last executing test programs: 3.198491606s ago: executing program 1 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000000000400000008541b582100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) alarm(0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf0000000000000500"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000002000000000000000000000000439f18455d90fbe55cf6ad83ed0b9fe3bd3b710b60e3", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_tid_address(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB], 0x10c}}, 0x804) 2.742996826s ago: executing program 1 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0xee00, 0x0) 2.618418378s ago: executing program 1 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000000000400000008541b582100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) alarm(0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf0000000000000500"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000002000000000000000000000000439f18455d90fbe55cf6ad83ed0b9fe3bd3b710b60e3", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_tid_address(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB], 0x10c}}, 0x804) 2.188819757s ago: executing program 1 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x214a43, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7}}, @ptr={0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @struct={0xd, 0x4, 0x0, 0x4, 0x0, 0x7, [{0x10, 0x2, 0x4}, {0x9, 0x3, 0xffffffff}, {0x5, 0x3, 0x4}, {0xc, 0x4, 0x81}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x30, 0x71]}}, &(0x7f00000001c0)=""/87, 0x8b, 0x57, 0x0, 0x7, 0x10000, @value=r2}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x6a1e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000405"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000040) syz_emit_ethernet(0x66, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c20000002059249b379086dd6010811400301100000000000000000000000000000000ff84000000000000000000000100000e220030907865ef83f7775bcf0ddbfa95cc714fe4297b681bd9ed5d0c007716fdc67a6967d9817f39d296d8f845d629ffa5f4bc4008cfee444b71ac8007c435563a68cdc627c4c5a175944f2122899ff3e6ad048bafa8d28ad717e2bc0bd829c5b73a"], 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(0xffffffffffffffff, 0x7fffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000302, 0xee00, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r8, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 2.03015078s ago: executing program 1 (id=752): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x17) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000000000063113800000000008510000002000000850000000500000095000000000000009500a5050000000087a45f2f52cef602ee26b815b347e4ed1026ee3b8abcd838b31a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3fffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x20}}, 0x4004) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.231979096s ago: executing program 0 (id=774): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000001cc0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="31ce754ff4827d799c72310a03310589344451a44fc13b4ee6560054ea0382c244ca8fc6afa30565164ca5d5e0cc527de7f958ad832d10ae6524b71e1483a1450ec26e9b7db6f9adf10c50816701b67f83ec4acc7ed67c71ac9f044813bb83c148db963870630f3b7fbb3dcd022e6fb3dc78f8c8e3429323b0d6408ea66f6d90171e2603499bd592b0b8316b79998d9990bd28faab26c56bc3a62411c3d286a07d93dd7feb114e118731e65d2e65ed353d6342cb9c9d4724b077228b6851db9358c8a031a9eb86d6b5fb47", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000afa000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40bf1c7d63ef7a6ce27b6d3bfffffffc4c0000000c0a010100000000000000000a0000060900820073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002140000001100010000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000001dc0)=ANY=[@ANYBLOB="c9c642ca70c08a275c8d9a41f0e8a07638f4c6191a4a07", @ANYRESOCT=r2, @ANYRES32=r0, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRES8=r4, @ANYBLOB="ea7eefd617ee4e82c1944bd964ab7c0841fb5b7c5150223f9e15ded4d84f8576c69141949158d547d86a0e9fa7ecbf4130648038a50e9ce46e6bfdf325c8053f1266fb6da641db657d4d515a9f1de62b70ef3c11af73af7c63a4a3691f8d7ac0ee4d1f749273f1afaa298a2357bd07b263e3096591889211e984a7e0e874d715d4fad4034dab81351651dec09b7eeb3a59187457bee4f6a1c6d2f2131ad69261af088c8b4f9705272052ee907087c6399996ac577e3124c8a5145aa31c5920139c60e4aa4308c17c8770a92b321088fed4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000007000000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085000000010000a063"], &(0x7f0000000240)='GPL\x00', 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x42480, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) write$RDMA_USER_CM_CMD_NOTIFY(r10, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r11, 0x5425, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000380)={'\x00', 0x40, 0x2, 0x2e0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.071085959s ago: executing program 2 (id=777): timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) timer_getoverrun(r0) 990.651941ms ago: executing program 2 (id=779): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) accept4(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, 