last executing test programs: 3.236176789s ago: executing program 1 (id=726): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@i_version}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000340)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000514000/0x3000)=nil) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a028}], 0x1, 0x7000, 0x0, 0x3) 2.922387174s ago: executing program 1 (id=732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresuid(0x0, 0xee00, 0x0) 2.890925714s ago: executing program 1 (id=733): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000"], 0x48) io_uring_enter(0xffffffffffffffff, 0x7067, 0x4314, 0x10, &(0x7f00000002c0)={[0x9]}, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) rmdir(0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) lsm_get_self_attr(0x68, &(0x7f00000000c0)={0x0, 0x0, 0x67, 0x47, ""/71}, &(0x7f0000000140)=0x67, 0x0) 2.703274377s ago: executing program 1 (id=736): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x20080) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xde}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 1.839316641s ago: executing program 1 (id=758): r0 = socket$kcm(0x29, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0xc4040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/2606], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r2, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000200)={0x8, 'rose0\x00', {'wg2\x00'}, 0x8}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.410719467s ago: executing program 4 (id=762): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000600)='cpu\t<0t&\t\xa0$\\\xc5\x1cM\x8aI\xe4\x04\x06\x8a{\xc1\xefo[a\x81!\x1c\xba\x067n{U\xacE\xf7\xa2\xfc\x8c\xf8\r\xf8\x81D\xbc\xe4\x19\x84\xb1.\x9beK\xba\x0f\xf1\xd0\x97@e\xa3v\x90*\x04%,\xba\xfa/\x91Ek\x811\xfb\xad\f\x92mqi\xad1\x87U\x05\x00\xa1\\\xa6\x15\xdfc\x1eP\xa5\a\xb5~\xfa\x9b\xeb\xd9\x82\x9c\xcc\xa7\xd9O\"(\xb6$\xbdn!\xa82\b\xaf\xc6zz\xbe\xf9\xff\x88\b\xe2%\xbd\x17`\xb9`_\xa3)y\xdf\x00\x00\xf0\xff\xff\xff\xff\xffX\xe8\xe9\xcb\x1c\x16\x10\xd1\xf9C\x1b\xc8\x9a<\ame\xde\x15\x86`\xfaw\x19\xaa\x14 \x03\x89\x9aPg\xcc8_+gU\xc6\x95\x1c\xbf\xa4\xcboa5\xcd\xe0\x96\xd4p\x01R\xd4\xb1eR\xd0\x87\xe2\x87,E\xc3\xbe\xd5\xe7\xbb_ym\tr\xd6\xb0\x11E\x9b\bZB\x1f\xb4u\x0e\x10\x9e8\xb0O\xaas~\xc8\x02\a\xc0\x9b\xe9\x8cX\x91\xa3\x86)\x14\xd3\xf7\x06c\x01\x8e,Oh%\xf1@Gn\xa8\xfd\x16\x16d\x98\x9d\xe3\xb2\xff\x1dV?\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x1cv\x1e') 1.374329828s ago: executing program 4 (id=763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x3, 0x9, 0x10000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) 1.22870936s ago: executing program 2 (id=767): socket(0x17, 0x1, 0x7ff) syz_usb_connect$hid(0x1, 0xffffffffffffff8d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xbf, 0x79, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x1e5}}, {{{0x9, 0x5, 0x81, 0x3, 0x30163a89ef4a0b76, 0x5, 0x9, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0xfa, 0x19}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x451, 0x80, 0x1, 0x1, 0x10, 0xa}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000060700000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) statfs(&(0x7f0000000200)='.\x00', 0x0) 1.010841483s ago: executing program 0 (id=770): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[], 0x38}}, 0x0) 981.470604ms ago: executing program 0 (id=771): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x626a358445be48fd, 0xc8, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631380fc00082ce0db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 960.737304ms ago: executing program 0 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) pwritev(r0, &(0x7f0000000080), 0x0, 0x3, 0xcb) 948.172125ms ago: executing program 1 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000e20000000000009a6462e8fa5318", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000000a00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='dlm_lock_end\x00', r1, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x189002, 0x181) write(r6, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0xc, 0x0, 0xc}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x1c8, 0xd0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @remote}, [0xffffffff, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'syz_tun\x00', 'dummy0\x00', {}, {}, 0x70, 0x5c, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1b, 0x9, 0xfff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendfile(r6, r5, 0x0, 0x3ffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x4) 926.882225ms ago: executing program 0 (id=775): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000"], 0x48) io_uring_enter(0xffffffffffffffff, 0x7067, 0x4314, 0x10, &(0x7f00000002c0)={[0x9]}, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) rmdir(0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) lsm_get_self_attr(0x68, &(0x7f00000000c0)={0x0, 0x0, 0x67, 0x47, ""/71}, &(0x7f0000000140)=0x67, 0x0) 762.421897ms ago: executing program 3 (id=778): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 732.484108ms ago: executing program 3 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) close(0xffffffffffffffff) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3f, 0x7}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r11) r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r12, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) 679.225949ms ago: executing program 3 (id=780): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x20050800) 659.784269ms ago: executing program 3 (id=781): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@i_version}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000340)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000514000/0x3000)=nil) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x4) gettid() pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a028}], 0x1, 0x7000, 0x0, 0x3) 605.26887ms ago: executing program 2 (id=782): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) 522.862641ms ago: executing program 4 (id=783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xa14401, &(0x7f0000000380)={[{@errors_remount}, {@nodiscard}]}, 0x8, 0x48d, &(0x7f0000001340)="$eJzs3M1vVFUbAPDnTqfl+21fxA8QBUUj0djSgsrCBRhNWGhi1AUua1sIUiih1QghWl3g0pAYt8aFCxP/Ale6McrKxK3uDQkxbEDdXHNn7i23Q2ectlPGOr9fMsw592POebjnzJxzT2cC6Fl7s3+SiK0R8UtEDNaziw/YW3+6dePSxB83Lk0kkaav/57Ujrt549JEcWhx3pYiM794e9nshYunx6enp87n+ZG5M+dGZi9cfPrUmfGTUyenzo4dPnzo4Ohzz44905E4szrd3PX+zO6dx9688srE8Stv/fh1UsS/KI53O1Je6aXL+orE450q5V9iWymdVOvPr3WrMrQta5DZ5eqv9f/B6Ivqwr7BeOmjrlYOWFNpmqYbmu+eT4H/sCS6XQOgO/LP+SRifiKbA5fn873g+tH6BCiL+1b+qO+pRiU/pr9hfttJ2Wzr+Pyfn2ePaLifAgCwFr49Wn8uxn63xx+Vavm4I/na0FBE/D8itkfEPRGxIyLujYj7IuL+iHhg4Yz+tspfvEiSjbgaxz+VaysMrS3Z+O/5fG1r8fivGP3FUF+e21aLvz85cWp66kBE/C8i9kf/hiw/2qKM7178+ZNm+/aWxn/ZIyu/GAvm9bhWbbhBNzk+N76amMuufxixq7pU/MnCSkASETsjYteelZVx6smvdjfb98/xt1BdWX3K0i8inqhf//loiL+QtF6fHNkY01MHRopWcaerP11+tVn5q4q/A7Lrv3nJ9r8Q/1BSXq+dXX4Zl3/9uOmcps32P1A+J2v/A8kbtXSx473xubnzoxEDycv59iP59sXl1Y4bu318Fv/+fUv3/+1x+3/iwYjIGvFDEfFwROzJ6/5IRDwaEftaxP/DC4+9vYz4j50rlbvWsvgnl3X9myaKte07dvWd/v6b0qWqf4g0iz+JJa7/oVpqf76lnfe/ljU9v5rWDAAAAOtPJSK2RlIZXkhXKsPD9b+X3xGbK9Mzs3NPnZh55+xk/TsCQ9FfKe50DS7cD4350XxaX9wfHWvIH8zvG3+6YVMtPzwxMz3Z7eChx21p0v8zv/V1u3bAmuvAOhqwTq20/6dp+kGHqwLcZT7/oXfp/9C7luj/mxryLX4jAFjPsv6/sWGbiT30BuN/6F36P/Qu/R96l/4PPSn/Jny1lrgaEe19bb6ziez9564XuopEmnap9IGOvWCarPZ1otK1SxDdbgDLTPyV/9hmtuWzu1r6lys/vdvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//KxjgDg==") sendmsg$rds(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000000) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090000000000000000000200000014000180050002"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003d52d00400001802c00040014cfffffffffffffff14140300000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 491.152731ms ago: executing program 2 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="3de00000", @ANYRES16=r3, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="24000300"/36], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e385ae2fd7a70ae0fa152600cb00845174f08076f8d784314000200776700000000000000001400020077673100000000000000000000000000080001000000", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x4000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r5 = timerfd_create(0x7, 0x0) timerfd_gettime(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESDEC=r4, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xb0, 0x24, 0x10, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10], 0x1, [0x5, 0x6, 0x2, 0x800, 0x1, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r15 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r15, 0x40304580, &(0x7f0000000b40)={0x57, 0x0, 0x8, {0x80c, 0x1}, {0x4a, 0x400}, @cond=[{0x3, 0x4, 0x7, 0xa, 0x81bb, 0x2}, {0x8, 0x2f, 0xa1a1, 0x1, 0x1, 0x7}]}) write$char_usb(r15, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r15, 0x80404518, 0x0) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008008}, 0x20008000) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r12, @ANYRES32=r13, @ANYRESOCT=r11, @ANYRES8, @ANYRESOCT=r15, @ANYRESHEX=r13, @ANYRESDEC=r11, @ANYRESDEC=r9, @ANYRES8=r12, @ANYRESHEX=r8], 0x40}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "88014ab74934b423552cf88edf"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, 'XT'}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3138663f04112d16eed09822c1"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6104b87733cdd91a89b3cd61d6"}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000001) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf250900000008000300", @ANYRES32=r14, @ANYBLOB="0c009900030000007700000004000b0028006e800400020004000100040002000400010004000200040001000400020004000200040001000500080001000000"], 0x5c}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 404.323293ms ago: executing program 2 (id=785): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f00000005c0)=0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001cd450632a62874cecc42cb760557ad07fd7b86c47ed24791a8a2d6d75fb835f5b4a95b167463974e9db1cf73ef18072061d383f2c4bc733d27cfa22f3fa578ade3c056c593db0d5f4a84c1f6d82e8b83c1cdac673f9cd0c4db8ecdf8ecf010737ea2fcb5c58fa29355cd8ee3b4ebc7cc53a0a6474f9d536f08a970f49b5bde9584a51459ddedde2c57ddb1fcee2d9950fa3f346f59aa3f02829c693e8"], 0xe8}, 0x1, 0x0, 0x0, 0x44880}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000079fd9971fcffffff000000000a0000000600010014000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x42003}, 0x800) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x6, r8}, 0x10) 370.158233ms ago: executing program 3 (id=786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) pwritev(r0, &(0x7f0000000080), 0x0, 0x3, 0xcb) 280.500275ms ago: executing program 2 (id=787): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 279.700245ms ago: executing program 2 (id=788): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@i_version}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000340)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000514000/0x3000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a028}], 0x1, 0x7000, 0x0, 0x3) 216.416046ms ago: executing program 3 (id=789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0xa000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000100"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x81}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 186.646476ms ago: executing program 4 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff3d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c0002"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) 108.035477ms ago: executing program 4 (id=791): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4276}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 17.373199ms ago: executing program 0 (id=792): utime(&(0x7f0000000100)='./file0\x00', 0x0) 16.184529ms ago: executing program 0 (id=793): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000040)={0x0, 0x79af, 0x400, 0x8000, 0x8f}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4, 0x400c67a, 0x67, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r5, 0x0, 0xfffffffffffffff4}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='adfs\x00', 0x285e002, &(0x7f0000000380)='syz') keyctl$clear(0x7, r7) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) writev(r8, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)='g', 0x1}], 0x2) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r9, 0x0, 0xd6, 0x7, &(0x7f0000000780)="e4510d62f2c9984e7cb60b93125ef9dada63db964fb525676aa4c823ebfec54ddc7ea606320caf10897f77702536c2948f32623d9dae9d7cf84f7ce5d1c731656f89a23081964a389d4c74d699b56237d7ac33766dc62488b49d78355db1a8612890b5824b85af1e29c60deab23ae9e76c259830a9c0d285b46286949da4211017b599af9e45954a0c16bb4057f3422132e9bf4e83eef4ef9f602d7afde6b70a6f18945b0cdc9fd914cd5f3a32c6baadbcf601792b49962839d25da47df08599f0024a3fcfd394a843a6a3116e35027d7db125d3c3f8", &(0x7f0000000440)=""/7, 0xf, 0x0, 0x37, 0x77, &(0x7f0000000480)="1df6cbad96a31fec71d17b6446898a5fea038fbae0825b6f3c86af28f6633191bc443c24db5bb27ac01468607c1c388811148825a4bfc2", &(0x7f0000000980)="dc67cb31d68a2c475e60807163d707fa5fa640879d455b1ea4ce817983efcdf7c12b05eac0ffb80e3b0f89de0e3e8099ffdca164c580fe671d3cbae3719829777cf1aab0f6647d0b56366c095a1cc7d792a9ae116935ba9e8e5f9b32fbfd198ffff9eb7f89fab70f150d3fe23b10b7ee12e710b4c7dd9e", 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000840)={0x300, 0x0, 0x0}, 0x4000) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") 0s ago: executing program 4 (id=794): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): s=chr_file permissive=1 [ 38.568218][ T29] audit: type=1400 audit(1752824290.933:1803): avc: denied { unlink } for pid=3308 comm="syz-executor" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.570449][ T3844] __nla_validate_parse: 5 callbacks suppressed [ 38.570463][ T3844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 38.616076][ T29] audit: type=1400 audit(1752824291.023:1804): avc: denied { create } for pid=3846 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 38.703178][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.721129][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.798101][ T3851] loop3: detected capacity change from 0 to 8192 [ 38.854839][ T3863] FAULT_INJECTION: forcing a failure. [ 38.854839][ T3863] name failslab, interval 