last executing test programs: 3.805462852s ago: executing program 3 (id=1864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.930359193s ago: executing program 3 (id=1876): r0 = socket$kcm(0x10, 0x2, 0x0) unshare(0x24020400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) 2.182559744s ago: executing program 4 (id=1882): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0xbc3, 0x0, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.157622935s ago: executing program 3 (id=1883): socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x3, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f0000000ac0)={{0x80}, 'port1\x00', 0x60, 0x0, 0x4, 0x400002, 0xfffffffe, 0x0, 0x4, 0x0, 0x5, 0x2}) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000440)) socket$can_bcm(0x1d, 0x2, 0x2) epoll_create(0x3) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 2.133379167s ago: executing program 4 (id=1884): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x4000001}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="210001"], 0xa) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) gettid() sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/97, 0x61}], 0x8, 0x0, 0x0, 0x20000080}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.820912063s ago: executing program 1 (id=1886): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0xbc3, 0x0, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x1070bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x820}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.811211104s ago: executing program 1 (id=1887): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.793471135s ago: executing program 1 (id=1888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000003000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a70400000000000085000000820000009500000000000000719d638e2a72b78524d97fcd214c62d10a000b1c9147b6a43c0a550cbe42be1644a83df7fe6649128a0718a907417dd50aee4f5060d053a0a2e17476126e00b27c77e50764eb73f154c241e36465971114b10d1008628f48d0508f782477e99e237428923a8bf32948dbebbf2e6ee72e2e5bc8533827f5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0x80000001}, 0x28) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0xfc, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffbffffc, 0xffffffffffffffff, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{0xf, 0xfe}, {0x2, 0x3}, 0x3600000, 0x2, 0x8}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x18) execve(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000002c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040003000000"], 0x17c}, 0x1, 0x0, 0x0, 0xdca55c54ad5166fa}, 0x40080) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000000c0)={0x1, 0x0, 0xac47, {0xfffffffc, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x40) 1.640928377s ago: executing program 1 (id=1892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1.621174889s ago: executing program 1 (id=1894): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0xbc3, 0x0, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.594000571s ago: executing program 1 (id=1895): mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x400000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 1.48912405s ago: executing program 0 (id=1896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000002b40)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095", @ANYRES8=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x40844}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000002ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002b00)=ANY=[@ANYBLOB="30000000020201042abd6a00fcdbdf25030000051400a500fe8000000000000000000000000041091a1fedf59afc0cb300bb08000e00ac14140d"], 0x30}, 0x1, 0x0, 0x0, 0x2000c090}, 0xc004) socket$qrtr(0x2a, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.400615887s ago: executing program 0 (id=1897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x270001, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=local=relaVive: ,7']) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.310429834s ago: executing program 3 (id=1898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delqdisc={0x30, 0x26, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'gre0\x00', r4, 0x1, 0x8, 0x3, 0x101, {{0x17, 0x4, 0x1, 0x5, 0x5c, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0x57, [@local, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0x3b, 0x1, 0xc, [{@broadcast}, {@loopback, 0x10001}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1}, {@remote, 0xff}]}, @noop]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='host1x_cdma_push_wide\x00', r5, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000000)={0x1, 0x6, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @random="860cef598855", @remote, @remote, @link_local]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xffffffffffffffad, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0x6d56, 0x4000}, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="240000003701000001000000000000ffffffffffffff7f00", @ANYRES32=r9, @ANYBLOB], 0x24) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x4, 0x8004}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.237559s ago: executing program 4 (id=1899): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x3, 0x56575bbe, &(0x7f0000001900)}) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) flock(r5, 0x1) flock(r5, 0x2) dup3(r5, r4, 0x0) 1.227640481s ago: executing program 0 (id=1900): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x80003, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x3) 1.178480555s ago: executing program 4 (id=1901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x4000001}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="210001"], 0xa) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) gettid() sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/97, 0x61}], 0x8, 0x0, 0x0, 0x20000080}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.075082733s ago: executing program 3 (id=1903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000003000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a70400000000000085000000820000009500000000000000719d638e2a72b78524d97fcd214c62d10a000b1c9147b6a43c0a550cbe42be1644a83df7fe6649128a0718a907417dd50aee4f5060d053a0a2e17476126e00b27c77e50764eb73f154c241e36465971114b10d1008628f48d0508f782477e99e237428923a8bf32948dbebbf2e6ee72e2e5bc8533827f5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0x80000001}, 0x28) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0xfc, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffbffffc, 0xffffffffffffffff, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{0xf, 0xfe}, {0x2, 0x3}, 0x3600000, 0x2, 0x8}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x18) execve(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000002c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="6001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400f200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040003000000"], 0x17c}, 0x1, 0x0, 0x0, 0xdca55c54ad5166fa}, 0x40080) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000000c0)={0x1, 0x0, 0xac47, {0xfffffffc, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x40) 929.260785ms ago: executing program 2 (id=1906): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}}}}}}, 0x0) 888.406318ms ago: executing program 2 (id=1907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 838.014692ms ago: executing program 2 (id=1908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 837.057622ms ago: executing program 3 (id=1909): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x4000001}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="210001"], 0xa) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) gettid() sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/97, 0x61}], 0x8, 0x0, 0x0, 0x20000080}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 819.960614ms ago: executing program 2 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000003000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a70400000000000085000000820000009500000000000000719d638e2a72b78524d97fcd214c62d10a000b1c9147b6a43c0a550cbe42be1644a83df7fe6649128a0718a907417dd50aee4f5060d053a0a2e17476126e00b27c77e50764eb73f154c241e36465971114b10d1008628f48d0508f782477e99e237428923a8bf32948dbebbf2e6ee72e2e5bc8533827f5"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) io_setup(0x2007, &(0x7f0000000980)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0x80000001}, 0x28) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0xfc, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffbffffc, 0xffffffffffffffff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000040)={{0xf, 0xfe}, {0x2, 0x3}, 0x3600000, 0x2, 0x8}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x18) execve(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000002c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYBLOB="24062abd7000fddb250200000008000100ce829353483b290b04c6accd92212ffa5751b27f27b283cab8b6f02b8f2eaddb138309dcae01e156da557d793967f301045c3a034e6d3537cc0a187c95bfe1a1c5b06c685febcb8cb965d33242ca83f09fab359a491d5d733c5f71eb662e70822afbb04ea6854183d3bbfff8766aa6f5fbeff7ad8c5f396df8e1a218b5298e851865cec282a3641f51b24fa0b1ca7743eb4791f2e075ce78ec4d8e389c17ce35e247ca6a8fddae6f44334f9ce78b1ae4a1dd217c46f6304ff4d1c6098c29e421eb79ff583ade159b7eab84304515dee81d78823819bd718a887f0cf2572a88ca9ac604efebcf51b006edfe12dbbf59ec2318fa026d360f84d58fabba82d2b31a4d90f7f4f8595752cb74280f7c0ed8a64db143b20464b52f7a677b65f500be12f1c3c1e545572eba11268cb9ab985914b8762ad08c00cf51bd4b8620a951960350c701846265be41d5a525c99af6ff7cf28cc8fb07680067965304139747b27d6c7778e8a0ce09575e6c0a82e92c2397a7bb4735c8c9ee75152361f5731e6976e07c7bf03de9112623f5cd91e3d1c435fe76742612615e0c7ad22d491ceebec12c6292ac205185070da6e1d288759c2adb8ec7e157b56ff1d216cddec42858ab81a98c70bfd0b3baff756c67cdb282fb39c1124dbea1b89ac9782f0a5945fba6e3344f0eddfb20b280598ea0f450356c5a24cb767a533d74704880ff7dc4b6177fe5a20ca5066a60b45abdf95f0b87fc1d374f66272cf7f0bb6d91c340e1bfed80d8f2ef410eaa66e207976198f272c058027224b46570970a816a8f82395ee847754149a2cda88f83bc939e2f8d2482cb813056375b4b8e5ab13c91a257cabf65f93547252e691430fcb73371ef135f972d05ee8211c5af0130e27719809bf9c18b9eaead87936dd3a9f3c8e9a539fa42bd90c1b8dc4758542be2fc1a7e63e3660c1c3469c104988780", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040003000000"], 0x17c}, 0x1, 0x0, 0x0, 0xdca55c54ad5166fa}, 0x40080) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0x1, 0x0, 0xac47, {0xfffffffc, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x40) 671.004886ms ago: executing program 2 (id=1911): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0xbc3, 0x0, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x1070bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x820}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 658.512177ms ago: executing program 2 (id=1912): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x3, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semtimedop(0x0, &(0x7f0000000300)=[{0x2, 0x8, 0x1800}], 0x8, 0x0) 482.579281ms ago: executing program 0 (id=1913): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 448.828514ms ago: executing program 0 (id=1914): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x860412, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x1, 0x5b1, &(0x7f0000001000)="$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") r1 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bind$unix(r1, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a080000000000000000000000000007020000f8ffffffb703000000000000b704000004000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendto(r9, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x13, &(0x7f0000000180)=ANY=[@ANYRESHEX=r7], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="6da96d4885bb15ed9f4871d0982dded53340cb459fc3fa11c4b64e1f9d3aed00be3d9cb5fce7e62d844131"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r8], 0x0, 0x37}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) r12 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r12, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r12, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000f2ff0000040000000a00000004000000", @ANYBLOB="e4a223c92ec685e854161a06cddb77702d556bd155a04ac3b929916f6f2774b09cd86a4d802e26640be312dd913d586d7f03b61ac07b61837927a3b44ae427ce228ea7e4d4d84e956d0ed7fc9cb5cf6b88f72f7a87c973c9372ba820f26a0ea367adec9c03c60f47e62033b2", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYRES16=r5], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r13, 0x0, 0x0}, 0x10) 337.259353ms ago: executing program 4 (id=1915): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x7e031, r0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x5, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r2 = getuid() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0), 0x0, 0x607, &(0x7f0000001300)="$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") pread64(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a, 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x4, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x47) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") write$binfmt_aout(r0, &(0x7f0000000e40)=ANY=[@ANYRES8, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES32, @ANYRES8=r0, @ANYBLOB="0ff77cd98353dfdc0db7ffdd9055410b6f448867abf16a94f745b2725c4f11fb6c6fd1d8bc684e6416f32fdd896a5e704bf2a5125139296a2eb82ea149645d0af08de6d7cb6f50a4a5336cd46b00d4b6de8f9db1642b328de6a11fdd4687cc1297375e4bcc3ec41a27b6a99bb4ec01d69ea8f319b7c5960210c0949385d26718d5cc2d4a7ebf069618d2d2827f58eaf3d4d84bb92e1eb664dff578d59af0b047a6372fd6c50ce9b84e497557594b658f2bbcb402a5d8b71b07ac49d6884d6b32d758c2d490ed20e15f"], 0xff2e) unshare(0x20040600) timerfd_create(0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)={0x3, {{0xa, 0x4e24, 0xfffffffc, @empty, 0x1}}, {{0xa, 0x4e21, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}}}, 0x108) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000380)=0x9, 0xc, 0x0) 65.025885ms ago: executing program 0 (id=1916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x4000001}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="210001"], 0xa) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r2 = gettid() sendmsg$rds(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/97, 0x61}], 0x8, 0x0, 0x0, 0x20000080}, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800451400b00000000000329078000000000000000000004e20009c90780100000004000000d57e190d001e6e1d16c1711bbd8adbf65bd846957f378a02340c68117aa1b390b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb6738f5e54b3dc7c070b4d66f0f9565df74d2653a13d554fee0e7be27c873db314d"], 0x0) timer_create(0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xb, '\x00', 