0x80800) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) 990.02648ms ago: executing program 3 (id=780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='mm_page_free\x00', r0, 0x0, 0x8080000001}, 0x18) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) 968.327791ms ago: executing program 2 (id=781): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 893.378543ms ago: executing program 3 (id=782): socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 884.437513ms ago: executing program 1 (id=783): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x3, 0x0) fcntl$setpipe(r2, 0x4, 0xfffffffffffff000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x1c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0xfe8e, 0x12) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000008, 0x42031, 0xffffffffffffffff, 0x80000000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="181100"/20, @ANYRESHEX=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000440)='sys_enter\x00', r6, 0x0, 0xfff}, 0xfffffffffffffe0d) 850.838633ms ago: executing program 2 (id=784): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x0, 0x60b, 0x70bd2d}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) r3 = dup2(r0, r0) sendto$inet6(r0, &(0x7f0000000000)="b3d368e88182e2e951c5d9ab484c1458568de14eb508a27033487c1fa11b5ca678e297ddaa35fb49aadac6e2372823a584411e0d5b23ba4b2f9f4fc7fbb9cc09d336fa2e9d6b06ebfec4186fa363e0acd3ffc312ff7fdac7770289a0d2819ca0cf67d2a583bfa8a6d2c0725a3e5b2593e624960e46e8aee08bd0bd3c", 0x7c, 0x4004800, 0x0, 0x0) write$tun(r3, 0x0, 0x46) 827.677124ms ago: executing program 2 (id=785): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 824.834864ms ago: executing program 3 (id=786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r4) sendmsg$key(r3, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 783.038955ms ago: executing program 4 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 782.111855ms ago: executing program 2 (id=788): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x2, 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000200)=""/183, 0xb7, 0x0, &(0x7f00000003c0)=""/166, 0xa6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000008a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) sendmsg$tipc(r5, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r5, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) 750.535966ms ago: executing program 4 (id=789): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 727.147716ms ago: executing program 4 (id=790): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x0, 0x60b, 0x70bd2d}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) r4 = dup2(r0, r0) sendto$inet6(r0, &(0x7f0000000000)="b3d368e88182e2e951c5d9ab484c1458568de14eb508a27033487c1fa11b5ca678e297ddaa35fb49aadac6e2372823a584411e0d5b23ba4b2f9f4fc7fbb9cc09d336fa2e9d6b06ebfec4186fa363e0acd3ffc312ff7fdac7770289a0d2819ca0cf67d2a583bfa8a6d2c0725a3e5b2593e624960e46e8aee08bd0bd3c", 0x7c, 0x4004800, 0x0, 0x0) write$tun(r4, 0x0, 0x46) 704.812467ms ago: executing program 4 (id=791): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 704.047536ms ago: executing program 3 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x214a43, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7}}, @ptr={0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @struct={0xd, 0x4, 0x0, 0x4, 0x0, 0x7, [{0x10, 0x2, 0x4}, {0x9, 0x3, 0xffffffff}, {0x5, 0x3, 0x4}, {0xc, 0x4, 0x81}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x30, 0x71]}}, &(0x7f00000001c0)=""/87, 0x8b, 0x57, 0x0, 0x7, 0x10000, @value=r2}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x6a1e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000405"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000040) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r8, 0x7fffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r10, 0xffffffff80000302, 0xee00, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r9, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 677.884217ms ago: executing program 4 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d85"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='mm_page_free\x00', r0, 0x0, 0x8080000001}, 0x18) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) 589.729489ms ago: executing program 4 (id=794): syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@hopopts={{0x18, 0x29, 0x36, {0x2b}}}, @hopopts_2292={{0x18}}], 0x30}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffff800, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="c631d672394c7bbf4069c1062f036e4de0c2b4a0ee9517a4e4508edcc2d4407fb98eb6eeb580830963964dedfde7276a6b342cef546bb368a1540d", 0x3b}], 0x1, &(0x7f00000006c0)=[@hopopts_2292={{0x130, 0x29, 0x36, {0x3a, 0x22, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x2}}, @generic={0x4, 0xe3, "e4cdc8076acbc7d8b31933b9ecb20d29f9a88c1ffd65dc91ac1b7622a5485ed07e73ad9935129a98d43f3a32a979ed29e8fa625e348909b234498f16ba8f59e115b00cb6988529ab596fb4d24b3936a18b40eace4a4000b138fefba2061e0c71e87025f888e89b37b1517bc9349ebfcc5966a6dee300eafb793c64163bddd87652a5c34c631568222a676a78df725f7d2e5cbfac2471651cdfeea3e1c4bdd13c1ce21b8ad7d6ee292da5ba713517ebc4fcf487d006c9ba04f80c0d4c36d6419be4d95a16a7941a5d4021cb84021313b32914c4bff0186ddc6708639c9f9de7f788fdc5"}, @ra={0x5, 