1, probability 0, space 0, times 0 [ 38.867548][ T3863] CPU: 0 UID: 0 PID: 3863 Comm: syz.1.104 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 38.867591][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.867605][ T3863] Call Trace: [ 38.867628][ T3863] [ 38.867634][ T3863] __dump_stack+0x1d/0x30 [ 38.867683][ T3863] dump_stack_lvl+0xe8/0x140 [ 38.867718][ T3863] dump_stack+0x15/0x1b [ 38.867733][ T3863] should_fail_ex+0x265/0x280 [ 38.867759][ T3863] ? tcf_block_get_ext+0x19e/0xb30 [ 38.867884][ T3863] should_failslab+0x8c/0xb0 [ 38.867904][ T3863] __kmalloc_cache_noprof+0x4c/0x320 [ 38.867929][ T3863] ? unwind_get_return_address+0x16/0x40 [ 38.868016][ T3863] tcf_block_get_ext+0x19e/0xb30 [ 38.868049][ T3863] ? __nla_validate_parse+0x1652/0x1d00 [ 38.868081][ T3863] tcf_block_get+0x67/0xa0 [ 38.868106][ T3863] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 38.868196][ T3863] sfq_init+0x7f/0x1290 [ 38.868225][ T3863] ? __kmalloc_noprof+0x1dd/0x3e0 [ 38.868250][ T3863] ? qdisc_get_stab+0x37b/0x4b0 [ 38.868275][ T3863] ? __list_add_valid_or_report+0x38/0xe0 [ 38.868301][ T3863] ? qdisc_get_stab+0x476/0x4b0 [ 38.868331][ T3863] ? __pfx_sfq_init+0x10/0x10 [ 38.868360][ T3863] qdisc_create+0x58e/0x9e0 [ 38.868413][ T3863] tc_modify_qdisc+0xf2e/0x1420 [ 38.868527][ T3863] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 38.868618][ T3863] rtnetlink_rcv_msg+0x657/0x6d0 [ 38.868644][ T3863] netlink_rcv_skb+0x120/0x220 [ 38.868672][ T3863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 38.868705][ T3863] rtnetlink_rcv+0x1c/0x30 [ 38.868793][ T3863] netlink_unicast+0x5a8/0x680 [ 38.868821][ T3863] netlink_sendmsg+0x58b/0x6b0 [ 38.868913][ T3863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.868930][ T3863] __sock_sendmsg+0x145/0x180 [ 38.868951][ T3863] ____sys_sendmsg+0x31e/0x4e0 [ 38.868981][ T3863] ___sys_sendmsg+0x17b/0x1d0 [ 38.869040][ T3863] __x64_sys_sendmsg+0xd4/0x160 [ 38.869072][ T3863] x64_sys_call+0x2999/0x2fb0 [ 38.869090][ T3863] do_syscall_64+0xd2/0x200 [ 38.869154][ T3863] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.869181][ T3863] ? clear_bhb_loop+0x40/0x90 [ 38.869204][ T3863] ? clear_bhb_loop+0x40/0x90 [ 38.869229][ T3863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.869273][ T3863] RIP: 0033:0x7f19afdee9a9 [ 38.869286][ T3863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.869301][ T3863] RSP: 002b:00007f19ae457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.869316][ T3863] RAX: ffffffffffffffda RBX: 00007f19b0015fa0 RCX: 00007f19afdee9a9 [ 38.869326][ T3863] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000003 [ 38.869337][ T3863] RBP: 00007f19ae457090 R08: 0000000000000000 R09: 0000000000000000 [ 38.869350][ T3863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.869364][ T3863] R13: 0000000000000000 R14: 00007f19b0015fa0 R15: 00007ffd75a3cdf8 [ 38.869388][ T3863] [ 39.180581][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.188055][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.195505][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.202975][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.210388][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.217939][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.225385][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.232880][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.240351][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.247773][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 39.255220][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.262658][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.270238][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.277647][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.285236][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.292674][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.300085][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.307473][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.315029][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.322465][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.362167][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.369621][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.377069][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.384658][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.392158][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.400000][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.407483][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.414938][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.422382][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.429781][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.437196][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.444631][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.452037][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.459546][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.520155][ T3381] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 39.568432][ T36] Process accounting resumed [ 39.688794][ T3889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 39.841850][ T3896] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 40.472974][ T3927] loop2: detected capacity change from 0 to 1024 [ 40.492600][ T3927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.509129][ T3927] pim6reg: entered allmulticast mode [ 40.516338][ T3927] pim6reg: left allmulticast mode [ 40.526015][ T3931] loop4: detected capacity change from 0 to 1024 [ 40.551959][ T3931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.561975][ T3933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 40.568881][ T3931] pim6reg: entered allmulticast mode [ 40.582049][ T3931] pim6reg: left allmulticast mode [ 41.049655][ T23] Process accounting resumed [ 41.118283][ T3957] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 41.124914][ T3957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 41.132691][ T3957] vhci_hcd vhci_hcd.0: Device attached [ 41.142869][ T3958] vhci_hcd: connection closed [ 41.142958][ T3557] vhci_hcd: stop threads [ 41.151952][ T3557] vhci_hcd: release socket [ 41.156667][ T3557] vhci_hcd: disconnect device [ 41.209470][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.245892][ T3963] loop2: detected capacity change from 0 to 256 [ 41.257282][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.266055][ T3963] FAT-fs (loop2): Filesystem has been set read-only [ 41.273085][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.274197][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.283236][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.299661][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.308424][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.317519][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.326290][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.341375][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.350362][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.359187][ T3963] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.604523][ T3968] syz.4.136 (3968) used greatest stack depth: 10144 bytes left [ 41.885590][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 41.980476][ T3986] gretap0: entered promiscuous mode [ 41.990897][ T3986] vlan2: entered promiscuous mode [ 42.001323][ T3988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 42.025692][ T3989] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 42.071416][ T3988] loop3: detected capacity change from 0 to 1024 [ 42.101588][ T3988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.118681][ T3994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 42.125285][ T3994] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 42.133036][ T3994] vhci_hcd vhci_hcd.0: Device attached [ 42.171783][ T3988] FAULT_INJECTION: forcing a failure. [ 42.171783][ T3988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.184943][ T3988] CPU: 0 UID: 0 PID: 3988 Comm: syz.3.145 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 42.185021][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.185034][ T3988] Call Trace: [ 42.185041][ T3988] [ 42.185050][ T3988] __dump_stack+0x1d/0x30 [ 42.185078][ T3988] dump_stack_lvl+0xe8/0x140 [ 42.185105][ T3988] dump_stack+0x15/0x1b [ 42.185176][ T3988] should_fail_ex+0x265/0x280 [ 42.185214][ T3988] should_fail+0xb/0x20 [ 42.185251][ T3988] should_fail_usercopy+0x1a/0x20 [ 42.185347][ T3988] _copy_from_user+0x1c/0xb0 [ 42.185374][ T3988] vmemdup_user+0x59/0xd0 [ 42.185399][ T3988] path_setxattrat+0x1b6/0x310 [ 42.185498][ T3988] __x64_sys_lsetxattr+0x71/0x90 [ 42.185525][ T3988] x64_sys_call+0x1e36/0x2fb0 [ 42.185557][ T3988] do_syscall_64+0xd2/0x200 [ 42.185574][ T3988] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.185626][ T3988] ? clear_bhb_loop+0x40/0x90 [ 42.185647][ T3988] ? clear_bhb_loop+0x40/0x90 [ 42.185687][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.185715][ T3988] RIP: 0033:0x7f2e5695e9a9 [ 42.185734][ T3988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.185771][ T3988] RSP: 002b:00007f2e54fbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 42.185815][ T3988] RAX: ffffffffffffffda RBX: 00007f2e56b85fa0 RCX: 00007f2e5695e9a9 [ 42.185876][ T3988] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 42.185893][ T3988] RBP: 00007f2e54fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 42.185911][ T3988] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 42.185923][ T3988] R13: 0000000000000000 R14: 00007f2e56b85fa0 R15: 00007ffd2b92fc08 [ 42.185943][ T3988] [ 42.312038][ T3997] vhci_hcd: connection closed [ 42.371807][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 42.371820][ T29] audit: type=1400 audit(1752824294.783:1911): avc: denied { read } for pid=4001 comm="syz.4.148" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.371849][ T29] audit: type=1400 audit(1752824294.783:1912): avc: denied { open } for pid=4001 comm="syz.4.148" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.377152][ T4002] loop4: detected capacity change from 0 to 512 [ 42.440305][ T4002] ext2: Unknown parameter 'euid' [ 42.448973][ T384] vhci_hcd: stop threads [ 42.453337][ T384] vhci_hcd: release socket [ 42.457858][ T384] vhci_hcd: disconnect device [ 42.460088][ T29] audit: type=1400 audit(1752824294.873:1913): avc: denied { shutdown } for pid=4001 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.483669][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.500030][ T3381] usb 2-1: enqueue for inactive port 0 [ 42.503058][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 42.518733][ T29] audit: type=1400 audit(1752824294.923:1914): avc: denied { compute_member } for pid=4007 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.599279][ T4016] loop2: detected capacity change from 0 to 512 [ 42.606034][ T4016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.634399][ T4016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.647509][ T4016] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.659488][ T23] Process accounting resumed [ 42.694822][ T4023] loop3: detected capacity change from 0 to 1024 [ 42.704515][ T29] audit: type=1326 audit(1752824295.113:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 42.727953][ T29] audit: type=1326 audit(1752824295.113:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 42.751411][ T29] audit: type=1326 audit(1752824295.113:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 42.753497][ T4023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.774946][ T29] audit: type=1326 audit(1752824295.113:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 42.797894][ T4023] pim6reg: entered allmulticast mode [ 42.810214][ T29] audit: type=1326 audit(1752824295.113:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 42.819458][ T4023] pim6reg: left allmulticast mode [ 42.838776][ T29] audit: type=1326 audit(1752824295.113:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 42.867262][ T3381] usb 2-1: enqueue for inactive port 0 [ 42.888061][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.959463][ T4036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 43.023803][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 43.035952][ T4042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.161'. [ 43.058597][ T4045] loop2: detected capacity change from 0 to 1024 [ 43.064913][ T4047] FAULT_INJECTION: forcing a failure. [ 43.064913][ T4047] name failslab, interval 1, probability 0, space 0, times 0 [ 43.073321][ T4045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.077780][ T4047] CPU: 0 UID: 0 PID: 4047 Comm: syz.4.164 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 43.077813][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.077829][ T4047] Call Trace: [ 43.077835][ T4047] [ 43.077843][ T4047] __dump_stack+0x1d/0x30 [ 43.077996][ T4047] dump_stack_lvl+0xe8/0x140 [ 43.078095][ T4047] dump_stack+0x15/0x1b [ 43.078115][ T4047] should_fail_ex+0x265/0x280 [ 43.078153][ T4047] should_failslab+0x8c/0xb0 [ 43.078251][ T4047] kmem_cache_alloc_noprof+0x50/0x310 [ 43.078285][ T4047] ? skb_clone+0x151/0x1f0 [ 43.078344][ T4047] skb_clone+0x151/0x1f0 [ 43.078366][ T4047] __netlink_deliver_tap+0x2c9/0x500 [ 43.078412][ T4047] netlink_unicast+0x653/0x680 [ 43.078525][ T4047] netlink_sendmsg+0x58b/0x6b0 [ 43.078550][ T4047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.078638][ T4047] __sock_sendmsg+0x145/0x180 [ 43.078668][ T4047] ____sys_sendmsg+0x31e/0x4e0 [ 43.078712][ T4047] ___sys_sendmsg+0x17b/0x1d0 [ 43.078775][ T4047] __x64_sys_sendmsg+0xd4/0x160 [ 43.078834][ T4047] x64_sys_call+0x2999/0x2fb0 [ 43.078868][ T4047] do_syscall_64+0xd2/0x200 [ 43.078889][ T4047] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.078920][ T4047] ? clear_bhb_loop+0x40/0x90 [ 43.078951][ T4047] ? clear_bhb_loop+0x40/0x90 [ 43.078977][ T4047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.079077][ T4047] RIP: 0033:0x7f906ed2e9a9 [ 43.079096][ T4047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.079118][ T4047] RSP: 002b:00007f906d38f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.079143][ T4047] RAX: ffffffffffffffda RBX: 00007f906ef55fa0 RCX: 00007f906ed2e9a9 [ 43.079222][ T4047] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 43.079289][ T4047] RBP: 00007f906d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.079303][ T4047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.079318][ T4047] R13: 0000000000000000 R14: 00007f906ef55fa0 R15: 00007ffc25b1d8c8 [ 43.079341][ T4047] [ 43.098237][ T4047] bridge_slave_0: left allmulticast mode [ 43.239177][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 43.249898][ T4047] bridge_slave_0: left promiscuous mode [ 43.321770][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.334978][ T4047] bridge_slave_1: left allmulticast mode [ 43.341537][ T4047] bridge_slave_1: left promiscuous mode [ 43.347294][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.357935][ T4047] bond0: (slave bond_slave_0): Releasing backup interface [ 43.368839][ T4047] bond0: (slave bond_slave_1): Releasing backup interface [ 43.385549][ T4047] team0: Port device team_slave_0 removed [ 43.401771][ T4047] team0: Port device team_slave_1 removed [ 43.409025][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.417087][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.429190][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.437259][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.468548][ T4045] pim6reg: entered allmulticast mode [ 43.483110][ T4050] pim6reg: left allmulticast mode [ 43.490641][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.516944][ T4058] loop1: detected capacity change from 0 to 512 [ 43.525889][ T4058] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 43.535339][ T4058] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.543377][ T4058] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 43.558115][ T4058] EXT4-fs (loop1): Remounting filesystem read-only [ 43.565964][ T4058] EXT4-fs (loop1): 1 truncate cleaned up [ 43.576320][ T4058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.619788][ T4062] loop3: detected capacity change from 0 to 512 [ 43.626774][ T4062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.637079][ T4062] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.166: invalid block [ 43.649646][ T4062] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.166: invalid indirect mapped block 4294967295 (level 1) [ 43.654533][ T4064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.168'. [ 43.672426][ T4064] tipc: Invalid UDP bearer configuration [ 43.672535][ T4064] tipc: Enabling of bearer rejected, failed to enable media [ 43.692078][ T4062] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.166: invalid indirect mapped block 4294967295 (level 1) [ 43.712079][ T4065] loop4: detected capacity change from 0 to 1024 [ 43.718925][ T4065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.726603][ T4065] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 43.737734][ T4062] EXT4-fs (loop3): 2 truncates cleaned up [ 43.745734][ T4065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.761662][ T4062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.775944][ T4062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.804525][ T4062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 43.841653][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.883193][ T4069] loop2: detected capacity change from 0 to 512 [ 43.898789][ T4069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.919036][ T4069] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.169: invalid block [ 43.934793][ T4071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.943718][ T4071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.952726][ T4069] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.169: invalid indirect mapped block 4294967295 (level 1) [ 43.981590][ T4069] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.169: invalid indirect mapped block 4294967295 (level 1) [ 44.014078][ T4069] EXT4-fs (loop2): 2 truncates cleaned up [ 44.027789][ T4069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.057974][ T4069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.082454][ T4069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 44.199513][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.276497][ T4083] loop2: detected capacity change from 0 to 512 [ 44.284168][ T4083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.294571][ T4083] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.175: invalid block [ 44.308223][ T4083] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.175: invalid indirect mapped block 4294967295 (level 1) [ 44.322791][ T4083] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.175: invalid indirect mapped block 4294967295 (level 1) [ 44.357292][ T4083] EXT4-fs (loop2): 2 truncates cleaned up [ 44.371048][ T4083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.387459][ T4083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.397186][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.397185][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.427558][ T4083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 44.442019][ T23] Process accounting resumed [ 44.444541][ C0] hrtimer: interrupt took 35859 ns [ 44.508184][ T4102] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(0) [ 44.514819][ T4102] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 44.522357][ T4102] vhci_hcd vhci_hcd.0: Device attached [ 44.536884][ T4105] loop1: detected capacity change from 0 to 1024 [ 44.554720][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 44.564582][ T4105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.580321][ T4105] pim6reg: entered allmulticast mode [ 44.613217][ T4105] pim6reg: left allmulticast mode [ 44.651177][ T3381] usb usb2-port1: attempt power cycle [ 44.668344][ T4112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'. [ 44.714859][ T4116] loop2: detected capacity change from 0 to 512 [ 44.726474][ T4114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 44.730516][ T3370] vhci_hcd: vhci_device speed not set [ 44.736304][ T4116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.751756][ T4116] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.184: invalid block [ 44.764034][ T4116] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.184: invalid indirect mapped block 4294967295 (level 1) [ 44.768093][ T4103] vhci_hcd: connection closed [ 44.779536][ T3604] vhci_hcd: stop threads [ 44.779708][ T4116] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.184: invalid indirect mapped block 4294967295 (level 1) [ 44.784250][ T3604] vhci_hcd: release socket [ 44.784264][ T3604] vhci_hcd: disconnect device [ 44.789856][ T4116] EXT4-fs (loop2): 2 truncates cleaned up [ 44.809993][ T3370] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 44.812053][ T4116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.817398][ T3370] usb 9-1: enqueue for inactive port 0 [ 44.826060][ T4116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.838761][ T3370] usb 9-1: enqueue for inactive port 0 [ 44.857338][ T3370] usb 9-1: enqueue for inactive port 0 [ 44.867204][ T4116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 44.930080][ T3370] vhci_hcd: vhci_device speed not set [ 44.979175][ T4126] loop2: detected capacity change from 0 to 1024 [ 44.986002][ T4126] EXT4-fs: Ignoring removed orlov option [ 44.991720][ T4126] EXT4-fs: Ignoring removed i_version option [ 45.003118][ T4126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.196881][ T4133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.189'. [ 45.205836][ T4133] tipc: Invalid UDP bearer configuration [ 45.205852][ T4133] tipc: Enabling of bearer rejected, failed to enable media [ 45.251330][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.274915][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.305458][ T4142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.313924][ T4145] loop2: detected capacity change from 0 to 512 [ 45.320590][ T4142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.375579][ T4142] loop1: detected capacity change from 0 to 8192 [ 45.404174][ T4152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.416237][ T4152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.445284][ T4155] loop4: detected capacity change from 0 to 512 [ 45.457708][ T4152] loop2: detected capacity change from 0 to 8192 [ 45.479246][ T4155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.493031][ T4155] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.566922][ T4163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.576452][ T4163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.598504][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.624375][ T4166] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 45.630988][ T4166] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 45.638736][ T4166] vhci_hcd vhci_hcd.0: Device attached [ 45.639877][ T4163] loop3: detected capacity change from 0 to 8192 [ 45.644775][ T4167] vhci_hcd: connection closed [ 45.652360][ T3598] vhci_hcd: stop threads [ 45.661358][ T3598] vhci_hcd: release socket [ 45.665967][ T3598] vhci_hcd: disconnect device [ 45.923738][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.931270][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.938663][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.946131][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.953621][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.961057][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.968541][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.975967][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.983368][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.990804][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 45.998301][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.005783][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.013184][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.020615][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.028096][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.035568][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.042986][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.050448][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.057827][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.065260][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.073590][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.081086][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.088479][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.095917][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.103345][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.110789][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.118199][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.125747][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.133220][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.140626][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.148035][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.155480][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.162889][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.170367][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.180137][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz1] on syz0 [ 46.234010][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.237943][ T4186] loop2: detected capacity change from 0 to 1024 [ 46.247626][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.262994][ T4186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.279281][ T4186] pim6reg: entered allmulticast mode [ 46.285317][ T4186] pim6reg: left allmulticast mode [ 46.297469][ T4183] loop3: detected capacity change from 0 to 8192 [ 46.310311][ T4190] Zero length message leads to an empty skb [ 46.501678][ T4201] capability: warning: `syz.1.209' uses 32-bit capabilities (legacy support in use) [ 46.510491][ T3381] usb usb2-port1: unable to enumerate USB device [ 46.602560][ T4209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.611477][ T4209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.659060][ T4209] loop1: detected capacity change from 0 to 8192 [ 46.967374][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.006598][ T4214] netlink: 'syz.2.214': attribute type 13 has an invalid length. [ 47.123502][ T4218] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 47.130192][ T4218] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 47.137896][ T4218] vhci_hcd vhci_hcd.0: Device attached [ 47.178120][ T4220] vhci_hcd: connection closed [ 47.179416][ T384] vhci_hcd: stop threads [ 47.188437][ T384] vhci_hcd: release socket [ 47.192886][ T384] vhci_hcd: disconnect device [ 47.242252][ T4228] loop1: detected capacity change from 0 to 512 [ 47.256452][ T4228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.271289][ T4228] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.218: invalid block [ 47.299987][ T4228] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.218: invalid indirect mapped block 4294967295 (level 1) [ 47.397129][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.407147][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.412306][ T4228] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.218: invalid indirect mapped block 4294967295 (level 1) [ 47.453012][ T4228] EXT4-fs (loop1): 2 truncates cleaned up [ 47.466543][ T4228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.483207][ T4228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.701876][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.738058][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.902866][ T4214] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.911821][ T4214] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.920826][ T4214] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.929801][ T4214] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.947109][ T4235] pim6reg: entered allmulticast mode [ 47.954472][ T4236] pim6reg: left allmulticast mode [ 48.030006][ T4240] loop4: detected capacity change from 0 to 512 [ 48.039213][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 48.039263][ T29] audit: type=1400 audit(1752824300.443:2014): avc: denied { create } for pid=4242 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.098481][ T4240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.105577][ T4244] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.105574][ T29] audit: type=1400 audit(1752824300.473:2015): avc: denied { setopt } for pid=4242 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.141530][ T29] audit: type=1400 audit(1752824300.553:2016): avc: denied { getopt } for pid=4242 