last executing test programs: 2.660435985s ago: executing program 0 (id=690): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) rename(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 2.657522275s ago: executing program 0 (id=691): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x18) r8 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.007541258s ago: executing program 4 (id=708): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/83, 0x53, 0x20, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x200000, &(0x7f0000000040)={[], [{@uid_eq}, {@subj_user={'subj_user', 0x3d, '\\#\'-'}}]}, 0x1, 0x75d, &(0x7f0000001d80)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d900000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0xcaa0bdf19d642c62, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c3e971838ca877b591f27532305b9b684cb63ea1a252aee43806e882bfc5f4556d8004c59de3b91371f2c2eff65201f1f55cd50d14c872eb91b9c2920519ddae6e187f9a90"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="5f60232b1800000000000000000000000000001018110001", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x3507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) 1.448102033s ago: executing program 0 (id=716): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) pipe(0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000000000000}, 0x18) memfd_secret(0x80000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x178) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000600)={@remote, @initdev}, &(0x7f0000000640)=0xc) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000700)={0x3, &(0x7f00000006c0)=[{0x9, 0xff, 0x7, 0x10}, {0x5, 0x9, 0x3, 0x3b69}, {0x8, 0x8, 0x9, 0xfffffffc}]}) 1.251408279s ago: executing program 1 (id=721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x3596}]}}]}, 0x50}}, 0x4040004) 1.199713673s ago: executing program 0 (id=723): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x8800, &(0x7f00000001c0)={0xc, 0x70, 0x20000}, 0x20) 1.131259199s ago: executing program 0 (id=725): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x5deb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x618200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e0ec00004fcff", 0x58}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r8, 0x0, 0x0, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f00000001c0), 0x4) 1.091148952s ago: executing program 1 (id=726): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x18) r8 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 987.1742ms ago: executing program 4 (id=730): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2) select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x800) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x2, 0x0, 0xfffffff7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x3}}) write$tun(r3, &(0x7f0000000e00)=ANY=[], 0x72) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) setrlimit(0x9, &(0x7f0000000040)) 823.858833ms ago: executing program 2 (id=731): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000000001fc00000800000085000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7ffc0002}, {0x97, 0x7f, 0x7, 0x9}, {0xff, 0xd0, 0x2, 0x3}, {0x9, 0x2, 0x8, 0x9}]}) futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) 823.211983ms ago: executing program 4 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 795.364226ms ago: executing program 2 (id=733): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_secret(0x80000) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") 794.954576ms ago: executing program 4 (id=734): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 660.383126ms ago: executing program 3 (id=736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 659.927396ms ago: executing program 3 (id=737): r0 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x3, 0x1000, 0xfffffffe, 0x800001b4}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/4101, 0x1005}], 0x1) 636.016069ms ago: executing program 2 (id=738): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 583.012783ms ago: executing program 1 (id=739): io_setup(0x8f0, &(0x7f0000002400)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 582.320393ms ago: executing program 3 (id=740): r0 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x3, 0x1000, 0xfffffffe, 0x800001b4}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/4101, 0x1005}], 0x1) 528.476057ms ago: executing program 3 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 509.060099ms ago: executing program 2 (id=742): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2000004000000000}, 0x18) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) sendmsg$key(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) mq_open(0x0, 0x42, 0x1f0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mq_unlink(&(0x7f0000000000)='eth0\x00') io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) 493.6918ms ago: executing program 1 (id=743): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x3596}]}}]}, 0x50}}, 0x4040004) 426.250235ms ago: executing program 1 (id=744): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x2, 0x0, 0x401, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x3, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x6, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x1, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x50}, 0x0) 389.978228ms ago: executing program 3 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x161842, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = gettid() socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtfilter={0x44, 0x2c, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x2, 0x7}, {0x7, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x41}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x44}}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) 385.377879ms ago: executing program 1 (id=746): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2) select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x800) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x2, 0x0, 0xfffffff7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x3}}) write$tun(r3, &(0x7f0000000e00)=ANY=[], 0x72) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) setrlimit(0x9, &(0x7f0000000040)) 150.203838ms ago: executing program 4 (id=747): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") 87.971993ms ago: executing program 2 (id=748): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 72.630144ms ago: executing program 2 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b0000001900000000000080200000001108"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f00000009c0)={&(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/38, 0x26}, {&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/35, 0x5e}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f0000000740)=""/196, 0xc4}], 0x6, &(0x7f0000000e00)=[@fadd={0x58, 0x114, 0x6, {{0xffffffff, 0x6}, &(0x7f00000008c0)=0xa2, &(0x7f0000000900)=0x10001, 0x532, 0x8, 0x2, 0x8000000000000000, 0x6, 0x130}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0xd}, {&(0x7f00000003c0)=""/5, 0x5}, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/41, 0x29}, {&(0x7f0000000a40)=""/140, 0x8c}], 0x2, 0x62, 0xfffffffffffffffc}}], 0xa0, 0x48010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="070000000400000008000000d901000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000008000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r5, 0x1) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x67, 0x8, 0x2, 0xf, 0x0, 0x7dbb, 0xc9300, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000004c0), 0xc}, 0x1000, 0x40, 0x66, 0x8, 0x8, 0x7, 0x1b57, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0xffffffffffff8000, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) 37.527687ms ago: executing program 0 (id=750): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x18) r8 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 36.389877ms ago: executing program 4 (id=751): r0 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x3, 0x1000, 0xfffffffe, 0x800001b4}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/4101, 0x1005}], 0x1) 0s ago: executing program 3 (id=752): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): 033][ T3510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.863622][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.870850][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.975908][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.010177][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.040299][ T3539] Zero length message leads to an empty skb [ 29.055056][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.127900][ T3528] syz.2.17 (3528) used greatest stack depth: 10008 bytes left [ 29.128773][ T3537] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 29.145121][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.152382][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.177619][ T3537] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 29.234402][ T3555] loop2: detected capacity change from 0 to 2048 [ 29.250001][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.276249][ T3555] Alternate GPT is invalid, using primary GPT. [ 29.278268][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.282712][ T3555] loop2: p2 p3 p7 [ 29.356060][ T3551] syz.3.20 (3551) used greatest stack depth: 9960 bytes left [ 29.413337][ T397] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.449175][ T397] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.473773][ T3572] netlink: 'syz.4.26': attribute type 10 has an invalid length. [ 29.475868][ T3577] loop0: detected capacity change from 0 to 512 [ 29.492856][ T3574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.506485][ T397] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.515599][ T3577] ext4: Bad value for 'max_dir_size_kb' [ 29.523282][ T3579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.548031][ T3572] team0: Port device dummy0 added [ 29.563999][ T397] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.578199][ T3582] geneve2: entered promiscuous mode [ 29.583601][ T3582] geneve2: entered allmulticast mode [ 29.594184][ T397] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.612356][ T3579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.623913][ T3584] loop1: detected capacity change from 0 to 8192 [ 29.652156][ T397] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.670022][ T397] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.679821][ T3572] syz.4.26 (3572) used greatest stack depth: 9696 bytes left [ 29.680470][ T397] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.721446][ T3574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.786252][ T3579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.195110][ T3599] loop0: detected capacity change from 0 to 512 [ 30.205808][ T3601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.35'. [ 30.215141][ T3599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.227846][ T3601] FAULT_INJECTION: forcing a failure. [ 30.227846][ T3601] name failslab, interval 1, probability 0, space 0, times 1 [ 30.240594][ T3601] CPU: 1 UID: 0 PID: 3601 Comm: syz.4.35 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 30.240622][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.240633][ T3601] Call Trace: [ 30.240639][ T3601] [ 30.240646][ T3601] __dump_stack+0x1d/0x30 [ 30.240666][ T3601] dump_stack_lvl+0xe8/0x140 [ 30.240732][ T3601] dump_stack+0x15/0x1b [ 30.240752][ T3601] should_fail_ex+0x265/0x280 [ 30.240777][ T3601] should_failslab+0x8c/0xb0 [ 30.240806][ T3601] kmem_cache_alloc_noprof+0x50/0x310 [ 30.240910][ T3601] ? getname_flags+0x80/0x3b0 [ 30.240965][ T3601] ? kstrtoull+0x111/0x140 [ 30.241078][ T3601] getname_flags+0x80/0x3b0 [ 30.241111][ T3601] vfs_fstatat+0x43/0x170 [ 30.241230][ T3601] __se_sys_newfstatat+0x55/0x260 [ 30.241281][ T3601] ? __bpf_trace_sys_enter+0x10/0x30 [ 30.241303][ T3601] ? trace_sys_enter+0xd0/0xf0 [ 30.241367][ T3601] __x64_sys_newfstatat+0x55/0x70 [ 30.241401][ T3601] x64_sys_call+0x135a/0x2ff0 [ 30.241421][ T3601] do_syscall_64+0xd2/0x200 [ 30.241445][ T3601] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.241543][ T3601] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 30.241588][ T3601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.241609][ T3601] RIP: 0033:0x7f1302a1ebe9 [ 30.241626][ T3601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.241646][ T3601] RSP: 002b:00007f1301487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 30.241696][ T3601] RAX: ffffffffffffffda RBX: 00007f1302c45fa0 RCX: 00007f1302a1ebe9 [ 30.241712][ T3601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 30.241726][ T3601] RBP: 00007f1301487090 R08: 0000000000000000 R09: 0000000000000000 [ 30.241739][ T3601] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 30.241752][ T3601] R13: 00007f1302c46038 R14: 00007f1302c45fa0 R15: 00007ffee77fce38 [ 30.241769][ T3601] [ 30.438857][ T3574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.481588][ T3599] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.36: bad orphan inode 11 [ 30.496332][ T3599] ext4_test_bit(bit=10, block=4) = 1 [ 30.496921][ T3579] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.501660][ T3599] is_bad_inode(inode)=0 [ 30.501674][ T3599] NEXT_ORPHAN(inode)=2080374784 [ 30.501681][ T3599] max_ino=32 [ 30.501687][ T3599] i_nlink=0 [ 30.512202][ T3599] EXT4-fs (loop0): 1 truncate cleaned up [ 30.512686][ T3599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.568292][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.608883][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.629930][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.661181][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.679696][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.708628][ T3609] syz.1.39 uses obsolete (PF_INET,SOCK_PACKET) [ 30.731605][ T3606] loop0: detected capacity change from 0 to 8192 [ 30.761600][ C1] hrtimer: interrupt took 24808 ns [ 30.795985][ T3574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.027121][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.054721][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.085566][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.100471][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.135263][ T3620] loop4: detected capacity change from 0 to 2048 [ 31.151315][ T3620] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 31.168255][ T3618] loop3: detected capacity change from 0 to 8192 [ 31.603952][ T3636] geneve2: entered promiscuous mode [ 31.609239][ T3636] geneve2: entered allmulticast mode [ 31.627924][ T3642] loop0: detected capacity change from 0 to 128 [ 31.657995][ T3642] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.681167][ T3642] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.005572][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.166106][ T3665] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.223793][ T3665] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.282278][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 32.291097][ T3675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.58'. [ 32.299990][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 32.315056][ T3675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.58'. [ 32.371027][ T3683] loop0: detected capacity change from 0 to 512 [ 32.378530][ T3665] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.387235][ T3683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.420862][ T3683] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.59: bad orphan inode 11 [ 32.437073][ T3687] loop1: detected capacity change from 0 to 512 [ 32.455401][ T3665] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.461863][ T3683] ext4_test_bit(bit=10, block=4) = 1 [ 32.470520][ T3683] is_bad_inode(inode)=0 [ 32.474818][ T3683] NEXT_ORPHAN(inode)=2080374784 [ 32.479784][ T3683] max_ino=32 [ 32.483144][ T3683] i_nlink=0 [ 32.486408][ T3683] EXT4-fs (loop0): 1 truncate cleaned up [ 32.492626][ T3683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.493263][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.520370][ T3687] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.593591][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.604191][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.624943][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 32.624959][ T29] audit: type=1326 audit(1754950338.553:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 32.654568][ T29] audit: type=1326 audit(1754950338.553:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3688 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 32.741976][ T29] audit: type=1326 audit(1754950338.653:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 32.765180][ T29] audit: type=1326 audit(1754950338.653:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 32.788455][ T29] audit: type=1326 audit(1754950338.653:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 32.811820][ T29] audit: type=1326 audit(1754950338.653:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 32.835599][ T29] audit: type=1326 audit(1754950338.653:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 32.859732][ T29] audit: type=1326 audit(1754950338.653:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 32.864943][ T3709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.882946][ T29] audit: type=1326 audit(1754950338.653:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 32.883049][ T29] audit: type=1326 audit(1754950338.653:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 32.894317][ T3709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.299343][ T3728] loop1: detected capacity change from 0 to 512 [ 33.333350][ T3728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.350310][ T3736] loop4: detected capacity change from 0 to 512 [ 33.358568][ T3736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.367350][ T3728] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.374121][ T3738] loop0: detected capacity change from 0 to 2048 [ 33.387672][ T3736] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.79: bad orphan inode 11 [ 33.401211][ T3736] ext4_test_bit(bit=10, block=4) = 1 [ 33.401591][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.406606][ T3736] is_bad_inode(inode)=0 [ 33.419904][ T3736] NEXT_ORPHAN(inode)=2080374784 [ 33.424931][ T3736] max_ino=32 [ 33.428208][ T3736] i_nlink=0 [ 33.444962][ T3736] EXT4-fs (loop4): 1 truncate cleaned up [ 33.451175][ T3736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.471615][ T3738] Alternate GPT is invalid, using primary GPT. [ 33.478193][ T3738] loop0: p2 p3 p7 [ 33.483305][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.493346][ T3741] loop1: detected capacity change from 0 to 8192 [ 33.523017][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 33.523185][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 33.534149][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 33.602873][ T3741] loop1: p1 < > p2 p3 p4 [ 33.607246][ T3741] loop1: partition table partially beyond EOD, truncated [ 33.616619][ T3741] loop1: p1 start 408832 is beyond EOD, truncated [ 33.623135][ T3741] loop1: p2 start 2147483648 is beyond EOD, truncated [ 33.629925][ T3741] loop1: p3 start 262144 is beyond EOD, truncated [ 33.654604][ T3753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 33.673503][ T3753] netlink: 100 bytes leftover after parsing attributes in process `syz.3.86'. [ 33.684172][ T3753] netlink: 100 bytes leftover after parsing attributes in process `syz.3.86'. [ 33.685934][ T3755] netlink: 676 bytes leftover after parsing attributes in process `syz.1.81'. [ 33.696603][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 33.787315][ T3762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.842155][ T3762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.872766][ T3765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3765 comm=syz.4.85 [ 34.040765][ T3776] loop1: detected capacity change from 0 to 512 [ 34.092964][ T3776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.113697][ T3780] loop3: detected capacity change from 0 to 512 [ 34.120104][ T3776] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.144118][ T3780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.184118][ T3780] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.93: bad orphan inode 11 [ 34.203007][ T3780] ext4_test_bit(bit=10, block=4) = 1 [ 34.208417][ T3780] is_bad_inode(inode)=0 [ 34.213004][ T3780] NEXT_ORPHAN(inode)=2080374784 [ 34.217857][ T3780] max_ino=32 [ 34.221057][ T3780] i_nlink=0 [ 34.239348][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.245857][ T3780] EXT4-fs (loop3): 1 truncate cleaned up [ 34.255970][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.282164][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.304304][ T3783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 34.379187][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 34.442997][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.459976][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.490182][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.513696][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.558709][ T3801] loop2: detected capacity change from 0 to 512 [ 34.566880][ T3801] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.580254][ T3801] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.615888][ T3801] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.682107][ T3801] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.734643][ T3801] EXT4-fs (loop2): 1 truncate cleaned up [ 34.762210][ T3801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.794042][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 34.812069][ T3801] serio: Serial port ptm0 [ 34.923406][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.076147][ T3833] loop2: detected capacity change from 0 to 2048 [ 35.138452][ T3291] Alternate GPT is invalid, using primary GPT. [ 35.145155][ T3291] loop2: p2 p3 p7 [ 35.161520][ T3833] Alternate GPT is invalid, using primary GPT. [ 35.167990][ T3833] loop2: p2 p3 p7 [ 35.220372][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.116'. [ 35.229386][ T3837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 35.293064][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 35.304181][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 35.314724][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.383193][ T3839] x_tables: ip_tables: udp match: only valid for protocol 17 [ 35.406313][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.417927][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 35.428512][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 35.623831][ T3869] loop1: detected capacity change from 0 to 2048 [ 35.672441][ T3291] loop1: p2 < > p3 < > [ 35.676651][ T3291] loop1: partition table partially beyond EOD, truncated [ 35.705699][ T3291] loop1: p2 start 4278190080 is beyond EOD, truncated [ 35.718143][ T3869] loop1: p2 < > p3 < > [ 35.722374][ T3869] loop1: partition table partially beyond EOD, truncated [ 35.740858][ T3869] loop1: p2 start 4278190080 is beyond EOD, truncated [ 35.762521][ T2991] loop1: p2 < > p3 < > [ 35.766726][ T2991] loop1: partition table partially beyond EOD, truncated [ 35.774401][ T2991] loop1: p2 start 4278190080 is beyond EOD, truncated [ 35.833104][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 35.853816][ T3896] FAULT_INJECTION: forcing a failure. [ 35.853816][ T3896] name failslab, interval 1, probability 0, space 0, times 0 [ 35.867044][ T3896] CPU: 0 UID: 0 PID: 3896 Comm: syz.1.139 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 35.867182][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.867195][ T3896] Call Trace: [ 35.867203][ T3896] [ 35.867212][ T3896] __dump_stack+0x1d/0x30 [ 35.867238][ T3896] dump_stack_lvl+0xe8/0x140 [ 35.867298][ T3896] dump_stack+0x15/0x1b [ 35.867323][ T3896] should_fail_ex+0x265/0x280 [ 35.867346][ T3896] should_failslab+0x8c/0xb0 [ 35.867373][ T3896] kmem_cache_alloc_noprof+0x50/0x310 [ 35.867527][ T3896] ? audit_log_start+0x365/0x6c0 [ 35.867560][ T3896] audit_log_start+0x365/0x6c0 [ 35.867602][ T3896] audit_seccomp+0x48/0x100 [ 35.867629][ T3896] ? __seccomp_filter+0x68c/0x10d0 [ 35.867692][ T3896] __seccomp_filter+0x69d/0x10d0 [ 35.867724][ T3896] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 35.867783][ T3896] ? vfs_write+0x7e8/0x960 [ 35.867827][ T3896] ? __rcu_read_unlock+0x4f/0x70 [ 35.867849][ T3896] ? __fget_files+0x184/0x1c0 [ 35.867875][ T3896] __secure_computing+0x82/0x150 [ 35.867897][ T3896] syscall_trace_enter+0xcf/0x1e0 [ 35.867934][ T3896] do_syscall_64+0xac/0x200 [ 35.867963][ T3896] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.867989][ T3896] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.868015][ T3896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.868054][ T3896] RIP: 0033:0x7fb7670eebe9 [ 35.868094][ T3896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.868113][ T3896] RSP: 002b:00007fb765b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 35.868136][ T3896] RAX: ffffffffffffffda RBX: 00007fb767315fa0 RCX: 00007fb7670eebe9 [ 35.868225][ T3896] RDX: 0000000000000002 RSI: 000000007fffffff RDI: 0000000000000003 [ 35.868239][ T3896] RBP: 00007fb765b57090 R08: 0000000000000000 R09: 0000000000000000 [ 35.868269][ T3896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.868282][ T3896] R13: 00007fb767316038 R14: 00007fb767315fa0 R15: 00007fffc4ba7218 [ 35.868298][ T3896] [ 36.181548][ T3909] loop4: detected capacity change from 0 to 512 [ 36.209361][ T3909] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 36.222385][ T3909] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.144: invalid indirect mapped block 2683928664 (level 1) [ 36.246623][ T3909] EXT4-fs (loop4): Remounting filesystem read-only [ 36.327765][ T3909] EXT4-fs (loop4): 1 truncate cleaned up [ 36.353807][ T3909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.420699][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.472160][ T3934] loop4: detected capacity change from 0 to 2048 [ 36.510719][ T3936] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.524666][ T3291] Alternate GPT is invalid, using primary GPT. [ 36.531163][ T3291] loop4: p2 p3 p7 [ 36.541427][ T3934] Alternate GPT is invalid, using primary GPT. [ 36.548019][ T3934] loop4: p2 p3 p7 [ 36.606289][ T3936] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.618359][ T3939] loop4: detected capacity change from 0 to 2048 [ 36.675003][ T3939] Alternate GPT is invalid, using primary GPT. [ 36.681358][ T3939] loop4: p2 p3 p7 [ 36.692267][ T3941] geneve2: entered promiscuous mode [ 36.697607][ T3941] geneve2: entered allmulticast mode [ 36.713532][ T2991] Alternate GPT is invalid, using primary GPT. [ 36.719838][ T2991] loop4: p2 p3 p7 [ 36.733522][ T3936] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.795376][ T3936] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.801227][ T3945] loop4: detected capacity change from 0 to 512 [ 36.833399][ T3945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.864552][ T3945] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.157: bad orphan inode 11 [ 36.886925][ T41] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.935225][ T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.943798][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.952110][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.960305][ T3945] ext4_test_bit(bit=10, block=4) = 1 [ 36.965698][ T3945] is_bad_inode(inode)=0 [ 36.970001][ T3945] NEXT_ORPHAN(inode)=2080374784 [ 36.974993][ T3945] max_ino=32 [ 36.978195][ T3945] i_nlink=0 [ 37.071095][ T3945] EXT4-fs (loop4): 1 truncate cleaned up [ 37.108790][ T3945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.184535][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.264219][ T3969] loop4: detected capacity change from 0 to 2048 [ 37.300638][ T3291] Alternate GPT is invalid, using primary GPT. [ 37.307185][ T3291] loop4: p2 p3 p7 [ 37.334342][ T3969] Alternate GPT is invalid, using primary GPT. [ 37.341020][ T3969] loop4: p2 p3 p7 [ 37.418387][ T3984] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.480452][ T3988] loop4: detected capacity change from 0 to 512 [ 37.523879][ T3984] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.536789][ T3988] EXT4-fs: dax option not supported [ 37.555631][ T4001] loop2: detected capacity change from 0 to 512 [ 37.555980][ T3986] netlink: 'syz.4.174': attribute type 1 has an invalid length. [ 37.563089][ T4001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.583856][ T3999] loop0: detected capacity change from 0 to 512 [ 37.599542][ T3999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.617226][ T4001] EXT4-fs (loop2): 1 truncate cleaned up [ 37.625076][ T3999] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.177: bad orphan inode 11 [ 37.626270][ T4001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.636266][ T3999] ext4_test_bit(bit=10, block=4) = 1 [ 37.653186][ T3999] is_bad_inode(inode)=0 [ 37.657414][ T3999] NEXT_ORPHAN(inode)=2080374784 [ 37.662352][ T3999] max_ino=32 [ 37.665581][ T3999] i_nlink=0 [ 37.670130][ T3999] EXT4-fs (loop0): 1 truncate cleaned up [ 37.676818][ T3999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.694158][ T3984] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.705545][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.716797][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.757215][ T3984] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.767754][ T4010] loop2: detected capacity change from 0 to 2048 [ 37.783248][ T29] kauditd_printk_skb: 3988 callbacks suppressed [ 37.783264][ T29] audit: type=1326 audit(1754950343.713:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 37.828393][ T3289] Alternate GPT is invalid, using primary GPT. [ 37.834949][ T3289] loop2: p2 p3 p7 [ 37.835721][ T29] audit: type=1326 audit(1754950343.713:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 37.862621][ T29] audit: type=1326 audit(1754950343.713:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 37.886227][ T29] audit: type=1326 audit(1754950343.713:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 37.909844][ T29] audit: type=1326 audit(1754950343.713:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 37.933273][ T29] audit: type=1326 audit(1754950343.713:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 37.956723][ T29] audit: type=1326 audit(1754950343.713:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 37.980187][ T29] audit: type=1326 audit(1754950343.713:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 38.003480][ T29] audit: type=1326 audit(1754950343.713:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 38.027105][ T29] audit: type=1326 audit(1754950343.713:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 38.028234][ T4017] loop4: detected capacity change from 0 to 512 [ 38.068420][ T4017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.073829][ T4010] Alternate GPT is invalid, using primary GPT. [ 38.084864][ T4010] loop2: p2 p3 p7 [ 38.111858][ T4017] EXT4-fs (loop4): 1 truncate cleaned up [ 38.133753][ T4017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.224225][ T4038] loop1: detected capacity change from 0 to 256 [ 38.232112][ T4038] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.275338][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.282857][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.290350][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.297940][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.305753][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.313236][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.320678][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.321325][ T4042] loop0: detected capacity change from 0 to 8192 [ 38.328156][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.341927][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.349341][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.358659][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 38.414687][ T4048] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 38.423349][ T4048] FAT-fs (loop1): Filesystem has been set read-only [ 38.433944][ T4043] fido_id[4043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.677383][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.774715][ T4058] pim6reg1: entered allmulticast mode [ 38.823238][ T4062] loop2: detected capacity change from 0 to 2048 [ 38.871661][ T3291] Alternate GPT is invalid, using primary GPT. [ 38.878143][ T3291] loop2: p2 p3 p7 [ 38.898182][ T4062] Alternate GPT is invalid, using primary GPT. [ 38.904528][ T4062] loop2: p2 p3 p7 [ 38.979017][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 38.982167][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 38.999626][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 39.203625][ T4083] loop1: detected capacity change from 0 to 512 [ 39.236343][ T4083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.250586][ T4083] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.358538][ T4093] __nla_validate_parse: 13 callbacks suppressed [ 39.358594][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 39.397758][ T4097] netlink: 7 bytes leftover after parsing attributes in process `syz.0.213'. [ 39.403053][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.468221][ T4104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 39.486710][ T4104] x_tables: ip_tables: udp match: only valid for protocol 17 [ 39.502918][ T4104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 39.524749][ T4109] loop4: detected capacity change from 0 to 512 [ 39.538589][ T4109] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.558329][ T4109] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 39.573632][ T4109] EXT4-fs (loop4): 1 truncate cleaned up [ 39.578662][ T4114] loop1: detected capacity change from 0 to 2048 [ 39.580771][ T4109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.602692][ T4109] serio: Serial port ptm0 [ 39.617957][ T4114] Alternate GPT is invalid, using primary GPT. [ 39.624420][ T4114] loop1: p2 p3 p7 [ 39.662044][ T4116] loop0: detected capacity change from 0 to 8192 [ 39.701106][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.704889][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.713038][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 39.723378][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 39.803564][ T4124] loop4: detected capacity change from 0 to 2048 [ 39.927898][ T3289] Alternate GPT is invalid, using primary GPT. [ 39.934333][ T3289] loop4: p2 p3 p7 [ 39.949645][ T4127] loop1: detected capacity change from 0 to 512 [ 39.958515][ T4127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.970480][ T4127] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.225: bad orphan inode 11 [ 39.983533][ T4127] ext4_test_bit(bit=10, block=4) = 1 [ 39.988998][ T4127] is_bad_inode(inode)=0 [ 39.989890][ T4124] Alternate GPT is invalid, using primary GPT. [ 39.993314][ T4127] NEXT_ORPHAN(inode)=2080374784 [ 39.999735][ T4124] loop4: p2 p3 p7 [ 40.004697][ T4127] max_ino=32 [ 40.004709][ T4127] i_nlink=0 [ 40.028821][ T4127] EXT4-fs (loop1): 1 truncate cleaned up [ 40.031420][ T2991] Alternate GPT is invalid, using primary GPT. [ 40.040959][ T2991] loop4: p2 p3 p7 [ 40.047675][ T4127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.156121][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.166265][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 40.167158][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 40.193117][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 40.227501][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.245578][ T4140] loop4: detected capacity change from 0 to 512 [ 40.255307][ T4140] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.267779][ T4140] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 40.289209][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.289979][ T4140] EXT4-fs (loop4): 1 truncate cleaned up [ 40.296909][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.303498][ T4140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.343548][ T4140] serio: Serial port ptm0 [ 40.350851][ T4144] netlink: 7 bytes leftover after parsing attributes in process `syz.1.231'. [ 40.412222][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.428923][ T4151] netlink: 596 bytes leftover after parsing attributes in process `syz.4.234'. [ 40.467768][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.477502][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.530704][ T4156] loop1: detected capacity change from 0 to 512 [ 40.543225][ T31] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.553104][ T31] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.575055][ T397] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.581982][ T4156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.596909][ T4156] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.607152][ T397] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.628025][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.646929][ T4161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'. [ 40.655913][ T4161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.237'. [ 40.664979][ T4161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'. [ 40.674406][ T4161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.237'. [ 40.702707][ T4164] loop0: detected capacity change from 0 to 2048 [ 40.731120][ T4166] loop1: detected capacity change from 0 to 2048 [ 40.746107][ T4170] loop4: detected capacity change from 0 to 512 [ 40.754606][ T4164] Alternate GPT is invalid, using primary GPT. [ 40.761259][ T4164] loop0: p2 p3 p7 [ 40.765792][ T4170] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.782295][ T4170] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 40.818151][ T4170] EXT4-fs (loop4): 1 truncate cleaned up [ 40.818250][ T4166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 40.824697][ T4170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.848181][ T4177] geneve2: entered promiscuous mode [ 40.853763][ T4177] geneve2: entered allmulticast mode [ 40.877291][ T4170] serio: Serial port ptm0 [ 40.942427][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.969094][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.982839][ T4185] loop0: detected capacity change from 0 to 512 [ 40.993638][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.001972][ T4185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.020599][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.039410][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.049294][ T4182] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.064939][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.076248][ T4182] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 41.088798][ T4182] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.088798][ T4182] [ 41.098585][ T4182] EXT4-fs (loop1): Total free blocks count 0 [ 41.104710][ T4182] EXT4-fs (loop1): Free/Dirty block details [ 41.110705][ T4182] EXT4-fs (loop1): free_blocks=2415919104 [ 41.116672][ T4182] EXT4-fs (loop1): dirty_blocks=2288 [ 41.122003][ T4182] EXT4-fs (loop1): Block reservation details [ 41.128013][ T4182] EXT4-fs (loop1): i_reserved_data_blocks=143 [ 41.138941][ T4185] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.245: bad orphan inode 11 [ 41.182976][ T4191] fido_id[4191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.191528][ T4185] ext4_test_bit(bit=10, block=4) = 1 [ 41.202112][ T4185] is_bad_inode(inode)=0 [ 41.206309][ T4185] NEXT_ORPHAN(inode)=2080374784 [ 41.211276][ T4185] max_ino=32 [ 41.214522][ T4185] i_nlink=0 [ 41.221169][ T4185] EXT4-fs (loop0): 1 truncate cleaned up [ 41.227263][ T4185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.232375][ T397] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 41.270972][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.331269][ T4208] loop0: detected capacity change from 0 to 2048 [ 41.380826][ T4208] Alternate GPT is invalid, using primary GPT. [ 41.387366][ T4208] loop0: p2 p3 p7 [ 41.414639][ T2991] Alternate GPT is invalid, using primary GPT. [ 41.421192][ T2991] loop0: p2 p3 p7 [ 41.476441][ T4223] loop1: detected capacity change from 0 to 512 [ 41.525264][ T4223] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 41.560052][ T4223] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.258: invalid indirect mapped block 2683928664 (level 1) [ 41.595233][ T4223] EXT4-fs (loop1): Remounting filesystem read-only [ 41.625626][ T4223] EXT4-fs (loop1): 1 truncate cleaned up [ 41.645311][ T4223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.719602][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.786579][ T4242] loop0: detected capacity change from 0 to 512 [ 41.800092][ T4242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.819206][ T4245] loop4: detected capacity change from 0 to 512 [ 41.825935][ T4247] loop3: detected capacity change from 0 to 512 [ 41.846605][ T4249] loop1: detected capacity change from 0 to 2048 [ 41.850567][ T4242] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.865248][ T4245] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 41.874047][ T4242] EXT4-fs (loop0): 1 truncate cleaned up [ 41.876432][ T4245] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.268: invalid indirect mapped block 2683928664 (level 1) [ 41.883170][ T4242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.895528][ T4247] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 41.917952][ T4247] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.269: invalid indirect mapped block 2683928664 (level 1) [ 41.929199][ T4242] serio: Serial port ptm0 [ 41.933212][ T4245] EXT4-fs (loop4): Remounting filesystem read-only [ 41.939005][ T3291] Alternate GPT is invalid, using primary GPT. [ 41.943542][ T4247] EXT4-fs (loop3): Remounting filesystem read-only [ 41.949401][ T3291] loop1: p2 p3 p7 [ 41.956406][ T4245] EXT4-fs (loop4): 1 truncate cleaned up [ 41.960224][ T4247] EXT4-fs (loop3): 1 truncate cleaned up [ 41.966518][ T4245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.972056][ T4247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.033228][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.044294][ T4249] Alternate GPT is invalid, using primary GPT. [ 42.050695][ T4249] loop1: p2 p3 p7 [ 42.055250][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.073589][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.179316][ T4266] loop4: detected capacity change from 0 to 512 [ 42.225724][ T4266] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 42.242662][ T4266] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.272: invalid indirect mapped block 2683928664 (level 1) [ 42.291827][ T4266] EXT4-fs (loop4): Remounting filesystem read-only [ 42.305734][ T4276] geneve2: entered promiscuous mode [ 42.310981][ T4276] geneve2: entered allmulticast mode [ 42.322899][ T4266] EXT4-fs (loop4): 1 truncate cleaned up [ 42.339333][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.459537][ T4286] loop0: detected capacity change from 0 to 512 [ 42.475719][ T4286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.496883][ T4286] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.513216][ T4286] EXT4-fs (loop0): 1 truncate cleaned up [ 42.519661][ T4286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.537502][ T4286] serio: Serial port ptm0 [ 42.555911][ T4293] loop3: detected capacity change from 0 to 2048 [ 42.615395][ T3291] Alternate GPT is invalid, using primary GPT. [ 42.622010][ T3291] loop3: p2 p3 p7 [ 42.632951][ T4293] Alternate GPT is invalid, using primary GPT. [ 42.639474][ T4293] loop3: p2 p3 p7 [ 42.658439][ T4299] pim6reg1: entered allmulticast mode [ 42.840061][ T29] kauditd_printk_skb: 713 callbacks suppressed [ 42.840078][ T29] audit: type=1326 audit(1754950348.763:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521902ebe9 code=0x7ffc0000 [ 42.840449][ T4308] FAULT_INJECTION: forcing a failure. [ 42.840449][ T4308] name failslab, interval 1, probability 0, space 0, times 0 [ 42.848234][ T29] audit: type=1326 audit(1754950348.763:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521902ebe9 code=0x7ffc0000 [ 42.870093][ T4308] CPU: 0 UID: 0 PID: 4308 Comm: syz.3.292 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 42.870131][ T4308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.870144][ T4308] Call Trace: [ 42.870150][ T4308] [ 42.870159][ T4308] __dump_stack+0x1d/0x30 [ 42.870254][ T4308] dump_stack_lvl+0xe8/0x140 [ 42.870274][ T4308] dump_stack+0x15/0x1b [ 42.870291][ T4308] should_fail_ex+0x265/0x280 [ 42.870312][ T4308] should_failslab+0x8c/0xb0 [ 42.870337][ T4308] kmem_cache_alloc_noprof+0x50/0x310 [ 42.870438][ T4308] ? audit_log_start+0x365/0x6c0 [ 42.870598][ T4308] audit_log_start+0x365/0x6c0 [ 42.870629][ T4308] audit_seccomp+0x48/0x100 [ 42.870666][ T4308] ? __seccomp_filter+0x68c/0x10d0 [ 42.870697][ T4308] __seccomp_filter+0x69d/0x10d0 [ 42.870760][ T4308] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.870787][ T4308] ? vfs_write+0x7e8/0x960 [ 42.870815][ T4308] ? __rcu_read_unlock+0x4f/0x70 [ 42.870837][ T4308] ? __fget_files+0x184/0x1c0 [ 42.870987][ T4308] __secure_computing+0x82/0x150 [ 42.871008][ T4308] syscall_trace_enter+0xcf/0x1e0 [ 42.871033][ T4308] do_syscall_64+0xac/0x200 [ 42.871060][ T4308] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.871083][ T4308] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.871107][ T4308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.871129][ T4308] RIP: 0033:0x7f521902ebe9 [ 42.871194][ T4308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.871212][ T4308] RSP: 002b:00007f5217a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 42.871232][ T4308] RAX: ffffffffffffffda RBX: 00007f5219255fa0 RCX: 00007f521902ebe9 [ 42.871245][ T4308] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c [ 42.871258][ T4308] RBP: 00007f5217a97090 R08: 0000000000000000 R09: 0000000000000000 [ 42.871270][ T4308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.871282][ T4308] R13: 00007f5219256038 R14: 00007f5219255fa0 R15: 00007ffdfe04e0c8 [ 42.871363][ T4308] [ 42.871371][ T4308] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 42.882906][ T29] audit: type=1326 audit(1754950348.763:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f521902d550 code=0x7ffc0000 [ 42.906208][ T4308] audit: out of memory in audit_log_start [ 43.152146][ T29] audit: type=1326 audit(1754950348.763:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f521902d69f code=0x7ffc0000 [ 43.175678][ T29] audit: type=1326 audit(1754950348.833:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f521902d5fc code=0x7ffc0000 [ 43.199116][ T29] audit: type=1326 audit(1754950348.833:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f521902d69f code=0x7ffc0000 [ 43.222433][ T29] audit: type=1326 audit(1754950348.833:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f521902d84a code=0x7ffc0000 [ 43.245583][ T29] audit: type=1326 audit(1754950348.833:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.3.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521902ebe9 code=0x7ffc0000 [ 43.269495][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.328659][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.360661][ T4327] loop2: detected capacity change from 0 to 512 [ 43.388006][ T4327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.414693][ T4327] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.446168][ T4338] loop4: detected capacity change from 0 to 512 [ 43.452492][ T4336] x_tables: ip_tables: udp match: only valid for protocol 17 [ 43.461475][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.481692][ T4338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.503636][ T4342] loop0: detected capacity change from 0 to 512 [ 43.505089][ T4338] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.513136][ T4342] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 43.530866][ T4342] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.303: invalid indirect mapped block 2683928664 (level 1) [ 43.559009][ T4342] EXT4-fs (loop0): Remounting filesystem read-only [ 43.581602][ T4342] EXT4-fs (loop0): 1 truncate cleaned up [ 43.597379][ T4342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.614467][ T4347] loop2: detected capacity change from 0 to 2048 [ 43.643855][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.657122][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.680379][ T4347] Alternate GPT is invalid, using primary GPT. [ 43.686840][ T4347] loop2: p2 p3 p7 [ 43.755759][ T4357] loop2: detected capacity change from 0 to 512 [ 43.758841][ T4359] loop0: detected capacity change from 0 to 512 [ 43.770254][ T4359] EXT4-fs: Ignoring removed oldalloc option [ 43.776614][ T4359] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.777269][ T4357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.786815][ T4359] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 43.828772][ T4357] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 43.869327][ T4357] EXT4-fs (loop2): 1 truncate cleaned up [ 43.881128][ T4357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.895394][ T4366] loop1: detected capacity change from 0 to 2048 [ 43.911998][ T4370] loop4: detected capacity change from 0 to 2048 [ 43.921019][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.950471][ T3291] Alternate GPT is invalid, using primary GPT. [ 43.956947][ T3291] loop1: p2 p3 p7 [ 43.964689][ T3289] Alternate GPT is invalid, using primary GPT. [ 43.971154][ T3289] loop4: p2 p3 p7 [ 43.990100][ T4370] Alternate GPT is invalid, using primary GPT. [ 43.996507][ T4370] loop4: p2 p3 p7 [ 44.007108][ T4366] Alternate GPT is invalid, using primary GPT. [ 44.010219][ T4378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.013536][ T4366] loop1: p2 p3 p7 [ 44.030347][ T4378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.073704][ T4382] geneve2: entered promiscuous mode [ 44.079072][ T4382] geneve2: entered allmulticast mode [ 44.124624][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.135155][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 44.148374][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 44.165768][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 44.166434][ T4385] loop3: detected capacity change from 0 to 512 [ 44.179562][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 44.193153][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 44.208802][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 44.214142][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.220147][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 44.259448][ T4385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.285941][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 44.309393][ T4385] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.340472][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.380619][ T4410] pim6reg1: entered allmulticast mode [ 44.392079][ T4408] __nla_validate_parse: 17 callbacks suppressed [ 44.392097][ T4408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 44.407831][ T4408] x_tables: ip_tables: udp match: only valid for protocol 17 [ 44.417129][ T4408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 44.586589][ T4423] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 44.595490][ T4423] SELinux: failed to load policy [ 44.770434][ T4436] loop2: detected capacity change from 0 to 8192 [ 44.906757][ T4449] loop4: detected capacity change from 0 to 512 [ 45.033822][ T4449] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.053384][ T4449] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.077994][ T4449] EXT4-fs (loop4): 1 truncate cleaned up [ 45.085136][ T4449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.123449][ T4461] loop0: detected capacity change from 0 to 512 [ 45.131766][ T4461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.156356][ T4461] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.350: bad orphan inode 11 [ 45.166696][ T4461] ext4_test_bit(bit=10, block=4) = 1 [ 45.172186][ T4461] is_bad_inode(inode)=0 [ 45.176441][ T4461] NEXT_ORPHAN(inode)=2080374784 [ 45.181414][ T4461] max_ino=32 [ 45.184803][ T4461] i_nlink=0 [ 45.190911][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.214568][ T4461] EXT4-fs (loop0): 1 truncate cleaned up [ 45.221979][ T4461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.245646][ T4471] loop1: detected capacity change from 0 to 512 [ 45.256888][ T4471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.287813][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.306456][ T4471] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.372601][ T4471] EXT4-fs (loop1): 1 truncate cleaned up [ 45.391926][ T4471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.472201][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.497944][ T4487] loop3: detected capacity change from 0 to 512 [ 45.521934][ T4487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.565869][ T4487] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.596174][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.612636][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.620823][ T4487] EXT4-fs (loop3): 1 truncate cleaned up [ 45.630377][ T4487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.660881][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.730048][ T4509] FAULT_INJECTION: forcing a failure. [ 45.730048][ T4509] name failslab, interval 1, probability 0, space 0, times 0 [ 45.742761][ T4509] CPU: 0 UID: 0 PID: 4509 Comm: syz.1.368 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 45.742846][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.742859][ T4509] Call Trace: [ 45.742867][ T4509] [ 45.742875][ T4509] __dump_stack+0x1d/0x30 [ 45.742897][ T4509] dump_stack_lvl+0xe8/0x140 [ 45.742914][ T4509] dump_stack+0x15/0x1b [ 45.742932][ T4509] should_fail_ex+0x265/0x280 [ 45.742987][ T4509] should_failslab+0x8c/0xb0 [ 45.743016][ T4509] kmem_cache_alloc_noprof+0x50/0x310 [ 45.743044][ T4509] ? audit_log_start+0x365/0x6c0 [ 45.743072][ T4509] audit_log_start+0x365/0x6c0 [ 45.743210][ T4509] audit_seccomp+0x48/0x100 [ 45.743234][ T4509] ? __seccomp_filter+0x68c/0x10d0 [ 45.743254][ T4509] __seccomp_filter+0x69d/0x10d0 [ 45.743346][ T4509] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.743374][ T4509] ? vfs_write+0x7e8/0x960 [ 45.743398][ T4509] __secure_computing+0x82/0x150 [ 45.743428][ T4509] syscall_trace_enter+0xcf/0x1e0 [ 45.743488][ T4509] do_syscall_64+0xac/0x200 [ 45.743515][ T4509] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.743543][ T4509] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.743591][ T4509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.743614][ T4509] RIP: 0033:0x7fb7670eebe9 [ 45.743629][ T4509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.743645][ T4509] RSP: 002b:00007fb765b57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 45.743665][ T4509] RAX: ffffffffffffffda RBX: 00007fb767315fa0 RCX: 00007fb7670eebe9 [ 45.743723][ T4509] RDX: 0000000080000006 RSI: 0000200000000000 RDI: 0000000000000004 [ 45.743736][ T4509] RBP: 00007fb765b57090 R08: 0000000000000000 R09: 0000000000000000 [ 45.743750][ T4509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.743764][ T4509] R13: 00007fb767316038 R14: 00007fb767315fa0 R15: 00007fffc4ba7218 [ 45.743783][ T4509] [ 46.024194][ T4526] loop1: detected capacity change from 0 to 512 [ 46.031736][ T4526] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.052966][ T4513] loop3: detected capacity change from 0 to 2048 [ 46.064317][ T4526] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.079285][ T4526] EXT4-fs (loop1): 1 truncate cleaned up [ 46.085404][ T4526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.112996][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.126094][ T4387] Alternate GPT is invalid, using primary GPT. [ 46.132526][ T4387] loop3: p2 p3 p7 [ 46.143938][ T4513] Alternate GPT is invalid, using primary GPT. [ 46.150285][ T4513] loop3: p2 p3 p7 [ 46.198471][ T4546] loop2: detected capacity change from 0 to 2048 [ 46.257527][ T4546] Alternate GPT is invalid, using primary GPT. [ 46.264173][ T4546] loop2: p2 p3 p7 [ 46.298805][ T4555] loop1: detected capacity change from 0 to 512 [ 46.315388][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 46.326051][ T4555] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.333188][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.342808][ T4555] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.358332][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.358565][ T4555] EXT4-fs (loop1): 1 truncate cleaned up [ 46.371636][ T4555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.411266][ T1036] hid_parser_main: 34 callbacks suppressed [ 46.411287][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.424685][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.432205][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.439623][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.447452][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.454907][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.462886][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.470464][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.478075][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.482767][ T4570] loop0: detected capacity change from 0 to 512 [ 46.485548][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.501051][ T1036] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz1] on syz0 [ 46.527925][ T4571] fido_id[4571]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.596681][ T4570] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.612904][ T4578] loop3: detected capacity change from 0 to 2048 [ 46.614720][ T4570] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.620350][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.647560][ T4570] EXT4-fs (loop0): 1 truncate cleaned up [ 46.662207][ T4570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.677587][ T4387] Alternate GPT is invalid, using primary GPT. [ 46.684033][ T4387] loop3: p2 p3 p7 [ 46.699270][ T4582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.389'. [ 46.708678][ T4582] x_tables: ip_tables: udp match: only valid for protocol 17 [ 46.741269][ T4578] Alternate GPT is invalid, using primary GPT. [ 46.747712][ T4578] loop3: p2 p3 p7 [ 46.807280][ T4590] loop2: detected capacity change from 0 to 2048 [ 46.832476][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.882825][ T4598] netlink: 596 bytes leftover after parsing attributes in process `syz.0.390'. [ 46.900984][ T4596] loop4: detected capacity change from 0 to 512 [ 46.918583][ T3291] Alternate GPT is invalid, using primary GPT. [ 46.925128][ T3291] loop2: p2 p3 p7 [ 46.948595][ T4596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.974730][ T4590] Alternate GPT is invalid, using primary GPT. [ 46.981156][ T4590] loop2: p2 p3 p7 [ 46.982709][ T4596] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.079500][ T4611] loop0: detected capacity change from 0 to 764 [ 47.105323][ T4615] FAULT_INJECTION: forcing a failure. [ 47.105323][ T4615] name failslab, interval 1, probability 0, space 0, times 0 [ 47.118027][ T4615] CPU: 1 UID: 0 PID: 4615 Comm: syz.3.399 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 47.118058][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.118069][ T4615] Call Trace: [ 47.118074][ T4615] [ 47.118081][ T4615] __dump_stack+0x1d/0x30 [ 47.118131][ T4615] dump_stack_lvl+0xe8/0x140 [ 47.118149][ T4615] dump_stack+0x15/0x1b [ 47.118165][ T4615] should_fail_ex+0x265/0x280 [ 47.118189][ T4615] should_failslab+0x8c/0xb0 [ 47.118266][ T4615] kmem_cache_alloc_noprof+0x50/0x310 [ 47.118345][ T4615] ? audit_log_start+0x365/0x6c0 [ 47.118379][ T4615] audit_log_start+0x365/0x6c0 [ 47.118415][ T4615] audit_seccomp+0x48/0x100 [ 47.118444][ T4615] ? __seccomp_filter+0x68c/0x10d0 [ 47.118525][ T4615] __seccomp_filter+0x69d/0x10d0 [ 47.118546][ T4615] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 47.118715][ T4615] ? vfs_write+0x7e8/0x960 [ 47.118743][ T4615] __secure_computing+0x82/0x150 [ 47.118767][ T4615] syscall_trace_enter+0xcf/0x1e0 [ 47.118840][ T4615] do_syscall_64+0xac/0x200 [ 47.118869][ T4615] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.118894][ T4615] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.118969][ T4615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.119035][ T4615] RIP: 0033:0x7f521902ebe9 [ 47.119050][ T4615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.119066][ T4615] RSP: 002b:00007f5217a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 47.119088][ T4615] RAX: ffffffffffffffda RBX: 00007f5219255fa0 RCX: 00007f521902ebe9 [ 47.119102][ T4615] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffffffffffff [ 47.119115][ T4615] RBP: 00007f5217a97090 R08: 0000000000000000 R09: 0000000000000000 [ 47.119129][ T4615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.119191][ T4615] R13: 00007f5219256038 R14: 00007f5219255fa0 R15: 00007ffdfe04e0c8 [ 47.119210][ T4615] [ 47.382122][ T4623] loop3: detected capacity change from 0 to 2048 [ 47.398882][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 47.467009][ T4623] Alternate GPT is invalid, using primary GPT. [ 47.468665][ T4633] loop1: detected capacity change from 0 to 2048 [ 47.473600][ T4623] loop3: p2 p3 p7 [ 47.502178][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.514723][ T2991] Alternate GPT is invalid, using primary GPT. [ 47.521253][ T2991] loop1: p2 p3 p7 [ 47.571451][ T2991] Alternate GPT is invalid, using primary GPT. [ 47.577929][ T2991] loop1: p2 p3 p7 [ 47.599357][ T4633] Alternate GPT is invalid, using primary GPT. [ 47.605821][ T4633] loop1: p2 p3 p7 [ 47.671972][ T4650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 47.681229][ T4650] x_tables: ip_tables: udp match: only valid for protocol 17 [ 47.689873][ T4650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 47.700642][ T4651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.412'. [ 47.709709][ T4651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.412'. [ 47.764553][ T4655] loop1: detected capacity change from 0 to 128 [ 47.773130][ T4655] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.413: iget: checksum invalid [ 47.810654][ T4661] loop2: detected capacity change from 0 to 512 [ 47.845272][ T4655] EXT4-fs (loop1): get root inode failed [ 47.851294][ T4655] EXT4-fs (loop1): mount failed [ 47.885420][ T4661] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.055146][ T4675] loop0: detected capacity change from 0 to 512 [ 48.065758][ T4675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.096127][ T4675] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 48.123918][ T4675] EXT4-fs (loop0): 1 truncate cleaned up [ 48.124942][ T4684] x_tables: ip_tables: udp match: only valid for protocol 17 [ 48.152391][ T4687] loop4: detected capacity change from 0 to 2048 [ 48.188563][ T29] kauditd_printk_skb: 489 callbacks suppressed [ 48.188581][ T29] audit: type=1326 audit(1754950354.113:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.219192][ T29] audit: type=1326 audit(1754950354.113:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.227318][ T4692] loop2: detected capacity change from 0 to 512 [ 48.242573][ T29] audit: type=1326 audit(1754950354.113:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7670ed550 code=0x7ffc0000 [ 48.242625][ T29] audit: type=1326 audit(1754950354.113:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.293242][ T4692] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.295776][ T29] audit: type=1326 audit(1754950354.113:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.329330][ T29] audit: type=1326 audit(1754950354.113:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.340025][ T3291] Alternate GPT is invalid, using primary GPT. [ 48.352715][ T29] audit: type=1326 audit(1754950354.113:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.359126][ T3291] loop4: p2 p3 p7 [ 48.382288][ T29] audit: type=1326 audit(1754950354.113:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.409395][ T29] audit: type=1326 audit(1754950354.113:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.432693][ T29] audit: type=1326 audit(1754950354.113:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4689 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7670eebe9 code=0x7ffc0000 [ 48.469826][ T4687] Alternate GPT is invalid, using primary GPT. [ 48.476294][ T4687] loop4: p2 p3 p7 [ 48.555838][ T4703] loop3: detected capacity change from 0 to 512 [ 48.595770][ T4703] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 48.604388][ T4703] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.431: invalid indirect mapped block 2683928664 (level 1) [ 48.613644][ T4707] pim6reg1: entered allmulticast mode [ 48.636893][ T4703] EXT4-fs (loop3): Remounting filesystem read-only [ 48.643674][ T4703] EXT4-fs (loop3): 1 truncate cleaned up [ 48.737862][ T4716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.746502][ T4716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.934983][ T4739] loop3: detected capacity change from 0 to 512 [ 48.970204][ T4739] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 48.984951][ T4739] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.446: invalid indirect mapped block 2683928664 (level 1) [ 49.016747][ T4739] EXT4-fs (loop3): Remounting filesystem read-only [ 49.023608][ T4739] EXT4-fs (loop3): 1 truncate cleaned up [ 49.077891][ T4758] loop4: detected capacity change from 0 to 2048 [ 49.154746][ T4399] Alternate GPT is invalid, using primary GPT. [ 49.161128][ T4399] loop4: p2 p3 p7 [ 49.167548][ T4766] loop1: detected capacity change from 0 to 2048 [ 49.184835][ T4758] Alternate GPT is invalid, using primary GPT. [ 49.191254][ T4758] loop4: p2 p3 p7 [ 49.214767][ T3289] Alternate GPT is invalid, using primary GPT. [ 49.221249][ T3289] loop1: p2 p3 p7 [ 49.233514][ T2991] Alternate GPT is invalid, using primary GPT. [ 49.239899][ T2991] loop4: p2 p3 p7 [ 49.249878][ T4766] Alternate GPT is invalid, using primary GPT. [ 49.256299][ T4766] loop1: p2 p3 p7 [ 49.298325][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 49.321583][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 49.336343][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 49.391398][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 49.403616][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 49.415057][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 49.480453][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 49.481758][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 49.491680][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 49.511494][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 49.603515][ T4784] __nla_validate_parse: 13 callbacks suppressed [ 49.603546][ T4784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'. [ 49.619234][ T4784] x_tables: ip_tables: udp match: only valid for protocol 17 [ 49.633564][ T4784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.463'. [ 49.722294][ T4794] loop4: detected capacity change from 0 to 2048 [ 49.741046][ T4798] geneve2: entered promiscuous mode [ 49.746346][ T4798] geneve2: entered allmulticast mode [ 49.794753][ T4387] Alternate GPT is invalid, using primary GPT. [ 49.801092][ T4387] loop4: p2 p3 p7 [ 49.828536][ T4794] Alternate GPT is invalid, using primary GPT. [ 49.835072][ T4794] loop4: p2 p3 p7 [ 49.861556][ T4800] loop0: detected capacity change from 0 to 8192 [ 49.956655][ T4816] loop4: detected capacity change from 0 to 512 [ 50.003585][ T4816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.028401][ T4826] loop2: detected capacity change from 0 to 2048 [ 50.045997][ T4816] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.063874][ T4816] EXT4-fs (loop4): 1 truncate cleaned up [ 50.074753][ T4399] Alternate GPT is invalid, using primary GPT. [ 50.081118][ T4399] loop2: p2 p3 p7 [ 50.134447][ T4826] Alternate GPT is invalid, using primary GPT. [ 50.140769][ T4826] loop2: p2 p3 p7 [ 50.190497][ T4846] loop3: detected capacity change from 0 to 512 [ 50.215484][ T4846] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.403865][ T4865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.487'. [ 50.529428][ T3375] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.575191][ T4880] fido_id[4880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.666654][ T4885] FAULT_INJECTION: forcing a failure. [ 50.666654][ T4885] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.680082][ T4885] CPU: 1 UID: 0 PID: 4885 Comm: syz.2.492 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 50.680108][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.680122][ T4885] Call Trace: [ 50.680130][ T4885] [ 50.680139][ T4885] __dump_stack+0x1d/0x30 [ 50.680162][ T4885] dump_stack_lvl+0xe8/0x140 [ 50.680191][ T4885] dump_stack+0x15/0x1b [ 50.680206][ T4885] should_fail_ex+0x265/0x280 [ 50.680231][ T4885] should_fail+0xb/0x20 [ 50.680252][ T4885] should_fail_usercopy+0x1a/0x20 [ 50.680274][ T4885] strncpy_from_user+0x25/0x230 [ 50.680397][ T4885] ? __fget_files+0x184/0x1c0 [ 50.680421][ T4885] __se_sys_add_key+0x86/0x350 [ 50.680541][ T4885] __x64_sys_add_key+0x67/0x80 [ 50.680561][ T4885] x64_sys_call+0x28c4/0x2ff0 [ 50.680586][ T4885] do_syscall_64+0xd2/0x200 [ 50.680612][ T4885] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.680703][ T4885] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.680737][ T4885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.680758][ T4885] RIP: 0033:0x7f94f757ebe9 [ 50.680776][ T4885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.680792][ T4885] RSP: 002b:00007f94f5fe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 50.680810][ T4885] RAX: ffffffffffffffda RBX: 00007f94f77a5fa0 RCX: 00007f94f757ebe9 [ 50.680854][ T4885] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 50.680867][ T4885] RBP: 00007f94f5fe7090 R08: fffffffffffffffd R09: 0000000000000000 [ 50.680880][ T4885] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 50.680893][ T4885] R13: 00007f94f77a6038 R14: 00007f94f77a5fa0 R15: 00007ffefa0efb98 [ 50.680912][ T4885] [ 50.971674][ T4896] loop4: detected capacity change from 0 to 1024 [ 50.986603][ T4896] ======================================================= [ 50.986603][ T4896] WARNING: The mand mount option has been deprecated and [ 50.986603][ T4896] and is ignored by this kernel. Remove the mand [ 50.986603][ T4896] option from the mount to silence this warning. [ 50.986603][ T4896] ======================================================= [ 51.028472][ T4902] loop2: detected capacity change from 0 to 512 [ 51.058978][ T4902] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 51.066997][ T4896] EXT4-fs: Ignoring removed nobh option [ 51.088308][ T4902] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.497: invalid indirect mapped block 2683928664 (level 1) [ 51.110616][ T4902] EXT4-fs (loop2): Remounting filesystem read-only [ 51.122794][ T3375] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.153464][ T4902] EXT4-fs (loop2): 1 truncate cleaned up [ 51.184520][ T4913] fido_id[4913]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.188825][ T4917] geneve2: entered promiscuous mode [ 51.203362][ T4917] geneve2: entered allmulticast mode [ 51.221300][ T4896] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.242621][ T4896] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.494: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 51.268540][ T4896] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.494: couldn't read orphan inode 11 (err -117) [ 51.286494][ T4896] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.494: Invalid block bitmap block 0 in block_group 0 [ 51.300606][ T4896] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.494: Failed to acquire dquot type 0 [ 51.320982][ T4896] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.494: Invalid inode table block 8589934593 in block_group 0 [ 51.342121][ T4896] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.494: Invalid inode table block 8589934593 in block_group 0 [ 51.395564][ T397] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 51.397063][ T4936] tmpfs: Bad value for 'mpol' [ 51.417819][ T4938] loop0: detected capacity change from 0 to 512 [ 51.445018][ T4938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.472606][ T4938] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 51.477551][ T1036] hid_parser_main: 35 callbacks suppressed [ 51.477589][ T1036] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 51.500808][ T4938] EXT4-fs (loop0): 1 truncate cleaned up [ 51.522585][ T4949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.519'. [ 51.537258][ T1036] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.564172][ T4952] fido_id[4952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.618192][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.522'. [ 51.625177][ T4951] loop0: detected capacity change from 0 to 8192 [ 51.627487][ T4956] netlink: 32 bytes leftover after parsing attributes in process `syz.4.522'. [ 51.627506][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.522'. [ 51.627919][ T4956] netlink: 32 bytes leftover after parsing attributes in process `syz.4.522'. [ 51.716124][ T4961] FAULT_INJECTION: forcing a failure. [ 51.716124][ T4961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.729554][ T4961] CPU: 1 UID: 0 PID: 4961 Comm: syz.3.524 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 51.729585][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.729597][ T4961] Call Trace: [ 51.729604][ T4961] [ 51.729612][ T4961] __dump_stack+0x1d/0x30 [ 51.729635][ T4961] dump_stack_lvl+0xe8/0x140 [ 51.729656][ T4961] dump_stack+0x15/0x1b [ 51.729738][ T4961] should_fail_ex+0x265/0x280 [ 51.729760][ T4961] should_fail+0xb/0x20 [ 51.729830][ T4961] should_fail_usercopy+0x1a/0x20 [ 51.729854][ T4961] _copy_from_user+0x1c/0xb0 [ 51.729885][ T4961] __sys_sendto+0x19e/0x330 [ 51.729972][ T4961] __x64_sys_sendto+0x76/0x90 [ 51.730007][ T4961] x64_sys_call+0x2d05/0x2ff0 [ 51.730032][ T4961] do_syscall_64+0xd2/0x200 [ 51.730056][ T4961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.730122][ T4961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.730195][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.730217][ T4961] RIP: 0033:0x7f521902ebe9 [ 51.730233][ T4961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.730273][ T4961] RSP: 002b:00007f5217a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 51.730293][ T4961] RAX: ffffffffffffffda RBX: 00007f5219255fa0 RCX: 00007f521902ebe9 [ 51.730314][ T4961] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000003 [ 51.730328][ T4961] RBP: 00007f5217a97090 R08: 0000200000000480 R09: 000000000000001c [ 51.730341][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.730354][ T4961] R13: 00007f5219256038 R14: 00007f5219255fa0 R15: 00007ffdfe04e0c8 [ 51.730373][ T4961] [ 51.921984][ T4965] FAULT_INJECTION: forcing a failure. [ 51.921984][ T4965] name failslab, interval 1, probability 0, space 0, times 0 [ 51.934749][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: syz.4.526 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 51.934782][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.934813][ T4965] Call Trace: [ 51.934821][ T4965] [ 51.934829][ T4965] __dump_stack+0x1d/0x30 [ 51.934876][ T4965] dump_stack_lvl+0xe8/0x140 [ 51.934899][ T4965] dump_stack+0x15/0x1b [ 51.934919][ T4965] should_fail_ex+0x265/0x280 [ 51.934943][ T4965] should_failslab+0x8c/0xb0 [ 51.934968][ T4965] kmem_cache_alloc_node_noprof+0x57/0x320 [ 51.935041][ T4965] ? __alloc_skb+0x101/0x320 [ 51.935072][ T4965] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 51.935107][ T4965] __alloc_skb+0x101/0x320 [ 51.935160][ T4965] tipc_msg_build+0xbe/0x840 [ 51.935259][ T4965] ? xfd_validate_state+0x45/0xf0 [ 51.935367][ T4965] __tipc_sendstream+0x668/0xb30 [ 51.935404][ T4965] ? __pfx_woken_wake_function+0x10/0x10 [ 51.935431][ T4965] tipc_sendstream+0x3e/0x60 [ 51.935517][ T4965] ? __pfx_tipc_sendstream+0x10/0x10 [ 51.935543][ T4965] __sock_sendmsg+0x145/0x180 [ 51.935573][ T4965] sock_write_iter+0x165/0x1b0 [ 51.935645][ T4965] ? __pfx_sock_write_iter+0x10/0x10 [ 51.935666][ T4965] vfs_write+0x52a/0x960 [ 51.935690][ T4965] ksys_write+0xda/0x1a0 [ 51.935760][ T4965] __x64_sys_write+0x40/0x50 [ 51.935805][ T4965] x64_sys_call+0x27fe/0x2ff0 [ 51.935828][ T4965] do_syscall_64+0xd2/0x200 [ 51.935852][ T4965] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.935886][ T4965] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.935910][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.935931][ T4965] RIP: 0033:0x7f1302a1ebe9 [ 51.935946][ T4965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.935996][ T4965] RSP: 002b:00007f1301487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.936017][ T4965] RAX: ffffffffffffffda RBX: 00007f1302c45fa0 RCX: 00007f1302a1ebe9 [ 51.936030][ T4965] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 51.936041][ T4965] RBP: 00007f1301487090 R08: 0000000000000000 R09: 0000000000000000 [ 51.936052][ T4965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.936063][ T4965] R13: 00007f1302c46038 R14: 00007f1302c45fa0 R15: 00007ffee77fce38 [ 51.936102][ T4965] [ 52.299554][ T4984] loop2: detected capacity change from 0 to 512 [ 52.300621][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 52.365550][ T4984] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.513630][ T5004] loop2: detected capacity change from 0 to 512 [ 52.537503][ T5004] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.547791][ T5010] loop0: detected capacity change from 0 to 2048 [ 52.554492][ T5004] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 52.572687][ T5004] EXT4-fs (loop2): 1 truncate cleaned up [ 52.607231][ T4387] Alternate GPT is invalid, using primary GPT. [ 52.613662][ T4387] loop0: p2 p3 p7 [ 52.629896][ T5010] Alternate GPT is invalid, using primary GPT. [ 52.636480][ T5010] loop0: p2 p3 p7 [ 52.897566][ T5060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 52.995138][ T5073] loop0: detected capacity change from 0 to 512 [ 53.001643][ T5071] loop2: detected capacity change from 0 to 512 [ 53.003021][ T5073] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.019345][ T5073] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 53.034728][ T5073] EXT4-fs (loop0): 1 truncate cleaned up [ 53.067735][ T5071] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.096323][ T5078] geneve2: entered promiscuous mode [ 53.101583][ T5078] geneve2: entered allmulticast mode [ 53.109712][ T5071] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 53.147379][ T5086] loop0: detected capacity change from 0 to 128 [ 53.155048][ T5086] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz.0.563: iget: checksum invalid [ 53.167746][ T5086] EXT4-fs (loop0): get root inode failed [ 53.173468][ T5086] EXT4-fs (loop0): mount failed [ 53.182065][ T5071] EXT4-fs (loop2): 1 truncate cleaned up [ 53.182203][ T5090] FAULT_INJECTION: forcing a failure. [ 53.182203][ T5090] name failslab, interval 1, probability 0, space 0, times 0 [ 53.200381][ T5090] CPU: 0 UID: 0 PID: 5090 Comm: syz.3.564 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 53.200410][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.200451][ T5090] Call Trace: [ 53.200466][ T5090] [ 53.200474][ T5090] __dump_stack+0x1d/0x30 [ 53.200497][ T5090] dump_stack_lvl+0xe8/0x140 [ 53.200515][ T5090] dump_stack+0x15/0x1b [ 53.200533][ T5090] should_fail_ex+0x265/0x280 [ 53.200554][ T5090] should_failslab+0x8c/0xb0 [ 53.200646][ T5090] kmem_cache_alloc_noprof+0x50/0x310 [ 53.200676][ T5090] ? getname_flags+0x80/0x3b0 [ 53.200708][ T5090] getname_flags+0x80/0x3b0 [ 53.200733][ T5090] __x64_sys_link+0x33/0x70 [ 53.200843][ T5090] x64_sys_call+0x12a7/0x2ff0 [ 53.200865][ T5090] do_syscall_64+0xd2/0x200 [ 53.200900][ T5090] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.200927][ T5090] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.200955][ T5090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.201053][ T5090] RIP: 0033:0x7f521902ebe9 [ 53.201069][ T5090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.201088][ T5090] RSP: 002b:00007f5217a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 53.201111][ T5090] RAX: ffffffffffffffda RBX: 00007f5219255fa0 RCX: 00007f521902ebe9 [ 53.201123][ T5090] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 53.201201][ T5090] RBP: 00007f5217a97090 R08: 0000000000000000 R09: 0000000000000000 [ 53.201216][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.201230][ T5090] R13: 00007f5219256038 R14: 00007f5219255fa0 R15: 00007ffdfe04e0c8 [ 53.201255][ T5090] [ 53.478997][ T5093] loop3: detected capacity change from 0 to 8192 [ 53.490136][ T5100] geneve2: entered promiscuous mode [ 53.495497][ T5100] geneve2: entered allmulticast mode [ 53.511199][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 53.511216][ T29] audit: type=1400 audit(1754950359.433:5981): avc: denied { write } for pid=5102 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 53.620088][ T5106] loop2: detected capacity change from 0 to 512 [ 53.656840][ T5106] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.811000][ T5117] loop1: detected capacity change from 0 to 2048 [ 53.821581][ T29] audit: type=1326 audit(1754950359.743:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 53.854113][ T29] audit: type=1326 audit(1754950359.743:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 53.877665][ T29] audit: type=1326 audit(1754950359.753:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1302a1d550 code=0x7ffc0000 [ 53.901198][ T29] audit: type=1326 audit(1754950359.753:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 53.924883][ T29] audit: type=1326 audit(1754950359.753:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 53.937538][ T3291] Alternate GPT is invalid, using primary GPT. [ 53.948471][ T29] audit: type=1326 audit(1754950359.753:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 53.954631][ T3291] loop1: p2 p3 p7 [ 53.977822][ T29] audit: type=1326 audit(1754950359.753:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 53.977848][ T29] audit: type=1326 audit(1754950359.753:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 53.977888][ T29] audit: type=1326 audit(1754950359.753:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f1302a1ebe9 code=0x7ffc0000 [ 54.062886][ T5133] geneve2: entered promiscuous mode [ 54.068140][ T5133] geneve2: entered allmulticast mode [ 54.081016][ T5117] Alternate GPT is invalid, using primary GPT. [ 54.084959][ T5130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5130 comm=syz.2.582 [ 54.087485][ T5117] loop1: p2 p3 p7 [ 54.196638][ T5141] loop2: detected capacity change from 0 to 512 [ 54.235367][ T5141] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 54.252310][ T5141] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.584: invalid indirect mapped block 2683928664 (level 1) [ 54.278365][ T5141] EXT4-fs (loop2): Remounting filesystem read-only [ 54.285505][ T5141] EXT4-fs (loop2): 1 truncate cleaned up [ 54.360329][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.371161][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 54.373438][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.446199][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.447847][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.501057][ T5164] loop3: detected capacity change from 0 to 764 [ 54.505911][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 54.598825][ T5168] loop1: detected capacity change from 0 to 128 [ 54.619326][ T5168] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.627332][ T5168] FAT-fs (loop1): Filesystem has been set read-only [ 54.635401][ T5168] syz.1.594: attempt to access beyond end of device [ 54.635401][ T5168] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 54.654308][ T5168] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.662280][ T5168] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.671711][ T5168] syz.1.594: attempt to access beyond end of device [ 54.671711][ T5168] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.687086][ T5168] syz.1.594: attempt to access beyond end of device [ 54.687086][ T5168] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.702617][ T5168] syz.1.594: attempt to access beyond end of device [ 54.702617][ T5168] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 54.723050][ T5170] loop3: detected capacity change from 0 to 1024 [ 54.725229][ T5168] syz.1.594: attempt to access beyond end of device [ 54.725229][ T5168] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.743645][ T5171] syz.1.594: attempt to access beyond end of device [ 54.743645][ T5171] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 54.756834][ T5171] Buffer I/O error on dev loop1, logical block 2065, async page read [ 54.770743][ T5171] syz.1.594: attempt to access beyond end of device [ 54.770743][ T5171] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 54.771440][ T5170] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.784125][ T5171] Buffer I/O error on dev loop1, logical block 