0x2, 0x101}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0xe9, 0x9, [0x2]}}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim]}}}, @rthdr={{0x48, 0x29, 0x39, {0x5e, 0x6, 0x1, 0xdc, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x12}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x32, 0x14, 0x2, 0x10, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @mcast1, @loopback, @local, @private2, @private0]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3a}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x11, 0xb, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0xf4, 0xc800, [0x7, 0x4, 0xfffffffffffffff9, 0x3]}}, @ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0xf09}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @empty}, @padn, @pad1]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0xffff}]}}}], 0x2f0}}], 0x2, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) 547.06457ms ago: executing program 3 (id=795): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000380)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 484.432721ms ago: executing program 0 (id=796): socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 413.194502ms ago: executing program 0 (id=797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa3b1f00000000004325bdc988a8000081"], 0x18) 396.712882ms ago: executing program 3 (id=798): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (fail_nth: 4) 250.603915ms ago: executing program 0 (id=799): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 246.197716ms ago: executing program 0 (id=800): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 0s ago: executing program 0 (id=801): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x0, 0x60b, 0x70bd2d}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) r4 = dup2(r0, r0) sendto$inet6(r0, &(0x7f0000000000)="b3d368e88182e2e951c5d9ab484c1458568de14eb508a27033487c1fa11b5ca678e297ddaa35fb49aadac6e2372823a584411e0d5b23ba4b2f9f4fc7fbb9cc09d336fa2e9d6b06ebfec4186fa363e0acd3ffc312ff7fdac7770289a0d2819ca0cf67d2a583bfa8a6d2c0725a3e5b2593e624960e46e8aee08bd0bd3c", 0x7c, 0x4004800, 0x0, 0x0) write$tun(r4, 0x0, 0x46) kernel console output (not intermixed with test programs): 48.384607][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 48.397507][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 48.411418][ T29] audit: type=1400 audit(1757031729.787:1046): avc: denied { bind } for pid=4150 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.411663][ T3815] udevd[3815]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 48.438527][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.467324][ T2993] loop3: p1 p3 < > [ 48.476423][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.505539][ T4153] FAULT_INJECTION: forcing a failure. [ 48.505539][ T4153] name failslab, interval 1, probability 0, space 0, times 0 [ 48.518251][ T4153] CPU: 0 UID: 0 PID: 4153 Comm: syz.3.204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.518337][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.518348][ T4153] Call Trace: [ 48.518354][ T4153] [ 48.518361][ T4153] __dump_stack+0x1d/0x30 [ 48.518384][ T4153] dump_stack_lvl+0xe8/0x140 [ 48.518402][ T4153] dump_stack+0x15/0x1b [ 48.518484][ T4153] should_fail_ex+0x265/0x280 [ 48.518509][ T4153] ? legacy_init_fs_context+0x31/0x80 [ 48.518532][ T4153] should_failslab+0x8c/0xb0 [ 48.518555][ T4153] __kmalloc_cache_noprof+0x4c/0x320 [ 48.518643][ T4153] legacy_init_fs_context+0x31/0x80 [ 48.518675][ T4153] alloc_fs_context+0x3ef/0x4e0 [ 48.518704][ T4153] fs_context_for_mount+0x22/0x30 [ 48.518726][ T4153] do_new_mount+0xe9/0x5e0 [ 48.518831][ T4153] ? security_capable+0x83/0x90 [ 48.518930][ T4153] path_mount+0x4a4/0xb20 [ 48.518958][ T4153] ? user_path_at+0x109/0x130 [ 48.519010][ T4153] __se_sys_mount+0x28f/0x2e0 [ 48.519031][ T4153] ? fput+0x8f/0xc0 [ 48.519129][ T4153] __x64_sys_mount+0x67/0x80 [ 48.519157][ T4153] x64_sys_call+0x2b4d/0x2ff0 [ 48.519203][ T4153] do_syscall_64+0xd2/0x200 [ 48.519232][ T4153] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.519286][ T4153] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.519312][ T4153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.519332][ T4153] RIP: 0033:0x7fe29502ebe9 [ 48.519350][ T4153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.519375][ T4153] RSP: 002b:00007fe293a8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 48.519399][ T4153] RAX: ffffffffffffffda RBX: 00007fe295265fa0 RCX: 00007fe29502ebe9 [ 48.519415][ T4153] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 48.519489][ T4153] RBP: 00007fe293a8f090 R08: 00002000000004c0 R09: 0000000000000000 [ 48.519505][ T4153] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001 [ 48.519517][ T4153] R13: 00007fe295266038 R14: 00007fe295265fa0 R15: 00007ffc995770d8 [ 48.519536][ T4153] [ 48.679751][ T3815] udevd[3815]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 48.725113][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 48.747974][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 