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.161219][ T29] audit: type=1400 audit(1752824300.553:2017): avc: denied { getopt } for pid=4242 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.171483][ T4240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.198052][ T4240] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.200017][ T29] audit: type=1400 audit(1752824300.603:2018): avc: denied { ioctl } for pid=4242 comm="syz.0.223" path="socket:[5982]" dev="sockfs" ino=5982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.215761][ T4253] loop1: detected capacity change from 0 to 1024 [ 48.232871][ T29] audit: type=1400 audit(1752824300.603:2019): avc: denied { bind } for pid=4242 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.273865][ T4253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.303140][ T4253] pim6reg: entered allmulticast mode [ 48.309069][ T4253] pim6reg: left allmulticast mode [ 48.318708][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.338131][ T4259] FAULT_INJECTION: forcing a failure. [ 48.338131][ T4259] name failslab, interval 1, probability 0, space 0, times 0 [ 48.350808][ T4259] CPU: 0 UID: 0 PID: 4259 Comm: syz.4.226 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 48.350839][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.350851][ T4259] Call Trace: [ 48.350856][ T4259] [ 48.350862][ T4259] __dump_stack+0x1d/0x30 [ 48.350880][ T4259] dump_stack_lvl+0xe8/0x140 [ 48.350904][ T4259] dump_stack+0x15/0x1b [ 48.350924][ T4259] should_fail_ex+0x265/0x280 [ 48.350955][ T4259] should_failslab+0x8c/0xb0 [ 48.350977][ T4259] kmem_cache_alloc_noprof+0x50/0x310 [ 48.351000][ T4259] ? skb_clone+0x151/0x1f0 [ 48.351071][ T4259] skb_clone+0x151/0x1f0 [ 48.351090][ T4259] __netlink_deliver_tap+0x2c9/0x500 [ 48.351128][ T4259] netlink_unicast+0x653/0x680 [ 48.351222][ T4259] netlink_sendmsg+0x58b/0x6b0 [ 48.351241][ T4259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.351337][ T4259] __sock_sendmsg+0x145/0x180 [ 48.351387][ T4259] ____sys_sendmsg+0x31e/0x4e0 [ 48.351435][ T4259] ___sys_sendmsg+0x17b/0x1d0 [ 48.351486][ T4259] __x64_sys_sendmsg+0xd4/0x160 [ 48.351532][ T4259] x64_sys_call+0x2999/0x2fb0 [ 48.351550][ T4259] do_syscall_64+0xd2/0x200 [ 48.351565][ T4259] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.351611][ T4259] ? clear_bhb_loop+0x40/0x90 [ 48.351636][ T4259] ? clear_bhb_loop+0x40/0x90 [ 48.351662][ T4259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.351711][ T4259] RIP: 0033:0x7f906ed2e9a9 [ 48.351729][ T4259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.351752][ T4259] RSP: 002b:00007f906d38f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.351768][ T4259] RAX: ffffffffffffffda RBX: 00007f906ef55fa0 RCX: 00007f906ed2e9a9 [ 48.351779][ T4259] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000006 [ 48.351790][ T4259] RBP: 00007f906d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.351856][ T4259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.351870][ T4259] R13: 0000000000000000 R14: 00007f906ef55fa0 R15: 00007ffc25b1d8c8 [ 48.351891][ T4259] [ 48.753315][ T4271] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 48.760050][ T4271] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 48.767937][ T4271] vhci_hcd vhci_hcd.0: Device attached [ 48.786353][ T4272] vhci_hcd: connection closed [ 48.786460][ T3557] vhci_hcd: stop threads [ 48.795501][ T3557] vhci_hcd: release socket [ 48.799996][ T3557] vhci_hcd: disconnect device [ 48.829688][ T4277] 9pnet_fd: Insufficient options for proto=fd [ 48.872668][ T4279] __nla_validate_parse: 6 callbacks suppressed [ 48.872690][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 48.899986][ T4281] netlink: 48 bytes leftover after parsing attributes in process `syz.2.234'. [ 48.940026][ T29] audit: type=1326 audit(1752824301.343:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 48.963560][ T29] audit: type=1326 audit(1752824301.343:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4280 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 48.996023][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.113719][ T4297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.240'. [ 49.132998][ T29] audit: type=1400 audit(1752824301.543:2022): avc: denied { ioctl } for pid=4296 comm="syz.2.240" path="socket:[6039]" dev="sockfs" ino=6039 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.348526][ T29] audit: type=1400 audit(1752824301.753:2023): avc: denied { name_connect } for pid=4304 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 49.413550][ T4311] loop1: detected capacity change from 0 to 512 [ 49.422220][ T4311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.433110][ T4311] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.246: invalid block [ 49.446280][ T4311] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.246: invalid indirect mapped block 4294967295 (level 1) [ 49.461246][ T4311] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.246: invalid indirect mapped block 4294967295 (level 1) [ 49.475521][ T4311] EXT4-fs (loop1): 2 truncates cleaned up [ 49.481811][ T4311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.501064][ T4311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.508762][ T4317] netlink: 48 bytes leftover after parsing attributes in process `syz.0.247'. [ 49.538087][ T4318] loop2: detected capacity change from 0 to 1024 [ 49.538124][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 49.577215][ T4318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.609770][ T4318] pim6reg: entered allmulticast mode [ 49.615773][ T4318] pim6reg: left allmulticast mode [ 49.626973][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 49.663499][ T4318] netlink: 60 bytes leftover after parsing attributes in process `syz.2.245'. [ 49.726346][ T4331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.736170][ T4331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.782814][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.790299][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.797699][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.797879][ T4331] loop3: detected capacity change from 0 to 8192 [ 49.805107][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.805137][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.819709][ T4335] loop1: detected capacity change from 0 to 8192 [ 49.826957][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.826984][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.848898][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.856331][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.863753][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 49.871898][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.879351][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.886788][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.894337][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.902441][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.909840][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.917288][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.924766][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.932931][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.940359][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.950315][ T4335] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 49.964197][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.971625][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.979025][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.986472][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.994484][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.002044][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.009440][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.016834][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.024792][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.032192][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.039589][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.047017][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.055282][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.062714][ T3406] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.072182][ T3406] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz1] on syz0 [ 50.104645][ T4342] loop1: detected capacity change from 0 to 512 [ 50.112419][ T4342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.119793][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 50.143888][ T4342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.167751][ T4342] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.196197][ T4351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.258'. [ 50.232454][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.244399][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.254250][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.277612][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.305123][ T4359] FAULT_INJECTION: forcing a failure. [ 50.305123][ T4359] name failslab, interval 1, probability 0, space 0, times 0 [ 50.318603][ T4359] CPU: 1 UID: 0 PID: 4359 Comm: syz.4.262 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 50.318630][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.318643][ T4359] Call Trace: [ 50.318653][ T4359] [ 50.318709][ T4359] __dump_stack+0x1d/0x30 [ 50.318737][ T4359] dump_stack_lvl+0xe8/0x140 [ 50.318764][ T4359] dump_stack+0x15/0x1b [ 50.318781][ T4359] should_fail_ex+0x265/0x280 [ 50.318828][ T4359] ? __inet_diag_dump_start+0x53/0x790 [ 50.318872][ T4359] should_failslab+0x8c/0xb0 [ 50.318902][ T4359] __kmalloc_cache_noprof+0x4c/0x320 [ 50.318933][ T4359] __inet_diag_dump_start+0x53/0x790 [ 50.318964][ T4359] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 50.318999][ T4359] ? __netlink_dump_start+0x325/0x520 [ 50.319034][ T4359] inet_diag_dump_start+0x1a/0x30 [ 50.319067][ T4359] __netlink_dump_start+0x331/0x520 [ 50.319126][ T4359] inet_diag_handler_cmd+0xf3/0x140 [ 50.319156][ T4359] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 50.319203][ T4359] ? __pfx_inet_diag_dump+0x10/0x10 [ 50.319229][ T4359] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 50.319273][ T4359] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 50.319347][ T4359] sock_diag_rcv_msg+0x288/0x2c0 [ 50.319450][ T4359] netlink_rcv_skb+0x120/0x220 [ 50.319486][ T4359] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 50.319529][ T4359] sock_diag_rcv+0x1c/0x30 [ 50.319611][ T4359] netlink_unicast+0x5a8/0x680 [ 50.319646][ T4359] netlink_sendmsg+0x58b/0x6b0 [ 50.319669][ T4359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.319734][ T4359] __sock_sendmsg+0x145/0x180 [ 50.319762][ T4359] sock_write_iter+0x165/0x1b0 [ 50.319834][ T4359] do_iter_readv_writev+0x421/0x4c0 [ 50.319924][ T4359] vfs_writev+0x2df/0x8b0 [ 50.319970][ T4359] do_writev+0xe7/0x210 [ 50.319999][ T4359] __x64_sys_writev+0x45/0x50 [ 50.320021][ T4359] x64_sys_call+0x2006/0x2fb0 [ 50.320120][ T4359] do_syscall_64+0xd2/0x200 [ 50.320139][ T4359] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.320176][ T4359] ? clear_bhb_loop+0x40/0x90 [ 50.320217][ T4359] ? clear_bhb_loop+0x40/0x90 [ 50.320237][ T4359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.320274][ T4359] RIP: 0033:0x7f906ed2e9a9 [ 50.320288][ T4359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.320304][ T4359] RSP: 002b:00007f906d38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 50.320344][ T4359] RAX: ffffffffffffffda RBX: 00007f906ef55fa0 RCX: 00007f906ed2e9a9 [ 50.320359][ T4359] RDX: 0000000000000002 RSI: 0000200000000740 RDI: 0000000000000003 [ 50.320374][ T4359] RBP: 00007f906d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.320389][ T4359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.320404][ T4359] R13: 0000000000000000 R14: 00007f906ef55fa0 R15: 00007ffc25b1d8c8 [ 50.320427][ T4359] [ 50.794396][ T4374] loop4: detected capacity change from 0 to 1024 [ 50.836109][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.866523][ T4379] loop1: detected capacity change from 0 to 512 [ 50.876695][ T4374] pim6reg: entered allmulticast mode [ 50.888296][ T4374] pim6reg: left allmulticast mode [ 50.917176][ T4379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.929835][ T4379] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.958586][ T4379] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.265: corrupted inode contents [ 50.970680][ T4379] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.265: mark_inode_dirty error [ 50.983588][ T4379] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.265: corrupted inode contents [ 50.996829][ T4379] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.265: mark_inode_dirty error [ 51.066905][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.087021][ T4385] FAULT_INJECTION: forcing a failure. [ 51.087021][ T4385] name failslab, interval 1, probability 0, space 0, times 0 [ 51.099787][ T4385] CPU: 1 UID: 0 PID: 4385 Comm: syz.1.266 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 51.099893][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.099908][ T4385] Call Trace: [ 51.099915][ T4385] [ 51.099928][ T4385] __dump_stack+0x1d/0x30 [ 51.099953][ T4385] dump_stack_lvl+0xe8/0x140 [ 51.099976][ T4385] dump_stack+0x15/0x1b [ 51.100051][ T4385] should_fail_ex+0x265/0x280 [ 51.100080][ T4385] should_failslab+0x8c/0xb0 [ 51.100108][ T4385] kmem_cache_alloc_noprof+0x50/0x310 [ 51.100138][ T4385] ? skb_clone+0x151/0x1f0 [ 51.100160][ T4385] skb_clone+0x151/0x1f0 [ 51.100181][ T4385] __netlink_deliver_tap+0x2c9/0x500 [ 51.100231][ T4385] netlink_unicast+0x653/0x680 [ 51.100265][ T4385] netlink_sendmsg+0x58b/0x6b0 [ 51.100283][ T4385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.100300][ T4385] __sock_sendmsg+0x145/0x180 [ 51.100325][ T4385] ____sys_sendmsg+0x31e/0x4e0 [ 51.100414][ T4385] ___sys_sendmsg+0x17b/0x1d0 [ 51.100463][ T4385] __x64_sys_sendmsg+0xd4/0x160 [ 51.100497][ T4385] x64_sys_call+0x2999/0x2fb0 [ 51.100571][ T4385] do_syscall_64+0xd2/0x200 [ 51.100588][ T4385] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.100697][ T4385] ? clear_bhb_loop+0x40/0x90 [ 51.100733][ T4385] ? clear_bhb_loop+0x40/0x90 [ 51.100758][ T4385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.100778][ T4385] RIP: 0033:0x7f19afdee9a9 [ 51.100824][ T4385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.100846][ T4385] RSP: 002b:00007f19ae457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.100867][ T4385] RAX: ffffffffffffffda RBX: 00007f19b0015fa0 RCX: 00007f19afdee9a9 [ 51.100878][ T4385] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000006 [ 51.100888][ T4385] RBP: 00007f19ae457090 R08: 0000000000000000 R09: 0000000000000000 [ 51.100899][ T4385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.100910][ T4385] R13: 0000000000000000 R14: 00007f19b0015fa0 R15: 00007ffd75a3cdf8 [ 51.100973][ T4385] [ 51.341701][ T4387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 51.411787][ T4392] FAULT_INJECTION: forcing a failure. [ 51.411787][ T4392] name failslab, interval 1, probability 0, space 0, times 0 [ 51.425375][ T4392] CPU: 0 UID: 0 PID: 4392 Comm: syz.0.269 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 51.425405][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.425422][ T4392] Call Trace: [ 51.425429][ T4392] [ 51.425439][ T4392] __dump_stack+0x1d/0x30 [ 51.425509][ T4392] dump_stack_lvl+0xe8/0x140 [ 51.425590][ T4392] dump_stack+0x15/0x1b [ 51.425612][ T4392] should_fail_ex+0x265/0x280 [ 51.425653][ T4392] should_failslab+0x8c/0xb0 [ 51.425683][ T4392] __kmalloc_noprof+0xa5/0x3e0 [ 51.425770][ T4392] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 51.425800][ T4392] ? __kfree_skb+0x109/0x150 [ 51.425831][ T4392] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 51.425906][ T4392] ? nlmon_xmit+0x4f/0x60 [ 51.425930][ T4392] genl_family_rcv_msg_doit+0x48/0x1b0 [ 51.425968][ T4392] ? genl_get_cmd+0x639/0x660 [ 51.426003][ T4392] genl_rcv_msg+0x422/0x460 [ 51.426036][ T4392] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 51.426061][ T4392] netlink_rcv_skb+0x120/0x220 [ 51.426154][ T4392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.426205][ T4392] genl_rcv+0x28/0x40 [ 51.426231][ T4392] netlink_unicast+0x5a8/0x680 [ 51.426269][ T4392] netlink_sendmsg+0x58b/0x6b0 [ 51.426352][ T4392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.426377][ T4392] __sock_sendmsg+0x145/0x180 [ 51.426400][ T4392] ____sys_sendmsg+0x31e/0x4e0 [ 51.426433][ T4392] ___sys_sendmsg+0x17b/0x1d0 [ 51.426554][ T4392] __x64_sys_sendmsg+0xd4/0x160 [ 51.426589][ T4392] x64_sys_call+0x2999/0x2fb0 [ 51.426615][ T4392] do_syscall_64+0xd2/0x200 [ 51.426708][ T4392] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.426739][ T4392] ? clear_bhb_loop+0x40/0x90 [ 51.426764][ T4392] ? clear_bhb_loop+0x40/0x90 [ 51.426791][ T4392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.426842][ T4392] RIP: 0033:0x7f22ce2ee9a9 [ 51.426859][ T4392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.426878][ T4392] RSP: 002b:00007f22cc94f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.426895][ T4392] RAX: ffffffffffffffda RBX: 00007f22ce515fa0 RCX: 00007f22ce2ee9a9 [ 51.426906][ T4392] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 51.426917][ T4392] RBP: 00007f22cc94f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.427001][ T4392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.427016][ T4392] R13: 0000000000000000 R14: 00007f22ce515fa0 R15: 00007ffcc7c93688 [ 51.427040][ T4392] [ 51.695837][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.704927][ T4391] loop1: detected capacity change from 0 to 512 [ 51.715709][ T4391] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.268: bg 0: block 16: invalid block bitmap [ 51.728406][ T4391] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 51.740793][ T4391] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.268: invalid indirect mapped block 5 (level 0) [ 51.755632][ T4391] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.268: invalid indirect mapped block 4294967295 (level 1) [ 51.770716][ T4391] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.268: invalid indirect mapped block 4294967295 (level 2) [ 51.811904][ T4397] loop4: detected capacity change from 0 to 512 [ 51.825385][ T4397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.828752][ T4391] EXT4-fs (loop1): 1 truncate cleaned up [ 51.844866][ T4391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.858807][ T4391] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.870779][ T4397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.883800][ T4397] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.949316][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.979496][ T4409] loop2: detected capacity change from 0 to 8192 [ 51.990398][ T4409] vfat: Unknown parameter '' [ 52.334826][ T4461] loop4: detected capacity change from 0 to 1024 [ 52.364003][ T4461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.421837][ T4461] pim6reg: entered allmulticast mode [ 52.441120][ T4461] pim6reg: left allmulticast mode [ 52.559036][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.566712][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.574291][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.581700][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.589155][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.596586][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.604050][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.611486][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.618917][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.626353][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 52.633828][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.641236][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.648634][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.656146][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.663605][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.671086][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.678479][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.685910][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.693336][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.700755][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.710067][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.717691][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.725237][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.732668][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.740081][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.747542][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.755052][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.762478][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.769885][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.777329][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.784754][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.792164][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.799624][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.807075][ T4232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.814925][ T4232] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz1] on syz0 [ 53.030629][ T4571] loop2: detected capacity change from 0 to 512 [ 53.037246][ T4571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.057493][ T4571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.071358][ T4571] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.085548][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.122855][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 53.122885][ T29] audit: type=1400 audit(1752824305.533:2043): avc: denied { ioctl } for pid=4582 comm="syz.3.297" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.154585][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.182567][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.192653][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.251361][ T4585] loop2: detected capacity change from 0 to 8192 [ 53.278794][ T4592] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 53.285421][ T4592] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 53.294113][ T4592] vhci_hcd vhci_hcd.0: Device attached [ 53.300416][ T4593] vhci_hcd: connection closed [ 53.301179][ T3586] vhci_hcd: stop threads [ 53.310231][ T3586] vhci_hcd: release socket [ 53.314689][ T3586] vhci_hcd: disconnect device [ 53.832129][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.839655][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.847109][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.854531][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.862005][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.869432][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.876879][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.884358][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.891796][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.899213][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 53.906625][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.914062][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.921478][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.928936][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.936355][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.943786][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.951246][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.958760][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.966225][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.973656][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.981944][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.989374][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.997056][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.004611][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.012202][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.019610][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.027058][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.034554][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.041996][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.049396][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.056863][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.064329][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.071735][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.079188][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.088877][ T1035] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz1] on syz0 [ 54.138809][ T4603] loop4: detected capacity change from 0 to 512 [ 54.150761][ T4603] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 54.162653][ T4605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.171461][ T4603] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.175152][ T4605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.181696][ T4603] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 54.215671][ T4603] EXT4-fs (loop4): Remounting filesystem read-only [ 54.259353][ T4603] EXT4-fs (loop4): 1 truncate cleaned up [ 54.265543][ T4603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.331919][ T4616] __nla_validate_parse: 2 callbacks suppressed [ 54.331933][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 54.346993][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 54.359083][ T4603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.303'. [ 54.368054][ T4603] tipc: Invalid UDP bearer configuration [ 54.368067][ T4603] tipc: Enabling of bearer rejected, failed to enable media [ 54.399151][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.422749][ T4618] loop3: detected capacity change from 0 to 1024 [ 54.435180][ T4620] loop4: detected capacity change from 0 to 512 [ 54.446234][ T4620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.459516][ T4618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.474799][ T4618] pim6reg: entered allmulticast mode [ 54.483683][ T4618] pim6reg: left allmulticast mode [ 54.489178][ T4620] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.684445][ T29] audit: type=1326 audit(1752824307.093:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 54.707897][ T29] audit: type=1326 audit(1752824307.093:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 54.732417][ T29] audit: type=1326 audit(1752824307.133:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 54.755784][ T29] audit: type=1326 audit(1752824307.133:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 55.113448][ T4637] loop1: detected capacity change from 0 to 256 [ 55.204888][ T29] audit: type=1400 audit(1752824307.613:2048): avc: denied { bind } for pid=4640 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.287254][ T4641] loop3: detected capacity change from 0 to 128 [ 55.342239][ T4641] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.362202][ T29] audit: type=1400 audit(1752824307.773:2049): avc: denied { create } for pid=4640 comm="syz.3.315" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.485103][ T29] audit: type=1400 audit(1752824307.893:2050): avc: denied { create } for pid=4645 comm="syz.3.317" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.511182][ T4646] loop3: detected capacity change from 0 to 512 [ 55.518207][ T29] audit: type=1400 audit(1752824307.923:2051): avc: denied { mounton } for pid=4645 comm="syz.3.317" path="/43/file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.543284][ T4646] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 55.559866][ T4646] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.317: invalid indirect mapped block 2683928664 (level 1) [ 55.592823][ T4646] EXT4-fs (loop3): Remounting filesystem read-only [ 55.599738][ T4646] EXT4-fs (loop3): 1 truncate cleaned up [ 55.646733][ T29] audit: type=1400 audit(1752824308.053:2052): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.712123][ T4649] bridge_slave_0: left allmulticast mode [ 55.717867][ T4649] bridge_slave_0: left promiscuous mode [ 55.724284][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.750628][ T4649] bridge_slave_1: left allmulticast mode [ 55.756297][ T4649] bridge_slave_1: left promiscuous mode [ 55.762029][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.786710][ T4649] bond0: (slave bond_slave_0): Releasing backup interface [ 55.797091][ T4649] bond0: (slave bond_slave_1): Releasing backup interface [ 55.810573][ T4649] team0: Port device team_slave_0 removed [ 55.821556][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.839576][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.840940][ T4649] team0: Port device team_slave_1 removed [ 