0x0, r1, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f0000000880)="c413a1d95cbc46b46a6c808fca706391c34bd153e75fa683e77a5776e8d677b0c4409b40cce9cc49bfaae4abb24f36483f666646f0d6f694f5494b255a2f641b3192dd6fced267931cad5e68d460c518283052d8a809d80b6929db12f6ac7f7e0dd322fdc44cf4ef3559648d88909b9b72b8bec2940c6c220314d16aed543f0c42c2cca6f29a7faeed7dc572d46f71c019c81a11dcab070c6df5910cb991efcf51acaca970f8afdd114c678f1866edf139552cecc79d06f4689618c2435505928f07c4a890deb023c6d38eb5f68dfbca5c596f642507b75ac72cc353e7577abfa0f39a88ae7d7057b97e7f", &(0x7f0000000980)=""/129, &(0x7f0000002740)="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", &(0x7f0000000b00)="e801f59a4520724595122943ba2188108bf1a79a1e1a9080007f5ca4cb4d96cd63cba627d0f8eb587dbc17943db4d88cc0e6ec7c84ab138eb09cf75da748b3242c647ea9a8d80a2eacf73df2ca73bcca7a8b1bac9a952947c7aa4aee7a481da80e013920608c9f32", 0x80000000, r4}, 0x38) fcntl$lock(r1, 0x26, &(0x7f0000000840)={0x0, 0x4, 0x2007, 0x9, r2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0x3, 0x7fff7ffc}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r6}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1917): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xffffffffffffffad, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0x6d56, 0x4000}, 0x0, 0x0) kernel console output (not intermixed with test programs): 196471][ T7113] RSP: 002b:00007faeaf7c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 104.196489][ T7113] RAX: ffffffffffffffda RBX: 0000000000000472 RCX: 00007faeb115eb69 [ 104.196568][ T7113] RDX: 00007faeaf7c6ef0 RSI: 0000000000000000 RDI: 00007faeb11e2784 [ 104.196579][ T7113] RBP: 0000200000000940 R08: 00007faeaf7c6bb7 R09: 00007faeaf7c6e40 [ 104.196591][ T7113] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 104.196651][ T7113] R13: 00007faeaf7c6ef0 R14: 00007faeaf7c6eb0 R15: 0000200000000000 [ 104.196669][ T7113] [ 104.427423][ T7124] netlink: 'syz.0.1406': attribute type 7 has an invalid length. [ 104.435566][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 104.483102][ T7130] loop3: detected capacity change from 0 to 128 [ 104.527642][ T7130] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.544246][ T7130] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.597815][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'. [ 104.606943][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'. [ 104.640876][ T7133] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 104.640876][ T7133] program syz.0.1409 not setting count and/or reply_len properly [ 104.812978][ T7143] loop1: detected capacity change from 0 to 512 [ 104.841006][ T7143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.853955][ T7143] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.871666][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 104.880904][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 104.899909][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.264668][ T7153] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 105.264668][ T7153] program syz.2.1416 not setting count and/or reply_len properly [ 105.330806][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.367074][ T7158] loop3: detected capacity change from 0 to 1024 [ 105.374509][ T7158] EXT4-fs: Ignoring removed orlov option [ 105.390986][ T7158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.445848][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.513682][ T7164] hub 8-0:1.0: USB hub found [ 105.518383][ T7164] hub 8-0:1.0: 8 ports detected [ 105.745172][ T7175] loop3: detected capacity change from 0 to 512 [ 105.761098][ T7175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.773655][ T7175] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.784851][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 105.793921][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 105.815319][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.946341][ T7184] FAULT_INJECTION: forcing a failure. [ 105.946341][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 105.959038][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.1.1426 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 105.959150][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.959163][ T7184] Call Trace: [ 105.959170][ T7184] [ 105.959178][ T7184] __dump_stack+0x1d/0x30 [ 105.959199][ T7184] dump_stack_lvl+0xe8/0x140 [ 105.959217][ T7184] dump_stack+0x15/0x1b [ 105.959303][ T7184] should_fail_ex+0x265/0x280 [ 105.959335][ T7184] ? __pfx_proc_self_get_link+0x10/0x10 [ 105.959406][ T7184] ? proc_self_get_link+0x97/0x110 [ 105.959431][ T7184] should_failslab+0x8c/0xb0 [ 105.959486][ T7184] __kmalloc_cache_noprof+0x4c/0x320 [ 105.959516][ T7184] ? __pfx_proc_self_get_link+0x10/0x10 [ 105.959559][ T7184] proc_self_get_link+0x97/0x110 [ 105.959574][ T7184] pick_link+0x47a/0x830 [ 105.959620][ T7184] step_into+0x7b6/0x820 [ 105.959634][ T7184] ? inode_permission+0x106/0x310 [ 105.959654][ T7184] link_path_walk+0x571/0x900 [ 105.959671][ T7184] path_openat+0x1de/0x2170 [ 105.959682][ T7184] ? _parse_integer_limit+0x170/0x190 [ 105.959841][ T7184] do_filp_open+0x109/0x230 [ 105.959856][ T7184] do_sys_openat2+0xa6/0x110 [ 105.959912][ T7184] __x64_sys_openat+0xf2/0x120 [ 105.959931][ T7184] x64_sys_call+0x2e9c/0x2ff0 [ 105.959943][ T7184] do_syscall_64+0xd2/0x200 [ 105.960066][ T7184] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.960142][ T7184] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.960184][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.960232][ T7184] RIP: 0033:0x7f15f452eb69 [ 105.960241][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.960253][ T7184] RSP: 002b:00007f15f2b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.960264][ T7184] RAX: ffffffffffffffda RBX: 00007f15f4755fa0 RCX: 00007f15f452eb69 [ 105.960272][ T7184] RDX: 000000000000c000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 105.960279][ T7184] RBP: 00007f15f2b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.960286][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.960335][ T7184] R13: 0000000000000000 R14: 00007f15f4755fa0 R15: 00007ffe39ca3418 [ 105.960346][ T7184] [ 106.199465][ T7181] loop3: detected capacity change from 0 to 1024 [ 106.206195][ T7181] ext4: Unknown parameter 'subj_type' [ 106.242730][ T7190] FAULT_INJECTION: forcing a failure. [ 106.242730][ T7190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.255880][ T7190] CPU: 0 UID: 0 PID: 7190 Comm: syz.3.1428 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 106.255928][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.256014][ T7190] Call Trace: [ 106.256019][ T7190] [ 106.256025][ T7190] __dump_stack+0x1d/0x30 [ 106.256110][ T7190] dump_stack_lvl+0xe8/0x140 [ 106.256129][ T7190] dump_stack+0x15/0x1b [ 106.256147][ T7190] should_fail_ex+0x265/0x280 [ 106.256218][ T7190] should_fail+0xb/0x20 [ 106.256249][ T7190] should_fail_usercopy+0x1a/0x20 [ 106.256270][ T7190] _copy_from_user+0x1c/0xb0 [ 106.256324][ T7190] ___sys_sendmsg+0xc1/0x1d0 [ 106.256363][ T7190] __x64_sys_sendmsg+0xd4/0x160 [ 106.256412][ T7190] x64_sys_call+0x191e/0x2ff0 [ 106.256434][ T7190] do_syscall_64+0xd2/0x200 [ 106.256459][ T7190] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.256487][ T7190] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.256511][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.256607][ T7190] RIP: 0033:0x7fd17dbfeb69 [ 106.256624][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.256643][ T7190] RSP: 002b:00007fd17c25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.256664][ T7190] RAX: ffffffffffffffda RBX: 00007fd17de25fa0 RCX: 00007fd17dbfeb69 [ 106.256679][ T7190] RDX: 0000000000004880 RSI: 0000200000000080 RDI: 0000000000000003 [ 106.256692][ T7190] RBP: 00007fd17c25f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.256770][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.256790][ T7190] R13: 0000000000000000 R14: 00007fd17de25fa0 R15: 00007fff22064d78 [ 106.256805][ T7190] [ 106.434850][ T7193] loop1: detected capacity change from 0 to 1024 [ 106.454898][ T7195] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 106.454898][ T7195] program syz.2.1430 not setting count and/or reply_len properly [ 106.476454][ T7193] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.497152][ T7193] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 2: comm syz.1.1427: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.514225][ T7193] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1427: Failed to acquire dquot type 0 [ 106.516559][ T7204] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 106.525691][ T7193] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1427: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.532031][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.532109][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 106.547654][ T7193] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1427: Failed to acquire dquot type 0 [ 106.573089][ T7193] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1427: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.577383][ T7204] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(17) [ 106.586899][ T7193] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1427: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.592966][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.593103][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 106.612201][ T7193] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1427: Failed to acquire dquot type 0 [ 106.636033][ T7193] EXT4-fs (loop1): 1 orphan inode deleted [ 106.642389][ T7193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.685484][ T7204] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 106.692205][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.699805][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 106.724953][ T7204] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 106.731577][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 106.739259][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 106.751625][ T7220] batadv_slave_1: entered allmulticast mode [ 106.759196][ T7204] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(23) [ 106.765876][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.773558][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 106.792115][ T7220] batadv_slave_1: left allmulticast mode [ 106.805339][ T7225] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(25) [ 106.811952][ T7225] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 106.819659][ T7225] vhci_hcd vhci_hcd.0: Device attached [ 106.831627][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 106.840829][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 106.854342][ T7204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.876120][ T7204] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(27) [ 106.882753][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.890515][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 106.896992][ T7220] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 5: comm syz.1.1427: lblock 0 mapped to illegal pblock 5 (length 1) [ 106.940460][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.956642][ T7204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.965234][ T7237] FAULT_INJECTION: forcing a failure. [ 106.965234][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 106.977957][ T7237] CPU: 1 UID: 0 PID: 7237 Comm: syz.1.1440 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 106.977993][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.978006][ T7237] Call Trace: [ 106.978012][ T7237] [ 106.978019][ T7237] __dump_stack+0x1d/0x30 [ 106.978041][ T7237] dump_stack_lvl+0xe8/0x140 [ 106.978119][ T7237] dump_stack+0x15/0x1b [ 106.978134][ T7237] should_fail_ex+0x265/0x280 [ 106.978228][ T7237] should_failslab+0x8c/0xb0 [ 106.978254][ T7237] kmem_cache_alloc_node_noprof+0x57/0x320 [ 106.978357][ T7237] ? __alloc_skb+0x101/0x320 [ 106.978418][ T7237] __alloc_skb+0x101/0x320 [ 106.978450][ T7237] netlink_alloc_large_skb+0xba/0xf0 [ 106.978500][ T7237] netlink_sendmsg+0x3cf/0x6b0 [ 106.978544][ T7237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.978580][ T7237] __sock_sendmsg+0x145/0x180 [ 106.978607][ T7237] ____sys_sendmsg+0x31e/0x4e0 [ 106.978643][ T7237] ___sys_sendmsg+0x17b/0x1d0 [ 106.978740][ T7237] __x64_sys_sendmsg+0xd4/0x160 [ 106.978772][ T7237] x64_sys_call+0x191e/0x2ff0 [ 106.978855][ T7237] do_syscall_64+0xd2/0x200 [ 106.978882][ T7237] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.978904][ T7237] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.978923][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.978947][ T7237] RIP: 0033:0x7f15f452eb69 [ 106.978963][ T7237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.979022][ T7237] RSP: 002b:00007f15f2b8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.979040][ T7237] RAX: ffffffffffffffda RBX: 00007f15f4755fa0 RCX: 00007f15f452eb69 [ 106.979099][ T7237] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 106.979133][ T7237] RBP: 00007f15f2b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.979147][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.979204][ T7237] R13: 0000000000000000 R14: 00007f15f4755fa0 R15: 00007ffe39ca3418 [ 106.979221][ T7237] [ 106.987600][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 107.045772][ T7204] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(34) [ 107.196379][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.204201][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 107.215113][ T1035] usb 8-1: SetAddress Request (2) to port 0 [ 107.221303][ T1035] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 107.230815][ T7243] 9pnet_fd: Insufficient options for proto=fd [ 107.259780][ T7210] vhci_hcd: connection closed [ 107.259918][ T7216] vhci_hcd: connection reset by peer [ 107.259991][ T3432] vhci_hcd: stop threads [ 107.260000][ T3432] vhci_hcd: release socket [ 107.265152][ T7214] vhci_hcd: connection closed [ 107.270071][ T3432] vhci_hcd: disconnect device [ 107.290305][ T7205] vhci_hcd: connection closed [ 107.292697][ T7226] vhci_hcd: connection closed [ 107.296214][ T7223] vhci_hcd: connection closed [ 107.302807][ T7245] sd 0:0:1:0: device reset [ 107.303263][ T3432] vhci_hcd: stop threads [ 107.316252][ T3432] vhci_hcd: release socket [ 107.320753][ T3432] vhci_hcd: disconnect device [ 107.325655][ T3432] vhci_hcd: stop threads [ 107.329942][ T3432] vhci_hcd: release socket [ 107.334345][ T3432] vhci_hcd: disconnect device [ 107.339378][ T3432] vhci_hcd: stop threads [ 107.343753][ T3432] vhci_hcd: release socket [ 107.348337][ T3432] vhci_hcd: disconnect device [ 107.353408][ T3432] vhci_hcd: stop threads [ 107.357642][ T3432] vhci_hcd: release socket [ 107.362181][ T3432] vhci_hcd: disconnect device [ 107.364138][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 107.364151][ T29] audit: type=1400 audit(1754326375.987:6310): avc: denied { create } for pid=7244 comm="syz.0.