last executing test programs: 3.63747944s ago: executing program 3 (id=740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4c}}, 0x40048) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.590798494s ago: executing program 3 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, 0x0, &(0x7f0000000a40)}, 0x20) 3.51656712s ago: executing program 3 (id=743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='wg\xc1\xd31\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000"], 0x254}}, 0x0) 3.499768932s ago: executing program 3 (id=746): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="07000000250200"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r3, @ANYRES64=0x0, @ANYBLOB="00000000010000e7000000000402000000000000004f000000b7537a0056615c02939caf4792d6dde8c9d49071e9029118103afd02333d0869f6cae25e12e3e60464ab322599ae9b1d7c666624c8e67d4016a1649321e084c36678db3ed6f39fa59491f5dff0e3640a382025650d1f25249364d1b1b6b2ced130d3b1ccd3b930a613a6552aa133e59f"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) shutdown(r4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) io_setup(0x4, &(0x7f0000000600)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000f40)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x90, 0x7, 0x9, 0x5b412069, 0x3, 0xffffffff, "cc906bf305969bcb72e0d36eba1bd2b4bfbbd7995d02e6624fc18d3b2f47c4e95b6cfaf0bfd9055a9cd66e412ed684434a23f8776fe37a5693bcb14c14fc936b20d4418800d1454841ae3973f1cd6a8e6e779523a29246753e02c5ee091cb7fbf76cef93db011b2907dae66c54a102aac03cdc8cd29b6bcefc119271597a7be2069d5ad58a435f85c794f26a477e73bb"}}, 0x1a8) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) write$binfmt_elf64(r7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/861], 0x35d) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfffffd9d) sendfile(r6, r10, 0x0, 0x8000002b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xaf, "8d7610df39046e1e74ccae2467d40c9571409d06705005b9a3ca4dc67dc8dbfb6b6eaef9140141a826953f2f041d19a650890d443a337cd8b86174289a0c9e4fb9f3e1460b54868bbe5fabd39ad6c1e3dba3bf6f2e7cfb6877db55fc35eb56eedf3ccd742410a554dc2f5a462133ebaa7746b1a69c25133f25006e74b9423177b9cce04c9812eb2c102f9fae720ee3302ce963b1fa019ca335b6fd2bb9d625d069d72642f8a2f93e38d62308bfd875"}, &(0x7f00000000c0)=0xb7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000100)={r11, 0x99f}, &(0x7f0000000180)=0x8) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) 3.123912325s ago: executing program 3 (id=751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4c}}, 0x40048) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.030763263s ago: executing program 3 (id=753): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_usb_connect(0x3, 0x51b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000244be8c1003040ce8bafb010203030902"], 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f00000035c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x5, r2, 0x0, 0x0, 0x2b0}]) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) 2.797783774s ago: executing program 0 (id=757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, 0x0, &(0x7f0000000a40)}, 0x20) 2.740251898s ago: executing program 0 (id=758): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x4000004) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x60, &(0x7f0000000280)=ANY=[], 0x0, 0x804, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="01000000000000000e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00') pread64(r7, &(0x7f0000000480)=""/177, 0xb1, 0xe0) fallocate(r6, 0x0, 0x11, 0x9) 2.585182082s ago: executing program 0 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), 0x0}, 0x20) 2.545693156s ago: executing program 0 (id=760): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="abde0000020000000800000000000000001b000000090b60"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x87) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0xa20, 0x8000c65) write$binfmt_elf64(r2, 0x0, 0x478) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x2}, 0x33, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=@newlinkprop={0x4c, 0x6c, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x40}, [@IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_WEIGHT={0x8, 0xf, 0x81}, @IFLA_ALT_IFNAME={0x14, 0x35, 'tunl0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x701e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r8 = open(&(0x7f0000000040)='./file0\x00', 0x410441, 0xa2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='spi_setup\x00', r8, 0x0, 0x5}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe(&(0x7f0000000000)) 2.03990358s ago: executing program 0 (id=766): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x60, &(0x7f0000000280)=ANY=[], 0x0, 0x804, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="01000000000000000e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00') pread64(r6, &(0x7f0000000480)=""/177, 0xb1, 0xe0) fallocate(r5, 0x0, 0x11, 0x9) 1.652087974s ago: executing program 1 (id=773): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 1.548345483s ago: executing program 2 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x1}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20000000000005}, 0xfffffd7a) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) 1.238465281s ago: executing program 2 (id=776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000"], 0x4c}}, 0x40048) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.195539514s ago: executing program 2 (id=777): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0x2e14, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0x2e00, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000001, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x114, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xe9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}]}, {0xc5, 0x6, "dd9760bcb72aaedae90b3d86b867003d54752b16875b3ee2fc46943412adfd4c043032c604dc88fd4b171de08add5e28721c4ed06105d4eed4e2509721c759c97d46dfbbbf7396a35ee1588673c6032d60a35a566897cd20783b3d1d2f972ae80a17cfd80081e89e8edfec8a4252674c819c0de95913605c1c44fd5f4f7334a261dba810a6e996ce3906f52bfcc8525a51d266270a685fc8a3cf3bc48062234193a5b842238594811d4ad5a8b48a97516775cfeb4d92a44f08202b00da07cdb6f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x1e98, 0x1a, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xffffffff, 0x70000, 0x10000000, 0x0, 0xa}, 0xff, 0x0, [{0x5, 0x2, 0x4, 0xeb2, 0x9, 0x400}, {0x6, 0xfffffffe, 0xfffffff7, 0x1d5, 0x7ff, 0xdf}, {0x7fff, 0x81, 0xa, 0x7fff, 0x7662, 0x1}]}, [{0xfffffe00, 0x9, 0x7, 0x1, 0x4, 0x401}, {0x5, 0x3, 0x2, 0x4, 0x10001, 0x50}, {0x8, 0x5, 0x2, 0xf52, 0x2, 0x6}, {0x6, 0x10, 0x1ff, 0x7, 0xfffffffa, 0x4}, {0x10000, 0xfffffffc, 0x1000, 0x8, 0x3, 0x1}, {0x3, 0x5, 0xee, 0x8, 0x2, 0x6}, {0x8, 0x0, 0x6, 0x8, 0xa, 0x80000001}, {0x9, 0x1, 0xfff, 0x1, 0x5, 0x7f}, {0x0, 0x0, 0xce7, 0x8000, 0xffffffff, 0x5829}, {0x7, 0x9, 0x9, 0xfff, 0x0, 0x7}, {0x8, 0x3, 0x92, 0xffff0001, 0x80000001}, {0x5, 0x8, 0x4, 0x2551, 0xd9d, 0xa}, {0x9, 0x2, 0x100, 0x2, 0x564a, 0x3}, {0xe9, 0x3, 0x7, 0x9, 0xa61e, 0x8}, {0x1, 0x0, 0x6, 0x4, 0x1, 0x2}, {0x7, 0xbc98, 0x0, 0x1ded, 0xe4a4, 0xe}, {0x6a, 0x5dc, 0x8000, 0x9, 0x6, 0x8}, {0xfffffff7, 0x7, 0x6, 0xc1, 0x3, 0x5}, {0x6, 0xfffffffe, 0x7, 0x8, 0xffffff00, 0xb0cb}, {0x1, 0x2, 0x4, 0x2, 0x4, 0x7}, {0x3ff, 0x4, 0x8, 0x4, 0x6, 0x7d74}, {0x80000000, 0x5, 0x6, 0x2, 0x94, 0x5333}, {0x6, 0x5, 0x5, 0x7, 0x0, 0xb1ef}, {0x3, 0xf1, 0x2, 0x5, 0x2, 0x6}, {0x6421, 0x80000001, 0x4212aa44, 0x8, 0x8b, 0x510b}, {0xb, 0x8, 0xc71, 0xd, 0x200, 0x3}, {0x10, 0x0, 0x25, 0x3, 0x4, 0x2}, {0x40, 0x8, 0x4, 0x0, 0xd5, 0x5}, {0x8, 0x0, 0x1, 0xffff, 0x1, 0xd0cb}, {0x4, 0xd31, 0x1, 0x6, 0x6, 0x800}, {0x4, 0x8001, 0x4, 0x7bbd, 0x7, 0xd1}, {0x4, 0x9, 0x6, 0x8001, 0xfffffffb, 0x1ff}, {0x3, 0x40, 0x1, 0x2, 0x8, 0x81}, {0x7fe000, 0x40, 0x1, 0x1edcb935, 0x5, 0xb}, {0x8, 0xfffff001, 0x80000000, 0x5, 0x5, 0x3}, {0x3, 0x3, 0x9, 0x1000, 0xbdd3, 0xff}, {0x0, 0x800, 0xc4, 0x8, 0x7, 0x5}, {0xfffff800, 0x1, 0xc, 0xffff, 0x2, 0x2}, {0x6, 0x0, 0x9, 0x3, 0x3ad, 0xc33c}, {0x3ff, 0x1, 0xc, 0x262, 0xd, 0x10001}, {0x7e23530d, 0x80000000, 0x4, 0x89, 0x0, 0x5}, {0x1, 0x8, 0x800, 0x100, 0x5, 0x408c}, {0x6, 0x0, 0x3, 0xffffffff, 0x2, 0x6}, {0xa82, 0xe0, 0x6, 0x5, 0x2, 0x2}, {0x4, 0x498, 0x1, 0x8e, 0x1000, 0x1}, {0x8, 0x0, 0x7fffffff, 0xf, 0x3ff, 0x4}, {0x7, 0x8, 0x3, 0xfffffff7, 0x4, 0x7}, {0x946, 0x101, 0xa32f, 0x9, 0x8, 0x10}, {0x9, 0x8, 0x8, 0x90, 0x2a89, 0x198}, {0x5, 0xa, 0x10001, 0xd5, 0x8, 0x3}, {0x100, 0xc67d, 0x58, 0x42d6, 0x4, 0x7f}, {0x9, 0x3, 0x10000, 0x1, 0x7, 0x2}, {0x40, 0xfff, 0x9, 0x28000000, 0x9, 0x3}, {0x2, 0x8, 0x7, 0x7, 0x7, 0x80000001}, {0x10001, 0x5, 0x70f, 0x3, 0x0, 0x3}, {0xe, 0x0, 0x7, 0x4, 0x416, 0x5}, {0x80, 0xdeb, 0xc7, 0xce79, 0x6}, {0x9, 0x0, 0xfffffff7, 0x1ff, 0x8000}, {0x8, 0xa00000, 0x8, 0x5, 0x6, 0x400}, {0x9, 0x4, 0x7, 0x2, 0x2, 0x5}, {0x2, 0x5, 0x8, 0x5, 0x2, 0x1ff}, {0x3e42, 0x6, 0x5, 0xd4, 0x82, 0xffffffff}, {0x5af131fa, 0x6, 0x3, 0x100, 0x800, 0x80000001}, {0x8, 0x6, 0x2, 0x3, 0x0, 0x4b8e}, {0x0, 0xaaae, 0x0, 0x0, 0x1ff, 0x1}, {0x1, 0x100, 0x2f9, 0x5b7e, 0x4, 0x2}, {0x1, 0x9, 0x4, 0x2, 0x4, 0xfffffffa}, {0x5, 0xfffffffb, 0x10000, 0x6, 0xf, 0x80000000}, {0x3, 0xc, 0x5, 0x400, 0x7}, {0xcd, 0x32bc, 0x1, 0x3, 0x5, 0x100000}, {0xf51, 0x2, 0x6, 0x1, 0xe3, 0x101}, {0xe, 0x5, 0x3, 0xa45d, 0x9, 0x8}, {0x3f6, 0x3, 0x1, 0x80, 0x9, 0x800}, {0x100, 0x6, 0x0, 0xac6, 0x8, 0xfffffffc}, {0x800, 0x67, 0x0, 0x6, 0xe664, 0x7}, {0x5, 0x5, 0x400000, 0x4, 0x5, 0x372}, {0x10000, 0xfffffff7, 0x1, 0x4, 0x3, 0x10000}, {0xd, 0x4, 0x27, 0x5, 0x7}, {0x6, 0x0, 0x1, 0x4, 0x3, 0x6ba}, {0x9, 0xe866, 0x6, 0x9, 0x9}, {0x80, 0x3, 0xffffffff, 0x3, 0x4, 0x2}, {0xe, 0xe8, 0x1, 0xd, 0xd, 0xa}, {0x80000000, 0x5, 0xbf, 0x81, 0x6d2, 0xe}, {0xffffffef, 0x2, 0xf, 0x5, 0x1b, 0x33}, {0x8001, 0x7f, 0x81, 0xb, 0x8001, 0x5d4}, {0x78e6, 0x0, 0x5ad, 0x9, 0x5, 0x3c5e}, {0xffff7fff, 0x9, 0x3, 0x4, 0x9, 0x200}, {0x8000, 0x3, 0x7f, 0x8, 0x61, 0x8c}, {0xfffffffb, 0x5b, 0x4, 0xfffffffe, 0x88, 0x1}, {0x4, 0x1000, 0x74, 0x9, 0x10001, 0x4}, {0x2, 0x9, 0x3ff, 0x10001, 0xd, 0x1}, {0x553a, 0x1, 0x2, 0x5, 0x4b, 0x2}, {0x5, 0x0, 0x26, 0x3, 0xb35, 0xd26b}, {0x6, 0x10000, 0x3f, 0x0, 0x8, 0xfffff001}, {0x2, 0x43, 0x8, 0x6, 0x81, 0x9}, {0x2, 0x9, 0x9, 0x3ff, 0x9, 0xfff}, {0x9, 0x1bc0, 0x3, 0x5, 0x7, 0xfffffffb}, {0xf, 0xf1, 0x101, 0x0, 0x2, 0xecc4}, {0x7, 0xa4, 0x7, 0x0, 0x1e, 0x6}, {0x8, 0x9, 0x37, 0x3, 0xfffffffb, 0x693cd1c8}, {0x4, 0x8f, 0x8, 0x9, 0x4, 0x4}, {0xd, 0x2, 0x6, 0x80000000, 0xd}, {0xaad6, 0x59, 0x5, 0x1, 0x1, 0x8}, {0x5, 0x4, 0x9, 0x0, 0xb7b, 0x80b0}, {0x7, 0xfffffffe, 0x2, 0x80000000, 0xa, 0xb}, {0xde7, 0x401, 0x8f6, 0x0, 0x8, 0x3}, {0x7678000, 0x3, 0x6, 0x8000, 0x3e}, {0x6, 0xfffffffc, 0x81, 0x77, 0x4, 0x9}, {0x7c85fcbc, 0x1, 0x0, 0xffffffff, 0x5, 0x1}, {0x3, 0x3, 0x7, 0x1ff, 0x0, 0x1}, {0x5, 0x4, 0x3, 0x3, 0xdd12, 0x718}, {0x595, 0x7, 0x9, 0xa, 0x8, 0x4}, {0x5, 0x8, 0x2, 0x3c1, 0xff, 0x1ff}, {0x10001, 0x40, 0x0, 0x401, 0x4, 0x43c}, {0x1, 0x5, 0x1, 0x13, 0x10001, 0x400}, {0x8, 0x8, 0xe, 0x7, 0xdcd, 0x9fe}, {0xffffffff, 0x41a1, 0xbe30, 0x0, 0xffffff1b, 0x2}, {0x4, 0x80000000, 0x5, 0x7, 0x7, 0x7}, {0x2, 0x8, 0x5, 0x7, 0xd7}, {0x6, 0x1, 0x83, 0x8, 0x3, 0x3}, {0x9, 0x7, 0x4, 0x5, 0xe, 0x2}, {0x8, 0x2, 0x4, 0x0, 0x7092, 0x7}, {0x9, 0x4, 0x400, 0x5, 0x6, 0xbaf}, {0x8, 0x7, 0x54bf, 0x2, 0xffffff9f, 0x10001}, {0x8, 0x1, 0xd46, 0x4, 0xffffaa51, 0x8}, {0x80, 0x8, 0x3, 0x5, 0x77}, {0x7, 0x18, 0x5, 0x3, 0x7f, 0x3}, {0x100, 0x4, 0x5c9, 0x63, 0x2, 0x6}], [{0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x7ae6297d1630c483}, {0x4}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x3}, {0x6eb532c306fc7947, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0xb}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x6}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x7d8a41b87b01d7a0}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x1}], 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2e14}}, 0x0) 1.187374225s ago: executing program 4 (id=778): mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) pipe(&(0x7f0000005880)) 1.154870838s ago: executing program 0 (id=779): mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x38f9, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x4) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r9 = accept$packet(r8, 0x0, 0x0) sendto$packet(r9, &(0x7f00000002c0)='H', 0x1, 0x4000, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvfrom$inet_nvme(r7, 0x0, 0x0, 0x40000002, 0x0, 0x0) r11 = dup(r5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11) pipe(&(0x7f0000005880)) 1.141627369s ago: executing program 4 (id=780): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x1c) listen(r0, 0x2000) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.01978985s ago: executing program 2 (id=781): syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) io_uring_setup(0xaae, 0x0) r2 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r4], 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x19400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setgroups(0x0, 0x0) 747.170854ms ago: executing program 4 (id=784): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000041ffffff0000008000000000691dd524c0ec031207000000010000007d5b6e861807aef70d48ff114ca107359d9639218120d18792cd0598c521d7d3c9184d161335ec291f2f06cb7990f4f586e1e19acda2cbef91468fb10d87f35801000000beed6ad28f250c2348701753162e609f721c77ffedb3838dbd0775e50978eb15054f5d72db6817b9b3636e80503db1dc2f27024d920b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffff9}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, 0x0, 0x0}, 0x20) syslog(0x2, &(0x7f0000000380)=""/96, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f00000004c0), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x8040600) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) (fail_nth: 2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 744.305284ms ago: executing program 1 (id=785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000e1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) kexec_load(0x1000, 0x0, &(0x7f0000000740), 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={0x0}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140400006437af7a0000895400000000"], 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, &(0x7f00000008c0)=""/109, 0x0, 0x6d, 0x0, 0x140000}, 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 741.370005ms ago: executing program 2 (id=786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 571.637099ms ago: executing program 1 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000"], 0x4c}}, 0x40048) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 570.916819ms ago: executing program 1 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), 0x0}, 0x20) 527.165634ms ago: executing program 1 (id=789): ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000240)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(r0) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) r2 = syz_usb_connect$printer(0x0, 0x68, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100db1815168c69010000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) 300.602863ms ago: executing program 4 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, 0x0, &(0x7f0000000a40)}, 0x20) 300.252174ms ago: executing program 4 (id=791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0x4}, 0x18) syz_usbip_server_init(0x4) 0s ago: executing program 1 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x2988, &(0x7f0000000300)={0x0, 0x356f, 0x10, 0x3, 0x4285}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r5, r3, 0x80000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) kernel console output (not intermixed with test programs): s: Ignoring removed nobh option [ 48.411230][ T3957] EXT4-fs: inline encryption not supported [ 48.443383][ T3957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.478737][ T3957] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.135: Allocating blocks 385-513 which overlap fs metadata [ 48.507843][ T3957] EXT4-fs (loop2): pa ffff888109c6e2a0: logic 16, phys. 129, len 24 [ 48.516041][ T3957] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 48.536352][ T3957] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 48.548830][ T3957] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.548830][ T3957] [ 48.558820][ T3957] EXT4-fs (loop2): Total free blocks count 0 [ 48.564868][ T3957] EXT4-fs (loop2): Free/Dirty block details [ 48.570913][ T3957] EXT4-fs (loop2): free_blocks=128 [ 48.576063][ T3957] EXT4-fs (loop2): dirty_blocks=0 [ 48.581163][ T3957] EXT4-fs (loop2): Block reservation details [ 48.587203][ T3957] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 48.615638][ T3978] capability: warning: `syz.4.140' uses deprecated v2 capabilities in a way that may be insecure [ 48.724584][ T3987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=3987 comm=syz.4.143 [ 48.759330][ T3988] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 48.765984][ T3988] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.773471][ T3988] vhci_hcd vhci_hcd.0: Device attached [ 48.786750][ T3992] vhci_hcd: connection closed [ 48.789669][ T57] vhci_hcd vhci_hcd.2: stop threads [ 48.799846][ T57] vhci_hcd vhci_hcd.2: release socket [ 48.805261][ T57] vhci_hcd vhci_hcd.2: disconnect device [ 48.819990][ T3996] loop4: detected capacity change from 0 to 128 [ 48.887445][ T4000] bio_check_eod: 20215 callbacks suppressed [ 48.887463][ T4000] syz.4.146: attempt to access beyond end of device [ 48.887463][ T4000] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 48.907011][ T4000] syz.4.146: attempt to access beyond end of device [ 48.907011][ T4000] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 48.920612][ T4000] syz.4.146: attempt to access beyond end of device [ 48.920612][ T4000] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 48.933990][ T4000] syz.4.146: attempt to access beyond end of device [ 48.933990][ T4000] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 48.947494][ T4000] syz.4.146: attempt to access beyond end of device [ 48.947494][ T4000] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 48.960892][ T4000] syz.4.146: attempt to access beyond end of device [ 48.960892][ T4000] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 48.974885][ T4000] syz.4.146: attempt to access beyond end of device [ 48.974885][ T4000] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 48.988269][ T4000] syz.4.146: attempt to access beyond end of device [ 48.988269][ T4000] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 49.001887][ T4000] syz.4.146: attempt to access beyond end of device [ 49.001887][ T4000] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 49.015272][ T4000] syz.4.146: attempt to access beyond end of device [ 49.015272][ T4000] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 49.160873][ T4008] loop4: detected capacity change from 0 to 1024 [ 49.167756][ T4008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.175096][ T4008] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.185836][ T4008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 49.194205][ T4008] System zones: 0-1, 3-36 [ 49.199500][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.252457][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.350703][ T4019] loop2: detected capacity change from 0 to 128 [ 50.030039][ T4036] loop3: detected capacity change from 0 to 1024 [ 50.052537][ T4036] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 50.157326][ T4036] FAULT_INJECTION: forcing a failure. [ 50.157326][ T4036] name failslab, interval 1, probability 0, space 0, times 0 [ 50.170201][ T4036] CPU: 1 UID: 0 PID: 4036 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.170235][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.170293][ T4036] Call Trace: [ 50.170300][ T4036] [ 50.170308][ T4036] __dump_stack+0x1d/0x30 [ 50.170333][ T4036] dump_stack_lvl+0x95/0xd0 [ 50.170373][ T4036] dump_stack+0x15/0x1b [ 50.170436][ T4036] should_fail_ex+0x265/0x280 [ 50.170525][ T4036] should_failslab+0x8c/0xb0 [ 50.170549][ T4036] __kmalloc_noprof+0xb9/0x5a0 [ 50.170571][ T4036] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 50.170710][ T4036] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 50.170743][ T4036] genl_family_rcv_msg_doit+0x48/0x1b0 [ 50.170767][ T4036] ? selinux_capable+0x31/0x40 [ 50.170922][ T4036] ? security_capable+0x83/0x90 [ 50.170964][ T4036] ? ns_capable+0x7d/0xb0 [ 50.171002][ T4036] genl_rcv_msg+0x422/0x460 [ 50.171068][ T4036] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 50.171130][ T4036] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 50.171165][ T4036] ? __pfx_nl802154_post_doit+0x10/0x10 [ 50.171209][ T4036] netlink_rcv_skb+0x123/0x220 [ 50.171247][ T4036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.171278][ T4036] genl_rcv+0x28/0x40 [ 50.171358][ T4036] netlink_unicast+0x5c0/0x690 [ 50.171396][ T4036] netlink_sendmsg+0x58b/0x6b0 [ 50.171436][ T4036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.171501][ T4036] __sock_sendmsg+0x145/0x180 [ 50.171521][ T4036] ____sys_sendmsg+0x31e/0x4a0 [ 50.171556][ T4036] ___sys_sendmsg+0x17b/0x1d0 [ 50.171638][ T4036] __x64_sys_sendmsg+0xd4/0x160 [ 50.171734][ T4036] x64_sys_call+0x17ba/0x3000 [ 50.171760][ T4036] do_syscall_64+0xca/0x2b0 [ 50.171810][ T4036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.171839][ T4036] RIP: 0033:0x7fab7fe3f749 [ 50.171875][ T4036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.171894][ T4036] RSP: 002b:00007fab7e886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.171913][ T4036] RAX: ffffffffffffffda RBX: 00007fab80096090 RCX: 00007fab7fe3f749 [ 50.171924][ T4036] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 50.171936][ T4036] RBP: 00007fab7e886090 R08: 0000000000000000 R09: 0000000000000000 [ 50.171953][ T4036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.171969][ T4036] R13: 00007fab80096128 R14: 00007fab80096090 R15: 00007ffe1a35d208 [ 50.171993][ T4036] [ 50.470819][ T4044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4044 comm=wgÁÓ1 [ 50.588803][ T4048] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.602103][ T4048] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.675700][ T4057] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.703402][ T4048] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.723439][ T4056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 50.730430][ T4056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 50.737958][ T4056] vhci_hcd vhci_hcd.0: Device attached [ 50.747664][ T4057] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.753577][ T4048] EXT4-fs (loop3): 1 truncate cleaned up [ 50.767929][ T4048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.805345][ T4060] vhci_hcd: connection closed [ 50.805518][ T12] vhci_hcd vhci_hcd.1: stop threads [ 50.815688][ T12] vhci_hcd vhci_hcd.1: release socket [ 50.821260][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 50.865171][ T4067] EXT4-fs: Ignoring removed nobh option [ 50.870881][ T4067] EXT4-fs: inline encryption not supported [ 50.891588][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.908802][ T4067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.926794][ T4070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.980431][ T4080] EXT4-fs: Ignoring removed i_version option [ 50.986525][ T4080] EXT4-fs: Ignoring removed bh option [ 51.003318][ T4067] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.169: Allocating blocks 385-513 which overlap fs metadata [ 51.048508][ T4083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4083 comm=wgÁÓ1 [ 51.063826][ T4067] EXT4-fs (loop1): pa ffff888109c6e2a0: logic 16, phys. 129, len 24 [ 51.071943][ T4067] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 51.096559][ T4067] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 51.108928][ T4067] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.108928][ T4067] [ 51.118835][ T4067] EXT4-fs (loop1): Total free blocks count 0 [ 51.124880][ T4067] EXT4-fs (loop1): Free/Dirty block details [ 51.130833][ T4067] EXT4-fs (loop1): free_blocks=128 [ 51.135970][ T4067] EXT4-fs (loop1): dirty_blocks=0 [ 51.141094][ T4067] EXT4-fs (loop1): Block reservation details [ 51.147120][ T4067] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 51.154487][ T4083] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 51.168403][ T4080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.181251][ T4080] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.229593][ T4088] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.269052][ T4088] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.287032][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.604048][ T4110] EXT4-fs: Ignoring removed nobh option [ 51.609821][ T4110] EXT4-fs: inline encryption not supported [ 51.636213][ T29] kauditd_printk_skb: 1185 callbacks suppressed [ 51.636227][ T29] audit: type=1326 audit(1768006632.445:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 51.666016][ T29] audit: type=1326 audit(1768006632.445:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 51.689646][ T29] audit: type=1326 audit(1768006632.485:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 51.713071][ T29] audit: type=1326 audit(1768006632.485:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f31f66ef783 code=0x7ffc0000 [ 51.736266][ T29] audit: type=1326 audit(1768006632.485:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f31f66ef807 code=0x7ffc0000 [ 51.759685][ T29] audit: type=1326 audit(1768006632.485:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f31f66a6bdd code=0x7ffc0000 [ 51.782947][ T29] audit: type=1326 audit(1768006632.485:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f31f6723e89 code=0x7ffc0000 [ 51.806930][ T29] audit: type=1326 audit(1768006632.515:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f31f66a6357 code=0x7ffc0000 [ 51.828507][ T4110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.830404][ T29] audit: type=1326 audit(1768006632.515:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f31f66a63b6 code=0x7ffc0000 [ 51.851311][ T4110] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.181: Allocating blocks 385-513 which overlap fs metadata [ 51.866605][ T29] audit: type=1326 audit(1768006632.515:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 51.925226][ T4110] EXT4-fs (loop0): pa ffff888109c6e310: logic 16, phys. 129, len 24 [ 51.933332][ T4110] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 51.957796][ T4110] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 51.970288][ T4110] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.970288][ T4110] [ 51.980267][ T4110] EXT4-fs (loop0): Total free blocks count 0 [ 51.986278][ T4110] EXT4-fs (loop0): Free/Dirty block details [ 51.992309][ T4110] EXT4-fs (loop0): free_blocks=128 [ 51.997486][ T4110] EXT4-fs (loop0): dirty_blocks=0 [ 52.002544][ T4110] EXT4-fs (loop0): Block reservation details [ 52.008599][ T4110] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 52.049470][ T4120] netlink: 'syz.4.183': attribute type 4 has an invalid length. [ 52.054021][ T4111] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 52.063756][ T4111] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.071375][ T4111] vhci_hcd vhci_hcd.0: Device attached [ 52.075165][ T4120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=4120 comm=syz.4.183 [ 52.130839][ T4126] set_capacity_and_notify: 9 callbacks suppressed [ 52.130853][ T4126] loop0: detected capacity change from 0 to 512 [ 52.187356][ T4126] EXT4-fs: Ignoring removed i_version option [ 52.193419][ T4126] EXT4-fs: Ignoring removed bh option [ 52.246964][ T4132] loop4: detected capacity change from 0 to 256 [ 52.249406][ T4126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.254484][ T4132] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.277918][ T1038] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 52.294191][ T4136] FAULT_INJECTION: forcing a failure. [ 52.294191][ T4136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.307387][ T4136] CPU: 0 UID: 0 PID: 4136 Comm: syz.1.186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.307420][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.307493][ T4136] Call Trace: [ 52.307502][ T4136] [ 52.307511][ T4136] __dump_stack+0x1d/0x30 [ 52.307542][ T4136] dump_stack_lvl+0x95/0xd0 [ 52.307570][ T4136] dump_stack+0x15/0x1b [ 52.307656][ T4136] should_fail_ex+0x265/0x280 [ 52.307684][ T4136] should_fail+0xb/0x20 [ 52.307709][ T4136] should_fail_usercopy+0x1a/0x20 [ 52.307736][ T4136] _copy_to_iter+0x251/0xe70 [ 52.307767][ T4136] ? ___slab_alloc+0x2ec/0xb00 [ 52.307838][ T4136] copy_page_to_iter+0x18f/0x2d0 [ 52.307869][ T4136] shmem_file_read_iter+0x2d6/0x540 [ 52.307951][ T4136] do_iter_readv_writev+0x4a1/0x540 [ 52.308048][ T4136] vfs_readv+0x1ea/0x690 [ 52.308083][ T4136] __x64_sys_preadv+0xfd/0x1c0 [ 52.308132][ T4136] x64_sys_call+0x2805/0x3000 [ 52.308176][ T4136] do_syscall_64+0xca/0x2b0 [ 52.308220][ T4136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.308251][ T4136] RIP: 0033:0x7f31f66ef749 [ 52.308268][ T4136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.308288][ T4136] RSP: 002b:00007f31f5115038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 52.308315][ T4136] RAX: ffffffffffffffda RBX: 00007f31f6946180 RCX: 00007f31f66ef749 [ 52.308346][ T4136] RDX: 000000000000003e RSI: 00002000000015c0 RDI: 0000000000000005 [ 52.308359][ T4136] RBP: 00007f31f5115090 R08: 0000000000000000 R09: 0000000000000000 [ 52.308444][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.308457][ T4136] R13: 00007f31f6946218 R14: 00007f31f6946180 R15: 00007ffd1dea1038 [ 52.308478][ T4136] [ 52.313971][ T4132] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.356816][ T1038] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 52.374032][ T4126] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.387879][ T4121] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 52.392282][ T4116] vhci_hcd: connection closed [ 52.551157][ T4096] loop3: detected capacity change from 0 to 512 [ 52.587403][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.612374][ T4096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.672991][ T4096] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.685254][ T37] vhci_hcd vhci_hcd.2: stop threads [ 52.690571][ T37] vhci_hcd vhci_hcd.2: release socket [ 52.696134][ T37] vhci_hcd vhci_hcd.2: disconnect device [ 52.731467][ T4147] loop4: detected capacity change from 0 to 1024 [ 52.740897][ T4147] EXT4-fs: Ignoring removed nobh option [ 52.746528][ T4147] EXT4-fs: inline encryption not supported [ 52.752385][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.794787][ T4147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.816552][ T4147] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.192: Allocating blocks 385-513 which overlap fs metadata [ 52.852911][ T4147] EXT4-fs (loop4): pa ffff8881075e1540: logic 16, phys. 129, len 24 [ 52.861143][ T4147] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 52.884800][ T4147] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 52.897133][ T4147] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.897133][ T4147] [ 52.906869][ T4147] EXT4-fs (loop4): Total free blocks count 0 [ 52.912887][ T4147] EXT4-fs (loop4): Free/Dirty block details [ 52.918857][ T4147] EXT4-fs (loop4): free_blocks=128 [ 52.924001][ T4147] EXT4-fs (loop4): dirty_blocks=0 [ 52.929524][ T4147] EXT4-fs (loop4): Block reservation details [ 52.935532][ T4147] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 52.946819][ T4153] loop3: detected capacity change from 0 to 128 [ 52.958925][ T4159] loop0: detected capacity change from 0 to 128 [ 53.028093][ T4160] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 53.034758][ T4160] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.042263][ T4160] vhci_hcd vhci_hcd.0: Device attached [ 53.071818][ T4165] loop2: detected