55.855536][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.863088][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.864325][ T4660] loop4: detected capacity change from 0 to 1024 [ 55.880268][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.887747][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.956591][ T4660] pim6reg: entered allmulticast mode [ 55.983231][ T4667] pim6reg: left allmulticast mode [ 56.143223][ T4665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 56.293000][ T4674] loop1: detected capacity change from 0 to 1024 [ 56.314393][ T4674] pim6reg: entered allmulticast mode [ 56.321576][ T4674] pim6reg: left allmulticast mode [ 56.346639][ T4678] loop2: detected capacity change from 0 to 1024 [ 56.364663][ T4674] netlink: 60 bytes leftover after parsing attributes in process `syz.1.323'. [ 56.364664][ T4678] pim6reg: entered allmulticast mode [ 56.380419][ T4678] pim6reg: left allmulticast mode [ 56.559586][ T4685] pim6reg: entered allmulticast mode [ 56.566843][ T4685] pim6reg: left allmulticast mode [ 56.609268][ T4690] 9pnet_fd: Insufficient options for proto=fd [ 56.744054][ T4698] loop4: detected capacity change from 0 to 1024 [ 56.767079][ T4698] pim6reg: entered allmulticast mode [ 56.782377][ T4698] pim6reg: left allmulticast mode [ 57.233408][ T4714] loop2: detected capacity change from 0 to 1024 [ 57.284441][ T4714] pim6reg: entered allmulticast mode [ 57.307471][ T4714] pim6reg: left allmulticast mode [ 57.395717][ T4721] usb usb1: usbfs: process 4721 (syz.1.338) did not claim interface 0 before use [ 57.446394][ T4723] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 57.453078][ T4723] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 57.461351][ T4723] vhci_hcd vhci_hcd.0: Device attached [ 57.469048][ T4724] vhci_hcd: connection closed [ 57.469247][ T3604] vhci_hcd: stop threads [ 57.478286][ T3604] vhci_hcd: release socket [ 57.478295][ T3604] vhci_hcd: disconnect device [ 57.482496][ T4727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.340'. [ 57.576134][ T4741] 9pnet_fd: Insufficient options for proto=fd [ 57.619657][ T4749] FAULT_INJECTION: forcing a failure. [ 57.619657][ T4749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.633449][ T4749] CPU: 0 UID: 0 PID: 4749 Comm: syz.3.351 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 57.633490][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.633500][ T4749] Call Trace: [ 57.633505][ T4749] [ 57.633511][ T4749] __dump_stack+0x1d/0x30 [ 57.633562][ T4749] dump_stack_lvl+0xe8/0x140 [ 57.633585][ T4749] dump_stack+0x15/0x1b [ 57.633604][ T4749] should_fail_ex+0x265/0x280 [ 57.633638][ T4749] should_fail+0xb/0x20 [ 57.633704][ T4749] should_fail_usercopy+0x1a/0x20 [ 57.633756][ T4749] _copy_to_user+0x20/0xa0 [ 57.633774][ T4749] simple_read_from_buffer+0xb5/0x130 [ 57.633810][ T4749] proc_fail_nth_read+0x100/0x140 [ 57.633842][ T4749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.633928][ T4749] vfs_read+0x1a0/0x6f0 [ 57.633962][ T4749] ? __rcu_read_unlock+0x4f/0x70 [ 57.634004][ T4749] ? __fget_files+0x184/0x1c0 [ 57.634023][ T4749] ? __sys_bind+0x223/0x2a0 [ 57.634099][ T4749] ksys_read+0xda/0x1a0 [ 57.634127][ T4749] __x64_sys_read+0x40/0x50 [ 57.634166][ T4749] x64_sys_call+0x2d77/0x2fb0 [ 57.634187][ T4749] do_syscall_64+0xd2/0x200 [ 57.634240][ T4749] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.634270][ T4749] ? clear_bhb_loop+0x40/0x90 [ 57.634294][ T4749] ? clear_bhb_loop+0x40/0x90 [ 57.634316][ T4749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.634382][ T4749] RIP: 0033:0x7f2e5695d3bc [ 57.634398][ T4749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.634418][ T4749] RSP: 002b:00007f2e54fbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.634439][ T4749] RAX: ffffffffffffffda RBX: 00007f2e56b85fa0 RCX: 00007f2e5695d3bc [ 57.634449][ T4749] RDX: 000000000000000f RSI: 00007f2e54fbf0a0 RDI: 0000000000000005 [ 57.634459][ T4749] RBP: 00007f2e54fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 57.634511][ T4749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.634561][ T4749] R13: 0000000000000000 R14: 00007f2e56b85fa0 R15: 00007ffd2b92fc08 [ 57.634583][ T4749] [ 57.721543][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 57.736427][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 57.758421][ T4758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.353'. [ 57.781147][ T4759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'. [ 57.809767][ T4758] loop3: detected capacity change from 0 to 256 [ 57.859537][ T4761] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 58.062155][ T4770] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 58.066497][ T4774] 9pnet_fd: Insufficient options for proto=fd [ 58.068865][ T4770] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.083229][ T4770] vhci_hcd vhci_hcd.0: Device attached [ 58.093336][ T4772] vhci_hcd: connection closed [ 58.093501][ T3604] vhci_hcd: stop threads [ 58.102493][ T3604] vhci_hcd: release socket [ 58.107061][ T3604] vhci_hcd: disconnect device [ 58.115258][ T4776] FAULT_INJECTION: forcing a failure. [ 58.115258][ T4776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.128389][ T4776] CPU: 0 UID: 0 PID: 4776 Comm: syz.1.360 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 58.128421][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.128436][ T4776] Call Trace: [ 58.128443][ T4776] [ 58.128488][ T4776] __dump_stack+0x1d/0x30 [ 58.128513][ T4776] dump_stack_lvl+0xe8/0x140 [ 58.128534][ T4776] dump_stack+0x15/0x1b [ 58.128558][ T4776] should_fail_ex+0x265/0x280 [ 58.128646][ T4776] should_fail+0xb/0x20 [ 58.128676][ T4776] should_fail_usercopy+0x1a/0x20 [ 58.128755][ T4776] _copy_to_user+0x20/0xa0 [ 58.128778][ T4776] simple_read_from_buffer+0xb5/0x130 [ 58.128885][ T4776] proc_fail_nth_read+0x100/0x140 [ 58.128915][ T4776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.128949][ T4776] vfs_read+0x1a0/0x6f0 [ 58.129045][ T4776] ? __rcu_read_unlock+0x4f/0x70 [ 58.129065][ T4776] ? __fget_files+0x184/0x1c0 [ 58.129135][ T4776] ksys_read+0xda/0x1a0 [ 58.129162][ T4776] __x64_sys_read+0x40/0x50 [ 58.129214][ T4776] x64_sys_call+0x2d77/0x2fb0 [ 58.129232][ T4776] do_syscall_64+0xd2/0x200 [ 58.129247][ T4776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.129336][ T4776] ? clear_bhb_loop+0x40/0x90 [ 58.129354][ T4776] ? clear_bhb_loop+0x40/0x90 [ 58.129372][ T4776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.129393][ T4776] RIP: 0033:0x7f19afded3bc [ 58.129409][ T4776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.129430][ T4776] RSP: 002b:00007f19ae457030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.129501][ T4776] RAX: ffffffffffffffda RBX: 00007f19b0015fa0 RCX: 00007f19afded3bc [ 58.129511][ T4776] RDX: 000000000000000f RSI: 00007f19ae4570a0 RDI: 0000000000000004 [ 58.129521][ T4776] RBP: 00007f19ae457090 R08: 0000000000000000 R09: 0000000000000000 [ 58.129534][ T4776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.129548][ T4776] R13: 0000000000000000 R14: 00007f19b0015fa0 R15: 00007ffd75a3cdf8 [ 58.129570][ T4776] [ 58.385432][ T4783] loop4: detected capacity change from 0 to 512 [ 58.394524][ T4783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.412723][ T4783] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.428073][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 58.428088][ T29] audit: type=1400 audit(1752824310.833:2077): avc: denied { append } for pid=4781 comm="syz.4.363" path="/72/bus/blkio.bfq.io_service_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.482854][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.491769][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.531403][ T4796] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 58.538069][ T4796] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.545854][ T4796] vhci_hcd vhci_hcd.0: Device attached [ 58.564744][ T4791] loop1: detected capacity change from 0 to 8192 [ 58.572498][ T4797] vhci_hcd: connection closed [ 58.572957][ T3546] vhci_hcd: stop threads [ 58.581996][ T3546] vhci_hcd: release socket [ 58.586452][ T3546] vhci_hcd: disconnect device [ 58.655839][ T29] audit: type=1326 audit(1752824311.063:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.0.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ce2ee9a9 code=0x7ffc0000 [ 58.679902][ T29] audit: type=1326 audit(1752824311.063:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.0.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ce2ee9a9 code=0x7ffc0000 [ 58.873134][ T4824] 9pnet_fd: Insufficient options for proto=fd [ 58.879456][ T4826] loop2: detected capacity change from 0 to 512 [ 58.888504][ T29] audit: type=1400 audit(1752824311.293:2080): avc: denied { setopt } for pid=4827 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.896285][ T4826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.919651][ T4828] mmap: syz.0.380 (4828) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.938641][ T4826] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.939557][ T29] audit: type=1326 audit(1752824311.343:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 58.972210][ T29] audit: type=1326 audit(1752824311.343:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4829 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 59.010412][ T29] audit: type=1400 audit(1752824311.423:2083): avc: denied { create } for pid=4827 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.035475][ T29] audit: type=1400 audit(1752824311.443:2084): avc: denied { connect } for pid=4827 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.058078][ T29] audit: type=1400 audit(1752824311.463:2085): avc: denied { read } for pid=4827 comm="syz.0.380" path="socket:[7845]" dev="sockfs" ino=7845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.141236][ T4842] 9pnet_fd: Insufficient options for proto=fd [ 59.167517][ T4847] loop3: detected capacity change from 0 to 512 [ 59.186803][ T4847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.200516][ T29] audit: type=1400 audit(1752824311.603:2086): avc: denied { write } for pid=4827 comm="syz.0.380" path="socket:[7867]" dev="sockfs" ino=7867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.226138][ T4847] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.387: invalid block [ 59.261169][ T4847] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.387: invalid indirect mapped block 4294967295 (level 1) [ 59.275337][ T4847] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.387: invalid indirect mapped block 4294967295 (level 1) [ 59.292391][ T4847] EXT4-fs (loop3): 2 truncates cleaned up [ 59.375739][ T4861] loop4: detected capacity change from 0 to 8192 [ 59.423445][ T4867] loop4: detected capacity change from 0 to 512 [ 59.430336][ T4867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.442008][ T4867] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.696773][ T4881] loop4: detected capacity change from 0 to 512 [ 59.704500][ T4881] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 59.714165][ T4881] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.723676][ T4881] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 59.739905][ T4881] EXT4-fs (loop4): Remounting filesystem read-only [ 59.747598][ T4881] EXT4-fs (loop4): 1 truncate cleaned up [ 59.774353][ T4886] __nla_validate_parse: 7 callbacks suppressed [ 59.774363][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 59.807254][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 59.816389][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 59.828187][ T4881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.397'. [ 59.837091][ T4881] tipc: Invalid UDP bearer configuration [ 59.837106][ T4881] tipc: Enabling of bearer rejected, failed to enable media [ 60.031793][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 60.257481][ T4944] loop4: detected capacity change from 0 to 1024 [ 60.281188][ T4953] loop1: detected capacity change from 0 to 1024 [ 60.307777][ T4944] pim6reg: entered allmulticast mode [ 60.321609][ T4944] pim6reg: left allmulticast mode [ 60.356407][ T4953] pim6reg: entered allmulticast mode [ 60.363250][ T4953] pim6reg: left allmulticast mode [ 60.386723][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 60.469715][ T4973] loop3: detected capacity change from 0 to 8192 [ 60.602541][ T4975] syz.3.431 (4975) used greatest stack depth: 9496 bytes left [ 60.715613][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 60.727107][ T4988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.435'. [ 60.739721][ T4988] loop3: detected capacity change from 0 to 256 [ 60.978081][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.987370][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.075432][ T4990] loop2: detected capacity change from 0 to 8192 [ 61.125530][ T5003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.442'. [ 61.225951][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.448'. [ 61.369523][ T5029] loop4: detected capacity change from 0 to 8192 [ 61.736467][ T5065] loop3: detected capacity change from 0 to 1024 [ 61.755747][ T5065] pim6reg: entered allmulticast mode [ 61.762620][ T5065] pim6reg: left allmulticast mode [ 62.326128][ T5078] loop1: detected capacity change from 0 to 512 [ 62.333185][ T5078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.362377][ T5078] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.883586][ T5120] loop4: detected capacity change from 0 to 1024 [ 62.908213][ T5120] pim6reg: entered allmulticast mode [ 62.918441][ T5123] loop1: detected capacity change from 0 to 1024 [ 62.928383][ T5120] pim6reg: left allmulticast mode [ 62.967874][ T5123] pim6reg: entered allmulticast mode [ 62.974691][ T5123] pim6reg: left allmulticast mode [ 63.369581][ T5141] serio: Serial port ptm0 [ 63.422359][ T5143] FAULT_INJECTION: forcing a failure. [ 63.422359][ T5143] name failslab, interval 1, probability 0, space 0, times 0 [ 63.435877][ T5143] CPU: 0 UID: 0 PID: 5143 Comm: syz.3.492 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 63.435903][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.435914][ T5143] Call Trace: [ 63.435919][ T5143] [ 63.435926][ T5143] __dump_stack+0x1d/0x30 [ 63.435945][ T5143] dump_stack_lvl+0xe8/0x140 [ 63.435962][ T5143] dump_stack+0x15/0x1b [ 63.436003][ T5143] should_fail_ex+0x265/0x280 [ 63.436031][ T5143] should_failslab+0x8c/0xb0 [ 63.436051][ T5143] kmem_cache_alloc_node_noprof+0x57/0x320 [ 63.436100][ T5143] ? __alloc_skb+0x101/0x320 [ 