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.396230][ T7250] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 107.396230][ T7250] program syz.2.1445 not setting count and/or reply_len properly [ 107.419792][ T29] audit: type=1326 audit(1754326376.017:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 107.443343][ T29] audit: type=1326 audit(1754326376.017:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 107.456189][ T3432] vhci_hcd: stop threads [ 107.466749][ T29] audit: type=1326 audit(1754326376.037:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 107.470980][ T3432] vhci_hcd: release socket [ 107.471032][ T3432] vhci_hcd: disconnect device [ 107.494220][ T29] audit: type=1326 audit(1754326376.037:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 107.494246][ T29] audit: type=1326 audit(1754326376.037:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 107.550113][ T29] audit: type=1326 audit(1754326376.037:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 107.573565][ T29] audit: type=1400 audit(1754326376.037:6317): avc: denied { ioctl } for pid=7244 comm="syz.0.1443" path="socket:[18626]" dev="sockfs" ino=18626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.598983][ T29] audit: type=1326 audit(1754326376.037:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 107.622470][ T29] audit: type=1326 audit(1754326376.037:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 107.732846][ T7266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 107.739538][ T7266] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.747093][ T7266] vhci_hcd vhci_hcd.0: Device attached [ 107.759851][ T7264] loop4: detected capacity change from 0 to 512 [ 107.781595][ T7264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.794247][ T7264] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.824421][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.842896][ T7238] vhci_hcd: connection closed [ 107.843272][ T7230] vhci_hcd: connection closed [ 107.855187][ T3432] vhci_hcd: stop threads [ 107.864219][ T3432] vhci_hcd: release socket [ 107.868677][ T3432] vhci_hcd: disconnect device [ 107.879241][ T7274] loop3: detected capacity change from 0 to 512 [ 107.900564][ T7274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.919687][ T3432] vhci_hcd: stop threads [ 107.923972][ T3432] vhci_hcd: release socket [ 107.928383][ T3432] vhci_hcd: disconnect device [ 107.938706][ T3395] vhci_hcd: vhci_device speed not set [ 107.946325][ T7274] EXT4-fs (loop3): 1 truncate cleaned up [ 107.953495][ T7274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.998936][ T3395] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 108.245508][ T7285] loop2: detected capacity change from 0 to 512 [ 108.256334][ T7285] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.267726][ T7285] EXT4-fs (loop2): 1 truncate cleaned up [ 108.274975][ T7285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.297910][ T7285] FAULT_INJECTION: forcing a failure. [ 108.297910][ T7285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.311095][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.2.1454 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 108.311210][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.311224][ T7285] Call Trace: [ 108.311230][ T7285] [ 108.311237][ T7285] __dump_stack+0x1d/0x30 [ 108.311257][ T7285] dump_stack_lvl+0xe8/0x140 [ 108.311285][ T7285] dump_stack+0x15/0x1b [ 108.311303][ T7285] should_fail_ex+0x265/0x280 [ 108.311387][ T7285] should_fail+0xb/0x20 [ 108.311465][ T7285] should_fail_usercopy+0x1a/0x20 [ 108.311502][ T7285] copy_fpstate_to_sigframe+0x628/0x7d0 [ 108.311538][ T7285] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 108.311598][ T7285] ? x86_task_fpu+0x36/0x60 [ 108.311656][ T7285] get_sigframe+0x34d/0x490 [ 108.311674][ T7285] ? get_signal+0xdc8/0xf70 [ 108.311709][ T7285] x64_setup_rt_frame+0xa8/0x580 [ 108.311733][ T7285] arch_do_signal_or_restart+0x27c/0x480 [ 108.311760][ T7285] exit_to_user_mode_loop+0x7a/0x100 [ 108.311809][ T7285] do_syscall_64+0x1d6/0x200 [ 108.311892][ T7285] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.311989][ T7285] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.312034][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.312057][ T7285] RIP: 0033:0x7f5bdab0eb67 [ 108.312076][ T7285] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 108.312095][ T7285] RSP: 002b:00007f5bd916f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.312113][ T7285] RAX: 0000000000000000 RBX: 00007f5bdad35fa0 RCX: 00007f5bdab0eb69 [ 108.312144][ T7285] RDX: 0000000000000062 RSI: 0000200000000600 RDI: 0000000000000004 [ 108.312158][ T7285] RBP: 00007f5bd916f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.312171][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.312248][ T7285] R13: 0000000000000000 R14: 00007f5bdad35fa0 R15: 00007ffeb28b8348 [ 108.312268][ T7285] [ 108.523143][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.539125][ T7268] vhci_hcd: connection reset by peer [ 108.540768][ T7287] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 108.540768][ T7287] program syz.4.1455 not setting count and/or reply_len properly [ 108.544723][ T291] vhci_hcd: stop threads [ 108.565447][ T291] vhci_hcd: release socket [ 108.569928][ T291] vhci_hcd: disconnect device [ 108.616669][ T7294] loop1: detected capacity change from 0 to 2048 [ 108.642308][ T7295] loop2: detected capacity change from 0 to 8192 [ 108.650428][ T3294] loop1: p1 < > p4 [ 108.654855][ T3294] loop1: p4 size 8388608 extends beyond EOD, truncated [ 108.664069][ T7294] loop1: p1 < > p4 [ 108.668415][ T7294] loop1: p4 size 8388608 extends beyond EOD, truncated [ 108.691159][ T7295] loop2: p1 p2 < > p3 p4 < p5 > [ 108.696126][ T7295] loop2: partition table partially beyond EOD, truncated [ 108.712051][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 108.712345][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 108.732520][ T7295] loop2: p1 size 100663296 extends beyond EOD, truncated [ 108.732600][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.740320][ T7295] loop2: p2 start 591104 is beyond EOD, truncated [ 108.755048][ T7295] loop2: p3 start 33572980 is beyond EOD, truncated [ 108.755271][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 108.765902][ T7295] loop2: p5 size 100663296 extends beyond EOD, truncated [ 108.780949][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 108.801610][ T2990] loop2: p1 p2 < > p3 p4 < p5 > [ 108.806597][ T2990] loop2: partition table partially beyond EOD, truncated [ 108.813996][ T2990] loop2: p1 size 100663296 extends beyond EOD, truncated [ 108.825892][ T2990] loop2: p2 start 591104 is beyond EOD, truncated [ 108.832423][ T2990] loop2: p3 start 33572980 is beyond EOD, truncated [ 108.839240][ T7295] wireguard0: entered promiscuous mode [ 108.839612][ T2990] loop2: p5 size 100663296 extends beyond EOD, truncated [ 108.983038][ T7312] sctp: [Deprecated]: syz.2.1456 (pid 7312) Use of int in max_burst socket option deprecated. [ 108.983038][ T7312] Use struct sctp_assoc_value instead [ 109.396110][ T7324] 9pnet_fd: Insufficient options for proto=fd [ 109.764277][ T7349] lo speed is unknown, defaulting to 1000 [ 109.802987][ T7350] loop2: detected capacity change from 0 to 736 [ 109.814377][ T7350] iso9660: Unknown parameter '' [ 109.875242][ T7349] netlink: 'syz.2.1474': attribute type 27 has an invalid length. [ 109.920356][ T7349] 0ªX¹¦À: left allmulticast mode [ 110.006673][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.017526][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.065045][ T4582] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.074075][ T4582] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.127965][ T4582] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.137128][ T4582] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.194436][ T4582] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.203368][ T4582] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.274584][ T4582] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.283663][ T4582] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.283820][ T7358] loop2: detected capacity change from 0 to 1024 [ 110.303233][ T7358] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.331411][ T7361] 9pnet_fd: Insufficient options for proto=fd [ 110.387171][ T7358] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1477: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.393970][ T7363] tmpfs: Bad value for 'mpol' [ 110.425034][ T7358] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1477: Failed to acquire dquot type 0 [ 110.437291][ T7358] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1477: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.451912][ T7358] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1477: Invalid inode bitmap blk 0 in block_group 0 [ 110.464874][ T7358] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 110.474788][ T1377] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.495450][ T7358] EXT4-fs (loop2): 1 orphan inode deleted [ 110.501401][ T1377] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 110.514882][ T7358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.528483][ T7358] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.587225][ T7374] loop4: detected capacity change from 0 to 1024 [ 110.613789][ T7374] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.637448][ T7382] FAULT_INJECTION: forcing a failure. [ 110.637448][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 110.650126][ T7382] CPU: 0 UID: 0 PID: 7382 Comm: syz.2.1485 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 110.650154][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.650238][ T7382] Call Trace: [ 110.650245][ T7382] [ 110.650252][ T7382] __dump_stack+0x1d/0x30 [ 110.650274][ T7382] dump_stack_lvl+0xe8/0x140 [ 110.650294][ T7382] dump_stack+0x15/0x1b [ 110.650310][ T7382] should_fail_ex+0x265/0x280 [ 110.650343][ T7382] should_failslab+0x8c/0xb0 [ 110.650388][ T7382] kmem_cache_alloc_noprof+0x50/0x310 [ 110.650471][ T7382] ? security_inode_alloc+0x37/0x100 [ 110.650495][ T7382] security_inode_alloc+0x37/0x100 [ 110.650520][ T7382] inode_init_always_gfp+0x4b7/0x500 [ 110.650545][ T7382] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 110.650621][ T7382] alloc_inode+0x58/0x170 [ 110.650645][ T7382] new_inode+0x1d/0xe0 [ 110.650716][ T7382] shmem_get_inode+0x244/0x750 [ 110.650740][ T7382] __shmem_file_setup+0x113/0x210 [ 110.650775][ T7382] shmem_file_setup+0x3b/0x50 [ 110.650866][ T7382] __se_sys_memfd_create+0x2c3/0x590 [ 110.650895][ T7382] __x64_sys_memfd_create+0x31/0x40 [ 110.650917][ T7382] x64_sys_call+0x2abe/0x2ff0 [ 110.650940][ T7382] do_syscall_64+0xd2/0x200 [ 110.650966][ T7382] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.650991][ T7382] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.651066][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.651086][ T7382] RIP: 0033:0x7f5bdab0eb69 [ 110.651099][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.651115][ T7382] RSP: 002b:00007f5bd916ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 110.651134][ T7382] RAX: ffffffffffffffda RBX: 0000000000000677 RCX: 00007f5bdab0eb69 [ 110.651185][ T7382] RDX: 00007f5bd916eef0 RSI: 0000000000000000 RDI: 00007f5bdab92784 [ 110.651199][ T7382] RBP: 0000200000000c00 R08: 00007f5bd916ebb7 R09: 00007f5bd916ee40 [ 110.651231][ T7382] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240 [ 110.651243][ T7382] R13: 00007f5bd916eef0 R14: 00007f5bd916eeb0 R15: 0000200000000ac0 [ 110.651259][ T7382] [ 110.652737][ T7378] loop3: detected capacity change from 0 to 2048 [ 110.659517][ T7374] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1483: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.709052][ T7382] lo speed is unknown, defaulting to 1000 [ 110.710241][ T7374] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1483: Failed to acquire dquot type 0 [ 110.903961][ T7374] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1483: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.924657][ T7395] 9pnet_fd: Insufficient options for proto=fd [ 110.939313][ T3294] loop3: p1 < > p4 [ 110.944783][ T3294] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.964247][ T7378] loop3: p1 < > p4 [ 110.969855][ T7378] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.977972][ T7374] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1483: Invalid inode bitmap blk 0 in block_group 0 [ 110.991870][ T4582] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.006108][ T7374] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 111.024167][ T7374] EXT4-fs (loop4): 1 orphan inode deleted [ 111.030577][ T7374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.043611][ T4582] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 111.056634][ T7374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.373344][ T7413] loop4: detected capacity change from 0 to 1024 [ 111.409774][ T7413] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.492228][ T7413] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1496: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.594773][ T7413] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1496: Failed to acquire dquot type 0 [ 111.634395][ T7419] tmpfs: Bad value for 'mpol' [ 111.664336][ T7413] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1496: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.754729][ T7413] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1496: Invalid inode bitmap blk 0 in block_group 0 [ 111.804653][ T7413] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 111.867434][ T7413] EXT4-fs (loop4): 1 orphan inode deleted [ 111.886821][ T7413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.954757][ T7424] loop1: detected capacity change from 0 to 128 [ 111.979980][ T7424] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.023337][ T7424] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.066182][ T1377] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.089662][ T7429] 9pnet_fd: Insufficient options for proto=fd [ 112.090992][ T1377] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 112.107661][ T7424] FAULT_INJECTION: forcing a failure. [ 112.107661][ T7424] name failslab, interval 1, probability 0, space 0, times 0 [ 112.120325][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.1.1500 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 112.120418][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.120509][ T7424] Call Trace: [ 112.120515][ T7424] [ 112.120522][ T7424] __dump_stack+0x1d/0x30 [ 112.120610][ T7424] dump_stack_lvl+0xe8/0x140 [ 112.120627][ T7424] dump_stack+0x15/0x1b [ 112.120669][ T7424] should_fail_ex+0x265/0x280 [ 112.120714][ T7424] should_failslab+0x8c/0xb0 [ 112.120736][ T7424] kmem_cache_alloc_noprof+0x50/0x310 [ 112.120761][ T7424] ? skb_clone+0x151/0x1f0 [ 112.120778][ T7424] skb_clone+0x151/0x1f0 [ 112.120793][ T7424] pfkey_sendmsg+0x2cc/0x900 [ 112.120835][ T7424] ? avc_has_perm+0xf7/0x180 [ 112.120860][ T7424] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 112.120947][ T7424] __sock_sendmsg+0x145/0x180 [ 112.120969][ T7424] ____sys_sendmsg+0x31e/0x4e0 [ 112.121002][ T7424] ___sys_sendmsg+0x17b/0x1d0 [ 112.121112][ T7424] __x64_sys_sendmsg+0xd4/0x160 [ 112.121223][ T7424] x64_sys_call+0x191e/0x2ff0 [ 112.121242][ T7424] do_syscall_64+0xd2/0x200 [ 112.121262][ T7424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.121284][ T7424] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.121324][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.121343][ T7424] RIP: 0033:0x7f15f452eb69 [ 112.121356][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.121372][ T7424] RSP: 002b:00007f15f2b8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.121389][ T7424] RAX: ffffffffffffffda RBX: 00007f15f4755fa0 RCX: 00007f15f452eb69 [ 112.121401][ T7424] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 112.121416][ T7424] RBP: 00007f15f2b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.121428][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.121514][ T7424] R13: 0000000000000000 R14: 00007f15f4755fa0 R15: 00007ffe39ca3418 [ 112.121529][ T7424] [ 112.333623][ T7413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.343285][ T1035] usb 8-1: device descriptor read/8, error -110 [ 112.366188][ T7431] __nla_validate_parse: 4 callbacks suppressed [ 112.366202][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 112.395682][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 112.397419][ T7438] loop4: detected capacity change from 0 to 164 [ 112.466123][ T1035] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 112.488188][ T7438] Unable to read rock-ridge attributes [ 112.494821][ T1035] usb 8-1: enqueue for inactive port 0 [ 112.503654][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 112.503666][ T29] audit: type=1400 audit(1754326381.127:6716): avc: denied { mount } for pid=7437 comm="syz.4.1505" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 112.547429][ T7438] lo speed is unknown, defaulting to 1000 [ 112.561863][ T1035] usb 8-1: enqueue for inactive port 0 [ 112.574615][ T1035] usb 8-1: enqueue for inactive port 0 [ 112.589839][ T7460] Unable to read rock-ridge attributes [ 112.605151][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 112.618639][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 112.665157][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.688408][ T29] audit: type=1400 audit(1754326381.307:6717): avc: denied { create } for pid=7468 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.714496][ T7473] 9pnet_fd: Insufficient options for proto=fd [ 112.724444][ T29] audit: type=1400 audit(1754326381.347:6718): avc: denied { setopt } for pid=7468 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.725109][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 112.763065][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.770582][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.782569][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.790046][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.799356][ T29] audit: type=1400 audit(1754326381.347:6719): avc: denied { ioctl } for pid=7468 comm="syz.3.1512" path="socket:[19104]" dev="sockfs" ino=19104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.825125][ T29] audit: type=1326 audit(1754326381.407:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f452eb69 code=0x7ffc0000 [ 112.848626][ T29] audit: type=1326 audit(1754326381.407:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f452eb69 code=0x7ffc0000 [ 112.872162][ T29] audit: type=1326 audit(1754326381.417:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15f452d4d0 code=0x7ffc0000 [ 112.885681][ T7471] sd 0:0:1:0: device reset [ 112.895669][ T29] audit: type=1326 audit(1754326381.417:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15f452d4d0 code=0x7ffc0000 [ 112.923451][ T29] audit: type=1326 audit(1754326381.417:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f452eb69 code=0x7ffc0000 [ 112.929951][ T7476] FAULT_INJECTION: forcing a failure. [ 112.929951][ T7476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.946875][ T29] audit: type=1326 audit(1754326381.417:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f15f452eb69 code=0x7ffc0000 [ 112.959921][ T7476] CPU: 1 UID: 0 PID: 7476 Comm: syz.0.1515 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 112.959951][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.959964][ T7476] Call Trace: [ 112.959970][ T7476] [ 112.959978][ T7476] __dump_stack+0x1d/0x30 [ 112.960045][ T7476] dump_stack_lvl+0xe8/0x140 [ 112.960065][ T7476] dump_stack+0x15/0x1b [ 112.960083][ T7476] should_fail_ex+0x265/0x280 [ 112.960122][ T7476] should_fail+0xb/0x20 [ 112.960218][ T7476] should_fail_usercopy+0x1a/0x20 [ 112.960236][ T7476] strncpy_from_user+0x25/0x230 [ 112.960261][ T7476] strncpy_from_user_nofault+0x68/0xf0 [ 112.960358][ T7476] bpf_probe_read_user_str+0x2a/0x70 [ 112.960391][ T7476] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 112.960409][ T7476] bpf_trace_run2+0x107/0x1c0 [ 112.960432][ T7476] ? ____sys_recvmsg+0x229/0x280 [ 112.960514][ T7476] ? ___sys_recvmsg+0x135/0x370 [ 112.960571][ T7476] ? ___sys_recvmsg+0x135/0x370 [ 112.960588][ T7476] __traceiter_kfree+0x2e/0x50 [ 112.960612][ T7476] ? ___sys_recvmsg+0x135/0x370 [ 112.960629][ T7476] kfree+0x27b/0x320 [ 112.960657][ T7476] ___sys_recvmsg+0x135/0x370 [ 112.960818][ T7476] __x64_sys_recvmsg+0xd1/0x160 [ 112.960926][ T7476] x64_sys_call+0x2b42/0x2ff0 [ 112.960948][ T7476] do_syscall_64+0xd2/0x200 [ 112.960972][ T7476] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.960997][ T7476] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.961054][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.961077][ T7476] RIP: 0033:0x7faeb115eb69 [ 112.961092][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.961110][ T7476] RSP: 002b:00007faeaf7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 112.961134][ T7476] RAX: ffffffffffffffda RBX: 00007faeb1385fa0 RCX: 00007faeb115eb69 [ 112.961147][ T7476] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 112.961160][ T7476] RBP: 00007faeaf7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.961183][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.961195][ T7476] R13: 0000000000000000 R14: 00007faeb1385fa0 R15: 00007ffc404ca9d8 [ 112.961214][ T7476] [ 113.103901][ T7483] loop1: detected capacity change from 0 to 512 [ 113.107876][ T3395] usb 3-1: enqueue for inactive port 0 [ 113.217929][ T3395] usb 3-1: enqueue for inactive port 0 [ 113.231069][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.244050][ T7483] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.288570][ T3395] vhci_hcd: vhci_device speed not set [ 113.299805][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'. [ 113.316297][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'. [ 113.349408][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.514187][ T7511] loop4: detected capacity change from 0 to 512 [ 113.522653][ T7509] loop1: detected capacity change from 0 to 1024 [ 113.625442][ T7509] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.394712][ T1035] usb usb8-port1: attempt power cycle [ 114.405429][ T7509] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.1530: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.421087][ T7509] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1530: Failed to acquire dquot type 0 [ 114.433432][ T7509] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1530: Freeing blocks not in datazone - block = 0, count = 4096 [ 114.452656][ T7509] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1530: Invalid inode bitmap blk 0 in block_group 0 [ 114.466670][ T7509] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 114.475421][ T3432] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.492618][ T3432] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 114.508497][ T7509] EXT4-fs (loop1): 1 orphan inode deleted [ 114.508649][ T7511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.527126][ T7509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.539833][ T7511] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.569374][ T7509] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.626311][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 114.643135][ T7509] loop1: detected capacity change from 0 to 2048 [ 114.663923][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.702910][ T7509] Alternate GPT is invalid, using primary GPT. [ 114.709271][ T7509] loop1: p1 p2 p3 [ 114.719592][ T2990] Alternate GPT is invalid, using primary GPT. [ 114.725975][ T2990] loop1: p1 p2 p3 [ 114.924084][ T7553] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 114.924084][ T7553] program syz.1.1542 not setting count and/or reply_len properly [ 115.046223][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1544'. [ 115.059017][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1544'. [ 115.357221][ T7565] loop4: detected capacity change from 0 to 512 [ 115.370616][ T7565] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 115.568039][ T7570] loop3: detected capacity change from 0 to 164 [ 115.911931][ T7596] loop1: detected capacity change from 0 to 1024 [ 115.920467][ T7596] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.939440][ T7596] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.1559: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.954147][ T7596] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1559: Failed to acquire dquot type 0 [ 115.973936][ T7596] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1559: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.993386][ T7596] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1559: Invalid inode bitmap blk 0 in block_group 0 [ 116.027442][ T7596] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 116.056506][ T7596] EXT4-fs (loop1): 1 orphan inode deleted [ 116.063793][ T7596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.092404][ T7601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.096144][ T3432] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.115753][ T7601] loop2: detected capacity change from 0 to 1024 [ 116.125793][ T3432] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 116.139587][ T7601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.152759][ T7596] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.180617][ T7601] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1560: Allocating blocks 449-513 which overlap fs metadata [ 116.212212][ T7601] SELinux: Context @ is not valid (left unmapped). [ 116.219722][ T7601] EXT4-fs (loop2): pa ffff888106ea91c0: logic 48, phys. 177, len 21 [ 116.227729][ T7601] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 116.247236][ T7596] loop1: detected capacity change from 0 to 2048 [ 116.253424][ T7612] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 116.253424][ T7612] program syz.0.1564 not setting count and/or reply_len properly [ 116.273768][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.365219][ T7596] Alternate GPT is invalid, using primary GPT. [ 116.371806][ T7596] loop1: p1 p2 p3 [ 116.379188][ T1035] usb usb8-port1: unable to enumerate USB device [ 116.479395][ T7618] lo speed is unknown, defaulting to 1000 [ 116.537638][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 116.556612][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 116.567333][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 116.578817][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 117.408424][ T7632] loop1: detected capacity change from 0 to 512 [ 117.541857][ T7632] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1571: error while reading EA inode 32 err=-116 [ 117.664211][ T7632] EXT4-fs (loop1): Remounting filesystem read-only [ 117.670963][ T7632] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 117.713524][ T7651] __nla_validate_parse: 1 callbacks suppressed [ 117.713541][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'. [ 117.791032][ T7632] EXT4-fs (loop1): 1 orphan inode deleted [ 117.820809][ T7632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.054646][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 118.121282][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.131810][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 118.557665][ T7671] lo speed is unknown, defaulting to 1000 [ 118.638500][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 118.638558][ T29] audit: type=1326 audit(1754326387.247:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.668162][ T29] audit: type=1326 audit(1754326387.247:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.691575][ T29] audit: type=1326 audit(1754326387.247:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.715012][ T29] audit: type=1326 audit(1754326387.247:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.738370][ T29] audit: type=1326 audit(1754326387.247:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.761864][ T29] audit: type=1326 audit(1754326387.247:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.785284][ T29] audit: type=1326 audit(1754326387.247:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.808696][ T29] audit: type=1326 audit(1754326387.247:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.832106][ T29] audit: type=1326 audit(1754326387.247:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 118.855530][ T29] audit: type=1326 audit(1754326387.247:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 119.109343][ T7680] loop2: detected capacity change from 0 to 512 [ 119.185507][ T7680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.216518][ T7680] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.242042][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 119.261021][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 119.289682][ T7685] netlink: 'syz.1.1590': attribute type 7 has an invalid length. [ 119.297489][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 119.325748][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.430767][ T7687] tmpfs: Bad value for 'mpol' [ 119.624246][ T7694] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 119.624246][ T7694] program syz.1.1594 not setting count and/or reply_len properly [ 119.793363][ T7710] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1601'. [ 119.875839][ T7717] loop2: detected capacity change from 0 to 1024 [ 119.883790][ T7717] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.896659][ T7717] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1603: lblock 1 mapped to illegal pblock 1 (length 1) [ 119.911342][ T7717] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1603: Failed to acquire dquot type 0 [ 119.922802][ T7717] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1603: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.936927][ T7717] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1603: Invalid inode bitmap blk 0 in block_group 0 [ 119.949708][ T7717] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 119.958271][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 119.958394][ T7717] EXT4-fs (loop2): 1 orphan inode deleted [ 119.974869][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 119.978812][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.002670][ T7717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.031993][ T7717] loop2: detected capacity change from 0 to 2048 [ 120.079221][ T3294] Alternate GPT is invalid, using primary GPT. [ 120.085516][ T3294] loop2: p1 p2 p3 [ 120.099882][ T7717] Alternate GPT is invalid, using primary GPT. [ 120.106261][ T7717] loop2: p1 p2 p3 [ 120.121415][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 120.130585][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 120.157416][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.163034][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.178604][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.200777][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.201304][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.211899][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.346372][ T7728] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 120.482272][ T7740] 9pnet_fd: Insufficient options for proto=fd [ 120.562593][ T7748] loop1: detected capacity change from 0 to 1024 [ 120.572578][ T7748] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.592225][ T7748] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.1617: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.607236][ T7748] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1617: Failed to acquire dquot type 0 [ 120.618911][ T7748] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1617: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.633034][ T7748] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1617: Invalid inode bitmap blk 0 in block_group 0 [ 120.646768][ T7748] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 120.655436][ T7748] EXT4-fs (loop1): 1 orphan inode deleted [ 120.656359][ T7745] lo speed is unknown, defaulting to 1000 [ 120.662616][ T7748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.681501][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.696021][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 120.708534][ T7748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.732896][ T7748] loop1: detected capacity change from 0 to 2048 [ 120.780374][ T7748] Alternate GPT is invalid, using primary GPT. [ 120.786791][ T7748] loop1: p1 p2 p3 [ 120.832973][ T3421] usb usb8-port1: attempt power cycle [ 120.944836][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1622'. [ 121.009727][ T7767] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 121.009727][ T7767] program syz.0.1624 not setting count and/or reply_len properly [ 121.061155][ T7775] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 121.061155][ T7775] program syz.2.1628 not setting count and/or reply_len properly [ 121.126251][ T7778] loop1: detected capacity change from 0 to 1024 [ 121.133731][ T7778] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.146578][ T7778] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.1629: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.160753][ T7778] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1629: Failed to acquire dquot type 0 [ 121.172195][ T7778] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1629: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.185859][ T7778] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1629: Invalid inode bitmap blk 0 in block_group 0 [ 121.198852][ T7778] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 121.207598][ T7778] EXT4-fs (loop1): 1 orphan inode deleted [ 121.213448][ T1377] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.214149][ T7778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.228344][ T1377] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 121.252399][ T7778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.279899][ T7778] loop1: detected capacity change from 0 to 2048 [ 121.310135][ T7778] Alternate GPT is invalid, using primary GPT. [ 121.316451][ T7778] loop1: p1 p2 p3 [ 121.361539][ T7784] loop1: detected capacity change from 0 to 128 [ 121.519391][ T7786] lo speed is unknown, defaulting to 1000 [ 122.031247][ T7805] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.041644][ T7805] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.126391][ T7805] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.136848][ T7805] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.166140][ T7811] loop2: detected capacity change from 0 to 1024 [ 122.173347][ T7811] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.186096][ T7811] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1640: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.200954][ T7811] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1640: Failed to acquire dquot type 0 [ 122.213944][ T7811] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1640: Freeing blocks not in datazone - block = 0, count = 4096 [ 122.227743][ T7811] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1640: Invalid inode bitmap blk 0 in block_group 0 [ 122.241187][ T3432] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.241652][ T7811] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 122.257195][ T7805] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.274196][ T7805] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.286070][ T7811] EXT4-fs (loop2): 1 orphan inode deleted [ 122.291964][ T3432] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 122.304897][ T7811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.320588][ T7811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.378492][ T7805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.388929][ T7805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.545179][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.553410][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.699169][ T3421] usb usb8-port1: unable to enumerate USB device [ 122.747449][ T3432] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.755721][ T3432] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.861028][ T7826] lo speed is unknown, defaulting to 1000 [ 122.905143][ T3432] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.913454][ T3432] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.966418][ T7829] __nla_validate_parse: 5 callbacks suppressed [ 122.966468][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 122.994679][ T7831] FAULT_INJECTION: forcing a failure. [ 122.994679][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 123.007458][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.4.1645 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 123.007539][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.007553][ T7831] Call Trace: [ 123.007560][ T7831] [ 123.007569][ T7831] __dump_stack+0x1d/0x30 [ 123.007598][ T7831] dump_stack_lvl+0xe8/0x140 [ 123.007692][ T7831] dump_stack+0x15/0x1b [ 123.007725][ T7831] should_fail_ex+0x265/0x280 [ 123.007730][ T3432] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.007756][ T7831] should_failslab+0x8c/0xb0 [ 123.007783][ T7831] kmem_cache_alloc_node_noprof+0x57/0x320 [ 123.007819][ T7831] ? __alloc_skb+0x101/0x320 [ 123.007850][ T7831] __alloc_skb+0x101/0x320 [ 123.007881][ T7831] netlink_alloc_large_skb+0xba/0xf0 [ 123.007911][ T7831] netlink_sendmsg+0x3cf/0x6b0 [ 123.008023][ T7831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.008056][ T7831] __sock_sendmsg+0x145/0x180 [ 123.008148][ T7831] ____sys_sendmsg+0x31e/0x4e0 [ 123.008184][ T7831] ___sys_sendmsg+0x17b/0x1d0 [ 123.008227][ T7831] __x64_sys_sendmsg+0xd4/0x160 [ 123.008311][ T7831] x64_sys_call+0x191e/0x2ff0 [ 123.008333][ T7831] do_syscall_64+0xd2/0x200 [ 123.008413][ T7831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.008441][ T7831] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.008469][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.008491][ T7831] RIP: 0033:0x7f55f6d4eb69 [ 123.008510][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.008604][ T7831] RSP: 002b:00007f55f53af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.008628][ T7831] RAX: ffffffffffffffda RBX: 00007f55f6f75fa0 RCX: 00007f55f6d4eb69 [ 123.008658][ T7831] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 123.008672][ T7831] RBP: 00007f55f53af090 R08: 0000000000000000 R09: 0000000000000000 [ 123.008684][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.008697][ T7831] R13: 0000000000000000 R14: 00007f55f6f75fa0 R15: 00007fff2105a168 [ 123.008716][ T7831] [ 123.096147][ T7834] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.096147][ T7834] program syz.4.1646 not setting count and/or reply_len properly [ 123.097150][ T3432] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.243312][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 123.332878][ T7845] loop1: detected capacity change from 0 to 512 [ 123.356684][ T7845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.369669][ T7845] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.383768][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'. [ 123.392874][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'. [ 123.418663][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.494164][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1654'. [ 123.533308][ T7864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1658'. [ 123.544819][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1659'. [ 123.561333][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1659'. [ 123.627477][ T7876] loop3: detected capacity change from 0 to 1024 [ 123.650709][ T7876] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.679898][ T7876] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.1662: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.711693][ T7876] __quota_error: 661 callbacks suppressed [ 123.711707][ T7876] Quota error (device loop3): write_blk: dquota write failed [ 123.724905][ T7876] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 123.735899][ T29] audit: type=1326 audit(1754326392.357:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 123.759477][ T29] audit: type=1326 audit(1754326392.357:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 123.762958][ T7876] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1662: Failed to acquire dquot type 0 [ 123.782783][ T29] audit: type=1326 audit(1754326392.357:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 123.823969][ T7882] loop2: detected capacity change from 0 to 1024 [ 123.831556][ T7876] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1662: Freeing blocks not in datazone - block = 0, count = 4096 [ 123.845126][ T7882] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.855853][ T7876] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1662: Invalid inode bitmap blk 0 in block_group 0 [ 123.870257][ T7882] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1664: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.884279][ T4582] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.902095][ T29] audit: type=1326 audit(1754326392.447:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 123.925584][ T29] audit: type=1326 audit(1754326392.447:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 123.949139][ T29] audit: type=1326 audit(1754326392.447:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 123.972622][ T29] audit: type=1326 audit(1754326392.447:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 123.996017][ T29] audit: type=1326 audit(1754326392.447:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdab0eb69 code=0x7ffc0000 [ 124.005044][ T4582] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 124.032025][ T7882] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1664: Failed to acquire dquot type 0 [ 124.047227][ T7876] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 124.075075][ T7882] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1664: Freeing blocks not in datazone - block = 0, count = 4096 [ 124.097511][ T7876] EXT4-fs (loop3): 1 orphan inode deleted [ 124.103572][ T7882] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1664: Invalid inode bitmap blk 0 in block_group 0 [ 124.116755][ T7876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.129613][ T7888] loop4: detected capacity change from 0 to 512 [ 124.129970][ T4582] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.137714][ T7888] msdos: Bad value for 'uid' [ 124.150713][ T7884] loop1: detected capacity change from 0 to 512 [ 124.154547][ T7888] msdos: Bad value for 'uid' [ 124.165562][ T7882] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 124.166045][ T4582] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 124.186753][ T7882] EXT4-fs (loop2): 1 orphan inode deleted [ 124.204580][ T7884] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.410457][ T7904] FAULT_INJECTION: forcing a failure. [ 124.410457][ T7904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.423673][ T7904] CPU: 0 UID: 0 PID: 7904 Comm: syz.1.1672 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 124.423704][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.423717][ T7904] Call Trace: [ 124.423724][ T7904] [ 124.423732][ T7904] __dump_stack+0x1d/0x30 [ 124.423756][ T7904] dump_stack_lvl+0xe8/0x140 [ 124.423826][ T7904] dump_stack+0x15/0x1b [ 124.423845][ T7904] should_fail_ex+0x265/0x280 [ 124.424040][ T7904] should_fail+0xb/0x20 [ 124.424115][ T7904] should_fail_usercopy+0x1a/0x20 [ 124.424136][ T7904] _copy_from_user+0x1c/0xb0 [ 124.424159][ T7904] ___sys_sendmsg+0xc1/0x1d0 [ 124.424199][ T7904] __sys_sendmmsg+0x178/0x300 [ 124.424323][ T7904] __x64_sys_sendmmsg+0x57/0x70 [ 124.424358][ T7904] x64_sys_call+0x1c4a/0x2ff0 [ 124.424435][ T7904] do_syscall_64+0xd2/0x200 [ 124.424461][ T7904] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 124.424556][ T7904] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.424579][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.424668][ T7904] RIP: 0033:0x7f15f452eb69 [ 124.424685][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.424718][ T7904] RSP: 002b:00007f15f2b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.424735][ T7904] RAX: ffffffffffffffda RBX: 00007f15f4755fa0 RCX: 00007f15f452eb69 [ 124.424747][ T7904] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000003 [ 124.424759][ T7904] RBP: 00007f15f2b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.424773][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.424785][ T7904] R13: 0000000000000000 R14: 00007f15f4755fa0 R15: 00007ffe39ca3418 [ 124.424801][ T7904] [ 124.676678][ T7912] lo speed is unknown, defaulting to 1000 [ 124.714450][ T7916] loop4: detected capacity change from 0 to 1024 [ 124.736764][ T7916] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.742121][ T7909] 9pnet_fd: Insufficient options for proto=fd [ 124.758313][ T7916] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1674: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.773677][ T7916] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1674: Failed to acquire dquot type 0 [ 124.785655][ T7916] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1674: Freeing blocks not in datazone - block = 0, count = 4096 [ 124.797199][ T7922] __vm_enough_memory: pid: 7922, comm: syz.0.1678, bytes: 21199722496000 not enough memory for the allocation [ 124.800228][ T7916] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1674: Invalid inode bitmap blk 0 in block_group 0 [ 124.827605][ T51] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.829765][ T7924] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1679'. [ 124.845929][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 124.869441][ T7916] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 124.888386][ T7916] EXT4-fs (loop4): 1 orphan inode deleted [ 124.906821][ T7924] netlink: 'syz.1.1679': attribute type 9 has an invalid length. [ 124.914621][ T7924] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1679'. [ 124.956331][ T7916] loop4: detected capacity change from 0 to 2048 [ 124.980692][ T7933] wireguard0: entered promiscuous mode [ 125.020276][ T3562] Alternate GPT is invalid, using primary GPT. [ 125.026666][ T3562] loop4: p1 p2 p3 [ 125.034865][ T7916] Alternate GPT is invalid, using primary GPT. [ 125.041270][ T7916] loop4: p1 p2 p3 [ 125.121303][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 125.134938][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 125.136160][ T7940] loop4: detected capacity change from 0 to 512 [ 125.153361][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 125.180969][ T7940] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.218692][ T7946] netlink: 'syz.4.1687': attribute type 7 has an invalid length. [ 125.238055][ T7942] loop1: detected capacity change from 0 to 512 [ 125.261434][ T7942] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.464056][ T7961] 9pnet_fd: Insufficient options for proto=fd [ 125.594287][ T7971] loop1: detected capacity change from 0 to 1024 [ 125.705491][ T7971] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.724715][ T7976] netlink: 'syz.2.1698': attribute type 7 has an invalid length. [ 125.737199][ T7971] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.1696: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.751600][ T7971] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1696: Failed to acquire dquot type 0 [ 125.763547][ T7971] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1696: Freeing blocks not in datazone - block = 0, count = 4096 [ 125.777485][ T7971] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1696: Invalid inode bitmap blk 0 in block_group 0 [ 125.904612][ T7971] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 126.104192][ T7971] EXT4-fs (loop1): 1 orphan inode deleted [ 126.440738][ T3432] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.615617][ T3432] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 126.644994][ T7991] tmpfs: Bad value for 'mpol' [ 126.673783][ T7992] lo speed is unknown, defaulting to 1000 [ 126.718631][ T7971] loop1: detected capacity change from 0 to 2048 [ 126.779920][ T7971] Alternate GPT is invalid, using primary GPT. [ 126.786189][ T7971] loop1: p1 p2 p3 [ 126.957953][ T8010] loop2: detected capacity change from 0 to 1024 [ 126.973633][ T8011] FAULT_INJECTION: forcing a failure. [ 126.973633][ T8011] name failslab, interval 1, probability 0, space 0, times 0 [ 126.986356][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: syz.1.1708 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 126.986393][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.986404][ T8011] Call Trace: [ 126.986410][ T8011] [ 126.986418][ T8011] __dump_stack+0x1d/0x30 [ 126.986439][ T8011] dump_stack_lvl+0xe8/0x140 [ 126.986460][ T8011] dump_stack+0x15/0x1b [ 126.986478][ T8011] should_fail_ex+0x265/0x280 [ 126.986555][ T8011] should_failslab+0x8c/0xb0 [ 126.986577][ T8011] kmem_cache_alloc_noprof+0x50/0x310 [ 126.986671][ T8011] ? skb_clone+0x151/0x1f0 [ 126.986691][ T8011] skb_clone+0x151/0x1f0 [ 126.986735][ T8011] __netlink_deliver_tap+0x2c9/0x500 [ 126.986766][ T8011] netlink_unicast+0x66b/0x690 [ 126.986828][ T8011] netlink_sendmsg+0x58b/0x6b0 [ 126.986863][ T8011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.986922][ T8011] __sock_sendmsg+0x145/0x180 [ 126.986945][ T8011] ____sys_sendmsg+0x31e/0x4e0 [ 126.987040][ T8011] ___sys_sendmsg+0x17b/0x1d0 [ 126.987120][ T8011] __x64_sys_sendmsg+0xd4/0x160 [ 126.987159][ T8011] x64_sys_call+0x191e/0x2ff0 [ 126.987183][ T8011] do_syscall_64+0xd2/0x200 [ 126.987209][ T8011] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.987236][ T8011] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 126.987315][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.987339][ T8011] RIP: 0033:0x7f15f452eb69 [ 126.987356][ T8011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.987373][ T8011] RSP: 002b:00007f15f2b6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.987391][ T8011] RAX: ffffffffffffffda RBX: 00007f15f4756080 RCX: 00007f15f452eb69 [ 126.987403][ T8011] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 126.987462][ T8011] RBP: 00007f15f2b6e090 R08: 0000000000000000 R09: 0000000000000000 [ 126.987473][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.987485][ T8011] R13: 0000000000000000 R14: 00007f15f4756080 R15: 00007ffe39ca3418 [ 126.987501][ T8011] [ 127.038675][ T8010] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.102587][ T8011] wireguard1: entered promiscuous mode [ 127.199528][ T8010] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1709: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.224566][ T8010] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1709: Failed to acquire dquot type 0 [ 127.239396][ T8010] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1709: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.253308][ T8010] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1709: Invalid inode bitmap blk 0 in block_group 0 [ 127.267365][ T8010] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 127.276177][ T8010] EXT4-fs (loop2): 1 orphan inode deleted [ 127.283461][ T3432] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.298244][ T3432] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 127.363419][ T8010] loop2: detected capacity change from 0 to 2048 [ 127.430918][ T3294] Alternate GPT is invalid, using primary GPT. [ 127.437230][ T3294] loop2: p1 p2 p3 [ 127.470991][ T8010] Alternate GPT is invalid, using primary GPT. [ 127.477292][ T8010] loop2: p1 p2 p3 [ 127.556198][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 127.556210][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 127.577204][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 128.243529][ T8036] tmpfs: Bad value for 'mpol' [ 128.778187][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 128.778203][ T29] audit: type=1326 audit(1754326397.397:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.807907][ T29] audit: type=1326 audit(1754326397.397:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.831189][ T29] audit: type=1326 audit(1754326397.397:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.854623][ T29] audit: type=1326 audit(1754326397.397:8301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.878111][ T29] audit: type=1326 audit(1754326397.397:8302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.901543][ T29] audit: type=1326 audit(1754326397.397:8303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.925083][ T29] audit: type=1326 audit(1754326397.397:8304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.948510][ T29] audit: type=1326 audit(1754326397.397:8305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.971904][ T29] audit: type=1326 audit(1754326397.397:8306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 128.995388][ T29] audit: type=1326 audit(1754326397.397:8307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 129.065992][ T8045] __nla_validate_parse: 15 callbacks suppressed [ 129.066009][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1721'. [ 129.114811][ T8046] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.124638][ T8046] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.144137][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1721'. [ 129.242488][ T8046] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.252339][ T8046] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.320492][ T8046] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.330335][ T8046] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.410211][ T8046] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.420113][ T8046] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.476717][ T8063] lo speed is unknown, defaulting to 1000 [ 129.680270][ T8067] tipc: Started in network mode [ 129.685178][ T8067] tipc: Node identity ce72d0a3b1c6, cluster identity 4711 [ 129.692340][ T8067] tipc: Enabled bearer , priority 0 [ 129.718377][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.726697][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.738176][ T8070] netlink: 'syz.2.1729': attribute type 7 has an invalid length. [ 129.745977][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 129.747168][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.763074][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.771597][ T8064] tipc: Resetting bearer [ 129.785386][ T8064] tipc: Disabling bearer [ 129.823053][ T8073] 9pnet_fd: Insufficient options for proto=fd [ 129.898528][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.906878][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.963814][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.972078][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.101178][ T8090] tmpfs: Bad value for 'mpol' [ 130.314566][ T8100] FAULT_INJECTION: forcing a failure. [ 130.314566][ T8100] name failslab, interval 1, probability 0, space 0, times 0 [ 130.327246][ T8100] CPU: 1 UID: 0 PID: 8100 Comm: syz.1.1742 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 130.327272][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.327331][ T8100] Call Trace: [ 130.327336][ T8100] [ 130.327390][ T8100] __dump_stack+0x1d/0x30 [ 130.327413][ T8100] dump_stack_lvl+0xe8/0x140 [ 130.327430][ T8100] dump_stack+0x15/0x1b [ 130.327448][ T8100] should_fail_ex+0x265/0x280 [ 130.327478][ T8100] should_failslab+0x8c/0xb0 [ 130.327572][ T8100] kmem_cache_alloc_node_noprof+0x57/0x320 [ 130.327626][ T8100] ? perf_event_alloc+0x14c/0x1740 [ 130.327661][ T8100] perf_event_alloc+0x14c/0x1740 [ 130.327690][ T8100] __se_sys_perf_event_open+0x4a5/0x11c0 [ 130.327720][ T8100] ? __rcu_read_unlock+0x4f/0x70 [ 130.327796][ T8100] __x64_sys_perf_event_open+0x67/0x80 [ 130.327834][ T8100] x64_sys_call+0x7bd/0x2ff0 [ 130.327858][ T8100] do_syscall_64+0xd2/0x200 [ 130.327880][ T8100] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.327948][ T8100] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.328017][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.328041][ T8100] RIP: 0033:0x7f15f452eb69 [ 130.328058][ T8100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.328078][ T8100] RSP: 002b:00007f15f2b8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.328131][ T8100] RAX: ffffffffffffffda RBX: 00007f15f4755fa0 RCX: 00007f15f452eb69 [ 130.328146][ T8100] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000001100 [ 130.328160][ T8100] RBP: 00007f15f2b8f090 R08: 0000000000000002 R09: 0000000000000000 [ 130.328174][ T8100] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 130.328189][ T8100] R13: 0000000000000001 R14: 00007f15f4755fa0 R15: 00007ffe39ca3418 [ 130.328209][ T8100] [ 130.586837][ T8117] 9pnet_fd: Insufficient options for proto=fd [ 130.683070][ T8126] tmpfs: Bad value for 'mpol' [ 130.698852][ T8134] netlink: 'syz.0.1755': attribute type 7 has an invalid length. [ 130.706597][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 130.774754][ T8141] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 130.774754][ T8141] program syz.4.1756 not setting count and/or reply_len properly [ 130.817686][ T8147] 9pnet_fd: Insufficient options for proto=fd [ 130.892687][ T8154] FAULT_INJECTION: forcing a failure. [ 130.892687][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.905845][ T8154] CPU: 1 UID: 0 PID: 8154 Comm: syz.3.1763 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 130.905876][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.905889][ T8154] Call Trace: [ 130.905895][ T8154] [ 130.905902][ T8154] __dump_stack+0x1d/0x30 [ 130.905924][ T8154] dump_stack_lvl+0xe8/0x140 [ 130.905948][ T8154] dump_stack+0x15/0x1b [ 130.905964][ T8154] should_fail_ex+0x265/0x280 [ 130.905993][ T8154] should_fail+0xb/0x20 [ 130.906021][ T8154] should_fail_usercopy+0x1a/0x20 [ 130.906092][ T8154] _copy_from_user+0x1c/0xb0 [ 130.906116][ T8154] ___sys_sendmsg+0xc1/0x1d0 [ 130.906240][ T8154] __x64_sys_sendmsg+0xd4/0x160 [ 130.906276][ T8154] x64_sys_call+0x191e/0x2ff0 [ 130.906298][ T8154] do_syscall_64+0xd2/0x200 [ 130.906320][ T8154] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.906376][ T8154] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.906399][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.906421][ T8154] RIP: 0033:0x7fd17dbfeb69 [ 130.906437][ T8154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.906469][ T8154] RSP: 002b:00007fd17c25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.906486][ T8154] RAX: ffffffffffffffda RBX: 00007fd17de25fa0 RCX: 00007fd17dbfeb69 [ 130.906498][ T8154] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 130.906521][ T8154] RBP: 00007fd17c25f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.906593][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.906605][ T8154] R13: 0000000000000000 R14: 00007fd17de25fa0 R15: 00007fff22064d78 [ 130.906622][ T8154] [ 131.983859][ T8165] netlink: 'syz.0.1767': attribute type 7 has an invalid length. [ 131.991725][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 