48.813371][ T408] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.823702][ T408] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.832883][ T2993] loop3: p1 p3 < > [ 48.865648][ T4156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.907453][ T408] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.943906][ T29] audit: type=1400 audit(1757031730.377:1047): avc: denied { map } for pid=4154 comm="syz.3.205" path="/proc/135/net/pfkey" dev="proc" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.967678][ T29] audit: type=1400 audit(1757031730.377:1048): avc: denied { execute } for pid=4154 comm="syz.3.205" path="/proc/135/net/pfkey" dev="proc" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.994312][ T408] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.029669][ T4157] atomic_op ffff88811b278928 conn xmit_atomic 0000000000000000 [ 49.041089][ T4156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.058300][ T29] audit: type=1400 audit(1757031730.427:1049): avc: denied { append } for pid=4158 comm="syz.4.206" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.081579][ T29] audit: type=1400 audit(1757031730.427:1050): avc: denied { open } for pid=4158 comm="syz.4.206" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.105009][ T29] audit: type=1326 audit(1757031730.437:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.3.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29502ebe9 code=0x7ffc0000 [ 49.158631][ T4163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 49.171507][ T4163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'. [ 49.188444][ T4156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.251765][ T4168] macvtap0: refused to change device tx_queue_len [ 49.278582][ T4156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.397818][ T408] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.429172][ T408] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.438333][ T408] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.468275][ T408] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.526650][ T2993] loop3: p1 p3 < > [ 49.558093][ T4180] bond1: entered promiscuous mode [ 49.563280][ T4180] bond1: entered allmulticast mode [ 49.569645][ T4180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.895495][ T4180] bond1 (unregistering): Released all slaves [ 49.927041][ T4185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 49.965664][ T4188] loop4: detected capacity change from 0 to 128 [ 50.034138][ T2993] loop3: p1 p3 < > [ 50.068123][ T4192] bio_check_eod: 31 callbacks suppressed [ 50.068142][ T4192] syz.4.216: attempt to access beyond end of device [ 50.068142][ T4192] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 50.112959][ T3698] IPVS: starting estimator thread 0... [ 50.129864][ T4192] syz.4.216: attempt to access beyond end of device [ 50.129864][ T4192] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 50.183904][ T4192] syz.4.216: attempt to access beyond end of device [ 50.183904][ T4192] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 50.210863][ T4192] syz.4.216: attempt to access beyond end of device [ 50.210863][ T4192] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 50.253492][ T4197] IPVS: using max 2064 ests per chain, 103200 per kthread [ 50.275569][ T4192] syz.4.216: attempt to access beyond end of device [ 50.275569][ T4192] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 50.305476][ T4192] syz.4.216: attempt to access beyond end of device [ 50.305476][ T4192] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 50.331513][ T4192] syz.4.216: attempt to access beyond end of device [ 50.331513][ T4192] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 50.364281][ T4192] syz.4.216: attempt to access beyond end of device [ 50.364281][ T4192] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 50.395596][ T4192] syz.4.216: attempt to access beyond end of device [ 50.395596][ T4192] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 50.422619][ T4192] syz.4.216: attempt to access beyond end of device [ 50.422619][ T4192] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 50.833471][ T4209] loop0: detected capacity change from 0 to 512 [ 50.863314][ T4209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.891235][ T4209] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.944004][ T4217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.978846][ T4217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.993983][ T4219] macvtap0: refused to change device tx_queue_len [ 51.027570][ T4217] loop4: detected capacity change from 0 to 1024 [ 51.035597][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.252103][ T4228] netlink: 404 bytes leftover after parsing attributes in process `syz.4.224'. [ 51.480405][ T4224] loop0: detected capacity change from 0 to 164 [ 51.560323][ T4224] Unable to read rock-ridge attributes [ 51.712579][ T2993] loop3: p1 p3 < > [ 51.746360][ T2993] loop3: p1 p3 < > [ 51.754091][ T4224] Unable to read rock-ridge attributes [ 51.770349][ T4224] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.778168][ T2993] loop3: p1 p3 < > [ 51.938035][ T4233] netlink: 'syz.3.229': attribute type 