capacity change from 0 to 128 [ 53.153513][ T4169] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 53.226763][ T3630] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 53.299087][ T3630] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 53.316165][ T4161] vhci_hcd: connection reset by peer [ 53.323297][ T1014] vhci_hcd vhci_hcd.1: stop threads [ 53.328602][ T1014] vhci_hcd vhci_hcd.1: release socket [ 53.334197][ T1014] vhci_hcd vhci_hcd.1: disconnect device [ 53.358069][ T4186] loop3: detected capacity change from 0 to 256 [ 53.376061][ T4186] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.404165][ T4186] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.476907][ T4190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.537183][ T4200] loop0: detected capacity change from 0 to 1024 [ 53.544030][ T4200] EXT4-fs: Ignoring removed orlov option [ 53.553479][ T4197] loop4: detected capacity change from 0 to 128 [ 53.587882][ T4200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.604561][ T4206] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.620366][ T4206] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.696958][ T4209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.746571][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.815928][ T57] Buffer I/O error on dev loop4, logical block 496, lost async page write [ 53.834528][ T4221] Zero length message leads to an empty skb [ 53.904317][ T4224] bio_check_eod: 1267 callbacks suppressed [ 53.904336][ T4224] syz.3.218: attempt to access beyond end of device [ 53.904336][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 53.908021][ T4229] netlink: 'syz.2.220': attribute type 4 has an invalid length. [ 53.930186][ T4224] syz.3.218: attempt to access beyond end of device [ 53.930186][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 53.945693][ T4224] syz.3.218: attempt to access beyond end of device [ 53.945693][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 53.960082][ T4233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=4233 comm=syz.2.220 [ 53.973861][ T4224] syz.3.218: attempt to access beyond end of device [ 53.973861][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 53.989850][ T4224] syz.3.218: attempt to access beyond end of device [ 53.989850][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.016629][ T4232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.053675][ T4224] syz.3.218: attempt to access beyond end of device [ 54.053675][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.067587][ T4224] syz.3.218: attempt to access beyond end of device [ 54.067587][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.081466][ T4224] syz.3.218: attempt to access beyond end of device [ 54.081466][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.095481][ T4224] syz.3.218: attempt to access beyond end of device [ 54.095481][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.109753][ T4224] syz.3.218: attempt to access beyond end of device [ 54.109753][ T4224] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.127241][ T4232] FAULT_INJECTION: forcing a failure. [ 54.127241][ T4232] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 54.140542][ T4232] CPU: 1 UID: 0 PID: 4232 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.140575][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.140588][ T4232] Call Trace: [ 54.140595][ T4232] [ 54.140605][ T4232] __dump_stack+0x1d/0x30 [ 54.140692][ T4232] dump_stack_lvl+0x95/0xd0 [ 54.140721][ T4232] dump_stack+0x15/0x1b [ 54.140804][ T4232] should_fail_ex+0x265/0x280 [ 54.140827][ T4232] should_fail_alloc_page+0xf2/0x100 [ 54.140857][ T4232] __alloc_frozen_pages_noprof+0x109/0x360 [ 54.140970][ T4232] alloc_pages_mpol+0xb3/0x260 [ 54.141010][ T4232] folio_alloc_noprof+0x97/0x150 [ 54.141045][ T4232] filemap_alloc_folio_noprof+0x93/0x230 [ 54.141099][ T4232] __filemap_get_folio_mpol+0x295/0x650 [ 54.141131][ T4232] ? ext4_chunk_trans_extent+0x178/0x1a0 [ 54.141171][ T4232] ext4_write_begin+0x2fa/0xe90 [ 54.141278][ T4232] ext4_da_write_begin+0x1f0/0x6b0 [ 54.141311][ T4232] ? inode_to_bdi+0x47/0xa0 [ 54.141383][ T4232] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 54.141463][ T4232] generic_perform_write+0x184/0x490 [ 54.141585][ T4232] ext4_buffered_write_iter+0x1ee/0x3c0 [ 54.141629][ T4232] ? ext4_file_write_iter+0xfe/0xf60 [ 54.141710][ T4232] ext4_file_write_iter+0x387/0xf60 [ 54.141741][ T4232] ? path_openat+0x1e82/0x23b0 [ 54.141799][ T4232] ? _parse_integer_limit+0x170/0x190 [ 54.141823][ T4232] do_iter_readv_writev+0x4a1/0x540 [ 54.141853][ T4232] vfs_writev+0x2df/0x8b0 [ 54.141967][ T4232] __se_sys_pwritev2+0xfc/0x1c0 [ 54.142069][ T4232] __x64_sys_pwritev2+0x67/0x80 [ 54.142099][ T4232] x64_sys_call+0x2c9e/0x3000 [ 54.142123][ T4232] do_syscall_64+0xca/0x2b0 [ 54.142161][ T4232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.142241][ T4232] RIP: 0033:0x7f31f66ef749 [ 54.142261][ T4232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.142284][ T4232] RSP: 002b:00007f31f5157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 54.142308][ T4232] RAX: ffffffffffffffda RBX: 00007f31f6945fa0 RCX: 00007f31f66ef749 [ 54.142354][ T4232] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 54.142368][ T4232] RBP: 00007f31f5157090 R08: 0000000000000000 R09: 0000000000000000 [ 54.142384][ T4232] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000001 [ 54.142400][ T4232] R13: 00007f31f6946038 R14: 00007f31f6945fa0 R15: 00007ffd1dea1038 [ 54.142425][ T4232] [ 54.467597][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.599370][ T4251] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 54.606031][ T4251] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.613641][ T4251] vhci_hcd vhci_hcd.0: Device attached [ 54.634225][ T4260] vhci_hcd: connection closed [ 54.634352][ T1018] vhci_hcd vhci_hcd.4: stop threads [ 54.644463][ T1018] vhci_hcd vhci_hcd.4: release socket [ 54.649929][ T1018] vhci_hcd vhci_hcd.4: disconnect device [ 54.739562][ T4269] EXT4-fs: Ignoring removed nobh option [ 54.745287][ T4269] EXT4-fs: inline encryption not supported [ 54.759537][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.774358][ T4269] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.233: Allocating blocks 385-513 which overlap fs metadata [ 54.790319][ T4269] EXT4-fs (loop3): pa ffff888109c6e310: logic 16, phys. 129, len 24 [ 54.798388][ T4269] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 54.809460][ T4269] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 54.821764][ T4269] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.821764][ T4269] [ 54.831498][ T4269] EXT4-fs (loop3): Total free blocks count 0 [ 54.837589][ T4269] EXT4-fs (loop3): Free/Dirty block details [ 54.843542][ T4269] EXT4-fs (loop3): free_blocks=128 [ 54.848720][ T4269] EXT4-fs (loop3): dirty_blocks=0 [ 54.853787][ T4269] EXT4-fs (loop3): Block reservation details [ 54.859843][ T4269] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 54.908267][ T4281] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.923005][ T4281] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.006384][ T4290] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.018653][ T4290] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.050977][ T4292] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.063623][ T4292] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.167047][ T4295] loop3: p1 p2 p3 p4 [ 55.171196][ T4295] loop3: p1 size 196608 extends beyond EOD, truncated [ 55.190001][ T4295] loop3: p2 start 164919041 is beyond EOD, truncated [ 55.196867][ T4295] loop3: p3 size 66846464 extends beyond EOD, truncated [ 55.204615][ T4295] loop3: p4 size 37048832 extends beyond EOD, truncated [ 55.214889][ T4295] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 55.223390][ T4294] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 55.265135][ T4304] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 55.301581][ T4310] EXT4-fs: Ignoring removed nobh option [ 55.307335][ T4310] EXT4-fs: inline encryption not supported [ 55.329265][ T4310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.348651][ T4310] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.246: Allocating blocks 385-513 which overlap fs metadata [ 55.364771][ T4310] EXT4-fs (loop0): pa ffff888109c6e3f0: logic 16, phys. 129, len 24 [ 55.372842][ T4310] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 55.383796][ T4310] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 55.396154][ T4310] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.396154][ T4310] [ 55.405882][ T4310] EXT4-fs (loop0): Total free blocks count 0 [ 55.411961][ T4310] EXT4-fs (loop0): Free/Dirty block details [ 55.417953][ T4310] EXT4-fs (loop0): free_blocks=128 [ 55.423100][ T4310] EXT4-fs (loop0): dirty_blocks=0 [ 55.428184][ T4310] EXT4-fs (loop0): Block reservation details [ 55.434213][ T4310] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 55.513567][ T4324] EXT4-fs: Ignoring removed i_version option [ 55.519728][ T4324] EXT4-fs: Ignoring removed bh option [ 55.540142][ T4324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.562154][ T4324] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.635242][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.650042][ T4330] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 55.656695][ T4330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.664335][ T4330] vhci_hcd vhci_hcd.0: Device attached [ 55.795871][ T4332] vhci_hcd: connection closed [ 55.796732][ T969] vhci_hcd vhci_hcd.3: stop threads [ 55.806772][ T969] vhci_hcd vhci_hcd.3: release socket [ 55.812205][ T969] vhci_hcd vhci_hcd.3: disconnect device [ 55.836723][ T3397] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 55.937892][ T4341] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 55.944569][ T4341] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.952048][ T4341] vhci_hcd vhci_hcd.0: Device attached [ 55.961086][ T4349] vhci_hcd: connection closed [ 55.961342][ T969] vhci_hcd vhci_hcd.4: stop threads [ 55.971878][ T969] vhci_hcd vhci_hcd.4: release socket [ 55.977328][ T969] vhci_hcd vhci_hcd.4: disconnect device [ 56.456891][ T4375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 56.463586][ T4375] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.471111][ T4375] vhci_hcd vhci_hcd.0: Device attached [ 56.477236][ T4369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.535039][ T4376] vhci_hcd: connection closed [ 56.535223][ T31] vhci_hcd vhci_hcd.3: stop threads [ 56.545331][ T31] vhci_hcd vhci_hcd.3: release socket [ 56.550814][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 56.628016][ T4388] xt_hashlimit: max too large, truncated to 1048576 [ 56.635634][ T4388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.660615][ T4388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.668029][ T4388] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.685080][ T4388] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.271: Invalid block bitmap block 0 in block_group 0 [ 56.701175][ T4388] __quota_error: 694 callbacks suppressed [ 56.701193][ T4388] Quota error (device loop1): write_blk: dquota write failed [ 56.714416][ T4388] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 56.724552][ T4388] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.271: Failed to acquire dquot type 0 [ 56.736121][ T4388] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.271: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.755031][ T4388] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.271: Invalid inode bitmap blk 0 in block_group 0 [ 56.767877][ T57] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 56.776884][ T57] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 56.788703][ T4388] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 56.799050][ T4388] EXT4-fs (loop1): 1 orphan inode deleted [ 56.805185][ T4388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.835596][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.862225][ T29] audit: type=1326 audit(1768006637.675:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 56.896328][ T4391] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 56.913128][ T29] audit: type=1326 audit(1768006637.675:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 56.936556][ T29] audit: type=1326 audit(1768006637.675:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 56.959995][ T29] audit: type=1326 audit(1768006637.715:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 56.983352][ T29] audit: type=1326 audit(1768006637.715:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 57.006546][ T29] audit: type=1326 audit(1768006637.715:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 57.030244][ T29] audit: type=1326 audit(1768006637.715:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4390 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 57.065140][ T4393] EXT4-fs: Ignoring removed nobh option [ 57.070969][ T4393] EXT4-fs: inline encryption not supported [ 57.161168][ T4399] set_capacity_and_notify: 17 callbacks suppressed [ 57.161186][ T4399] loop1: detected capacity change from 0 to 128 [ 57.178100][ T4393] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.274: Allocating blocks 385-513 which overlap fs metadata [ 57.201231][ T4393] EXT4-fs (loop0): pa ffff8881075e15b0: logic 16, phys. 129, len 24 [ 57.209414][ T4393] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 57.268846][ T4402] Buffer I/O error on dev loop1, logical block 400, lost async page write [ 57.324668][ T4393] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 57.337150][ T4393] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.337150][ T4393] [ 57.346846][ T4393] EXT4-fs (loop0): Total free blocks count 0 [ 57.352904][ T4393] EXT4-fs (loop0): Free/Dirty block details [ 57.358927][ T4393] EXT4-fs (loop0): free_blocks=128 [ 57.364068][ T4393] EXT4-fs (loop0): dirty_blocks=0 [ 57.369151][ T4393] EXT4-fs (loop0): Block reservation details [ 57.375162][ T4393] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 57.418910][ T1038] usb 5-1: enqueue for inactive port 0 [ 57.424512][ T1038] usb 5-1: enqueue for inactive port 0 [ 57.516771][ T1038] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 57.583109][ T4405] loop0: detected capacity change from 0 to 1024 [ 57.602884][ T4405] EXT4-fs: Ignoring removed nobh option [ 57.608617][ T4405] EXT4-fs: inline encryption not supported [ 57.723677][ T4405] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.277: Allocating blocks 385-513 which overlap fs metadata [ 57.832149][ T4405] EXT4-fs (loop0): pa ffff8881075e1540: logic 16, phys. 129, len 24 [ 57.840294][ T4405] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 57.855867][ T4410] loop2: detected capacity change from 0 to 1024 [ 57.903803][ T4410] EXT4-fs: Ignoring removed nobh option [ 57.909489][ T4410] EXT4-fs: inline encryption not supported [ 57.915997][ T4405] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 57.928266][ T4405] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.928266][ T4405] [ 57.937967][ T4405] EXT4-fs (loop0): Total free blocks count 0 [ 57.944059][ T4405] EXT4-fs (loop0): Free/Dirty block details [ 57.950184][ T4405] EXT4-fs (loop0): free_blocks=128 [ 57.955329][ T4405] EXT4-fs (loop0): dirty_blocks=0 [ 57.960417][ T4405] EXT4-fs (loop0): Block reservation details [ 57.966500][ T4405] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 57.992154][ T4410] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.278: Allocating blocks 385-513 which overlap fs metadata [ 58.040013][ T4410] EXT4-fs (loop2): pa ffff8881075e1540: logic 16, phys. 129, len 24 [ 58.048149][ T4410] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 58.058618][ T4410] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 58.070963][ T4410] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.070963][ T4410] [ 58.080682][ T4410] EXT4-fs (loop2): Total free blocks count 