63.436127][ T5143] __alloc_skb+0x101/0x320 [ 63.436174][ T5143] netlink_alloc_large_skb+0xba/0xf0 [ 63.436213][ T5143] netlink_sendmsg+0x3cf/0x6b0 [ 63.436238][ T5143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.436255][ T5143] __sock_sendmsg+0x145/0x180 [ 63.436276][ T5143] ____sys_sendmsg+0x31e/0x4e0 [ 63.436360][ T5143] ___sys_sendmsg+0x17b/0x1d0 [ 63.436451][ T5143] __x64_sys_sendmsg+0xd4/0x160 [ 63.436489][ T5143] x64_sys_call+0x2999/0x2fb0 [ 63.436602][ T5143] do_syscall_64+0xd2/0x200 [ 63.436625][ T5143] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.436659][ T5143] ? clear_bhb_loop+0x40/0x90 [ 63.436748][ T5143] ? clear_bhb_loop+0x40/0x90 [ 63.436768][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.436786][ T5143] RIP: 0033:0x7f2e5695e9a9 [ 63.436799][ T5143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.436858][ T5143] RSP: 002b:00007f2e54f9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.436875][ T5143] RAX: ffffffffffffffda RBX: 00007f2e56b86080 RCX: 00007f2e5695e9a9 [ 63.436885][ T5143] RDX: 0000000000008000 RSI: 0000200000000340 RDI: 0000000000000004 [ 63.436954][ T5143] RBP: 00007f2e54f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 63.436964][ T5143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.437047][ T5143] R13: 0000000000000000 R14: 00007f2e56b86080 R15: 00007ffd2b92fc08 [ 63.437063][ T5143] [ 63.735291][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 63.735322][ T29] audit: type=1326 audit(1752824316.143:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 63.752054][ T5153] 9pnet: Could not find request transport: fd0x0000000000000004 [ 63.774082][ T5158] loop4: detected capacity change from 0 to 128 [ 63.786835][ T29] audit: type=1326 audit(1752824316.143:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 63.819805][ T5158] netlink: 'syz.4.498': attribute type 39 has an invalid length. [ 63.879839][ T5162] loop2: detected capacity change from 0 to 8192 [ 63.916069][ T29] audit: type=1326 audit(1752824316.323:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 63.940153][ T29] audit: type=1326 audit(1752824316.323:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 64.004531][ T5176] loop2: detected capacity change from 0 to 512 [ 64.010006][ T29] audit: type=1326 audit(1752824316.373:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 64.034831][ T29] audit: type=1326 audit(1752824316.373:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 64.044668][ T5176] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 64.058211][ T29] audit: type=1326 audit(1752824316.373:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 64.087869][ T5176] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.097192][ T5176] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 64.111874][ T5176] EXT4-fs (loop2): Remounting filesystem read-only [ 64.118504][ T5176] EXT4-fs (loop2): 1 truncate cleaned up [ 64.135199][ T5176] tipc: Invalid UDP bearer configuration [ 64.135221][ T5176] tipc: Enabling of bearer rejected, failed to enable media [ 64.218223][ T5183] loop3: detected capacity change from 0 to 512 [ 64.225008][ T5183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.242453][ T5183] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.305990][ T5191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.316796][ T5191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.396623][ T5196] 9pnet: Could not find request transport: fd0x0000000000000004 [ 64.455677][ T29] audit: type=1326 audit(1752824316.863:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5200 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5695e9a9 code=0x7ffc0000 [ 64.479229][ T29] audit: type=1326 audit(1752824316.863:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5200 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5695e9a9 code=0x7ffc0000 [ 64.521645][ T5205] loop3: detected capacity change from 0 to 512 [ 64.528346][ T5205] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 64.538195][ T5205] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.545055][ T5205] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 64.559586][ T5205] EXT4-fs (loop3): Remounting filesystem read-only [ 64.566318][ T5205] EXT4-fs (loop3): 1 truncate cleaned up [ 64.618930][ T5208] loop4: detected capacity change from 0 to 512 [ 64.625714][ T5208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.634336][ T5205] tipc: Invalid UDP bearer configuration [ 64.634347][ T5205] tipc: Enabling of bearer rejected, failed to enable media [ 64.644752][ T5208] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.713502][ T5217] loop4: detected capacity change from 0 to 512 [ 64.721618][ T5217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.738346][ T5216] loop3: detected capacity change from 0 to 512 [ 64.746020][ T5216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.758012][ T5217] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.516: invalid block [ 64.759236][ T5216] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.515: invalid block [ 64.774585][ T5217] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.516: invalid indirect mapped block 4294967295 (level 1) [ 64.781947][ T5216] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.515: invalid indirect mapped block 4294967295 (level 1) [ 64.810010][ T5216] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.515: invalid indirect mapped block 4294967295 (level 1) [ 64.824783][ T5216] EXT4-fs (loop3): 2 truncates cleaned up [ 64.825404][ T5217] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.516: invalid indirect mapped block 4294967295 (level 1) [ 64.845369][ T5217] EXT4-fs (loop4): 2 truncates cleaned up [ 64.862087][ T5221] __nla_validate_parse: 20 callbacks suppressed [ 64.862101][ T5221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 64.879158][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 64.890627][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 64.943599][ T5227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.523'. [ 64.974166][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 65.017576][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 65.029410][ T29] audit: type=1326 audit(1752824317.413:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.1.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19afdee9a9 code=0x7ffc0000 [ 65.041865][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 65.076291][ T5245] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 65.082919][ T5245] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.091250][ T5245] vhci_hcd vhci_hcd.0: Device attached [ 65.117863][ T5248] vhci_hcd: connection closed [ 65.118077][ T3546] vhci_hcd: stop threads [ 65.127700][ T3546] vhci_hcd: release socket [ 65.132206][ T3546] vhci_hcd: disconnect device [ 65.196261][ T5259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.205568][ T5259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.261615][ T5259] loop3: detected capacity change from 0 to 8192 [ 65.315611][ T5266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 65.355610][ T5268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.537'. [ 65.399253][ T5272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 65.677331][ T5290] loop2: detected capacity change from 0 to 512 [ 65.684229][ T5290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.695259][ T5290] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.547: invalid block [ 65.707411][ T5290] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.547: invalid indirect mapped block 4294967295 (level 1) [ 65.721992][ T5290] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.547: invalid indirect mapped block 4294967295 (level 1) [ 65.736697][ T5290] EXT4-fs (loop2): 2 truncates cleaned up [ 65.899644][ T5308] loop2: detected capacity change from 0 to 256 [ 65.936069][ T5312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.945996][ T5312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.965653][ T5316] loop2: detected capacity change from 0 to 512 [ 65.973467][ T5316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.993449][ T5312] loop1: detected capacity change from 0 to 8192 [ 66.007519][ T5316] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.113640][ T5323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.133797][ T5323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.193510][ T5323] loop3: detected capacity change from 0 to 8192 [ 66.202297][ T5326] loop2: detected capacity change from 0 to 8192 [ 66.481786][ T5340] loop2: detected capacity change from 0 to 1024 [ 66.494867][ T5340] pim6reg: entered allmulticast mode [ 66.501891][ T5340] pim6reg: left allmulticast mode [ 66.657367][ T5353] pim6reg: entered allmulticast mode [ 66.665224][ T5353] pim6reg: left allmulticast mode [ 66.671519][ T5354] loop1: detected capacity change from 0 to 1024 [ 66.683553][ T5354] pim6reg: entered allmulticast mode [ 66.689322][ T5354] pim6reg: left allmulticast mode [ 66.803425][ T5364] loop3: detected capacity change from 0 to 512 [ 66.811356][ T5364] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 66.820360][ T5364] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.826985][ T5364] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 66.842258][ T5364] EXT4-fs (loop3): Remounting filesystem read-only [ 66.848836][ T5364] EXT4-fs (loop3): 1 truncate cleaned up [ 66.910055][ T5364] tipc: Invalid UDP bearer configuration [ 66.910073][ T5364] tipc: Enabling of bearer rejected, failed to enable media [ 67.193878][ T5382] loop3: detected capacity change from 0 to 256 [ 67.231152][ T3308] EXT4-fs unmount: 59 callbacks suppressed [ 67.231168][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.299045][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.309681][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.363923][ T5388] loop2: detected capacity change from 0 to 8192 [ 67.413520][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.538893][ T5399] loop3: detected capacity change from 0 to 1024 [ 67.567137][ T5399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.592464][ T5399] pim6reg: entered allmulticast mode [ 67.642880][ T5399] pim6reg: left allmulticast mode [ 67.656657][ T5406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.712383][ T5406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.847243][ T5406] loop1: detected capacity change from 0 to 8192 [ 68.249480][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.916507][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 68.916547][ T29] audit: type=1326 audit(1752824321.323:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ce2ee9a9 code=0x7ffc0000 [ 68.976277][ T29] audit: type=1326 audit(1752824321.353:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ce2ee9a9 code=0x7ffc0000 [ 69.125213][ T5438] loop3: detected capacity change from 0 to 512 [ 69.158077][ T5438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.174103][ T5438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.189677][ T5438] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.222168][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.283349][ T5451] loop3: detected capacity change from 0 to 256 [ 69.366796][ T29] audit: type=1326 audit(1752824321.773:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 69.369111][ T5456] pim6reg: entered allmulticast mode [ 69.390894][ T29] audit: type=1326 audit(1752824321.773:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 69.404322][ T5456] pim6reg: left allmulticast mode [ 69.427398][ T29] audit: type=1326 audit(1752824321.833:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 69.451644][ T29] audit: type=1326 audit(1752824321.833:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 69.474957][ T29] audit: type=1326 audit(1752824321.833:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 69.499106][ T29] audit: type=1326 audit(1752824321.833:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 69.523123][ T29] audit: type=1326 audit(1752824321.833:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f906ed2e9a9 code=0x7ffc0000 [ 69.546554][ T29] audit: type=1326 audit(1752824321.833:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f906ed2e9e3 code=0x7ffc0000 [ 69.666157][ T5464] loop3: detected capacity change from 0 to 8192 [ 70.175374][ T5474] __nla_validate_parse: 11 callbacks suppressed [ 70.175393][ T5474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 70.254183][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 70.447838][ T5489] netlink: 'syz.0.622': attribute type 13 has an invalid length. [ 70.501942][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.509150][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.567139][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.620644][ T5489] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.629583][ T5489] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.639039][ T5489] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.640388][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 70.648098][ T5489] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.751272][ T5497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 70.765931][ T5499] loop1: detected capacity change from 0 to 512 [ 70.781464][ T5499] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 70.798146][ T5495] loop3: detected capacity change from 0 to 8192 [ 70.807171][ T5499] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.815037][ T5499] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 70.840344][ T5499] EXT4-fs (loop1): Remounting filesystem read-only [ 70.847048][ T5499] EXT4-fs (loop1): 1 truncate cleaned up [ 70.854066][ T5499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.879022][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.887522][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.919854][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 70.928784][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 70.928895][ T5506] loop3: detected capacity change from 0 to 8192 [ 70.946059][ T5499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.624'. [ 70.955675][ T5499] tipc: Invalid UDP bearer configuration [ 70.955687][ T5499] tipc: Enabling of bearer rejected, failed to enable media [ 70.980872][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.141657][ T5515] loop4: detected capacity change from 0 to 512 [ 71.156041][ T5515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.182807][ T5515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.201196][ T5515] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.249354][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.297968][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.306450][ T5525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.316746][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.317848][ T5525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.390898][ T5525] loop1: detected capacity change from 0 to 8192 [ 71.421512][ T5521] loop2: detected capacity change from 0 to 8192 [ 71.476822][ T5530] loop4: detected capacity change from 0 to 8192 [ 71.727463][ T5545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.643'. [ 71.936557][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 72.151805][ T5560] loop4: detected capacity change from 0 to 8192 [ 72.179763][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 72.322531][ T4232] Process accounting resumed [ 72.375630][ T5584] loop2: detected capacity change from 0 to 1024 [ 72.415346][ T5584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.464764][ T5584] pim6reg: entered allmulticast mode [ 72.470998][ T5584] pim6reg: left allmulticast mode [ 73.129083][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.176356][ T5594] loop2: detected capacity change from 0 to 512 [ 73.192655][ T5594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.202437][ T5597] 9pnet_fd: Insufficient options for proto=fd [ 73.239519][ T5594] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.660: invalid block [ 73.256395][ T5594] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.660: invalid indirect mapped block 4294967295 (level 1) [ 73.272375][ T5594] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.660: invalid indirect mapped block 4294967295 (level 1) [ 73.300275][ T5594] EXT4-fs (loop2): 2 truncates cleaned up [ 73.306524][ T5594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.331884][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.450431][ T5607] loop4: detected capacity change from 0 to 8192 [ 73.558828][ T5622] netlink: 'syz.4.672': attribute type 13 has an invalid length. [ 74.028524][ T5622] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.037595][ T5622] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.047817][ T5622] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.056716][ T5622] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.140210][ T5623] pim6reg: entered allmulticast mode [ 74.150324][ T5624] pim6reg: left allmulticast mode [ 74.286516][ T5631] 9pnet_fd: Insufficient options for proto=fd [ 74.314226][ T5633] loop4: detected capacity change from 0 to 256 [ 74.383874][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.393549][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.438621][ T5639] loop4: detected capacity change from 0 to 8192 [ 74.483358][ T5647] pim6reg: entered allmulticast mode [ 74.490565][ T5647] pim6reg: left allmulticast mode [ 74.507026][ T5648] loop1: detected capacity change from 0 to 8192 [ 74.948654][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 74.948666][ T29] audit: type=1326 audit(1752824327.353:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5695e9a9 code=0x7ffc0000 [ 74.982129][ T29] audit: type=1326 audit(1752824327.353:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5695e9a9 code=0x7ffc0000 [ 75.006913][ T29] audit: type=1326 audit(1752824327.353:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f2e5695e9a9 code=0x7ffc0000 [ 75.030468][ T29] audit: type=1326 audit(1752824327.353:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5653 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5695e9a9 code=0x7ffc0000 [ 75.085457][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.094597][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.131866][ T5660] loop4: detected capacity change from 0 to 8192 [ 75.334218][ T5668] pim6reg: entered allmulticast mode [ 75.339969][ T5668] pim6reg: left allmulticast mode [ 75.649730][ T29] audit: type=1326 audit(1752824328.053:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19afdee9a9 code=0x7ffc0000 [ 75.687334][ T29] audit: type=1326 audit(1752824328.053:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.1.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19afdee9a9 code=0x7ffc0000 [ 75.714726][ T5685] loop1: detected capacity change from 0 to 256 [ 75.741850][ T29] audit: type=1326 audit(1752824328.153:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19afdee9a9 code=0x7ffc0000 [ 75.766073][ T29] audit: type=1326 audit(1752824328.153:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19afdee9a9 code=0x7ffc0000 [ 75.793485][ T29] audit: type=1326 audit(1752824328.153:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f19afdee9a9 code=0x7ffc0000 [ 75.802555][ T5689] __nla_validate_parse: 4 callbacks suppressed [ 75.802574][ T5689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'. [ 75.818585][ T29] audit: type=1326 audit(1752824328.153:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19afdee9a9 code=0x7ffc0000 [ 75.892354][ T5693] loop1: detected capacity change from 0 to 512 [ 75.899085][ T5693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.912242][ T5693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.926163][ T5693] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.954226][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.966141][ T5702] loop3: detected capacity change from 0 to 128 [ 76.063927][ T5715] loop1: detected capacity change from 0 to 512 [ 76.071157][ T5715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.082440][ T5715] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.706: invalid block [ 76.096096][ T5715] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.706: invalid indirect mapped block 4294967295 (level 1) [ 76.111209][ T5715] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.706: invalid indirect mapped block 4294967295 (level 1) [ 76.126125][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 76.126191][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 76.144663][ T5715] EXT4-fs (loop1): 2 truncates cleaned up [ 76.146173][ T5720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.708'. [ 76.153740][ T5715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.160065][ T5720] tipc: Invalid UDP bearer configuration [ 76.172535][ T5720] tipc: Enabling of bearer rejected, failed to enable media [ 76.175380][ T5715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.212415][ T5715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'. [ 76.278446][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 76.296358][ T5736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.716'. [ 76.445577][ T5747] loop1: detected capacity change from 0 to 1024 [ 76.461552][ T5747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.476899][ T5747] pim6reg: entered allmulticast mode [ 76.483256][ T5747] pim6reg: left allmulticast mode [ 76.976716][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 76.987900][ T5755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.720'. [ 77.001225][ T5755] loop3: detected capacity change from 0 to 256 [ 77.186364][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.293630][ T5769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.727'. [ 77.309528][ T5768] loop1: detected capacity change from 0 to 1024 [ 77.319561][ T5768] EXT4-fs: Ignoring removed orlov option [ 77.326074][ T5768] EXT4-fs: Ignoring removed i_version option [ 77.350979][ T5768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.591037][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.850415][ T5801] loop3: detected capacity change from 0 to 128 [ 77.879481][ T5803] loop3: detected capacity change from 0 to 512 [ 77.887811][ T5803] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 77.897702][ T5803] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.904633][ T5803] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 77.920515][ T5803] EXT4-fs (loop3): Remounting filesystem read-only [ 77.927205][ T5803] EXT4-fs (loop3): 1 truncate cleaned up [ 77.933326][ T5803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.000850][ T5803] tipc: Invalid UDP bearer configuration [ 78.000865][ T5803] tipc: Enabling of bearer rejected, failed to enable media [ 78.025721][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.106679][ T5811] loop4: detected capacity change from 0 to 512 [ 78.113821][ T5811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.127189][ T5815] loop3: detected capacity change from 0 to 1024 [ 78.133524][ T5811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.133666][ T5811] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.157382][ T5815] EXT4-fs: Ignoring removed orlov option [ 78.158482][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.163114][ T5815] EXT4-fs: Ignoring removed i_version option [ 78.182505][ T5815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.262639][ T5822] loop4: detected capacity change from 0 to 256 [ 78.384591][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.616252][ T5852] loop3: detected capacity change from 0 to 1024 [ 78.642635][ T5852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.677506][ T5852] pim6reg: entered allmulticast mode [ 78.683541][ T5852] pim6reg: left allmulticast mode [ 79.049678][ T5862] netlink: 'syz.4.759': attribute type 13 has an invalid length. [ 79.203066][ T5878] loop2: detected capacity change from 0 to 512 [ 79.209614][ T5878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.223806][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.237486][ T5878] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.253062][ T5881] loop4: detected capacity change from 0 to 1024 [ 79.271597][ T5881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.285395][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.287913][ T5881] pim6reg: entered allmulticast mode [ 79.301253][ T5881] pim6reg: left allmulticast mode [ 79.321932][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.330649][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.362547][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.377387][ T5885] loop2: detected capacity change from 0 to 8192 [ 79.390977][ T5888] loop3: detected capacity change from 0 to 512 [ 79.397746][ T5888] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 79.406611][ T5888] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.413348][ T5888] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 79.428704][ T5888] EXT4-fs (loop3): Remounting filesystem read-only [ 79.435320][ T5888] EXT4-fs (loop3): 1 truncate cleaned up [ 79.442713][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.516732][ T5888] tipc: Invalid UDP bearer configuration [ 79.516744][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 79.542968][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.863249][ T5925] loop3: detected capacity change from 0 to 1024 [ 79.871002][ T5925] EXT4-fs: Ignoring removed orlov option [ 79.876686][ T5925] EXT4-fs: Ignoring removed i_version option [ 79.908636][ T5925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.990921][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.063873][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 80.063888][ T29] audit: type=1326 audit(1752824332.473:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 80.098552][ T5936] loop4: detected capacity change from 0 to 512 [ 80.114184][ T5936] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 80.123269][ T5936] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.143011][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.153139][ T29] audit: type=1326 audit(1752824332.503:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedeb9e9a9 code=0x7ffc0000 [ 80.179088][ T5936] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 80.218807][ T5936] EXT4-fs (loop4): Remounting filesystem read-only [ 80.234313][ T5936] EXT4-fs (loop4): 1 truncate cleaned up [ 80.260333][ T5945] loop2: detected capacity change from 0 to 1024 [ 80.261433][ T5936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.267325][ T5945] EXT4-fs: Ignoring removed orlov option [ 80.285596][ T5945] EXT4-fs: Ignoring removed i_version option [ 80.300517][ T5936] tipc: Invalid UDP bearer configuration [ 80.300532][ T5936] tipc: Enabling of bearer rejected, failed to enable media [ 80.326940][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.343639][ T5945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.358417][ T5947] netlink: 'syz.3.789': attribute type 13 has an invalid length. [ 80.541617][ T5905] ================================================================== [ 80.549726][ T5905] BUG: KCSAN: data-race in do_sendfile / do_sendfile [ 80.556418][ T5905] [ 80.558746][ T5905] write to 0xffff888102252370 of 8 bytes by task 5910 on cpu 0: [ 80.566377][ T5905] do_sendfile+0x408/0x650 [ 80.570804][ T5905] __x64_sys_sendfile64+0x105/0x150 [ 80.576025][ T5905] x64_sys_call+0xb39/0x2fb0 [ 80.580659][ T5905] do_syscall_64+0xd2/0x200 [ 80.585170][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.591088][ T5905] [ 80.593425][ T5905] write to 0xffff888102252370 of 8 bytes by task 5905 on cpu 1: [ 80.601142][ T5905] do_sendfile+0x408/0x650 [ 80.605569][ T5905] __x64_sys_sendfile64+0x105/0x150 [ 80.610780][ T5905] x64_sys_call+0xb39/0x2fb0 [ 80.615376][ T5905] do_syscall_64+0xd2/0x200 [ 80.619885][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.625786][ T5905] [ 80.628117][ T5905] value changed: 0x0000000000000001 -> 0x000000000000452b [ 80.635226][ T5905] [ 80.637550][ T5905] Reported by Kernel Concurrency Sanitizer on: [ 80.643698][ T5905] CPU: 1 UID: 0 PID: 5905 Comm: syz.1.774 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 80.656034][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.666106][ T5905] ================================================================== [ 81.053459][ T5962] __nla_validate_parse: 22 callbacks suppressed [ 81.053481][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.793'. [ 81.174198][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.193918][ T5947] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.202959][ T5947] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.212497][ T5947] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.222000][ T5947] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0