXT4-fs (loop4): 1 truncate cleaned up [ 113.975194][ T8020] loop2: detected capacity change from 0 to 512 [ 113.983430][ T8020] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.999109][ T8020] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1570: invalid indirect mapped block 83886080 (level 1) [ 114.015037][ T8020] EXT4-fs (loop2): Remounting filesystem read-only [ 114.022253][ T8020] EXT4-fs (loop2): 1 orphan inode deleted [ 114.028239][ T8020] EXT4-fs (loop2): 1 truncate cleaned up [ 114.030388][ T8027] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 114.041109][ T8027] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 114.048999][ T8027] vhci_hcd vhci_hcd.0: Device attached [ 114.056721][ T8028] vhci_hcd: unknown pdu 2 [ 114.062119][ T133] vhci_hcd: stop threads [ 114.066412][ T133] vhci_hcd: release socket [ 114.071087][ T133] vhci_hcd: disconnect device [ 114.245443][ T8037] loop0: detected capacity change from 0 to 512 [ 114.252956][ T8037] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.266188][ T8037] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1582: invalid indirect mapped block 4294967295 (level 0) [ 114.281610][ T8037] EXT4-fs (loop0): Remounting filesystem read-only [ 114.289370][ T8037] EXT4-fs (loop0): 1 orphan inode deleted [ 114.295242][ T8037] EXT4-fs (loop0): 1 truncate cleaned up [ 114.348649][ T8042] loop1: detected capacity change from 0 to 2048 [ 114.349500][ T8044] loop0: detected capacity change from 0 to 512 [ 114.370509][ T8044] EXT4-fs: Ignoring removed i_version option [ 114.385536][ T8042] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1584'. [ 114.385552][ T8044] EXT4-fs (loop0): 1 truncate cleaned up [ 114.427656][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'. [ 114.438163][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 114.502083][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 114.530216][ T8053] 9pnet_fd: Insufficient options for proto=fd [ 114.760453][ T8071] loop4: detected capacity change from 0 to 512 [ 114.769162][ T8071] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.781754][ T8071] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1594: invalid indirect mapped block 4294967295 (level 0) [ 114.796759][ T8071] EXT4-fs (loop4): Remounting filesystem read-only [ 114.803995][ T8071] EXT4-fs (loop4): 1 orphan inode deleted [ 114.810321][ T8071] EXT4-fs (loop4): 1 truncate cleaned up [ 114.855231][ T8076] loop4: detected capacity change from 0 to 1024 [ 114.922503][ T8080] netlink: 'syz.4.1597': attribute type 9 has an invalid length. [ 115.039399][ T8084] loop4: detected capacity change from 0 to 2048 [ 115.284164][ T8103] loop0: detected capacity change from 0 to 128 [ 115.294797][ T8103] FAT-fs (loop0): bogus number of reserved sectors [ 115.295441][ T8101] loop1: detected capacity change from 0 to 512 [ 115.302496][ T8103] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 115.310578][ T8101] EXT4-fs: Ignoring removed i_version option [ 115.318014][ T8103] FAT-fs (loop0): Can't find a valid FAT filesystem [ 115.356071][ T8101] EXT4-fs (loop1): 1 truncate cleaned up [ 115.413625][ T8106] loop2: detected capacity change from 0 to 1024 [ 115.544858][ T8121] netlink: 'syz.3.1613': attribute type 9 has an invalid length. [ 115.593529][ T8126] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 115.600243][ T8126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.608238][ T8126] vhci_hcd vhci_hcd.0: Device attached [ 115.617562][ T8127] vhci_hcd: unknown pdu 2 [ 115.625597][ T51] vhci_hcd: stop threads [ 115.628171][ T8115] loop0: detected capacity change from 0 to 512 [ 115.630609][ T51] vhci_hcd: release socket [ 115.640871][ T51] vhci_hcd: disconnect device [ 115.649838][ T8115] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.666046][ T8115] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1606: invalid indirect