132.125144][ T8177] 9pnet_fd: Insufficient options for proto=fd [ 132.181215][ T8171] loop4: detected capacity change from 0 to 512 [ 132.233479][ T8187] FAULT_INJECTION: forcing a failure. [ 132.233479][ T8187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.246599][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.1.1776 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 132.246626][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.246636][ T8187] Call Trace: [ 132.246642][ T8187] [ 132.246712][ T8187] __dump_stack+0x1d/0x30 [ 132.246731][ T8187] dump_stack_lvl+0xe8/0x140 [ 132.246749][ T8187] dump_stack+0x15/0x1b [ 132.246768][ T8187] should_fail_ex+0x265/0x280 [ 132.246838][ T8187] should_fail+0xb/0x20 [ 132.246863][ T8187] should_fail_usercopy+0x1a/0x20 [ 132.246881][ T8187] _copy_from_user+0x1c/0xb0 [ 132.246979][ T8187] memdup_user+0x5e/0xd0 [ 132.247003][ T8187] strndup_user+0x68/0xb0 [ 132.247026][ T8187] __se_sys_mount+0x4d/0x2e0 [ 132.247049][ T8187] ? fput+0x8f/0xc0 [ 132.247080][ T8187] ? ksys_write+0x192/0x1a0 [ 132.247112][ T8187] __x64_sys_mount+0x67/0x80 [ 132.247187][ T8187] x64_sys_call+0x2b4d/0x2ff0 [ 132.247209][ T8187] do_syscall_64+0xd2/0x200 [ 132.247236][ T8187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.247258][ T8187] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.247355][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.247379][ T8187] RIP: 0033:0x7f15f452eb69 [ 132.247395][ T8187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.247415][ T8187] RSP: 002b:00007f15f2b8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.247437][ T8187] RAX: ffffffffffffffda RBX: 00007f15f4755fa0 RCX: 00007f15f452eb69 [ 132.247451][ T8187] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 132.247499][ T8187] RBP: 00007f15f2b8f090 R08: 0000200000000200 R09: 0000000000000000 [ 132.247513][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.247527][ T8187] R13: 0000000000000000 R14: 00007f15f4755fa0 R15: 00007ffe39ca3418 [ 132.247547][ T8187] [ 132.451285][ T8183] tmpfs: Bad value for 'mpol' [ 132.485708][ T8196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8196 comm=syz.1.1779 [ 132.514601][ T8171] EXT4-fs mount: 15 callbacks suppressed [ 132.514615][ T8171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.538516][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 132.547666][ T8171] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.559617][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 132.589651][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.611485][ T8202] netlink: 'syz.4.1781': attribute type 7 has an invalid length. [ 132.619290][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 132.676256][ T8208] 9pnet_fd: Insufficient options for proto=fd [ 132.681574][ T8215] 9pnet_fd: Insufficient options for proto=fd [ 132.833128][ T8229] tmpfs: Bad value for 'mpol' [ 132.956696][ T8235] loop2: detected capacity change from 0 to 164 [ 132.964372][ T8231] lo speed is unknown, defaulting to 1000 [ 132.983086][ T8235] Unable to read rock-ridge attributes [ 133.016773][ T8240] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 133.016773][ T8240] program syz.0.1796 not setting count and/or reply_len properly [ 133.020914][ T8235] tipc: Enabling of bearer rejected, failed to enable media [ 133.061696][ T8235] lo speed is unknown, defaulting to 1000 [ 133.143109][ T8235] lo speed is unknown, defaulting to 1000 [ 133.159043][ T8250] Unable to read rock-ridge attributes [ 133.179907][ T8253] 9pnet_fd: Insufficient options for proto=fd [ 133.367377][ T8262] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8262 comm=syz.0.1803 [ 133.434356][ T8262] FAULT_INJECTION: forcing a failure. [ 133.434356][ T8262] name failslab, interval 1, probability 0, space 0, times 0 [ 133.447068][ T8262] CPU: 0 UID: 0 PID: 8262 Comm: syz.0.1803 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 133.447175][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.447199][ T8262] Call Trace: [ 133.447207][ T8262] [ 133.447215][ T8262] __dump_stack+0x1d/0x30 [ 133.447309][ T8262] dump_stack_lvl+0xe8/0x140 [ 133.447327][ T8262] dump_stack+0x15/0x1b [ 133.447345][ T8262] should_fail_ex+0x265/0x280 [ 133.447445][ T8262] ? nd_alloc_stack+0x50/0xa0 [ 133.447476][ T8262] should_failslab+0x8c/0xb0 [ 133.447502][ T8262] __kmalloc_cache_noprof+0x4c/0x320 [ 133.447530][ T8262] ? __pfx_shmem_get_link+0x10/0x10 [ 133.447628][ T8262] nd_alloc_stack+0x50/0xa0 [ 133.447656][ T8262] pick_link+0x78e/0x830 [ 133.447684][ T8262] ? __d_lookup_rcu+0x248/0x2a0 [ 133.447786][ T8262] step_into+0x7b6/0x820 [ 133.447831][ T8262] ? inode_permission+0x106/0x310 [ 133.447951][ T8262] link_path_walk+0x571/0x900 [ 133.447985][ T8262] path_lookupat+0x63/0x2a0 [ 133.448092][ T8262] filename_lookup+0x147/0x340 [ 133.448123][ T8262] ? __pfx_shmem_put_link+0x10/0x10 [ 133.448173][ T8262] ? __pfx_shmem_put_link+0x10/0x10 [ 133.448204][ T8262] vfs_statx+0x9d/0x390 [ 133.448254][ T8262] __se_sys_newstat+0x69/0x280 [ 133.448295][ T8262] ? fput+0x8f/0xc0 [ 133.448326][ T8262] ? ksys_write+0x192/0x1a0 [ 133.448403][ T8262] __x64_sys_newstat+0x31/0x40 [ 133.448438][ T8262] x64_sys_call+0x73e/0x2ff0 [ 133.448459][ T8262] do_syscall_64+0xd2/0x200 [ 133.448483][ T8262] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.448529][ T8262] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.448552][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.448727][ T8262] RIP: 0033:0x7faeb115eb69 [ 133.448745][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.448764][ T8262] RSP: 002b:00007faeaf7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 133.448781][ T8262] RAX: ffffffffffffffda RBX: 00007faeb1385fa0 RCX: 00007faeb115eb69 [ 133.448792][ T8262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002040 [ 133.448805][ T8262] RBP: 00007faeaf7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.448819][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.448833][ T8262] R13: 0000000000000000 R14: 00007faeb1385fa0 R15: 00007ffc404ca9d8 [ 133.448891][ T8262] [ 133.700523][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 133.709585][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 133.822866][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 133.822879][ T29] audit: type=1400 audit(1754326402.447:8539): avc: denied { write } for pid=8268 comm="syz.0.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.923165][ T8271] tmpfs: Bad value for 'mpol' [ 133.979890][ T8272] loop3: detected capacity change from 0 to 512 [ 134.024234][ T8272] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 134.067754][ T8272] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.119708][ T8272] EXT4-fs (loop3): 1 orphan inode deleted [ 134.125544][ T291] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 134.135428][ T291] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 134.179052][ T29] audit: type=1400 audit(1754326402.777:8540): avc: denied { mount } for pid=8280 comm="syz.0.1808" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 134.201228][ T29] audit: type=1400 audit(1754326402.777:8541): avc: denied { unmount } for pid=8280 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 134.229060][ T8272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.502118][ T8304] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 134.508671][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.516278][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 134.662274][ T8305] vhci_hcd: connection closed [ 134.662530][ T291] vhci_hcd: stop threads [ 134.671547][ T291] vhci_hcd: release socket [ 134.675954][ T291] vhci_hcd: disconnect device [ 134.709516][ T3421] vhci_hcd: vhci_device speed not set [ 134.747161][ T29] audit: type=1326 audit(1754326402.977:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f452eb69 code=0x7ffc0000 [ 134.770626][ T29] audit: type=1326 audit(1754326402.977:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.1.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f452eb69 code=0x7ffc0000 [ 134.780979][ T8309] loop4: detected capacity change from 0 to 512 [ 134.830711][ T8309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.843535][ T8309] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.854382][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.858768][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1817'. [ 134.873149][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1817'. [ 134.898783][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.948737][ T8321] 9pnet_fd: Insufficient options for proto=fd [ 135.005596][ T8323] tmpfs: Bad value for 'mpol' [ 135.170019][ T8328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1822'. [ 135.273357][ T8330] lo speed is unknown, defaulting to 1000 [ 135.883144][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 135.905748][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 135.952303][ T29] audit: type=1326 audit(1754326404.577:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 135.975914][ T29] audit: type=1326 audit(1754326404.577:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 136.004977][ T29] audit: type=1326 audit(1754326404.577:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 136.028267][ T29] audit: type=1326 audit(1754326404.577:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb115eb69 code=0x7ffc0000 [ 136.191986][ T8358] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 136.198514][ T8358] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.206187][ T8358] vhci_hcd vhci_hcd.0: Device attached [ 136.238164][ T8359] vhci_hcd: connection closed [ 136.238523][ T51] vhci_hcd: stop threads [ 136.247602][ T51] vhci_hcd: release socket [ 136.252036][ T51] vhci_hcd: disconnect device [ 136.426764][ T8375] smc: net device bond0 applied user defined pnetid SYZ2 [ 137.318687][ T3406] usb usb8-port1: attempt power cycle [ 137.418354][ T8413] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1852'. [ 137.427851][ T8413] hsr_slave_0: left promiscuous mode [ 137.433680][ T8413] hsr_slave_1: left promiscuous mode [ 137.601325][ T8427] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 137.607853][ T8427] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.615580][ T8427] vhci_hcd vhci_hcd.0: Device attached [ 137.622358][ T8428] vhci_hcd: connection closed [ 137.622533][ T291] vhci_hcd: stop threads [ 137.631453][ T291] vhci_hcd: release socket [ 137.635860][ T291] vhci_hcd: disconnect device [ 138.154483][ T8443] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 138.154483][ T8443] program syz.1.1871 not setting count and/or reply_len properly [ 138.159872][ T8442] loop3: detected capacity change from 0 to 1024 [ 138.193355][ T8442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.215720][ T8442] smc: net device bond0 applied user defined pnetid SYZ2 [ 138.233698][ T8450] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 138.233698][ T8450] program syz.0.1863 not setting count and/or reply_len properly [ 138.255748][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.529491][ T8460] loop4: detected capacity change from 0 to 1024 [ 138.538762][ T8460] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.553081][ T8460] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1866: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.567219][ T8460] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1866: Failed to acquire dquot type 0 [ 138.578958][ T8460] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1866: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.592743][ T8460] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1866: Invalid inode bitmap blk 0 in block_group 0 [ 138.605470][ T8460] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 138.614034][ T51] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.614320][ T8460] EXT4-fs (loop4): 1 orphan inode deleted [ 138.629153][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 138.634622][ T8460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.658805][ T8460] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.696108][ T8460] loop4: detected capacity change from 0 to 2048 [ 138.739748][ T3294] Alternate GPT is invalid, using primary GPT. [ 138.746097][ T3294] loop4: p1 p2 p3 [ 138.754671][ T8460] Alternate GPT is invalid, using primary GPT. [ 138.761066][ T8460] loop4: p1 p2 p3 [ 138.809735][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 138.810225][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 138.820267][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 138.872691][ T8466] loop4: detected capacity change from 0 to 512 [ 138.890427][ T8466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.903055][ T8466] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.925785][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.116803][ T8479] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.126631][ T8479] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.138650][ T3406] usb usb8-port1: unable to enumerate USB device [ 139.158511][ T8481] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 139.165125][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.172736][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 139.181392][ T8479] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.186194][ T8481] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(17) [ 139.191268][ T8479] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.197707][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.208512][ T8483] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1876'. [ 139.215015][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 139.235268][ T8481] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 139.241879][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.249554][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 139.256439][ T8483] hsr_slave_0: left promiscuous mode [ 139.261927][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 139.261941][ T29] audit: type=1326 audit(1754326407.877:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f6d4eb69 code=0x7ffc0000 [ 139.263570][ T8495] loop4: detected capacity change from 0 to 1024 [ 139.268252][ T29] audit: type=1326 audit(1754326407.877:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f6d4eb69 code=0x7ffc0000 [ 139.321328][ T29] audit: type=1326 audit(1754326407.877:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f55f6d4eb69 code=0x7ffc0000 [ 139.321840][ T8495] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.344651][ T29] audit: type=1326 audit(1754326407.877:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f6d4eb69 code=0x7ffc0000 [ 139.359300][ T8495] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1878: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.378351][ T29] audit: type=1326 