2066, async page read [ 54.806413][ T5171] syz.1.594: attempt to access beyond end of device [ 54.806413][ T5171] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 54.819686][ T5171] Buffer I/O error on dev loop1, logical block 2067, async page read [ 54.837286][ T5171] syz.1.594: attempt to access beyond end of device [ 54.837286][ T5171] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 54.850654][ T5171] Buffer I/O error on dev loop1, logical block 2068, async page read [ 54.861361][ T5171] syz.1.594: attempt to access beyond end of device [ 54.861361][ T5171] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 54.874723][ T5171] Buffer I/O error on dev loop1, logical block 2069, async page read [ 54.884057][ T5171] Buffer I/O error on dev loop1, logical block 2070, async page read [ 54.892173][ T5171] Buffer I/O error on dev loop1, logical block 2071, async page read [ 54.900358][ T5171] Buffer I/O error on dev loop1, logical block 2072, async page read [ 54.908555][ T5171] Buffer I/O error on dev loop1, logical block 2065, async page read [ 54.916753][ T5171] Buffer I/O error on dev loop1, logical block 2066, async page read [ 55.010254][ T5182] loop2: detected capacity change from 0 to 512 [ 55.018824][ T5182] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.030797][ T5182] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 55.047431][ T5182] EXT4-fs (loop2): 1 truncate cleaned up [ 55.116278][ T5187] loop2: detected capacity change from 0 to 2048 [ 55.157662][ T4387] Alternate GPT is invalid, using primary GPT. [ 55.164322][ T4387] loop2: p2 p3 p7 [ 55.178170][ T5187] Alternate GPT is invalid, using primary GPT. [ 55.184839][ T5187] loop2: p2 p3 p7 [ 55.248668][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 55.265242][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.281282][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 55.305028][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 55.502491][ T5200] loop1: detected capacity change from 0 to 1024 [ 55.553479][ T5204] __nla_validate_parse: 11 callbacks suppressed [ 55.553500][ T5204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.606'. [ 55.573873][ T5204] loop3: detected capacity change from 0 to 1024 [ 55.591198][ T5204] EXT4-fs: inline encryption not supported [ 55.595681][ T5208] loop1: detected capacity change from 0 to 2048 [ 55.597263][ T5204] EXT4-fs: Ignoring removed i_version option [ 55.619981][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 55.644865][ T4387] Alternate GPT is invalid, using primary GPT. [ 55.651293][ T4387] loop1: p2 p3 p7 [ 55.660696][ T5208] Alternate GPT is invalid, using primary GPT. [ 55.667204][ T5208] loop1: p2 p3 p7 [ 55.672502][ T5212] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.734620][ T5218] loop0: detected capacity change from 0 to 128 [ 55.751006][ T5218] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz.0.610: iget: checksum invalid [ 55.759130][ T5216] geneve2: entered promiscuous mode [ 55.767686][ T5216] geneve2: entered allmulticast mode [ 55.780946][ T5218] EXT4-fs (loop0): get root inode failed [ 55.786742][ T5218] EXT4-fs (loop0): mount failed [ 55.827922][ T5225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.613'. [ 55.836977][ T5225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.613'. [ 55.845864][ T5225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.613'. [ 55.855534][ T5225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.613'. [ 55.886265][ T5227] geneve2: entered promiscuous mode [ 55.891509][ T5227] geneve2: entered allmulticast mode [ 55.927961][ T5231] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.985144][ T5231] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.004271][ T5236] loop1: detected capacity change from 0 to 512 [ 56.035284][ T5236] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.037095][ T5240] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.619'. [ 56.075153][ T5231] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.102699][ T5242] loop0: detected capacity change from 0 to 512 [ 56.112235][ T5242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.127444][ T5231] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.141991][ T5242] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 56.189382][ T5242] EXT4-fs (loop0): 1 truncate cleaned up [ 56.211138][ T3432] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.229367][ T3432] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.256179][ T3432] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.264545][ T3432] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.294081][ T5253] loop4: detected capacity change from 0 to 128 [ 56.324513][ T5253] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz.4.624: iget: checksum invalid [ 56.344073][ T5255] loop1: detected capacity change from 0 to 512 [ 56.351363][ T5261] loop3: detected capacity change from 0 to 2048 [ 56.359091][ T5255] EXT4-fs: Ignoring removed bh option [ 56.375458][ T5253] EXT4-fs (loop4): get root inode failed [ 56.381188][ T5253] EXT4-fs (loop4): mount failed [ 56.386468][ T5255] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 56.395144][ T5262] loop0: detected capacity change from 0 to 128 [ 56.397009][ T4387] Alternate GPT is invalid, using primary GPT. [ 56.408041][ T4387] loop3: p2 p3 p7 [ 56.420386][ T5262] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz.0.625: iget: checksum invalid [ 56.446787][ T5255] EXT4-fs (loop1): 1 truncate cleaned up [ 56.462905][ T5261] Alternate GPT is invalid, using primary GPT. [ 56.469278][ T5261] loop3: p2 p3 p7 [ 56.469320][ T5262] EXT4-fs (loop0): get root inode failed [ 56.479201][ T5262] EXT4-fs (loop0): mount failed [ 56.502431][ T5255] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.511715][ T5269] loop4: detected capacity change from 0 to 2048 [ 56.544429][ T5269] Alternate GPT is invalid, using primary GPT. [ 56.550762][ T5269] loop4: p2 p3 p7 [ 56.663033][ T5280] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.700857][ T5279] loop1: detected capacity change from 0 to 2048 [ 56.707941][ T5280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 56.744495][ T5291] mmap: syz.4.636 (5291) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.763023][ T5293] IPVS: Error connecting to the multicast addr [ 56.778824][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.636'. [ 56.790466][ T4399] Alternate GPT is invalid, using primary GPT. [ 56.796928][ T4399] loop1: p2 p3 p7 [ 56.829522][ T5291] loop4: detected capacity change from 0 to 128 [ 56.854947][ T5279] Alternate GPT is invalid, using primary GPT. [ 56.861529][ T5279] loop1: p2 p3 p7 [ 56.872667][ T5291] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.894332][ T5305] loop2: detected capacity change from 0 to 512 [ 56.910512][ T5291] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.921960][ T5307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'. [ 56.956767][ T5305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.003177][ T5305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 57.032638][ T5305] EXT4-fs (loop2): 1 truncate cleaned up [ 57.225816][ T5344] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.284256][ T5344] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.353455][ T5344] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.429672][ T5344] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.474664][ T397] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.589959][ T5374] loop1: detected capacity change from 0 to 128 [ 57.623771][ T5378] FAULT_INJECTION: forcing a failure. [ 57.623771][ T5378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.637254][ T5378] CPU: 0 UID: 0 PID: 5378 Comm: syz.1.660 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 57.637281][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.637293][ T5378] Call Trace: [ 57.637302][ T5378] [ 57.637312][ T5378] __dump_stack+0x1d/0x30 [ 57.637337][ T5378] dump_stack_lvl+0xe8/0x140 [ 57.637360][ T5378] dump_stack+0x15/0x1b [ 57.637389][ T5378] should_fail_ex+0x265/0x280 [ 57.637442][ T5378] should_fail+0xb/0x20 [ 57.637504][ T5378] should_fail_usercopy+0x1a/0x20 [ 57.637524][ T5378] _copy_from_user+0x1c/0xb0 [ 57.637606][ T5378] kstrtouint_from_user+0x69/0xf0 [ 57.637633][ T5378] ? 0xffffffff81000000 [ 57.637649][ T5378] ? selinux_file_permission+0x1e4/0x320 [ 57.637675][ T5378] proc_fail_nth_write+0x50/0x160 [ 57.637706][ T5378] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.637754][ T5378] vfs_write+0x269/0x960 [ 57.637774][ T5378] ? vfs_read+0x4e6/0x770 [ 57.637793][ T5378] ? __rcu_read_unlock+0x4f/0x70 [ 57.637831][ T5378] ? __fget_files+0x184/0x1c0 [ 57.637860][ T5378] ksys_write+0xda/0x1a0 [ 57.637885][ T5378] __x64_sys_write+0x40/0x50 [ 57.637909][ T5378] x64_sys_call+0x27fe/0x2ff0 [ 57.637981][ T5378] do_syscall_64+0xd2/0x200 [ 57.638069][ T5378] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.638095][ T5378] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.638164][ T5378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.638188][ T5378] RIP: 0033:0x7fb7670ed69f [ 57.638204][ T5378] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 57.638223][ T5378] RSP: 002b:00007fb765b57030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.638308][ T5378] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb7670ed69f [ 57.638322][ T5378] RDX: 0000000000000001 RSI: 00007fb765b570a0 RDI: 0000000000000004 [ 57.638336][ T5378] RBP: 00007fb765b57090 R08: 0000000000000000 R09: 000000000000001c [ 57.638369][ T5378] R10: 0000000020000045 R11: 0000000000000293 R12: 0000000000000001 [ 57.638389][ T5378] R13: 00007fb767316038 R14: 00007fb767315fa0 R15: 00007fffc4ba7218 [ 57.638409][ T5378] [ 58.148845][ T5404] netlink: 'syz.4.669': attribute type 5 has an invalid length. [ 58.184546][ T31] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.190512][ T5408] loop1: detected capacity change from 0 to 512 [ 58.193239][ T31] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.225669][ T31] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.226958][ T5408] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.236538][ T31] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.281140][ T5416] geneve2: entered promiscuous mode [ 58.286457][ T5416] geneve2: entered allmulticast mode [ 58.343786][ T5447] futex_wake_op: syz.1.675 tries to shift op by -1; fix this program [ 58.651874][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 58.651895][ T29] audit: type=1400 audit(1754950364.523:6363): avc: denied { ioctl } for pid=5446 comm="syz.1.675" path="socket:[12552]" dev="sockfs" ino=12552 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.943696][ T29] audit: type=1326 audit(1754950364.873:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f757ebe9 code=0x7ffc0000 [ 58.968833][ T29] audit: type=1326 audit(1754950364.883:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f757ebe9 code=0x7ffc0000 [ 58.992331][ T29] audit: type=1326 audit(1754950364.883:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94f757d550 code=0x7ffc0000 [ 59.015679][ T29] audit: type=1326 audit(1754950364.883:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f757ebe9 code=0x7ffc0000 [ 59.039170][ T29] audit: type=1326 audit(1754950364.883:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94f757ebe9 code=0x7ffc0000 [ 59.062763][ T29] audit: type=1326 audit(1754950364.883:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f757ebe9 code=0x7ffc0000 [ 59.086351][ T29] audit: type=1326 audit(1754950364.883:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f94f757ebe9 code=0x7ffc0000 [ 59.109626][ T29] audit: type=1326 audit(1754950364.883:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f757ebe9 code=0x7ffc0000 [ 59.132940][ T29] audit: type=1326 audit(1754950364.883:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94f757ebe9 code=0x7ffc0000 [ 59.282607][ T5466] loop4: detected capacity change from 0 to 2048 [ 59.310247][ T5470] FAULT_INJECTION: forcing a failure. [ 59.310247][ T5470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.323529][ T5470] CPU: 0 UID: 0 PID: 5470 Comm: syz.2.684 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 59.323559][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.323629][ T5470] Call Trace: [ 59.323645][ T5470] [ 59.323654][ T5470] __dump_stack+0x1d/0x30 [ 59.323679][ T5470] dump_stack_lvl+0xe8/0x140 [ 59.323765][ T5470] dump_stack+0x15/0x1b [ 59.323784][ T5470] should_fail_ex+0x265/0x280 [ 59.323807][ T5470] should_fail+0xb/0x20 [ 59.323864][ T5470] should_fail_usercopy+0x1a/0x20 [ 59.323884][ T5470] _copy_from_user+0x1c/0xb0 [ 59.323911][ T5470] ___sys_recvmsg+0xaa/0x370 [ 59.323986][ T5470] do_recvmmsg+0x1ef/0x540 [ 59.324061][ T5470] ? fput+0x8f/0xc0 [ 59.324103][ T5470] __x64_sys_recvmmsg+0xe5/0x170 [ 59.324130][ T5470] x64_sys_call+0x27a6/0x2ff0 [ 59.324230][ T5470] do_syscall_64+0xd2/0x200 [ 59.324257][ T5470] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.324284][ T5470] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.324363][ T5470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.324400][ T5470] RIP: 0033:0x7f94f757ebe9 [ 59.324415][ T5470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.324431][ T5470] RSP: 002b:00007f94f5fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 59.324507][ T5470] RAX: ffffffffffffffda RBX: 00007f94f77a5fa0 RCX: 00007f94f757ebe9 [ 59.324521][ T5470] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 59.324534][ T5470] RBP: 00007f94f5fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.324547][ T5470] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 59.324560][ T5470] R13: 00007f94f77a6038 R14: 00007f94f77a5fa0 R15: 00007ffefa0efb98 [ 59.324579][ T5470] [ 59.527729][ T4387] Alternate GPT is invalid, using primary GPT. [ 59.534197][ T4387] loop4: p2 p3 p7 [ 59.553393][ T5480] FAULT_INJECTION: forcing a failure. [ 59.553393][ T5480] name failslab, interval 1, probability 0, space 0, times 0 [ 59.555969][ T5466] Alternate GPT is invalid, using primary GPT. [ 59.566118][ T5480] CPU: 1 UID: 0 PID: 5480 Comm: syz.2.686 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 59.566147][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.566159][ T5480] Call Trace: [ 59.566212][ T5480] [ 59.566220][ T5480] __dump_stack+0x1d/0x30 [ 59.566243][ T5480] dump_stack_lvl+0xe8/0x140 [ 59.566263][ T5480] dump_stack+0x15/0x1b [ 59.566280][ T5480] should_fail_ex+0x265/0x280 [ 59.566302][ T5480] should_failslab+0x8c/0xb0 [ 59.566372][ T5480] kmem_cache_alloc_noprof+0x50/0x310 [ 59.566433][ T5480] ? getname_flags+0x80/0x3b0 [ 59.566460][ T5480] getname_flags+0x80/0x3b0 [ 59.566536][ T5480] __x64_sys_mknodat+0x4f/0x70 [ 59.566564][ T5480] x64_sys_call+0x2ec8/0x2ff0 [ 59.566585][ T5480] do_syscall_64+0xd2/0x200 [ 59.566611][ T5480] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.566697][ T5480] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.566721][ T5480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.566743][ T5480] RIP: 0033:0x7f94f757ebe9 [ 59.566759][ T5480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.566796][ T5480] RSP: 002b:00007f94f5fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 59.566816][ T5480] RAX: ffffffffffffffda RBX: 00007f94f77a5fa0 RCX: 00007f94f757ebe9 [ 59.566829][ T5480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 59.566842][ T5480] RBP: 00007f94f5fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.566854][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.566866][ T5480] R13: 00007f94f77a6038 R14: 00007f94f77a5fa0 R15: 00007ffefa0efb98 [ 59.566883][ T5480] [ 59.745687][ T5466] loop4: p2 p3 p7 [ 59.791347][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 59.793287][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 59.802407][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 59.864842][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 59.864936][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 59.888661][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 59.926438][ T5498] loop4: detected capacity change from 0 to 512 [ 59.955601][ T5498] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.980198][ T5507] loop1: detected capacity change from 0 to 128 [ 60.002324][ T5507] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.697: iget: checksum invalid [ 60.020979][ T5507] EXT4-fs (loop1): get root inode failed [ 60.026724][ T5507] EXT4-fs (loop1): mount failed [ 60.057295][ T5512] loop4: detected capacity change from 0 to 2048 [ 60.109321][ T3291] Alternate GPT is invalid, using primary GPT. [ 60.115692][ T3291] loop4: p2 p3 p7 [ 60.126786][ T5512] Alternate GPT is invalid, using primary GPT. [ 60.133219][ T5512] loop4: p2 p3 p7 [ 60.141052][ T5438] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.162690][ T5438] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.188558][ T5438] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.198342][ T5438] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.216508][ T5532] loop3: detected capacity change from 0 to 512 [ 60.232576][ T5532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.266788][ T5532] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.305285][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 60.305310][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 60.315890][ T5532] EXT4-fs (loop3): 1 truncate cleaned up [ 60.328368][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 60.370600][ T5542] loop3: detected capacity change from 0 to 512 [ 60.381208][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 60.396657][ T5542] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.411554][ T5542] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.423790][ T5540] loop4: detected capacity change from 0 to 8192 [ 60.437488][ T5542] EXT4-fs (loop3): 1 truncate cleaned up [ 60.534570][ T5546] loop3: detected capacity change from 0 to 512 [ 60.542900][ T5546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.562584][ T5546] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.582727][ T5546] EXT4-fs (loop3): 1 truncate cleaned up [ 60.734001][ T5557] loop3: detected capacity change from 0 to 512 [ 60.745528][ T5557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.758588][ T5557] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.773724][ T5557] EXT4-fs (loop3): 1 truncate cleaned up [ 60.864015][ T5560] __nla_validate_parse: 9 callbacks suppressed [ 60.864092][ T5560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.715'. [ 60.879274][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 60.969312][ T5566] loop0: detected capacity change from 0 to 2048 [ 60.977529][ T5565] loop3: detected capacity change from 0 to 2048 [ 60.991381][ T5568] loop2: detected capacity change from 0 to 512 [ 60.999085][ T5568] EXT4-fs: Ignoring removed nobh option [ 61.012878][ T5568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 61.029814][ T5568] System zones: 0-2, 18-18, 34-34 [ 61.040520][ T5568] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.040906][ T4387] Alternate GPT is invalid, using primary GPT. [ 61.057837][ T4387] loop0: p2 p3 p7 [ 61.069877][ T5565] Alternate GPT is invalid, using primary GPT. [ 61.076366][ T5565] loop3: p2 p3 p7 [ 61.111694][ T5566] Alternate GPT is invalid, using primary GPT. [ 61.118147][ T5566] loop0: p2 p3 p7 [ 61.125701][ T5574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 61.340132][ T5582] bridge_slave_1: left allmulticast mode [ 61.346148][ T5582] bridge_slave_1: left promiscuous mode [ 61.351899][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.365289][ T5582] bridge_slave_0: left allmulticast mode [ 61.371025][ T5582] bridge_slave_0: left promiscuous mode [ 61.371138][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.583552][ T5603] loop2: detected capacity change from 0 to 2048 [ 61.620445][ T4387] Alternate GPT is invalid, using primary GPT. [ 61.627029][ T4387] loop2: p2 p3 p7 [ 61.640084][ T5603] Alternate GPT is invalid, using primary GPT. [ 61.646694][ T5603] loop2: p2 p3 p7 [ 61.739459][ T5613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'. [ 61.748582][ T5613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.738'. [ 61.757598][ T5613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'. [ 61.874230][ T5625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'. [ 62.216114][ T5662] loop4: detected capacity change from 0 to 512 [ 62.225261][ T5662] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.241527][ T5662] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 62.265854][ T5662] EXT4-fs (loop4): 1 truncate cleaned up [ 62.359670][ T3288] ================================================================== [ 62.367772][ T3288] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 62.375995][ T3288] [ 62.378298][ T3288] write to 0xffff888102ff3778 of 2 bytes by interrupt on cpu 0: [ 62.385898][ T3288] virtqueue_disable_cb+0x7a/0x150 [ 62.390987][ T3288] skb_xmit_done+0x65/0x140 [ 62.395469][ T3288] vring_interrupt+0x155/0x180 [ 62.400237][ T3288] __handle_irq_event_percpu+0x93/0x440 [ 62.405857][ T3288] handle_irq_event+0x64/0xf0 [ 62.410508][ T3288] handle_edge_irq+0x154/0x470 [ 62.415249][ T3288] __common_interrupt+0x60/0xb0 [ 62.420075][ T3288] common_interrupt+0x7e/0x90 [ 62.424730][ T3288] asm_common_interrupt+0x26/0x40 [ 62.429737][ T3288] kcsan_setup_watchpoint+0x415/0x430 [ 62.435273][ T3288] from_kuid_munged+0x128/0x350 [ 62.440107][ T3288] __se_sys_newfstatat+0x120/0x260 [ 62.445218][ T3288] __x64_sys_newfstatat+0x55/0x70 [ 62.450221][ T3288] x64_sys_call+0x135a/0x2ff0 [ 62.454966][ T3288] do_syscall_64+0xd2/0x200 [ 62.459461][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.465338][ T3288] [ 62.467644][ T3288] read to 0xffff888102ff3778 of 2 bytes by task 3288 on cpu 1: [ 62.475171][ T3288] virtqueue_disable_cb+0x58/0x150 [ 62.480262][ T3288] start_xmit+0x103/0x17a0 [ 62.484746][ T3288] dev_hard_start_xmit+0x125/0x3e0 [ 62.489863][ T3288] sch_direct_xmit+0x192/0x550 [ 62.494702][ T3288] __dev_queue_xmit+0xe9a/0x2000 [ 62.499640][ T3288] ip_finish_output2+0x77f/0x8b0 [ 62.504570][ T3288] ip_finish_output+0x114/0x2a0 [ 62.509588][ T3288] ip_output+0xbd/0x190 [ 62.513810][ T3288] __ip_queue_xmit+0xb4b/0xb80 [ 62.518649][ T3288] ip_queue_xmit+0x39/0x50 [ 62.523056][ T3288] __tcp_transmit_skb+0x1641/0x1a60 [ 62.528268][ T3288] tcp_write_xmit+0x1210/0x2fd0 [ 62.533185][ T3288] __tcp_push_pending_frames+0x6d/0x1b0 [ 62.538742][ T3288] tcp_push+0x311/0x330 [ 62.542883][ T3288] tcp_sendmsg_locked+0x2458/0x2c00 [ 62.548084][ T3288] tcp_sendmsg+0x2f/0x50 [ 62.552340][ T3288] inet_sendmsg+0x76/0xd0 [ 62.556681][ T3288] __sock_sendmsg+0x102/0x180 [ 62.561342][ T3288] sock_write_iter+0x165/0x1b0 [ 62.566102][ T3288] vfs_write+0x52a/0x960 [ 62.570327][ T3288] ksys_write+0xda/0x1a0 [ 62.574546][ T3288] __x64_sys_write+0x40/0x50 [ 62.579111][ T3288] x64_sys_call+0x27fe/0x2ff0 [ 62.583766][ T3288] do_syscall_64+0xd2/0x200 [ 62.588251][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.594126][ T3288] [ 62.596426][ T3288] value changed: 0x0000 -> 0x0001 [ 62.601419][ T3288] [ 62.603723][ T3288] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 62.609867][ T3288] CPU: 1 UID: 0 PID: 3288 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 62.620705][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.631025][ T3288] ================================================================== [ 62.659920][ T3288] syz-executor (3288) used greatest stack depth: 9448 bytes left [ 63.160704][ T5438] bridge_slave_1: left allmulticast mode [ 63.166723][ T5438] bridge_slave_1: left promiscuous mode [ 63.172551][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.179973][ T5438] bridge_slave_0: left allmulticast mode [ 63.185808][ T5438] bridge_slave_0: left promiscuous mode [ 63.191518][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.233750][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.243017][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.251879][ T5438] bond0 (unregistering): Released all slaves [ 63.321401][ T5438] hsr_slave_0: left promiscuous mode [ 63.328382][ T5438] hsr_slave_1: left promiscuous mode [ 63.351408][ T5438] team0 (unregistering): Port device team_slave_1 removed [ 63.361741][ T5438] team0 (unregistering): Port device team_slave_0 removed [ 64.183298][ T5438] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.223551][ T5438] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.284264][ T5438] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.323198][ T5438] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.389446][ T5438] bridge_slave_1: left allmulticast mode [ 64.395231][ T5438] bridge_slave_1: left promiscuous mode [ 64.400949][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.410393][ T5438] bridge_slave_0: left allmulticast mode [ 64.416103][ T5438] bridge_slave_0: left promiscuous mode [ 64.422009][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.431602][ T5438] bridge_slave_1: left allmulticast mode [ 64.437294][ T5438] bridge_slave_1: left promiscuous mode [ 64.443115][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.450570][ T5438] bridge_slave_0: left allmulticast mode [ 64.456368][ T5438] bridge_slave_0: left promiscuous mode [ 64.462108][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.533953][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.543108][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.552466][ T5438] bond0 (unregistering): Released all slaves [ 64.570621][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.579911][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.589022][ T5438] bond0 (unregistering): Released all slaves [ 64.653551][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.662751][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.671583][ T5438] bond0 (unregistering): Released all slaves [ 64.769160][ T5438] hsr_slave_0: left promiscuous mode [ 64.775557][ T5438] hsr_slave_1: left promiscuous mode [ 64.781127][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.788803][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.797925][ T5438] hsr_slave_0: left promiscuous mode [ 64.803655][ T5438] hsr_slave_1: left promiscuous mode [ 64.809117][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.816842][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.824849][ T5438] hsr_slave_0: left promiscuous mode [ 64.830425][ T5438] hsr_slave_1: left promiscuous mode [ 64.836119][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.844030][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.869055][ T5438] team0 (unregistering): Port device team_slave_1 removed [ 64.878100][ T5438] team0 (unregistering): Port device team_slave_0 removed [ 64.927629][ T5438] team0 (unregistering): Port device team_slave_1 removed [ 64.937193][ T5438] team0 (unregistering): Port device team_slave_0 removed [ 64.975311][ T5438] team0 (unregistering): Port device team_slave_1 removed [ 64.984666][ T5438] team0 (unregistering): Port device team_slave_0 removed [ 65.007028][ T5438] team0 (unregistering): Port device dummy0 removed [ 65.644214][ T5438] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.683392][ T5438] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.743290][ T5438] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.803183][ T5438] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.866403][ T5438] bridge_slave_1: left allmulticast mode [ 65.872130][ T5438] bridge_slave_1: left promiscuous mode [ 65.877791][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.885423][ T5438] bridge_slave_0: left allmulticast mode [ 65.891174][ T5438] bridge_slave_0: left promiscuous mode [ 65.897055][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.964623][ T5438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.974540][ T5438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.983891][ T5438] bond0 (unregistering): Released all slaves [ 66.016404][ T5438] hsr_slave_0: left promiscuous mode [ 66.022277][ T5438] hsr_slave_1: left promiscuous mode [ 66.027975][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.035436][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.045156][ T5438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.052727][ T5438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.063550][ T5438] veth1_macvtap: left promiscuous mode [ 66.069057][ T5438] veth0_macvtap: left promiscuous mode [ 66.122824][ T5438] team0 (unregistering): Port device team_slave_1 removed [ 66.131715][ T5438] team0 (unregistering): Port device team_slave_0 removed