mapped block 83886080 (level 1) [ 115.682062][ T8115] EXT4-fs (loop0): Remounting filesystem read-only [ 115.697121][ T8115] EXT4-fs (loop0): 1 orphan inode deleted [ 115.703260][ T8115] EXT4-fs (loop0): 1 truncate cleaned up [ 116.010349][ T8153] loop4: detected capacity change from 0 to 2048 [ 116.256668][ T8172] loop2: detected capacity change from 0 to 1024 [ 116.265360][ T8170] loop0: detected capacity change from 0 to 2048 [ 116.447005][ T8191] loop3: detected capacity change from 0 to 128 [ 116.455041][ T8191] FAT-fs (loop3): bogus number of reserved sectors [ 116.461910][ T8191] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 116.472125][ T8191] FAT-fs (loop3): Can't find a valid FAT filesystem [ 116.482700][ T29] kauditd_printk_skb: 1106 callbacks suppressed [ 116.482714][ T29] audit: type=1326 audit(1755043890.859:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c45ba7 code=0x7ffc0000 [ 116.498728][ T8192] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 116.513644][ T29] audit: type=1326 audit(1755043890.859:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c97beadd9 code=0x7ffc0000 [ 116.520146][ T8192] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.520305][ T8192] vhci_hcd vhci_hcd.0: Device attached [ 116.543805][ T29] audit: type=1326 audit(1755043890.859:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 116.568672][ T29] audit: type=1326 audit(1755043890.929:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c45ba7 code=0x7ffc0000 [ 116.606623][ T29] audit: type=1326 audit(1755043890.929:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c97beadd9 code=0x7ffc0000 [ 116.630950][ T29] audit: type=1326 audit(1755043890.929:16651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 116.654583][ T29] audit: type=1326 audit(1755043890.929:16652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c45ba7 code=0x7ffc0000 [ 116.678716][ T29] audit: type=1326 audit(1755043890.929:16653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c97beadd9 code=0x7ffc0000 [ 116.687689][ T8193] vhci_hcd: connection closed [ 116.703456][ T29] audit: type=1326 audit(1755043890.939:16654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7c97c4ebe9 code=0x7ffc0000 [ 116.703486][ T29] audit: type=1326 audit(1755043890.939:16655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c97c45ba7 code=0x7ffc0000 [ 116.797464][ T51] vhci_hcd: stop threads [ 116.802073][ T51] vhci_hcd: release socket [ 116.806895][ T51] vhci_hcd: disconnect device [ 116.837637][ T3380] vhci_hcd: vhci_device speed not set [ 116.843653][ T8198] loop3: detected capacity change from 0 to 512 [ 116.851762][ T8198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.871772][ T8198] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1637: invalid indirect mapped block 83886080 (level 1) [ 116.899617][ T8198] EXT4-fs (loop3): Remounting filesystem read-only [ 116.918357][ T8209] loop1: detected capacity change from 0 to 1024 [ 116.938234][ T8198] EXT4-fs (loop3): 1 orphan inode deleted [ 116.944292][ T8198] EXT4-fs (loop3): 1 truncate cleaned up [ 116.984853][ T8217] __nla_validate_parse: 12 callbacks suppressed [ 116.984871][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 117.010288][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 117.110606][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 117.162184][ T8234] loop0: detected capacity change from 0 to 2048 [ 117.183565][ T8234] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1652'. [ 117.382116][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 117.394710][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 117.462000][ T8261] loop3: detected capacity change from 0 to 1024 [ 117.469327][ T8261] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 117.873689][ T8270] loop4: detected capacity change from 0 to 512 [ 117.884075][ T8270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.898869][ T8270] EXT4-fs error (device loop4): ext4_quota_enable:7120: comm syz.4.1666: Bad quota inum: 29696, type: 1 [ 117.917203][ T8270] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 117.940079][ T8270] EXT4-fs (loop4): mount failed [ 117.953466][ T8276] loop2: detected capacity change from 0 to 512 [ 117.961497][ T8270] netlink: 'syz.4.1666': attribute type 2 has an invalid length. [ 117.961683][ T8276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.970354][ T8270] netlink: 'syz.4.1666': attribute type 8 has an invalid length. [ 117.988308][ T8270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1666'. [ 118.004424][ T8276] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1668: invalid indirect mapped block 4294967295 (level 0) [ 118.020517][ T8276] EXT4-fs (loop2): Remounting filesystem read-only [ 118.048023][ T8276] EXT4-fs (loop2): 1 orphan inode deleted [ 118.053798][ T8276] EXT4-fs (loop2): 1 truncate cleaned up [ 118.060157][ T8270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8270 comm=syz.4.1666 [ 118.117256][ T8270] netlink: 'syz.4.1666': attribute type 12 has an invalid length. [ 118.135380][ T8284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 118.142237][ T8284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.150259][ T8284] vhci_hcd vhci_hcd.0: Device attached [ 118.157351][ T8285] vhci_hcd: unknown pdu 2 [ 118.166353][ T51] vhci_hcd: stop threads [ 118.170851][ T51] vhci_hcd: release socket [ 118.175354][ T51] vhci_hcd: disconnect device [ 118.189262][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 118.226241][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 118.284731][ T8294] loop2: detected capacity change from 0 to 512 [ 118.292883][ T8294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.314105][ T8294] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.1675: Bad quota inum: 29696, type: 1 [ 118.329648][ T8294] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 118.346147][ T8294] EXT4-fs (loop2): mount failed [ 118.358858][ T8302] loop1: detected capacity change from 0 to 512 [ 118.366061][ T8302] EXT4-fs: Ignoring removed i_version option [ 118.381744][ T8294] netlink: 'syz.2.1675': attribute type 2 has an invalid length. [ 118.387153][ T8302] EXT4-fs (loop1): 1 truncate cleaned up [ 118.390707][ T8294] netlink: 'syz.2.1675': attribute type 8 has an invalid length. [ 118.390757][ T8294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1675'. [ 118.414445][ T8294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8294 comm=syz.2.1675 [ 118.498864][ T8308] netlink: 'syz.2.1675': attribute type 12 has an invalid length. [ 118.593529][ T8316] loop1: detected capacity change from 0 to 512 [ 118.636546][ T8322] netlink: 'syz.2.1685': attribute type 9 has an invalid length. [ 118.658619][ T8316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.698807][ T8316] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.1683: Bad quota inum: 29696, type: 1 [ 118.720311][ T8316] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 118.780637][ T8316] EXT4-fs (loop1): mount failed [ 118.799176][ T8316] netlink: 'syz.1.1683': attribute type 2 has an invalid length. [ 118.810682][ T8316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8316 comm=syz.1.1683 [ 118.973724][ T8338] loop1: detected capacity change from 0 to 2048 [ 119.057433][ T8343] loop3: detected capacity change from 0 to 512 [ 119.064334][ T8343] EXT4-fs: Ignoring removed i_version option [ 119.071953][ T8338] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 119.077273][ T8338] loop1: partition table partially beyond EOD, truncated [ 119.082949][ T8343] EXT4-fs (loop3): 1 truncate cleaned up [ 119.086197][ T8338] loop1: p1 start 4278190080 is beyond EOD, truncated [ 119.097039][ T8338] loop1: p2 start 16908800 is beyond EOD, truncated [ 119.107198][ T8338] loop1: p5 start 16908800 is beyond EOD, truncated [ 119.163532][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 119.174970][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 119.191263][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 119.263846][ T8356] loop3: detected capacity change from 0 to 2048 [ 119.406641][ T8371] 9pnet_fd: Insufficient options for proto=fd [ 119.765284][ T8382] loop0: detected capacity change from 0 to 2048 [ 119.779587][ T8380] 9pnet_fd: Insufficient options for proto=fd [ 120.197449][ T8400] loop4: detected capacity change from 0 to 512 [ 120.204546][ T8400] EXT4-fs: Ignoring removed i_version option [ 120.215110][ T8401] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 120.220315][ T8400] EXT4-fs (loop4): 1 truncate cleaned up [ 120.222330][ T8401] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.235956][ T8401] vhci_hcd vhci_hcd.0: Device attached [ 120.258346][ T8403] vhci_hcd: unknown pdu 2 [ 120.270662][ T51] vhci_hcd: stop threads [ 120.275561][ T51] vhci_hcd: release socket [ 120.280316][ T51] vhci_hcd: disconnect device [ 120.293206][ T8406] loop1: detected capacity change from 0 to 2048 [ 120.338287][ T3292] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 120.343680][ T3292] loop1: partition table partially beyond EOD, truncated [ 120.351628][ T3292] loop1: p1 start 4278190080 is beyond EOD, truncated [ 120.359353][ T3292] loop1: p2 start 16908800 is beyond EOD, truncated [ 120.367350][ T3292] loop1: p5 start 16908800 is beyond EOD, truncated [ 120.380026][ T8406] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 120.385283][ T8406] loop1: partition table partially beyond EOD, truncated [ 120.397744][ T8406] loop1: p1 start 4278190080 is beyond EOD, truncated [ 120.404984][ T8406] loop1: p2 start 16908800 is beyond EOD, truncated [ 120.413181][ T8406] loop1: p5 start 16908800 is beyond EOD, truncated [ 120.488424][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 120.489644][ T4567] udevd[4567]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 120.499747][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 120.595353][ T8423] loop1: detected capacity change from 0 to 512 [ 120.609348][ T8423] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 120.618596][ T8423] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1719: invalid indirect mapped block 2683928664 (level 1) [ 120.635074][ T8423] EXT4-fs (loop1): Remounting filesystem read-only [ 120.642500][ T8423] EXT4-fs (loop1): 1 truncate cleaned up [ 120.817085][ T8442] loop0: detected capacity change from 0 to 512 [ 120.824455][ T8442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.840080][ T8442] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.1728: Bad quota inum: 29696, type: 1 [ 120.852955][ T8442] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 120.869704][ T8442] EXT4-fs (loop0): mount failed [ 120.878479][ T8442] validate_nla: 2 callbacks suppressed [ 120.878491][ T8442] netlink: 'syz.0.1728': attribute type 2 has an invalid length. [ 120.891991][ T8442] netlink: 'syz.0.1728': attribute type 8 has an invalid length. [ 120.905141][ T8442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8442 comm=syz.0.1728 [ 120.955527][ T8442] netlink: 'syz.0.1728': attribute type 12 has an invalid length. [ 120.998638][ T8452] netlink: 'syz.0.1732': attribute type 9 has an invalid length. [ 121.006970][ T8452] netlink: 'syz.0.1732': attribute type 2 has an invalid length. [ 121.049806][ T8455] loop0: detected capacity change from 0 to 512 [ 121.061623][ T8455] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.073635][ T8458] loop3: detected capacity change from 0 to 512 [ 121.081197][ T8455] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1734: invalid indirect mapped block 4294967295 (level 0) [ 121.082114][ T8458] EXT4-fs: Ignoring removed i_version option [ 121.108504][ T8458] EXT4-fs (loop3): 1 truncate cleaned up [ 121.122424][ T8455] EXT4-fs (loop0): Remounting filesystem read-only [ 121.130021][ T8455] EXT4-fs (loop0): 1 orphan inode deleted [ 121.136065][ T8455] EXT4-fs (loop0): 1 truncate cleaned up [ 121.299378][ T8475] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 121.306172][ T8475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.314561][ T8475] vhci_hcd vhci_hcd.0: Device attached [ 121.324590][ T8476] vhci_hcd: unknown pdu 2 [ 121.329891][ T785] vhci_hcd: stop threads [ 121.335329][ T785] vhci_hcd: release socket [ 121.340097][ T785] vhci_hcd: disconnect device [ 121.355702][ T8481] netlink: 'syz.3.1744': attribute type 9 has an invalid length. [ 121.364007][ T8481] netlink: 'syz.3.1744': attribute type 2 has an invalid length. [ 121.421629][ T8487] loop2: detected capacity change from 0 to 512 [ 121.429439][ T8487] EXT4-fs: Ignoring removed i_version option [ 121.444218][ T8487] EXT4-fs (loop2): 1 truncate cleaned up [ 121.492499][ T29] kauditd_printk_skb: 856 callbacks suppressed [ 121.492512][ T29] audit: type=1326 audit(1755043895.869:17512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febbe925ba7 code=0x7ffc0000 [ 121.540336][ T29] audit: type=1326 audit(1755043895.869:17513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febbe8cadd9 code=0x7ffc0000 [ 121.564119][ T29] audit: type=1326 audit(1755043895.869:17514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe92ebe9 code=0x7ffc0000 [ 121.588015][ T29] audit: type=1326 audit(1755043895.879:17515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febbe925ba7 code=0x7ffc0000 [ 121.612195][ T29] audit: type=1326 audit(1755043895.879:17516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febbe8cadd9 code=0x7ffc0000 [ 121.636906][ T29] audit: type=1326 audit(1755043895.879:17517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe92ebe9 code=0x7ffc0000 [ 121.661145][ T29] audit: type=1326 audit(1755043895.899:17518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febbe925ba7 code=0x7ffc0000 [ 121.687217][ T29] audit: type=1326 audit(1755043895.899:17519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febbe8cadd9 code=0x7ffc0000 [ 121.711694][ T29] audit: type=1326 audit(1755043895.899:17520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbe92ebe9 code=0x7ffc0000 [ 121.735496][ T29] audit: type=1326 audit(1755043895.909:17521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.0.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febbe925ba7 code=0x7ffc0000 [ 121.818482][ T8511] netlink: 'syz.4.1756': attribute type 9 has an invalid length. [ 121.849919][ T8499] 9pnet_fd: Insufficient options for proto=fd [ 121.943755][ T8519] loop2: detected capacity change from 0 to 512 [ 121.951779][ T8519] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 121.967991][ T8519] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1759: invalid indirect mapped block 2683928664 (level 1) [ 122.007950][ T8524] loop0: detected capacity change from 0 to 512 [ 122.016385][ T8524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.030098][ T8519] EXT4-fs (loop2): Remounting filesystem read-only [ 122.037282][ T8519] EXT4-fs (loop2): 1 truncate cleaned up [ 122.046010][ T8524] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1760: invalid indirect mapped block 4294967295 (level 0) [ 122.071042][ T8524] EXT4-fs (loop0): Remounting filesystem read-only [ 122.082104][ T8524] EXT4-fs (loop0): 1 orphan inode deleted [ 122.088175][ T8524] EXT4-fs (loop0): 1 truncate cleaned up [ 122.119138][ T8529] loop0: detected capacity change from 0 to 512 [ 122.136521][ T8529] EXT4-fs: Ignoring removed i_version option [ 122.150707][ T8529] EXT4-fs (loop0): 1 truncate cleaned up [ 122.275143][ T8535] __nla_validate_parse: 30 callbacks suppressed [ 122.275160][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 