0 [ 58.086785][ T4410] EXT4-fs (loop2): Free/Dirty block details [ 58.092790][ T4410] EXT4-fs (loop2): free_blocks=128 [ 58.097968][ T4410] EXT4-fs (loop2): dirty_blocks=0 [ 58.103078][ T4410] EXT4-fs (loop2): Block reservation details [ 58.109111][ T4410] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 58.187138][ T4425] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 58.193704][ T4425] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.201483][ T4425] vhci_hcd vhci_hcd.0: Device attached [ 58.257150][ T4425] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 58.263723][ T4425] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.271265][ T4425] vhci_hcd vhci_hcd.0: Device attached [ 58.284983][ T4426] usbip_core: unknown command [ 58.289879][ T4426] vhci_hcd: unknown pdu 2351867679 [ 58.295239][ T4426] usbip_core: unknown command [ 58.303546][ T4431] loop2: detected capacity change from 0 to 128 [ 58.317786][ T31] vhci_hcd vhci_hcd.0: stop threads [ 58.323066][ T31] vhci_hcd vhci_hcd.0: release socket [ 58.328513][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 58.357663][ T3630] usb 3-1: enqueue for inactive port 0 [ 58.363264][ T3630] usb 3-1: enqueue for inactive port 0 [ 58.376743][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 58.379448][ T4437] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 58.389729][ T4437] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.397211][ T4437] vhci_hcd vhci_hcd.0: Device attached [ 58.466046][ T4438] vhci_hcd: connection closed [ 58.466224][ T37] vhci_hcd vhci_hcd.3: stop threads [ 58.476332][ T37] vhci_hcd vhci_hcd.3: release socket [ 58.482001][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 58.487710][ T3630] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 58.506066][ T4444] loop4: detected capacity change from 0 to 128 [ 58.572396][ T4447] loop2: detected capacity change from 0 to 512 [ 58.668178][ T4450] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.675659][ T4450] vhci_hcd vhci_hcd.2: invalid port number 96 [ 58.681907][ T4450] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 58.768783][ T4455] loop4: detected capacity change from 0 to 128 [ 58.839671][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.849002][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.950914][ T4467] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 58.962500][ T4467] bond1 (unregistering): Released all slaves [ 59.000893][ T4432] vhci_hcd: connection closed [ 59.001070][ T37] vhci_hcd vhci_hcd.0: stop threads [ 59.011081][ T37] vhci_hcd vhci_hcd.0: release socket [ 59.016549][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 59.135316][ T4475] netlink: 300 bytes leftover after parsing attributes in process `syz.3.300'. [ 59.223236][ T4479] loop4: detected capacity change from 0 to 128 [ 59.304291][ T4484] loop3: detected capacity change from 0 to 512 [ 59.368034][ T4484] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.392726][ T4484] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.423667][ T4484] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.303: corrupted inode contents [ 59.514945][ T4484] EXT4-fs (loop3): Remounting filesystem read-only [ 59.526956][ T4484] EXT4-fs (loop3): 1 truncate cleaned up [ 59.529130][ T4488] loop2: detected capacity change from 0 to 128 [ 59.539192][ T969] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.549907][ T969] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.570921][ T969] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.608494][ T969] bio_check_eod: 12476 callbacks suppressed [ 59.608511][ T969] kworker/u8:6: attempt to access beyond end of device [ 59.608511][ T969] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 59.628338][ T969] kworker/u8:6: attempt to access beyond end of device [ 59.628338][ T969] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 59.663973][ T4490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 59.672463][ T4492] pim6reg: entered allmulticast mode [ 59.678444][ T969] kworker/u8:6: attempt to access beyond end of device [ 59.678444][ T969] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 59.679464][ T4488] syz.2.304: attempt to access beyond end of device [ 59.679464][ T4488] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 59.696445][ T4492] pim6reg: left allmulticast mode [ 59.710405][ T969] kworker/u8:6: attempt to access beyond end of device [ 59.710405][ T969] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 59.711228][ T4488] syz.2.304: attempt to access beyond end of device [ 59.711228][ T4488] loop2: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 59.724874][ T969] kworker/u8:6: attempt to access beyond end of device [ 59.724874][ T969] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 59.739076][ T4488] syz.2.304: attempt to access beyond end of device [ 59.739076][ T4488] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 59.754875][ T969] kworker/u8:6: attempt to access beyond end of device [ 59.754875][ T969] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 59.765097][ T4488] syz.2.304: attempt to access beyond end of device [ 59.765097][ T4488] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 59.838785][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 59.850122][ T4500] netlink: 'syz.4.308': attribute type 7 has an invalid length. [ 59.870501][ T4502] pim6reg: entered allmulticast mode [ 59.876306][ T4502] pim6reg: left allmulticast mode [ 59.894048][ T4504] pim6reg: entered allmulticast mode [ 59.900701][ T4504] pim6reg: left allmulticast mode [ 59.978114][ T4508] vlan2: entered allmulticast mode [ 59.983322][ T4508] dummy0: entered allmulticast mode [ 59.987710][ T4510] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.001132][ T4510] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.085752][ T4514] netlink: 'syz.0.315': attribute type 4 has an invalid length. [ 60.095183][ T4514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=4514 comm=syz.0.315 [ 60.149126][ T4515] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.156482][ T4515] vhci_hcd vhci_hcd.2: invalid port number 96 [ 60.162672][ T4515] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 60.229909][ T4519] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 60.240716][ T4519] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 60.377325][ T4529] EXT4-fs: Ignoring removed i_version option [ 60.383408][ T4529] EXT4-fs: Ignoring removed bh option [ 60.396889][ T4530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4530 comm=syz.3.320 [ 60.431828][ T4529] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.482009][ T4536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.489322][ T4536] IPv6: NLM_F_CREATE should be set when creating new route [ 60.609054][ T4549] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 60.629442][ T4549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=4549 comm=syz.3.328 [ 60.707018][ T4559] EXT4-fs: Ignoring removed i_version option [ 60.713093][ T4559] EXT4-fs: Ignoring removed bh option [ 60.729469][ T4559] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.810957][ T4567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.916549][ T4581] netlink: 'syz.4.340': attribute type 4 has an invalid length. [ 60.949544][ T4581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=4581 comm=syz.4.340 [ 61.067525][ T4593] EXT4-fs: Ignoring removed i_version option [ 61.073624][ T4593] EXT4-fs: Ignoring removed bh option [ 61.089168][ T4593] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.159498][ T4598] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.167104][ T4598] vhci_hcd vhci_hcd.2: invalid port number 96 [ 61.173209][ T4598] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 61.433451][ T4620] netlink: 'syz.0.355': attribute type 1 has an invalid length. [ 61.707877][ T29] kauditd_printk_skb: 901 callbacks suppressed [ 61.707891][ T29] audit: type=1326 audit(1768006642.525:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.775987][ T29] audit: type=1326 audit(1768006642.555:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.799409][ T29] audit: type=1326 audit(1768006642.555:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.822826][ T29] audit: type=1326 audit(1768006642.555:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.846242][ T29] audit: type=1326 audit(1768006642.555:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.869750][ T29] audit: type=1326 audit(1768006642.555:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.893150][ T29] audit: type=1326 audit(1768006642.555:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.916560][ T29] audit: type=1326 audit(1768006642.565:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.939965][ T29] audit: type=1326 audit(1768006642.565:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 61.963301][ T29] audit: type=1326 audit(1768006642.565:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 62.187789][ T4658] set_capacity_and_notify: 15 callbacks suppressed [ 62.187807][ T4658] loop2: detected capacity change from 0 to 128 [ 62.265870][ T4659] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 62.272491][ T4659] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.280005][ T4659] vhci_hcd vhci_hcd.0: Device attached [ 62.391411][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 62.420211][ T4660] vhci_hcd: connection closed [ 62.420390][ T969] vhci_hcd vhci_hcd.4: stop threads [ 62.430424][ T969] vhci_hcd vhci_hcd.4: release socket [ 62.435873][ T969] vhci_hcd vhci_hcd.4: disconnect device [ 62.448553][ T4670] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 62.455100][ T4670] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.462903][ T4670] vhci_hcd vhci_hcd.0: Device attached [ 62.477170][ T3397] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 62.510664][ T4681] loop0: detected capacity change from 0 to 512 [ 62.535547][ T4682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.544558][ T4682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.685294][ T3502] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 62.692332][ T4683] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.699999][ T4683] vhci_hcd vhci_hcd.2: invalid port number 96 [ 62.706103][ T4683] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 63.033391][ T4688] loop4: detected capacity change from 0 to 128 [ 63.169433][ T3502] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 63.198980][ T4671] vhci_hcd: connection reset by peer [ 63.204556][ T31] vhci_hcd vhci_hcd.1: stop threads [ 63.209861][ T31] vhci_hcd vhci_hcd.1: release socket [ 63.215273][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 63.776119][ T4716] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 63.782701][ T4716] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.790320][ T4716] vhci_hcd vhci_hcd.0: Device attached [ 63.871291][ T4717] vhci_hcd: connection closed [ 63.871558][ T31] vhci_hcd vhci_hcd.2: stop threads [ 63.881619][ T31] vhci_hcd vhci_hcd.2: release socket [ 63.887106][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 63.976231][ T4723] loop1: detected capacity change from 0 to 2048 [ 64.005589][ T4738] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 64.013869][ T4738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=4738 comm=syz.0.397 [ 64.060312][ T4742] loop0: detected capacity change from 0 to 128 [ 64.094406][ T4745] loop4: detected capacity change from 0 to 1024 [ 64.101391][ T4745] EXT4-fs: Ignoring removed nobh option [ 64.107030][ T4745] EXT4-fs: inline encryption not supported [ 64.158364][ T4745] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.400: Allocating blocks 385-513 which overlap fs metadata [ 64.175110][ T4745] EXT4-fs (loop4): pa ffff888109c6e460: logic 16, phys. 129, len 24 [ 64.183290][ T4745] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 64.228381][ T4745] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 64.240680][ T4745] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.240680][ T4745] [ 64.250490][ T4745] EXT4-fs (loop4): Total free blocks count 0 [ 64.256498][ T4745] EXT4-fs (loop4): Free/Dirty block details [ 64.262512][ T4745] EXT4-fs (loop4): free_blocks=128 [ 64.267759][ T4745] EXT4-fs (loop4): dirty_blocks=0 [ 64.272817][ T4745] EXT4-fs (loop4): Block reservation details [ 64.278877][ T4745] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 64.302450][ T4750] loop0: detected capacity change from 0 to 512 [ 64.309665][ T4750] EXT4-fs: Ignoring removed i_version option [ 64.316012][ T4750] EXT4-fs: Ignoring removed bh option [ 64.329947][ T4750] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.364405][ T4754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.402'. [ 64.412707][ T4758] loop0: detected capacity change from 0 to 128 [ 64.447189][ T4736] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.670450][ T2541] bio_check_eod: 12268 callbacks suppressed [ 64.670465][ T2541] kworker/u8:12: attempt to access beyond end of device [ 64.670465][ T2541] loop0: rw=8388609, sector=896, nr_sectors = 1 limit=128 [ 64.690656][ T2541] Buffer I/O error on dev loop0, logical block 896, lost async page write [ 64.741070][ T2541] kworker/u8:12: attempt to access beyond end of device [ 64.741070][ T2541] loop0: rw=1, sector=905, nr_sectors = 8 limit=128 [ 64.755273][ T4722] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 8 with error 28 [ 64.767735][ T4722] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.767735][ T4722] [ 64.777459][ T4722] EXT4-fs (loop1): Total free blocks count 0 [ 64.783470][ T4722] EXT4-fs (loop1): Free/Dirty block details [ 64.789434][ T4722] EXT4-fs (loop1): free_blocks=2415919504 [ 64.795226][ T4722] EXT4-fs (loop1): dirty_blocks=8208 [ 64.800705][ T4722] EXT4-fs (loop1): Block reservation details [ 64.806720][ T4722] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 64.813470][ T2541] kworker/u8:12: attempt to access beyond end of device [ 64.813470][ T2541] loop0: rw=1, sector=921, nr_sectors = 8 limit=128 [ 64.827202][ T2541] kworker/u8:12: attempt to access beyond end of device [ 64.827202][ T2541] loop0: rw=1, sector=937, nr_sectors = 8 limit=128 [ 64.841370][ T2541] kworker/u8:12: attempt to access beyond end of device [ 64.841370][ T2541] loop0: rw=1, sector=953, nr_sectors = 8 limit=128 [ 64.871646][ T2541] kworker/u8:12: attempt to access beyond end of device [ 64.871646][ T2541] loop0: rw=1, sector=969, nr_sectors = 8 limit=128 [ 64.885433][ T2541] kworker/u8:12: attempt to access beyond end of device [ 64.885433][ T2541] loop0: rw=1, sector=985, nr_sectors = 8 limit=128 [ 64.896245][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 64.899452][ T2541] kworker/u8:12: attempt to access beyond end of device [ 64.899452][ T2541] loop0: rw=1, sector=1001, nr_sectors = 8 limit=128 [ 64.911342][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.911342][ T37] [ 65.073960][ T2541] kworker/u8:12: attempt to access beyond end of device [ 65.073960][ T2541] loop0: rw=1, sector=1017, nr_sectors = 8 limit=128 [ 65.087767][ T2541] kworker/u8:12: attempt to access beyond end of device [ 65.087767][ T2541] loop0: rw=1, sector=1033, nr_sectors = 8 limit=128 [ 65.115211][ T4770] loop2: detected capacity change from 0 to 128 [ 65.307731][ T4780] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 65.314407][ T4780] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.322588][ T4780] vhci_hcd vhci_hcd.0: Device attached [ 65.348764][ T4780] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 65.355375][ T4780] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.362952][ T4780] vhci_hcd vhci_hcd.0: Device attached [ 65.378483][ T4781] usbip_core: unknown command [ 65.383260][ T4781] vhci_hcd: unknown pdu 2351867679 [ 65.388457][ T4781] usbip_core: unknown command [ 65.432317][ T2541] vhci_hcd vhci_hcd.1: stop threads [ 65.437664][ T2541] vhci_hcd vhci_hcd.1: release socket [ 65.443143][ T2541] vhci_hcd vhci_hcd.1: disconnect device [ 65.479455][ T4794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.416'. [ 65.569906][ T4798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.646369][ T4804] loop2: detected capacity change from 0 to 512 [ 65.759079][ T4806] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.782803][ T4806] vhci_hcd vhci_hcd.2: invalid port number 96 [ 65.789269][ T4806] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 65.802712][ T4811] pim6reg: entered allmulticast mode [ 65.813024][ T4811] pim6reg: left allmulticast mode [ 65.948756][ T4789] Set syz1 is full, maxelem 65536 reached [ 65.976448][ T4820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'. [ 66.110261][ T4837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.123637][ T4784] vhci_hcd: connection closed [ 66.124383][ T2541] vhci_hcd vhci_hcd.1: stop threads [ 66.134461][ T2541] vhci_hcd vhci_hcd.1: release socket [ 66.139914][ T2541] vhci_hcd vhci_hcd.1: disconnect device [ 66.140464][ T4839] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.146090][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.217045][ T4839] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.638429][ T4847] pim6reg: entered allmulticast mode [ 66.662802][ T4847] pim6reg: left allmulticast mode [ 66.697665][ T4851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.440'. [ 66.819770][ T4857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.835434][ T29] kauditd_printk_skb: 1016 callbacks suppressed [ 66.835487][ T29] audit: type=1326 audit(1768006647.645:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 66.866251][ T29] audit: type=1326 audit(1768006647.645:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 66.889722][ T29] audit: type=1326 audit(1768006647.645:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 66.913134][ T29] audit: type=1326 audit(1768006647.675:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 66.936556][ T29] audit: type=1326 audit(1768006647.675:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 66.960024][ T29] audit: type=1326 audit(1768006647.675:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 66.994354][ T29] audit: type=1326 audit(1768006647.705:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 67.018178][ T29] audit: type=1326 audit(1768006647.705:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 67.041821][ T29] audit: type=1326 audit(1768006647.755:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 67.065225][ T29] audit: type=1326 audit(1768006647.755:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4858 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 67.379508][ T4872] set_capacity_and_notify: 7 callbacks suppressed [ 67.379528][ T4872] loop2: detected capacity change from 0 to 512 [ 67.455258][ T4874] loop0: detected capacity change from 0 to 128 [ 67.498050][ T4877] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.505466][ T4877] vhci_hcd vhci_hcd.2: invalid port number 96 [ 67.511613][ T4877] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 67.715099][ T4881] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 67.742021][ T4883] loop4: detected capacity change from 0 to 128 [ 68.019622][ T4892] loop1: detected capacity change from 0 to 128 [ 68.041975][ T2541] Buffer I/O error on dev loop1, logical block 496, lost async page write [ 68.074816][ T2541] Buffer I/O error on dev loop1, logical block 848, lost async page write [ 68.095652][ T2541] Buffer I/O error on dev loop1, logical block 648, lost async page write [ 68.114319][ T2541] Buffer I/O error on dev loop1, logical block 712, lost async page write [ 68.132255][ T2541] Buffer I/O error on dev loop1, logical block 1000, lost async page write [ 68.197375][ T3502] usb 3-1: enqueue for inactive port 0 [ 68.209009][ T3502] usb 3-1: enqueue for inactive port 0 [ 68.268015][ T4899] loop1: detected capacity change from 0 to 1024 [ 68.274935][ T4899] EXT4-fs: Ignoring removed nobh option [ 68.280673][ T4899] EXT4-fs: inline encryption not supported [ 68.297599][ T3502] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 68.317289][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.460'. [ 68.333742][ T4899] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.459: Allocating blocks 385-513 which overlap fs metadata [ 68.349072][ T4898] EXT4-fs (loop1): pa ffff8881075e1540: logic 16, phys. 129, len 24 [ 68.357151][ T4898] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 68.419016][ T4906] loop2: detected capacity change from 0 to 128 [ 68.451149][ T2541] Buffer I/O error on dev loop2, logical block 368, lost async page write [ 68.468399][ T37] Buffer I/O error on dev loop2, logical block 408, lost async page write [ 68.495663][ T4912] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 68.504881][ T37] Buffer I/O error on dev loop2, logical block 760, lost async page write [ 68.570042][ T37] Buffer I/O error on dev loop2, logical block 872, lost async page write [ 68.649358][ T4915] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 68.656590][ T4915] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.664155][ T4915] vhci_hcd vhci_hcd.0: Device attached [ 68.871647][ T4916] vhci_hcd: connection closed [ 68.872076][ T37] vhci_hcd vhci_hcd.1: stop threads [ 68.882156][ T37] vhci_hcd vhci_hcd.1: release socket [ 68.887625][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 68.997071][ T3502] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 69.036399][ T4889] syz.0.455 (4889) used greatest stack depth: 6408 bytes left [ 69.098548][ T4932] loop0: detected capacity change from 0 to 512 [ 69.106397][ T4933] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 69.112987][ T4933] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.120632][ T4933] vhci_hcd vhci_hcd.0: Device attached [ 69.128480][ T4934] vhci_hcd: connection closed [ 69.128720][ T969] vhci_hcd vhci_hcd.2: stop threads [ 69.138913][ T969] vhci_hcd vhci_hcd.2: release socket [ 69.144320][ T969] vhci_hcd vhci_hcd.2: disconnect device [ 69.156387][ T4937] loop3: detected capacity change from 0 to 512 [ 69.208405][ T4938] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.216019][ T4938] vhci_hcd vhci_hcd.2: invalid port number 96 [ 69.222174][ T4938] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 69.231839][ T4939] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.239707][ T4939] vhci_hcd vhci_hcd.2: invalid port number 96 [ 69.245801][ T4939] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 69.355732][ T4946] loop4: detected capacity change from 0 to 256 [ 69.363150][ T4946] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.376021][ T4946] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.408748][ T4948] loop4: detected capacity change from 0 to 128 [ 69.428252][ T4950] pim6reg: entered allmulticast mode [ 69.435599][ T4950] pim6reg: left allmulticast mode [ 69.684883][ T969] bio_check_eod: 1472 callbacks suppressed [ 69.684902][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.684902][ T969] loop1: rw=1, sector=481, nr_sectors = 8 limit=128 [ 69.719324][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.719324][ T969] loop1: rw=1, sector=609, nr_sectors = 8 limit=128 [ 69.733094][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.733094][ T969] loop1: rw=1, sector=737, nr_sectors = 8 limit=128 [ 69.746421][ T4972] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.749210][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.749210][ T969] loop1: rw=1, sector=865, nr_sectors = 8 limit=128 [ 69.772307][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.772307][ T969] loop1: rw=1, sector=993, nr_sectors = 8 limit=128 [ 69.772668][ T4972] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.785842][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.785842][ T969] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 69.810107][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.810107][ T969] loop1: rw=1, sector=545, nr_sectors = 8 limit=128 [ 69.823742][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.823742][ T969] loop1: rw=1, sector=801, nr_sectors = 8 limit=128 [ 69.837568][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.837568][ T969] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 69.851411][ T969] kworker/u8:6: attempt to access beyond end of device [ 69.851411][ T969] loop1: rw=1, sector=673, nr_sectors = 8 limit=128 [ 69.869660][ T4974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.487'. [ 70.277966][ T969] Buffer I/O error on dev loop0, logical block 992, lost async page write [ 70.305971][ T969] Buffer I/O error on dev loop0, logical block 472, lost async page write [ 70.340275][ T969] Buffer I/O error on dev loop0, logical block 888, lost async page write [ 70.631742][ T5004] FAULT_INJECTION: forcing a failure. [ 70.631742][ T5004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.645194][ T5004] CPU: 0 UID: 0 PID: 5004 Comm: syz.0.495 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.645288][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.645301][ T5004] Call Trace: [ 70.645308][ T5004] [ 70.645316][ T5004] __dump_stack+0x1d/0x30 [ 70.645340][ T5004] dump_stack_lvl+0x95/0xd0 [ 70.645363][ T5004] dump_stack+0x15/0x1b [ 70.645425][ T5004] should_fail_ex+0x265/0x280 [ 70.645453][ T5004] should_fail_alloc_page+0xf2/0x100 [ 70.645549][ T5004] __alloc_frozen_pages_noprof+0x109/0x360 [ 70.645579][ T5004] alloc_pages_mpol+0xb3/0x260 [ 70.645619][ T5004] alloc_pages_noprof+0x90/0x130 [ 70.645704][ T5004] __pmd_alloc+0x47/0x480 [ 70.645741][ T5004] handle_mm_fault+0x1a07/0x2c60 [ 70.645808][ T5004] ? __rcu_read_unlock+0x4f/0x70 [ 70.645835][ T5004] ? mt_find+0x21b/0x330 [ 70.645875][ T5004] do_user_addr_fault+0x3fe/0x1080 [ 70.645913][ T5004] exc_page_fault+0x62/0xa0 [ 70.645940][ T5004] asm_exc_page_fault+0x26/0x30 [ 70.645959][ T5004] RIP: 0010:__put_user_4+0xd/0x20 [ 70.645995][ T5004] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 9f 01 00 90 90 90 90 90 90 90 90 90 90 [ 70.646013][ T5004] RSP: 0018:ffffc90001393b78 EFLAGS: 00050202 [ 70.646101][ T5004] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040 [ 70.646114][ T5004] RDX: 0000000000000434 RSI: 0000000000000000 RDI: ffffc90001393b80 [ 70.646128][ T5004] RBP: 000000000000541b R08: 0001c90001393b83 R09: 0000000000000000 [ 70.646144][ T5004] R10: 0001c90001393b24 R11: 0001c90001393b27 R12: ffffffff86cd7f38 [ 70.646161][ T5004] R13: ffffffff85c3bf58 R14: ffff888103c4bb80 R15: 0000000000000000 [ 70.646186][ T5004] sk_ioctl+0x261/0x3c0 [ 70.646240][ T5004] ? terminate_walk+0x1e6/0x210 [ 70.646266][ T5004] ? path_openat+0x1d88/0x23b0 [ 70.646315][ T5004] inet_ioctl+0x32b/0x3a0 [ 70.646354][ T5004] sock_do_ioctl+0x73/0x220 [ 70.646449][ T5004] sock_ioctl+0x41b/0x610 [ 70.646581][ T5004] ? __pfx_sock_ioctl+0x10/0x10 [ 70.646683][ T5004] do_vfs_ioctl+0xa79/0xe10 [ 70.646715][ T5004] ? selinux_file_ioctl+0x1bd/0x3a0 [ 70.646754][ T5004] ? __fget_files+0x184/0x1c0 [ 70.646815][ T5004] __se_sys_ioctl+0x82/0x140 [ 70.646845][ T5004] __x64_sys_ioctl+0x43/0x50 [ 70.646879][ T5004] x64_sys_call+0x14b0/0x3000 [ 70.646942][ T5004] do_syscall_64+0xca/0x2b0 [ 70.646976][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.647138][ T5004] RIP: 0033:0x7f6efef9f749 [ 70.647157][ T5004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.647180][ T5004] RSP: 002b:00007f6efda07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.647225][ T5004] RAX: ffffffffffffffda RBX: 00007f6eff1f5fa0 RCX: 00007f6efef9f749 [ 70.647238][ T5004] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000003 [ 70.647254][ T5004] RBP: 00007f6efda07090 R08: 0000000000000000 R09: 0000000000000000 [ 70.647269][ T5004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.647280][ T5004] R13: 00007f6eff1f6038 R14: 00007f6eff1f5fa0 R15: 00007ffc4165e508 [ 70.647316][ T5004] [ 71.038337][ T5008] EXT4-fs: Ignoring removed i_version option [ 71.044642][ T5008] EXT4-fs: Ignoring removed bh option [ 71.094117][ T5008] EXT4-fs mount: 22 callbacks suppressed [ 71.094138][ T5008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.112907][ T5008] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.160387][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.169577][ T1018] Buffer I/O error on dev loop1, logical block 288, lost async page write [ 71.182071][ T1014] Buffer I/O error on dev loop1, logical block 368, lost async page write [ 71.321633][ T5012] Buffer I/O error on dev loop1, logical block 496, lost async page write [ 71.332296][ T5018] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.340218][ T5018] vhci_hcd vhci_hcd.2: invalid port number 96 [ 71.346367][ T5018] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 71.609717][ T5035] netlink: 'syz.1.507': attribute type 4 has an invalid length. [ 71.619118][ T5035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=5035 comm=syz.1.507 [ 71.745697][ T5043] pim6reg: entered allmulticast mode [ 71.751925][ T5043] pim6reg: left allmulticast mode [ 71.804067][ T5045] EXT4-fs: Ignoring removed i_version option [ 71.810258][ T5045] EXT4-fs: Ignoring removed bh option [ 71.818573][ T5045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.831373][ T5045] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.858651][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.232634][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 72.232655][ T29] audit: type=1326 audit(1768006653.045:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.310013][ T29] audit: type=1326 audit(1768006653.075:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.333594][ T29] audit: type=1326 audit(1768006653.075:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.357013][ T29] audit: type=1326 audit(1768006653.075:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.380463][ T29] audit: type=1326 audit(1768006653.075:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.403797][ T29] audit: type=1326 audit(1768006653.075:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.427083][ T29] audit: type=1326 audit(1768006653.075:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.450356][ T29] audit: type=1326 audit(1768006653.075:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.474261][ T29] audit: type=1326 audit(1768006653.095:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.497590][ T29] audit: type=1326 audit(1768006653.095:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 72.621440][ T5079] set_capacity_and_notify: 11 callbacks suppressed [ 72.621460][ T5079] loop1: detected capacity change from 0 to 512 [ 72.647194][ T5079] EXT4-fs: Ignoring removed i_version option [ 72.653905][ T5079] EXT4-fs: Ignoring removed bh option [ 72.670607][ T5079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.685691][ T5085] loop4: detected capacity change from 0 to 256 [ 72.693724][ T5085] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.706479][ T5079] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.718842][ T5085] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.750335][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.826535][ T5096] loop1: detected capacity change from 0 to 128 [ 72.843522][ T5098] loop0: detected capacity change from 0 to 128 [ 72.926763][ T5102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.067836][ T5117] FAULT_INJECTION: forcing a failure. [ 73.067836][ T5117] name failslab, interval 1, probability 0, space 0, times 0 [ 73.080589][ T5117] CPU: 1 UID: 0 PID: 5117 Comm: syz.2.536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.080616][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.080631][ T5117] Call Trace: [ 73.080640][ T5117] [ 73.080650][ T5117] __dump_stack+0x1d/0x30 [ 73.080751][ T5117] dump_stack_lvl+0x95/0xd0 [ 73.080776][ T5117] dump_stack+0x15/0x1b [ 73.080802][ T5117] should_fail_ex+0x265/0x280 [ 73.080841][ T5117] should_failslab+0x8c/0xb0 [ 73.080863][ T5117] __kmalloc_cache_noprof+0x65/0x4c0 [ 73.080887][ T5117] ? nd_alloc_stack+0x50/0xa0 [ 73.080917][ T5117] nd_alloc_stack+0x50/0xa0 [ 73.080951][ T5117] pick_link+0x82f/0x8d0 [ 73.081019][ T5117] step_into_slowpath+0x351/0x480 [ 73.081054][ T5117] link_path_walk+0x974/0xe30 [ 73.081170][ T5117] path_lookupat+0x8c/0x500 [ 73.081208][ T5117] filename_lookup+0x147/0x340 [ 73.081237][ T5117] ? __pfx_shmem_put_link+0x10/0x10 [ 73.081306][ T5117] ? __pfx_shmem_put_link+0x10/0x10 [ 73.081366][ T5117] user_path_at+0x3e/0x130 [ 73.081394][ T5117] __se_sys_mount+0x25b/0x2e0 [ 73.081413][ T5117] ? fput+0x8f/0xc0 [ 73.081439][ T5117] __x64_sys_mount+0x67/0x80 [ 73.081465][ T5117] x64_sys_call+0x2cca/0x3000 [ 73.081564][ T5117] do_syscall_64+0xca/0x2b0 [ 73.081602][ T5117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.081623][ T5117] RIP: 0033:0x7f055090f749 [ 73.081639][ T5117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.081656][ T5117] RSP: 002b:00007f054f377038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.081691][ T5117] RAX: ffffffffffffffda RBX: 00007f0550b65fa0 RCX: 00007f055090f749 [ 73.081708][ T5117] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 73.081725][ T5117] RBP: 00007f054f377090 R08: 0000000000000000 R09: 0000000000000000 [ 73.081737][ T5117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.081752][ T5117] R13: 00007f0550b66038 R14: 00007f0550b65fa0 R15: 00007fff79ccd8c8 [ 73.081820][ T5117] [ 73.380797][ T5122] loop3: detected capacity change from 0 to 256 [ 73.402927][ T5122] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.431517][ T5126] pim6reg: entered allmulticast mode [ 73.438291][ T5124] loop2: detected capacity change from 0 to 512 [ 73.452459][ T5126] pim6reg: left allmulticast mode [ 73.460845][ T5122] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.478861][ T5124] EXT4-fs (loop2): failed to initialize system zone (-117) [ 73.491724][ T5124] EXT4-fs (loop2): mount failed [ 73.526807][ T5124] caif0: entered promiscuous mode [ 73.531989][ T5124] caif0: entered allmulticast mode [ 73.550993][ T5129] loop4: detected capacity change from 0 to 512 [ 73.574117][ T5129] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 73.599543][ T5129] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.541: inode #1: comm syz.4.541: iget: illegal inode # [ 73.634514][ T5129] EXT4-fs (loop4): no journal found [ 73.639835][ T5129] EXT4-fs (loop4): can't get journal size [ 73.656483][ T5129] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 73.676904][ T5129] EXT4-fs (loop4): failed to initialize system zone (-22) [ 73.684119][ T5129] EXT4-fs (loop4): mount failed [ 73.748732][ T5140] FAULT_INJECTION: forcing a failure. [ 73.748732][ T5140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.762001][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: syz.3.545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.762058][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.762074][ T5140] Call Trace: [ 73.762082][ T5140] [ 73.762091][ T5140] __dump_stack+0x1d/0x30 [ 73.762122][ T5140] dump_stack_lvl+0x95/0xd0 [ 73.762150][ T5140] dump_stack+0x15/0x1b [ 73.762222][ T5140] should_fail_ex+0x265/0x280 [ 73.762244][ T5140] should_fail+0xb/0x20 [ 73.762325][ T5140] should_fail_usercopy+0x1a/0x20 [ 73.762356][ T5140] _copy_from_user+0x1c/0xb0 [ 73.762391][ T5140] ___sys_sendmsg+0xc1/0x1d0 [ 73.762523][ T5140] __x64_sys_sendmsg+0xd4/0x160 [ 73.762565][ T5140] x64_sys_call+0x17ba/0x3000 [ 73.762596][ T5140] do_syscall_64+0xca/0x2b0 [ 73.762705][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.762726][ T5140] RIP: 0033:0x7fab7fe3f749 [ 73.762821][ T5140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.762844][ T5140] RSP: 002b:00007fab7e8a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.762869][ T5140] RAX: ffffffffffffffda RBX: 00007fab80095fa0 RCX: 00007fab7fe3f749 [ 73.762885][ T5140] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000b [ 73.762897][ T5140] RBP: 00007fab7e8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.762912][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.762928][ T5140] R13: 00007fab80096038 R14: 00007fab80095fa0 R15: 00007ffe1a35d208 [ 73.762967][ T5140] [ 73.934676][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 73.943685][ T5129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.951392][ T5129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.978056][ T5149] loop0: detected capacity change from 0 to 512 [ 73.991506][ T5149] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 74.044202][ T5154] loop2: detected capacity change from 0 to 512 [ 74.089084][ T5155] loop0: detected capacity change from 0 to 512 [ 74.098309][ T5154] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.146488][ T5161] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.165538][ T5154] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.550: bad orphan inode 13 [ 74.186221][ T5163] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 74.192856][ T5163] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 74.200695][ T5163] vhci_hcd vhci_hcd.0: Device attached [ 74.207169][ T5154] ext4_test_bit(bit=12, block=18) = 1 [ 74.212573][ T5154] is_bad_inode(inode)=0 [ 74.216814][ T5154] NEXT_ORPHAN(inode)=2130706432 [ 74.221685][ T5154] max_ino=32 [ 74.224894][ T5154] i_nlink=1 [ 74.228471][ T5161] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.244634][ T5163] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 74.245523][ T5154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.251205][ T5163] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.251337][ T5163] vhci_hcd vhci_hcd.0: Device attached [ 74.253293][ T5164] usbip_core: unknown command [ 74.281386][ T5164] vhci_hcd: unknown pdu 2351867679 [ 74.286517][ T5164] usbip_core: unknown command [ 74.311154][ T1014] vhci_hcd vhci_hcd.1: stop threads [ 74.316447][ T1014] vhci_hcd vhci_hcd.1: release socket [ 74.321891][ T1014] vhci_hcd vhci_hcd.1: disconnect device [ 74.328095][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.423486][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 74.437708][ T5187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.449562][ T5187] EXT4-fs (loop3): 1 truncate cleaned up [ 74.456254][ T5187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.496504][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.537156][ T5197] FAULT_INJECTION: forcing a failure. [ 74.537156][ T5197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.550813][ T5197] CPU: 0 UID: 0 PID: 5197 Comm: syz.3.563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.550852][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.550866][ T5197] Call Trace: [ 74.550873][ T5197] [ 74.550889][ T5197] __dump_stack+0x1d/0x30 [ 74.550966][ T5197] dump_stack_lvl+0x95/0xd0 [ 74.550994][ T5197] dump_stack+0x15/0x1b [ 74.551019][ T5197] should_fail_ex+0x265/0x280 [ 74.551047][ T5197] should_fail+0xb/0x20 [ 74.551104][ T5197] should_fail_usercopy+0x1a/0x20 [ 74.551139][ T5197] _copy_from_iter+0xcf/0xe70 [ 74.551225][ T5197] ? __alloc_skb+0x396/0x4b0 [ 74.551257][ T5197] ? __alloc_skb+0x228/0x4b0 [ 74.551284][ T5197] netlink_sendmsg+0x471/0x6b0 [ 74.551392][ T5197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.551429][ T5197] __sock_sendmsg+0x145/0x180 [ 74.551455][ T5197] ____sys_sendmsg+0x31e/0x4a0 [ 74.551541][ T5197] ___sys_sendmsg+0x17b/0x1d0 [ 74.551594][ T5197] __x64_sys_sendmsg+0xd4/0x160 [ 74.551632][ T5197] x64_sys_call+0x17ba/0x3000 [ 74.551695][ T5197] do_syscall_64+0xca/0x2b0 [ 74.551732][ T5197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.551828][ T5197] RIP: 0033:0x7fab7fe3f749 [ 74.551845][ T5197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.551865][ T5197] RSP: 002b:00007fab7e8a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.551885][ T5197] RAX: ffffffffffffffda RBX: 00007fab80095fa0 RCX: 00007fab7fe3f749 [ 74.551898][ T5197] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 74.551910][ T5197] RBP: 00007fab7e8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.551971][ T5197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.551983][ T5197] R13: 00007fab80096038 R14: 00007fab80095fa0 R15: 00007ffe1a35d208 [ 74.552003][ T5197] [ 74.796805][ T3397] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 74.856731][ T3397] usb 3-2: new full-speed USB device number 4 using vhci_hcd [ 75.015543][ T5166] vhci_hcd: connection reset by peer [ 75.021273][ T1014] vhci_hcd vhci_hcd.1: stop threads [ 75.026561][ T1014] vhci_hcd vhci_hcd.1: release socket [ 75.032083][ T1014] vhci_hcd vhci_hcd.1: disconnect device [ 75.390363][ T5227] bio_check_eod: 26390 callbacks suppressed [ 75.390380][ T5227] syz.3.571: attempt to access beyond end of device [ 75.390380][ T5227] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 75.418888][ T5227] syz.3.571: attempt to access beyond end of device [ 75.418888][ T5227] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 75.447296][ T5230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.455832][ T5227] syz.3.571: attempt to access beyond end of device [ 75.455832][ T5227] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 75.472765][ T5222] syz.4.573: attempt to access beyond end of device [ 75.472765][ T5222] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 75.486430][ T5227] syz.3.571: attempt to access beyond end of device [ 75.486430][ T5227] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 75.499970][ T5222] syz.4.573: attempt to access beyond end of device [ 75.499970][ T5222] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 75.514692][ T5227] syz.3.571: attempt to access beyond end of device [ 75.514692][ T5227] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 75.524021][ T5222] syz.4.573: attempt to access beyond end of device [ 75.524021][ T5222] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 75.528493][ T5227] syz.3.571: attempt to access beyond end of device [ 75.528493][ T5227] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 75.554774][ T5227] syz.3.571: attempt to access beyond end of device [ 75.554774][ T5227] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 75.632635][ T5237] FAULT_INJECTION: forcing a failure. [ 75.632635][ T5237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.632740][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: syz.2.579 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.632818][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.632864][ T5237] Call Trace: [ 75.632885][ T5237] [ 75.632908][ T5237] __dump_stack+0x1d/0x30 [ 75.633001][ T5237] dump_stack_lvl+0x95/0xd0 [ 75.633066][ T5237] dump_stack+0x15/0x1b [ 75.633205][ T5237] should_fail_ex+0x265/0x280 [ 75.633270][ T5237] should_fail+0xb/0x20 [ 75.633331][ T5237] should_fail_usercopy+0x1a/0x20 [ 75.633399][ T5237] _copy_from_iter+0xcf/0xe70 [ 75.633547][ T5237] ? __pfx_woken_wake_function+0x10/0x10 [ 75.633663][ T5237] file_tty_write+0x322/0x690 [ 75.633805][ T5237] ? __pfx_tty_write+0x10/0x10 [ 75.633842][ T5237] tty_write+0x25/0x30 [ 75.633872][ T5237] vfs_write+0x52a/0x960 [ 75.633947][ T5237] ksys_write+0xda/0x1a0 [ 75.634011][ T5237] __x64_sys_write+0x40/0x50 [ 75.634105][ T5237] x64_sys_call+0x2847/0x3000 [ 75.634182][ T5237] do_syscall_64+0xca/0x2b0 [ 75.634319][ T5237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.634410][ T5237] RIP: 0033:0x7f055090f749 [ 75.634454][ T5237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.634500][ T5237] RSP: 002b:00007f054f377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.634588][ T5237] RAX: ffffffffffffffda RBX: 00007f0550b65fa0 RCX: 00007f055090f749 [ 75.634616][ T5237] RDX: 0000000000001006 RSI: 00002000000005c0 RDI: 0000000000000003 [ 75.634726][ T5237] RBP: 00007f054f377090 R08: 0000000000000000 R09: 0000000000000000 [ 75.634768][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.634802][ T5237] R13: 00007f0550b66038 R14: 00007f0550b65fa0 R15: 00007fff79ccd8c8 [ 75.634916][ T5237] [ 75.800566][ T5251] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 75.833376][ T5253] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 75.987566][ T5259] pim6reg: entered allmulticast mode [ 76.000765][ T5259] pim6reg: left allmulticast mode [ 76.026318][ T5267] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 76.032958][ T5267] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.040745][ T5267] vhci_hcd vhci_hcd.0: Device attached [ 76.048517][ T5267] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 76.055067][ T5267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.062637][ T5267] vhci_hcd vhci_hcd.0: Device attached [ 76.092816][ T5268] usbip_core: unknown command [ 76.097659][ T5268] vhci_hcd: unknown pdu 2351867679 [ 76.102797][ T5268] usbip_core: unknown command [ 76.117262][ T969] vhci_hcd vhci_hcd.0: stop threads [ 76.122807][ T969] vhci_hcd vhci_hcd.0: release socket [ 76.128311][ T969] vhci_hcd vhci_hcd.0: disconnect device [ 76.182476][ T5282] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 76.231357][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.238523][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.254383][ T5286] caif0: left promiscuous mode [ 76.259286][ T5286] caif0: left allmulticast mode [ 76.290026][ T5286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.300221][ T5286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.351906][ T1018] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.372343][ T1018] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.392514][ T1018] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.434663][ T1018] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.556810][ T3502] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 76.626725][ T3502] usb 1-2: new full-speed USB device number 3 using vhci_hcd [ 76.859333][ T5271] vhci_hcd: connection reset by peer [ 76.865600][ T12] vhci_hcd vhci_hcd.0: stop threads [ 76.870943][ T12] vhci_hcd vhci_hcd.0: release socket [ 76.876393][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 76.967666][ T5316] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 77.094142][ T1018] Buffer I/O error on dev loop2, logical block 440, lost async page write [ 77.237628][ T29] kauditd_printk_skb: 1393 callbacks suppressed [ 77.237642][ T29] audit: type=1326 audit(1768006658.055:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.296755][ T29] audit: type=1326 audit(1768006658.055:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.320201][ T29] audit: type=1326 audit(1768006658.055:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.343670][ T29] audit: type=1326 audit(1768006658.055:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.367030][ T29] audit: type=1326 audit(1768006658.055:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.390558][ T29] audit: type=1326 audit(1768006658.055:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.413981][ T29] audit: type=1326 audit(1768006658.055:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.437479][ T29] audit: type=1326 audit(1768006658.055:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.460914][ T29] audit: type=1326 audit(1768006658.055:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.484294][ T29] audit: type=1326 audit(1768006658.055:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab7fe72005 code=0x7ffc0000 [ 77.805361][ T5345] set_capacity_and_notify: 12 callbacks suppressed [ 77.805377][ T5345] loop3: detected capacity change from 0 to 1024 [ 77.827106][ T5345] EXT4-fs: Ignoring removed nobh option [ 77.832716][ T5345] EXT4-fs: inline encryption not supported [ 77.894758][ T5347] pim6reg: entered allmulticast mode [ 77.912357][ T5347] pim6reg: left allmulticast mode [ 77.923244][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.967071][ T5345] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.618: Allocating blocks 385-513 which overlap fs metadata [ 77.987186][ T5352] loop1: detected capacity change from 0 to 128 [ 78.008752][ T969] Buffer I/O error on dev loop1, logical block 464, lost async page write [ 78.041860][ T969] Buffer I/O error on dev loop1, logical block 816, lost async page write [ 78.066077][ T5355] loop4: detected capacity change from 0 to 128 [ 78.088086][ T71] Buffer I/O error on dev loop4, logical block 512, lost async page write [ 78.096987][ T969] Buffer I/O error on dev loop1, logical block 816, lost async page write [ 78.116932][ T5345] EXT4-fs (loop3): pa ffff888109c6e620: logic 16, phys. 129, len 24 [ 78.125075][ T5345] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 78.136208][ T12] Buffer I/O error on dev loop4, logical block 312, lost async page write [ 78.163170][ T12] Buffer I/O error on dev loop4, logical block 920, lost async page write [ 78.179513][ T12] Buffer I/O error on dev loop4, logical block 984, lost async page write [ 78.243445][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.255608][ T5359] loop0: detected capacity change from 0 to 512 [ 78.276567][ T5359] EXT4-fs: Ignoring removed i_version option [ 78.282748][ T5359] EXT4-fs: Ignoring removed bh option [ 78.330148][ T5365] loop1: detected capacity change from 0 to 128 [ 78.372627][ T5368] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 78.379181][ T5368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.386831][ T5368] vhci_hcd vhci_hcd.0: Device attached [ 78.441282][ T5359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.455372][ T1018] Buffer I/O error on dev loop1, logical block 416, lost async page write [ 78.476077][ T5373] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 78.477382][ T5359] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.482638][ T5373] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.500355][ T5373] vhci_hcd vhci_hcd.0: Device attached [ 78.564515][ T5369] usbip_core: unknown command [ 78.569329][ T5369] vhci_hcd: unknown pdu 2351867679 [ 78.574495][ T5369] usbip_core: unknown command [ 78.617563][ T12] vhci_hcd vhci_hcd.3: stop threads [ 78.622900][ T12] vhci_hcd vhci_hcd.3: release socket [ 78.628380][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 78.634208][ T9] usb 7-1: new high-speed USB device number 3 using vhci_hcd [ 78.642216][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.657972][ T9] usb 7-1: enqueue for inactive port 0 [ 78.668470][ T9] usb 7-1: enqueue for inactive port 0 [ 78.684386][ T9] usb 7-1: enqueue for inactive port 0 [ 78.756930][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 78.802754][ T5386] pim6reg: entered allmulticast mode [ 78.833166][ T5388] loop4: detected capacity change from 0 to 2048 [ 78.843007][ T5386] pim6reg: left allmulticast mode [ 78.859353][ T5388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.904989][ T5388] EXT4-fs error (device loop4): ext4_find_extent:903: inode #2: comm syz.4.631: inode has invalid extent depth: 9 [ 78.926743][ T5388] EXT4-fs (loop4): Remounting filesystem read-only [ 78.966526][ T5393] loop2: detected capacity change from 0 to 256 [ 78.992202][ T5393] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.014726][ T5393] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.040595][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.079346][ T5399] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 79.115073][ T5401] loop4: detected capacity change from 0 to 128 [ 79.182756][ T5405] loop0: detected capacity change from 0 to 512 [ 79.191616][ T5405] EXT4-fs: Ignoring removed i_version option [ 79.197794][ T5405] EXT4-fs: Ignoring removed bh option [ 79.206975][ T5375] vhci_hcd: connection closed [ 79.207175][ T1014] vhci_hcd vhci_hcd.3: stop threads [ 79.217173][ T1014] vhci_hcd vhci_hcd.3: release socket [ 79.222624][ T1014] vhci_hcd vhci_hcd.3: disconnect device [ 79.236094][ T5408] loop1: detected capacity change from 0 to 512 [ 79.257050][ T5405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.269940][ T5405] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.306711][ T5413] pim6reg: entered allmulticast mode [ 79.309915][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.313778][ T5413] pim6reg: left allmulticast mode [ 79.337598][ T5415] netlink: 'syz.0.640': attribute type 4 has an invalid length. [ 79.340727][ T5411] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.346382][ T5415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=5415 comm=syz.0.640 [ 79.353063][ T5411] vhci_hcd vhci_hcd.2: invalid port number 96 [ 79.371497][ T5411] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 79.426131][ T5421] pim6reg: entered allmulticast mode [ 79.433278][ T5421] pim6reg: left allmulticast mode [ 79.707352][ T5438] EXT4-fs: Ignoring removed i_version option [ 79.713445][ T5438] EXT4-fs: Ignoring removed bh option [ 79.720144][ T5440] netlink: 'syz.4.651': attribute type 4 has an invalid length. [ 79.738586][ T5438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.766878][ T5438] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.840842][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.876749][ T3397] usb 3-2: enqueue for inactive port 1 [ 79.885821][ T3397] usb 3-2: enqueue for inactive port 1 [ 79.956760][ T3397] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 80.099357][ T5456] netlink: 416 bytes leftover after parsing attributes in process `syz.4.656'. [ 80.406820][ T5434] bio_check_eod: 27408 callbacks suppressed [ 80.406841][ T5434] syz.0.648: attempt to access beyond end of device [ 80.406841][ T5434] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 80.421475][ T5474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 80.432964][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.440582][ T5474] vhci_hcd vhci_hcd.0: Device attached [ 80.453962][ T5434] syz.0.648: attempt to access beyond end of device [ 80.453962][ T5434] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 80.454439][ T1018] kworker/u8:8: attempt to access beyond end of device [ 80.454439][ T1018] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 80.467729][ T5434] syz.0.648: attempt to access beyond end of device [ 80.467729][ T5434] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 80.494969][ T5434] syz.0.648: attempt to access beyond end of device [ 80.494969][ T5434] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 80.510364][ T5434] syz.0.648: attempt to access beyond end of device [ 80.510364][ T5434] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 80.516634][ T5475] vhci_hcd: connection closed [ 80.524609][ T5434] syz.0.648: attempt to access beyond end of device [ 80.524609][ T5434] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 80.543502][ T5434] syz.0.648: attempt to access beyond end of device [ 80.543502][ T5434] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 80.544120][ T1018] kworker/u8:8: attempt to access beyond end of device [ 80.544120][ T1018] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 80.557699][ T5434] syz.0.648: attempt to access beyond end of device [ 80.557699][ T5434] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 80.584347][ T969] vhci_hcd vhci_hcd.2: stop threads [ 80.589611][ T969] vhci_hcd vhci_hcd.2: release socket [ 80.595040][ T969] vhci_hcd vhci_hcd.2: disconnect device [ 80.646723][ T23] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 80.675529][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 80.691414][ T5486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.704693][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 80.713541][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 80.724230][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.733591][ T5486] bond1: (slave bond0): making interface the new active one [ 80.742212][ T5486] bond1: (slave bond0): Enslaving as an active interface with an up link [ 80.756963][ T5486] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 80.767693][ T5486] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.779422][ T5486] bridge0: port 3(syz_tun) entered blocking state [ 80.785930][ T5486] bridge0: port 3(syz_tun) entered disabled state [ 80.792920][ T5486] syz_tun: entered allmulticast mode [ 80.798805][ T5486] syz_tun: entered promiscuous mode [ 80.810576][ T5486] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 80.821125][ T5486] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 80.861977][ T5486] infiniband syz1: set down [ 80.866531][ T5486] infiniband syz1: added syz_tun [ 80.872154][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 80.884445][ T12] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 80.901140][ T5486] RDS/IB: syz1: added [ 80.905597][ T5486] smc: adding ib device syz1 with port count 1 [ 80.912029][ T5486] smc: ib device syz1 port 1 has no pnetid [ 80.967077][ T5495] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.002948][ T5495] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.137801][ T5508] pim6reg: entered allmulticast mode [ 81.156146][ T5508] pim6reg: left allmulticast mode [ 81.218226][ T5512] EXT4-fs: Ignoring removed i_version option [ 81.224287][ T5512] EXT4-fs: Ignoring removed bh option [ 81.264970][ T5515] EXT4-fs: Ignoring removed i_version option [ 81.271117][ T5515] EXT4-fs: Ignoring removed bh option [ 81.286946][ T5512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.300778][ T5512] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.331669][ T5521] EXT4-fs: Ignoring removed nobh option [ 81.337280][ T5521] EXT4-fs: inline encryption not supported [ 81.348052][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.386621][ T5515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.405481][ T5521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.420295][ T5515] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.443323][ T5521] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.680: Allocating blocks 385-513 which overlap fs metadata [ 81.485069][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.509792][ T5521] EXT4-fs (loop2): pa ffff8881075e1850: logic 16, phys. 129, len 24 [ 81.517927][ T5521] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 81.540278][ T5521] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 81.552710][ T5521] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.552710][ T5521] [ 81.562403][ T5521] EXT4-fs (loop2): Total free blocks count 0 [ 81.568464][ T5521] EXT4-fs (loop2): Free/Dirty block details [ 81.574503][ T5521] EXT4-fs (loop2): free_blocks=128 [ 81.579753][ T5521] EXT4-fs (loop2): dirty_blocks=0 [ 81.584844][ T5521] EXT4-fs (loop2): Block reservation details [ 81.590884][ T5521] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 81.637380][ T3502] usb 1-2: enqueue for inactive port 1 [ 81.644106][ T3502] usb 1-2: enqueue for inactive port 1 [ 81.657767][ T5540] EXT4-fs: Ignoring removed nobh option [ 81.663380][ T5540] EXT4-fs: inline encryption not supported [ 81.690564][ T5540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.709404][ T5540] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.686: Allocating blocks 385-513 which overlap fs metadata [ 81.734021][ T5540] EXT4-fs (loop2): pa ffff888109c6e620: logic 16, phys. 129, len 24 [ 81.736875][ T3502] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 81.742371][ T5540] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 81.772770][ T5545] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.687'. [ 81.790699][ T5540] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 81.802934][ T5540] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.802934][ T5540] [ 81.812876][ T5540] EXT4-fs (loop2): Total free blocks count 0 [ 81.818994][ T5540] EXT4-fs (loop2): Free/Dirty block details [ 81.824903][ T5540] EXT4-fs (loop2): free_blocks=128 [ 81.830232][ T5540] EXT4-fs (loop2): dirty_blocks=0 [ 81.835283][ T5540] EXT4-fs (loop2): Block reservation details [ 81.841335][ T5540] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 81.928183][ T5555] pim6reg: entered allmulticast mode [ 81.944469][ T5555] pim6reg: left allmulticast mode [ 81.983891][ T5559] netlink: 'syz.3.693': attribute type 4 has an invalid length. [ 81.988981][ T5560] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 82.027140][ T5559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=5559 comm=syz.3.693 [ 82.094052][ T5565] EXT4-fs: Ignoring removed nobh option [ 82.099845][ T5565] EXT4-fs: inline encryption not supported [ 82.146381][ T5565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.181887][ T5565] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.696: Allocating blocks 385-513 which overlap fs metadata [ 82.210173][ T5565] EXT4-fs (loop0): pa ffff8881075e1770: logic 16, phys. 129, len 24 [ 82.212448][ T5574] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 82.218349][ T5565] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 82.247661][ T5565] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 82.259907][ T5565] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.259907][ T5565] [ 82.269600][ T5565] EXT4-fs (loop0): Total free blocks count 0 [ 82.275604][ T5565] EXT4-fs (loop0): Free/Dirty block details [ 82.281701][ T5565] EXT4-fs (loop0): free_blocks=128 [ 82.286886][ T5565] EXT4-fs (loop0): dirty_blocks=0 [ 82.291938][ T5565] EXT4-fs (loop0): Block reservation details [ 82.297957][ T5565] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 82.344849][ T29] kauditd_printk_skb: 1370 callbacks suppressed [ 82.344867][ T29] audit: type=1326 audit(1768006663.155:10381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 82.418104][ T29] audit: type=1326 audit(1768006663.205:10382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 82.441846][ T29] audit: type=1326 audit(1768006663.205:10383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f31f66ef749 code=0x7ffc0000 [ 82.559674][ T5586] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.574232][ T5586] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.704534][ T5593] pim6reg: entered allmulticast mode [ 82.724512][ T29] audit: type=1326 audit(1768006663.535:10384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 82.748157][ T29] audit: type=1326 audit(1768006663.535:10385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 82.778392][ T5593] pim6reg: left allmulticast mode [ 82.795331][ T29] audit: type=1326 audit(1768006663.535:10386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6efef9f749 code=0x7ffc0000 [ 82.818835][ T29] audit: type=1326 audit(1768006663.535:10387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6efef9f783 code=0x7ffc0000 [ 82.884660][ T29] audit: type=1326 audit(1768006663.675:10388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6efef9e1ff code=0x7ffc0000 [ 82.942260][ T5594] set_capacity_and_notify: 16 callbacks suppressed [ 82.942419][ T5594] loop0: detected capacity change from 0 to 8192 [ 82.949449][ T29] audit: type=1326 audit(1768006663.755:10389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6efef9f7d7 code=0x7ffc0000 [ 82.978793][ T29] audit: type=1326 audit(1768006663.755:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6efef9df90 code=0x7ffc0000 [ 83.017107][ T5600] loop3: detected capacity change from 0 to 128 [ 83.099284][ T5606] loop1: detected capacity change from 0 to 128 [ 83.172268][ T5610] loop4: detected capacity change from 0 to 128 [ 83.240917][ T5615] loop2: detected capacity change from 0 to 512 [ 83.274691][ T5615] EXT4-fs: Ignoring removed i_version option [ 83.280881][ T5615] EXT4-fs: Ignoring removed bh option [ 83.317461][ T5615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.347333][ T5615] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.358931][ T5625] loop3: detected capacity change from 0 to 128 [ 83.408858][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.665841][ T2541] Buffer I/O error on dev loop3, logical block 848, lost async page write [ 83.830331][ T5652] loop3: detected capacity change from 0 to 128 [ 83.860603][ T5654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5654 comm=syz.2.727 [ 83.873185][ T5654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5654 comm=syz.2.727 [ 83.952048][ T5658] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 83.958624][ T5658] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.966180][ T5658] vhci_hcd vhci_hcd.0: Device attached [ 83.974180][ T5659] vhci_hcd: connection closed [ 83.974339][ T1014] vhci_hcd vhci_hcd.2: stop threads [ 83.984394][ T1014] vhci_hcd vhci_hcd.2: release socket [ 83.989845][ T1014] vhci_hcd vhci_hcd.2: disconnect device [ 84.136424][ T5669] loop3: detected capacity change from 0 to 128 [ 84.182669][ T5671] loop0: detected capacity change from 0 to 512 [ 84.189365][ T5671] EXT4-fs: Ignoring removed i_version option [ 84.195455][ T5671] EXT4-fs: Ignoring removed bh option [ 84.211699][ T5671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.224626][ T5671] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.251595][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.395291][ T5687] loop4: detected capacity change from 0 to 512 [ 84.404433][ T5687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.412965][ T5687] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.489732][ T5696] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 84.845185][ T12] Buffer I/O error on dev loop4, logical block 512, lost async page write [ 85.019465][ T5726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.032698][ T5726] EXT4-fs (loop1): 1 truncate cleaned up [ 85.039337][ T5726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.053196][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.066013][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.088057][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.134755][ T5731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 85.141316][ T5731] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.148869][ T5731] vhci_hcd vhci_hcd.0: Device attached [ 85.155215][ T5733] vhci_hcd: connection closed [ 85.155676][ T2541] vhci_hcd vhci_hcd.1: stop threads [ 85.165832][ T2541] vhci_hcd vhci_hcd.1: release socket [ 85.171257][ T2541] vhci_hcd vhci_hcd.1: disconnect device [ 85.182047][ T5734] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 85.514480][ T5746] EXT4-fs: Ignoring removed nobh option [ 85.520262][ T5746] EXT4-fs: inline encryption not supported [ 85.580324][ T5746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.599474][ T5746] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.760: Allocating blocks 385-513 which overlap fs metadata [ 85.619325][ T5746] EXT4-fs (loop0): pa ffff8881075e1770: logic 16, phys. 129, len 24 [ 85.627526][ T5746] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 85.691814][ T5746] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 85.704236][ T5746] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.704236][ T5746] [ 85.714007][ T5746] EXT4-fs (loop0): Total free blocks count 0 [ 85.720043][ T5746] EXT4-fs (loop0): Free/Dirty block details [ 85.726045][ T5746] EXT4-fs (loop0): free_blocks=128 [ 85.731204][ T5746] EXT4-fs (loop0): dirty_blocks=0 [ 85.736245][ T5746] EXT4-fs (loop0): Block reservation details [ 85.742292][ T5746] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 85.851058][ T5754] bio_check_eod: 9667 callbacks suppressed [ 85.851079][ T5754] syz.2.761: attempt to access beyond end of device [ 85.851079][ T5754] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 85.947014][ T5754] syz.2.761: attempt to access beyond end of device [ 85.947014][ T5754] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 85.991631][ T5760] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.003830][ T5754] syz.2.761: attempt to access beyond end of device [ 86.003830][ T5754] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 86.004722][ T5760] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.048686][ T5754] syz.2.761: attempt to access beyond end of device [ 86.048686][ T5754] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 86.063545][ T5754] syz.2.761: attempt to access beyond end of device [ 86.063545][ T5754] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 86.080683][ T5763] syz.4.763: attempt to access beyond end of device [ 86.080683][ T5763] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 86.106266][ T5763] syz.4.763: attempt to access beyond end of device [ 86.106266][ T5763] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 86.129623][ T5754] syz.2.761: attempt to access beyond end of device [ 86.129623][ T5754] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 86.152423][ T5763] syz.4.763: attempt to access beyond end of device [ 86.152423][ T5763] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 86.157274][ T5754] syz.2.761: attempt to access beyond end of device [ 86.157274][ T5754] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 86.242726][ T5769] netlink: 300 bytes leftover after parsing attributes in process `wgÁÓ1'. [ 86.271345][ T5771] pim6reg: entered allmulticast mode [ 86.277832][ T5771] pim6reg: left allmulticast mode [ 86.415115][ T5782] netlink: 'syz.2.774': attribute type 4 has an invalid length. [ 86.923401][ T1018] Buffer I/O error on dev loop4, logical block 416, lost async page write [ 86.963764][ T1018] Buffer I/O error on dev loop4, logical block 816, lost async page write [ 87.002725][ T1018] Buffer I/O error on dev loop4, logical block 600, lost async page write [ 87.065283][ T12] Buffer I/O error on dev loop2, logical block 1040, lost async page write [ 87.091145][ T12] Buffer I/O error on dev loop2, logical block 280, lost async page write [ 87.307030][ T5815] netlink: 'syz.1.785': attribute type 4 has an invalid length. [ 87.352472][ T5817] audit_log_lost: 836 callbacks suppressed [ 87.352486][ T5817] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 87.366277][ T5817] audit: out of memory in audit_log_start [ 87.373124][ T29] audit: type=1400 audit(1768006668.165:11227): avc: denied { read write } for pid=5811 comm="syz.4.784" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.400817][ T29] audit: type=1400 audit(1768006668.165:11228): avc: denied { open } for pid=5811 comm="syz.4.784" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.409066][ T5817] program syz.4.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.487248][ T5817] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 87.736735][ T5829] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 87.743301][ T5829] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.750811][ T5829] vhci_hcd vhci_hcd.0: Device attached [ 87.778079][ T5830] vhci_hcd: connection closed [ 87.778183][ T2541] vhci_hcd vhci_hcd.4: stop threads [ 87.788246][ T2541] vhci_hcd vhci_hcd.4: release socket [ 87.793726][ T2541] vhci_hcd vhci_hcd.4: disconnect device [ 88.036797][ T5816] ================================================================== [ 88.044949][ T5816] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 88.054813][ T5816] [ 88.057159][ T5816] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0: [ 88.065237][ T5816] tick_do_update_jiffies64+0x113/0x1c0 [ 88.070827][ T5816] tick_nohz_handler+0x8d/0x3d0 [ 88.075747][ T5816] __hrtimer_run_queues+0x20f/0x5a0 [ 88.080973][ T5816] hrtimer_interrupt+0x21a/0x460 [ 88.085943][ T5816] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 88.091869][ T5816] sysvec_apic_timer_interrupt+0x6f/0x80 [ 88.097548][ T5816] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.103586][ T5816] kcsan_setup_watchpoint+0x406/0x420 [ 88.109001][ T5816] inode_to_bdi+0x47/0xa0 [ 88.113351][ T5816] __folio_cancel_dirty+0x31/0x160 [ 88.118494][ T5816] truncate_cleanup_folio+0x1b9/0x1f0 [ 88.123897][ T5816] truncate_inode_folio+0x3a/0x50 [ 88.128953][ T5816] shmem_undo_range+0x244/0xa80 [ 88.133834][ T5816] shmem_evict_inode+0x12e/0x510 [ 88.138799][ T5816] evict+0x2af/0x510 [ 88.142733][ T5816] iput+0x4bd/0x650 [ 88.146570][ T5816] dentry_unlink_inode+0x24f/0x260 [ 88.151722][ T5816] __dentry_kill+0x18d/0x4b0 [ 88.156344][ T5816] finish_dput+0x2b/0x200 [ 88.160779][ T5816] dput+0x52/0x60 [ 88.164434][ T5816] __fput+0x444/0x650 [ 88.168449][ T5816] ____fput+0x1c/0x30 [ 88.172456][ T5816] task_work_run+0x131/0x1a0 [ 88.177075][ T5816] do_exit+0x467/0x1590 [ 88.181252][ T5816] do_group_exit+0xff/0x140 [ 88.185779][ T5816] get_signal+0xe58/0xf70 [ 88.190135][ T5816] arch_do_signal_or_restart+0x96/0x450 [ 88.195707][ T5816] exit_to_user_mode_loop+0x6a/0x740 [ 88.201096][ T5816] do_syscall_64+0x1dd/0x2b0 [ 88.205718][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.211632][ T5816] [ 88.213969][ T5816] read to 0xffffffff86809a00 of 8 bytes by task 5816 on cpu 1: [ 88.221526][ T5816] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 88.227793][ T5816] count_shadow_nodes+0x6a/0x230 [ 88.232756][ T5816] do_shrink_slab+0x63/0x680 [ 88.237366][ T5816] shrink_slab+0x4f5/0x840 [ 88.241806][ T5816] shrink_node+0x6a9/0x2010 [ 88.246327][ T5816] do_try_to_free_pages+0x3f6/0xcd0 [ 88.251554][ T5816] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 88.257502][ T5816] try_charge_memcg+0x383/0xa10 [ 88.262399][ T5816] obj_cgroup_charge_pages+0xa6/0x150 [ 88.267808][ T5816] __memcg_kmem_charge_page+0x9f/0x170 [ 88.273306][ T5816] __alloc_frozen_pages_noprof+0x18f/0x360 [ 88.279141][ T5816] alloc_pages_mpol+0xb3/0x260 [ 88.283932][ T5816] alloc_pages_noprof+0x90/0x130 [ 88.288893][ T5816] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 88.294813][ T5816] __kvmalloc_node_noprof+0x492/0x6b0 [ 88.300212][ T5816] ip_set_alloc+0x24/0x30 [ 88.304577][ T5816] hash_netiface_create+0x282/0x740 [ 88.309806][ T5816] ip_set_create+0x3cc/0x970 [ 88.314410][ T5816] nfnetlink_rcv_msg+0x4c6/0x590 [ 88.319370][ T5816] netlink_rcv_skb+0x123/0x220 [ 88.324181][ T5816] nfnetlink_rcv+0x167/0x16c0 [ 88.328882][ T5816] netlink_unicast+0x5c0/0x690 [ 88.333679][ T5816] netlink_sendmsg+0x58b/0x6b0 [ 88.338472][ T5816] __sock_sendmsg+0x145/0x180 [ 88.343172][ T5816] ____sys_sendmsg+0x31e/0x4a0 [ 88.347968][ T5816] ___sys_sendmsg+0x17b/0x1d0 [ 88.352671][ T5816] __x64_sys_sendmsg+0xd4/0x160 [ 88.357557][ T5816] x64_sys_call+0x17ba/0x3000 [ 88.362263][ T5816] do_syscall_64+0xca/0x2b0 [ 88.366805][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.372726][ T5816] [ 88.375060][ T5816] value changed: 0x00000000ffffacf7 -> 0x00000000ffffacf8 [ 88.382184][ T5816] [ 88.384522][ T5816] Reported by Kernel Concurrency Sanitizer on: [ 88.390684][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz.2.786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.400334][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.410411][ T5816] ================================================================== [ 88.755292][ T5816] syz.2.786 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 88.769381][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz.2.786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.769433][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.769534][ T5816] Call Trace: [ 88.769543][ T5816] [ 88.769551][ T5816] __dump_stack+0x1d/0x30 [ 88.769662][ T5816] dump_stack_lvl+0x95/0xd0 [ 88.769692][ T5816] dump_stack+0x15/0x1b [ 88.769724][ T5816] dump_header+0x81/0x240 [ 88.769749][ T5816] oom_kill_process+0x295/0x350 [ 88.769808][ T5816] out_of_memory+0x97b/0xb80 [ 88.769841][ T5816] try_charge_memcg+0x610/0xa10 [ 88.769889][ T5816] obj_cgroup_charge_pages+0xa6/0x150 [ 88.769974][ T5816] __memcg_kmem_charge_page+0x9f/0x170 [ 88.770004][ T5816] __alloc_frozen_pages_noprof+0x18f/0x360 [ 88.770116][ T5816] alloc_pages_mpol+0xb3/0x260 [ 88.770157][ T5816] alloc_pages_noprof+0x90/0x130 [ 88.770197][ T5816] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 88.770309][ T5816] __kvmalloc_node_noprof+0x492/0x6b0 [ 88.770338][ T5816] ? ip_set_alloc+0x24/0x30 [ 88.770377][ T5816] ? ip_set_alloc+0x24/0x30 [ 88.770409][ T5816] ip_set_alloc+0x24/0x30 [ 88.770493][ T5816] hash_netiface_create+0x282/0x740 [ 88.770563][ T5816] ? __pfx_hash_netiface_create+0x10/0x10 [ 88.770608][ T5816] ip_set_create+0x3cc/0x970 [ 88.770643][ T5816] ? __nla_parse+0x40/0x60 [ 88.770669][ T5816] nfnetlink_rcv_msg+0x4c6/0x590 [ 88.770735][ T5816] netlink_rcv_skb+0x123/0x220 [ 88.770847][ T5816] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.770883][ T5816] nfnetlink_rcv+0x167/0x16c0 [ 88.770907][ T5816] ? insn_get_prefixes+0xa72/0xca0 [ 88.770982][ T5816] ? css_rstat_updated+0xbb/0x280 [ 88.771029][ T5816] ? page_counter_charge+0x207/0x230 [ 88.771057][ T5816] ? __rcu_read_unlock+0x4f/0x70 [ 88.771149][ T5816] ? obj_cgroup_charge_pages+0xf7/0x150 [ 88.771189][ T5816] ? __rcu_read_unlock+0x4f/0x70 [ 88.771269][ T5816] ? __memcg_kmem_charge_page+0xd1/0x170 [ 88.771310][ T5816] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 88.771351][ T5816] ? mas_next_slot+0x69b/0x6f0 [ 88.771431][ T5816] ? should_fail_ex+0x30/0x280 [ 88.771453][ T5816] ? selinux_nlmsg_lookup+0x99/0x890 [ 88.771502][ T5816] ? __rcu_read_unlock+0x34/0x70 [ 88.771528][ T5816] ? __netlink_lookup+0x266/0x2a0 [ 88.771604][ T5816] netlink_unicast+0x5c0/0x690 [ 88.771635][ T5816] netlink_sendmsg+0x58b/0x6b0 [ 88.771670][ T5816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.771732][ T5816] __sock_sendmsg+0x145/0x180 [ 88.771759][ T5816] ____sys_sendmsg+0x31e/0x4a0 [ 88.771840][ T5816] ___sys_sendmsg+0x17b/0x1d0 [ 88.771877][ T5816] ? read_tsc+0x9/0x20 [ 88.771954][ T5816] __x64_sys_sendmsg+0xd4/0x160 [ 88.771996][ T5816] x64_sys_call+0x17ba/0x3000 [ 88.772085][ T5816] do_syscall_64+0xca/0x2b0 [ 88.772120][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.772221][ T5816] RIP: 0033:0x7f055090f749 [ 88.772237][ T5816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.772255][ T5816] RSP: 002b:00007f054f377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.772274][ T5816] RAX: ffffffffffffffda RBX: 00007f0550b65fa0 RCX: 00007f055090f749 [ 88.772358][ T5816] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 88.772377][ T5816] RBP: 00007f0550993f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.772395][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.772412][ T5816] R13: 00007f0550b66038 R14: 00007f0550b65fa0 R15: 00007fff79ccd8c8 [ 88.772432][ T5816] [ 88.772438][ T5816] memory: usage 307200kB, limit 307200kB, failcnt 1773 [ 89.125336][ T5816] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 89.133252][ T5816] kmem: usage 302576kB, limit 9007199254740988kB, failcnt 0 [ 89.140587][ T5816] Memory cgroup stats for /syz2: [ 89.140966][ T5816] cache 0 [ 89.148977][ T5816] rss 4734976 [ 89.152261][ T5816] shmem 0 [ 89.155203][ T5816] mapped_file 0 [ 89.158774][ T5816] dirty 0 [ 89.161767][ T5816] writeback 0 [ 89.165047][ T5816] workingset_refault_anon 258 [ 89.169761][ T5816] workingset_refault_file 2243 [ 89.174536][ T5816] swap 196608 [ 89.177870][ T5816] swapcached 0 [ 89.181246][ T5816] pgpgin 59968 [ 89.184636][ T5816] pgpgout 58812 [ 89.188234][ T5816] pgfault 63757 [ 89.191726][ T5816] pgmajfault 199 [ 89.195268][ T5816] inactive_anon 0 [ 89.198971][ T5816] active_anon 0 [ 89.202514][ T5816] inactive_file 4734976 [ 89.206690][ T5816] active_file 0 [ 89.210263][ T5816] unevictable 0 [ 89.213721][ T5816] hierarchical_memory_limit 314572800 [ 89.219219][ T5816] hierarchical_memsw_limit 9223372036854771712 [ 89.225387][ T5816] total_cache 0 [ 89.228879][ T5816] total_rss 4734976 [ 89.232755][ T5816] total_shmem 0 [ 89.236218][ T5816] total_mapped_file 0 [ 89.240259][ T5816] total_dirty 0 [ 89.243713][ T5816] total_writeback 0 [ 89.247565][ T5816] total_workingset_refault_anon 258 [ 89.252756][ T5816] total_workingset_refault_file 2243 [ 89.258067][ T5816] total_swap 196608 [ 89.261881][ T5816] total_swapcached 0 [ 89.265794][ T5816] total_pgpgin 59968 [ 89.269789][ T5816] total_pgpgout 58812 [ 89.273816][ T5816] total_pgfault 63757 [ 89.277825][ T5816] total_pgmajfault 199 [ 89.281910][ T5816] total_inactive_anon 0 [ 89.286058][ T5816] total_active_anon 0 [ 89.290073][ T5816] total_inactive_file 4734976 [ 89.294743][ T5816] total_active_file 0 [ 89.298771][ T5816] total_unevictable 0 [ 89.302756][ T5816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.786,pid=5814,uid=0 [ 89.317346][ T5816] Memory cgroup out of memory: Killed process 5814 (syz.2.786) total-vm:96016kB, anon-rss:5872kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000