audit(1754326407.877:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f6d4eb69 code=0x7ffc0000 [ 139.393523][ T8495] Quota error (device loop4): write_blk: dquota write failed [ 139.415606][ T29] audit: type=1326 audit(1754326407.877:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f55f6d4eb69 code=0x7ffc0000 [ 139.423004][ T8495] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.446360][ T29] audit: type=1326 audit(1754326407.877:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f6d4eb69 code=0x7ffc0000 [ 139.458024][ T8495] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1878: Failed to acquire dquot type 0 [ 139.479595][ T29] audit: type=1326 audit(1754326407.877:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f55f6d4eb69 code=0x7ffc0000 [ 139.489807][ T8496] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 139.520748][ T8496] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 139.528498][ T8496] vhci_hcd vhci_hcd.0: Device attached [ 139.529475][ T8481] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(24) [ 139.540513][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.548094][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 139.549069][ T8495] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1878: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.567137][ T8483] hsr_slave_1: left promiscuous mode [ 139.567264][ T8503] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(23) [ 139.578993][ T8503] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 139.586735][ T8503] vhci_hcd vhci_hcd.0: Device attached [ 139.592586][ T8495] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1878: Invalid inode bitmap blk 0 in block_group 0 [ 139.606656][ T8479] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.616459][ T8479] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.626828][ T1377] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.626945][ T8495] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 139.649739][ T1377] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 139.656618][ T8481] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(28) [ 139.661555][ T8495] EXT4-fs (loop4): 1 orphan inode deleted [ 139.667672][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.673841][ T8495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.681029][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 139.695252][ T8495] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.713816][ T8506] vhci_hcd: connection closed [ 139.714040][ T51] vhci_hcd: stop threads [ 139.720843][ T8501] vhci_hcd: connection closed [ 139.723029][ T51] vhci_hcd: release socket [ 139.727968][ T8492] vhci_hcd: connection closed [ 139.732158][ T51] vhci_hcd: disconnect device [ 139.732637][ T8498] vhci_hcd: connection closed [ 139.736894][ T8504] vhci_hcd: connection closed [ 139.742037][ T8489] vhci_hcd: connection closed [ 139.758130][ T8484] vhci_hcd: connection closed [ 139.792297][ T8511] loop2: detected capacity change from 0 to 512 [ 139.792355][ T51] vhci_hcd: stop threads [ 139.797063][ T51] vhci_hcd: release socket [ 139.812161][ T51] vhci_hcd: disconnect device [ 139.818526][ T51] vhci_hcd: stop threads [ 139.819828][ T8479] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.822777][ T51] vhci_hcd: release socket [ 139.832534][ T8479] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.836944][ T51] vhci_hcd: disconnect device [ 139.858488][ T3406] usb 2-1: SetAddress Request (2) to port 0 [ 139.864521][ T3406] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 139.870915][ T8511] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.885140][ T51] vhci_hcd: stop threads [ 139.889496][ T51] vhci_hcd: release socket [ 139.893992][ T51] vhci_hcd: disconnect device [ 139.903230][ T8511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2000c098, mo2=0002] [ 139.904927][ T3406] usb 2-1: enqueue for inactive port 0 [ 139.916917][ T3406] usb 2-1: enqueue for inactive port 0 [ 139.918690][ T8511] System zones: 1-12 [ 139.926590][ T51] vhci_hcd: stop threads [ 139.930868][ T51] vhci_hcd: release socket [ 139.931756][ T8511] EXT4-fs (loop2): 1 truncate cleaned up [ 139.935336][ T51] vhci_hcd: disconnect device [ 139.948351][ T8511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.960519][ T51] vhci_hcd: stop threads [ 139.964864][ T51] vhci_hcd: release socket [ 139.969430][ T51] vhci_hcd: disconnect device [ 139.975279][ T3406] usb 2-1: enqueue for inactive port 0 [ 139.978670][ T51] vhci_hcd: stop threads [ 139.984984][ T51] vhci_hcd: release socket [ 139.986850][ T1377] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.989495][ T51] vhci_hcd: disconnect device [ 139.997637][ T1377] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.016376][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.023234][ T1377] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.025200][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.032915][ T1377] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.063083][ T1377] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.071336][ T1377] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.080517][ T1377] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.088884][ T1377] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.097273][ T3406] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 140.118929][ T3406] usb 2-1: enqueue for inactive port 0 [ 140.124390][ T3406] usb 2-1: enqueue for inactive port 0 [ 140.129878][ T3406] usb 2-1: enqueue for inactive port 0 [ 140.436535][ T8544] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 140.436535][ T8544] program syz.0.1893 not setting count and/or reply_len properly [ 140.470246][ T8548] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.480012][ T8548] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.540263][ T8548] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.550193][ T8548] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.589910][ T8548] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.599697][ T8548] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.630226][ T8548] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.640062][ T8548] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.693026][ T8554] tmpfs: Bad value for 'mpol' [ 140.835003][ T8562] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 140.841664][ T8562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.849191][ T8562] vhci_hcd vhci_hcd.0: Device attached [ 140.859079][ T8562] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(17) [ 140.865682][ T8562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.873216][ T8562] vhci_hcd vhci_hcd.0: Device attached [ 140.879671][ T8562] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 140.886278][ T8562] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 140.893868][ T8562] vhci_hcd vhci_hcd.0: Device attached [ 140.899987][ T8562] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 140.906642][ T8562] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 140.914394][ T8562] vhci_hcd vhci_hcd.0: Device attached [ 140.922452][ T8562] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(23) [ 140.929060][ T8562] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.936784][ T8562] vhci_hcd vhci_hcd.0: Device attached [ 140.937712][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.949649][ T8562] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(25) [ 140.957778][ T8562] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 140.965553][ T8562] vhci_hcd vhci_hcd.0: Device attached [ 140.992498][ T8562] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(28) [ 140.999178][ T8562] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.006751][ T3406] usb 2-1: SetAddress Request (3) to port 0 [ 141.012751][ T8562] vhci_hcd vhci_hcd.0: Device attached [ 141.013499][ T3406] usb 2-1: new SuperSpeed USB device number 3 using vhci_hcd [ 141.019155][ T8577] vhci_hcd: connection closed [ 141.025829][ T8574] vhci_hcd: connection closed [ 141.026233][ T8566] vhci_hcd: connection closed [ 141.030655][ T8572] vhci_hcd: connection closed [ 141.035886][ T8570] vhci_hcd: connection closed [ 141.041119][ T8583] vhci_hcd: connection closed [ 141.044900][ T8563] vhci_hcd: connection closed [ 141.054544][ T8573] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 141.065897][ T3432] vhci_hcd: stop threads [ 141.070206][ T3432] vhci_hcd: release socket [ 141.074614][ T3432] vhci_hcd: disconnect device [ 141.080234][ T3432] vhci_hcd: stop threads [ 141.084643][ T3432] vhci_hcd: release socket [ 141.089209][ T3432] vhci_hcd: disconnect device [ 141.094479][ T3432] vhci_hcd: stop threads [ 141.098800][ T3432] vhci_hcd: release socket [ 141.103272][ T3432] vhci_hcd: disconnect device [ 141.108059][ T3432] vhci_hcd: stop threads [ 141.112413][ T3432] vhci_hcd: release socket [ 141.116851][ T3432] vhci_hcd: disconnect device [ 141.152031][ T3432] vhci_hcd: stop threads [ 141.156342][ T3432] vhci_hcd: release socket [ 141.160857][ T3432] vhci_hcd: disconnect device [ 141.177445][ T3432] vhci_hcd: stop threads [ 141.181816][ T3432] vhci_hcd: release socket [ 141.186244][ T3432] vhci_hcd: disconnect device [ 141.192981][ T3432] vhci_hcd: stop threads [ 141.197295][ T3432] vhci_hcd: release socket [ 141.201816][ T3432] vhci_hcd: disconnect device [ 141.580295][ T8607] netlink: 'syz.0.1913': attribute type 7 has an invalid length. [ 141.588064][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'. [ 141.615944][ T8609] netlink: 'syz.0.1914': attribute type 27 has an invalid length. [ 141.641805][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.648956][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.682043][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.691571][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.730928][ T8609] wireguard0: left promiscuous mode [ 141.731629][ T8613] loop4: detected capacity change from 0 to 1024 [ 141.739176][ T3432] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.744948][ T8613] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.750946][ T3432] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.769620][ T8611] ip6_vti0: entered allmulticast mode [ 141.784982][ T8613] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1915: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.799177][ T1377] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.799745][ T8613] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1915: Failed to acquire dquot type 0 [ 141.807539][ T1377] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.808107][ T1377] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.820021][ T8613] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1915: Freeing blocks not in datazone - block = 0, count = 4096 [ 141.827126][ T1377] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.846393][ T8613] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1915: Invalid inode bitmap blk 0 in block_group 0 [ 141.849156][ T8608] ip6_vti0: left allmulticast mode [ 141.857998][ T8613] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 141.870149][ T1377] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.875077][ T3432] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.883506][ T1377] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.892550][ T8613] EXT4-fs (loop4): 1 orphan inode deleted [ 141.907087][ T3432] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 141.929081][ T8613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.945084][ T8613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.981375][ T8613] loop4: detected capacity change from 0 to 2048 [ 142.000639][ T8613] Alternate GPT is invalid, using primary GPT. [ 142.006938][ T8613] loop4: p1 p2 p3 [ 142.017302][ T2990] Alternate GPT is invalid, using primary GPT. [ 142.023654][ T2990] loop4: p1 p2 p3 [ 142.066106][ T3562] ================================================================== [ 142.074188][ T3562] BUG: KCSAN: data-race in __dentry_kill / __dentry_kill [ 142.081193][ T3562] [ 142.083495][ T3562] write to 0xffff88811a102600 of 4 bytes by task 3294 on cpu 0: [ 142.091094][ T3562] __dentry_kill+0xa8/0x4b0 [ 142.095590][ T3562] dput+0x5e/0xd0 [ 142.099202][ T3562] lookup_fast+0x29e/0x320 [ 142.103612][ T3562] link_path_walk+0x4ba/0x900 [ 142.108263][ T3562] path_openat+0x1de/0x2170 [ 142.112737][ T3562] do_filp_open+0x109/0x230 [ 142.117212][ T3562] do_sys_openat2+0xa6/0x110 [ 142.121780][ T3562] __x64_sys_openat+0xf2/0x120 [ 142.126524][ T3562] x64_sys_call+0x2e9c/0x2ff0 [ 142.131194][ T3562] do_syscall_64+0xd2/0x200 [ 142.135685][ T3562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.141555][ T3562] [ 142.143853][ T3562] read to 0xffff88811a102600 of 4 bytes by task 3562 on cpu 1: [ 142.151364][ T3562] __dentry_kill+0x2aa/0x4b0 [ 142.155937][ T3562] dput+0x5e/0xd0 [ 142.159547][ T3562] lookup_fast+0x29e/0x320 [ 142.163971][ T3562] link_path_walk+0x4ba/0x900 [ 142.168627][ T3562] path_openat+0x1de/0x2170 [ 142.173113][ T3562] do_filp_open+0x109/0x230 [ 142.177589][ T3562] do_sys_openat2+0xa6/0x110 [ 142.182159][ T3562] __x64_sys_openat+0xf2/0x120 [ 142.186901][ T3562] x64_sys_call+0x2e9c/0x2ff0 [ 142.191557][ T3562] do_syscall_64+0xd2/0x200 [ 142.196039][ T3562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.201905][ T3562] [ 142.204201][ T3562] value changed: 0x00140004 -> 0x00000004 [ 142.209890][ T3562] [ 142.212192][ T3562] Reported by Kernel Concurrency Sanitizer on: [ 142.218312][ T3562] CPU: 1 UID: 0 PID: 3562 Comm: udevd Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 142.229917][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.239956][ T3562] ================================================================== [ 142.248670][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 142.249143][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 142.273405][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 143.883089][ T3432] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.891347][ T3432] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.902799][ T1377] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.911042][ T1377] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.922289][ T51] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.930504][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.941610][ T51] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.949803][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.088489][ T3406] usb 2-1: device descriptor read/8, error -110 [ 146.198469][ T3406] usb 2-1: new SuperSpeed USB device number 3 using vhci_hcd [ 146.218498][ T3406] usb 2-1: enqueue for inactive port 0 [ 146.223955][ T3406] usb 2-1: enqueue for inactive port 0 [ 146.230248][ T3406] usb 2-1: enqueue for inactive port 0 [ 146.338532][ T3406] usb usb2-port1: attempt power cycle [ 148.189162][ T3406] usb usb2-port1: unable to enumerate USB device