122.290989][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 122.342143][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 122.352560][ T8539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.360600][ T8539] IPv6: NLM_F_CREATE should be set when creating new route [ 122.421554][ T8547] loop4: detected capacity change from 0 to 512 [ 122.444343][ T8547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.501657][ T8547] EXT4-fs error (device loop4): ext4_quota_enable:7120: comm syz.4.1769: Bad quota inum: 29696, type: 1 [ 122.515253][ T8547] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 122.533340][ T8547] EXT4-fs (loop4): mount failed [ 122.555173][ T8547] netlink: 'syz.4.1769': attribute type 2 has an invalid length. [ 122.563067][ T8547] netlink: 'syz.4.1769': attribute type 8 has an invalid length. [ 122.571761][ T8547] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1769'. [ 122.584729][ T8563] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 122.592885][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.601005][ T8563] vhci_hcd vhci_hcd.0: Device attached [ 122.638564][ T8564] vhci_hcd: unknown pdu 2 [ 122.643868][ T160] vhci_hcd: stop threads [ 122.648505][ T160] vhci_hcd: release socket [ 122.653196][ T160] vhci_hcd: disconnect device [ 122.660300][ T8547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8547 comm=syz.4.1769 [ 122.874042][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 122.891253][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 122.932633][ T8583] loop4: detected capacity change from 0 to 1024 [ 122.982792][ T8585] loop2: detected capacity change from 0 to 512 [ 123.010234][ T8585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.029301][ T785] ================================================================== [ 123.037683][ T785] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 123.045228][ T785] [ 123.047647][ T785] write to 0xffff88811f0b06c0 of 4 bytes by task 160 on cpu 0: [ 123.055548][ T785] touch_atime+0x1e8/0x340 [ 123.060197][ T785] shmem_file_read_iter+0x477/0x540 [ 123.065493][ T785] lo_rw_aio+0x69d/0x760 [ 123.069921][ T785] loop_process_work+0x52d/0xa60 [ 123.074874][ T785] loop_rootcg_workfn+0x22/0x30 [ 123.079895][ T785] process_scheduled_works+0x4cb/0x9d0 [ 123.085461][ T785] worker_thread+0x582/0x770 [ 123.090062][ T785] kthread+0x489/0x510 [ 123.094227][ T785] ret_from_fork+0xda/0x150 [ 123.098812][ T785] ret_from_fork_asm+0x1a/0x30 [ 123.104021][ T785] [ 123.106348][ T785] read to 0xffff88811f0b06c0 of 4 bytes by task 785 on cpu 1: [ 123.114058][ T785] atime_needs_update+0x25f/0x3e0 [ 123.119104][ T785] touch_atime+0x4a/0x340 [ 123.123715][ T785] shmem_file_read_iter+0x477/0x540 [ 123.129284][ T785] lo_rw_aio+0x69d/0x760 [ 123.133710][ T785] loop_process_work+0x52d/0xa60 [ 123.138648][ T785] loop_workfn+0x31/0x40 [ 123.143023][ T785] process_scheduled_works+0x4cb/0x9d0 [ 123.148745][ T785] worker_thread+0x582/0x770 [ 123.153423][ T785] kthread+0x489/0x510 [ 123.157647][ T785] ret_from_fork+0xda/0x150 [ 123.162327][ T785] ret_from_fork_asm+0x1a/0x30 [ 123.167286][ T785] [ 123.169735][ T785] value changed: 0x17cab046 -> 0x186346c6 [ 123.175551][ T785] [ 123.178054][ T785] Reported by Kernel Concurrency Sanitizer on: [ 123.184292][ T785] CPU: 1 UID: 0 PID: 785 Comm: kworker/u8:6 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 123.197698][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.208109][ T785] Workqueue: loop2 loop_workfn [ 123.212876][ T785] ================================================================== [ 123.239885][ T8585] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1783: invalid indirect mapped block 4294967295 (level 0) [ 123.263664][ T8585] EXT4-fs (loop2): Remounting filesystem read-only [ 123.273309][ T8585] EXT4-fs (loop2): 1 orphan inode deleted [ 123.279544][ T8585] EXT4-fs (loop2): 1 truncate cleaned up