21 has an invalid length. [ 51.947995][ T4234] netlink: 'syz.3.229': attribute type 21 has an invalid length. [ 51.969373][ T4233] netlink: 156 bytes leftover after parsing attributes in process `syz.3.229'. [ 51.978414][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 51.992685][ T4234] netlink: 156 bytes leftover after parsing attributes in process `syz.3.229'. [ 52.001882][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 52.053682][ T2993] loop3: p1 p3 < > [ 52.137663][ T2993] loop3: p1 p3 < > [ 52.175376][ T2993] loop3: p1 p3 < > [ 52.183067][ T4238] loop0: detected capacity change from 0 to 32768 [ 52.191201][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.198653][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.225441][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.232960][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.588358][ T4267] macvtap0: refused to change device tx_queue_len [ 52.708663][ T4274] loop0: detected capacity change from 0 to 512 [ 52.708737][ T4275] netlink: 'syz.1.244': attribute type 10 has an invalid length. [ 52.725160][ T4274] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.750532][ T4274] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.753595][ T4275] dummy0: entered promiscuous mode [ 52.784897][ T4274] EXT4-fs (loop0): 1 truncate cleaned up [ 52.793337][ T4274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.809069][ T4275] dummy0: entered allmulticast mode [ 52.819342][ T4275] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 52.859665][ T4274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 52.902348][ T4279] loop1: detected capacity change from 0 to 256 [ 52.926232][ T4279] msdos: Unknown parameter '18446744073709551615' [ 53.347556][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 53.347571][ T29] audit: type=1400 audit(1757031734.777:1311): avc: denied { allowed } for pid=4288 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.376558][ T4289] loop2: detected capacity change from 0 to 128 [ 53.383667][ T4289] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.395523][ T29] audit: type=1400 audit(1757031734.807:1312): avc: denied { create } for pid=4288 comm="syz.2.249" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.416750][ T29] audit: type=1400 audit(1757031734.807:1313): avc: denied { map } for pid=4288 comm="syz.2.249" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.440808][ T29] audit: type=1400 audit(1757031734.807:1314): avc: denied { read write } for pid=4288 comm="syz.2.249" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.467799][ T4289] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.477611][ T29] audit: type=1326 audit(1757031734.907:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 53.501607][ T29] audit: type=1326 audit(1757031734.907:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 53.524965][ T29] audit: type=1326 audit(1757031734.907:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 53.548470][ T29] audit: type=1326 audit(1757031734.907:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 53.571905][ T29] audit: type=1326 audit(1757031734.907:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 53.595281][ T29] audit: type=1326 audit(1757031734.927:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 53.619980][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.645336][ T4291] FAULT_INJECTION: forcing a failure. [ 53.645336][ T4291] name failslab, interval 1, probability 0, space 0, times 0 [ 53.658182][ T4291] CPU: 0 UID: 0 PID: 4291 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.658217][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.658230][ T4291] Call Trace: [ 53.658236][ T4291] [ 53.658243][ T4291] __dump_stack+0x1d/0x30 [ 53.658269][ T4291] dump_stack_lvl+0xe8/0x140 [ 53.658333][ T4291] dump_stack+0x15/0x1b [ 53.658353][ T4291] should_fail_ex+0x265/0x280 [ 53.658457][ T4291] should_failslab+0x8c/0xb0 [ 53.658481][ T4291] kmem_cache_alloc_noprof+0x50/0x310 [ 53.658577][ T4291] ? getname_flags+0x80/0x3b0 [ 53.658604][ T4291] getname_flags+0x80/0x3b0 [ 53.658706][ T4291] __x64_sys_link+0x40/0x70 [ 53.658807][ T4291] x64_sys_call+0x12a7/0x2ff0 [ 53.658834][ T4291] do_syscall_64+0xd2/0x200 [ 53.658870][ T4291] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.658922][ T4291] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.658950][ T4291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.658970][ T4291] RIP: 0033:0x7f10ed11ebe9 [ 53.658989][ T4291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.659010][ T4291] RSP: 002b:00007f10ebb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 53.659034][ T4291] RAX: ffffffffffffffda RBX: 00007f10ed355fa0 RCX: 00007f10ed11ebe9 [ 53.659090][ T4291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.659121][ T4291] RBP: 00007f10ebb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.659136][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.659149][ T4291] R13: 00007f10ed356038 R14: 00007f10ed355fa0 R15: 00007ffe292c5d88 [ 53.659167][ T4291] [ 53.920671][ T4303] macvtap0: refused to change device tx_queue_len [ 53.925058][ T4301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.254'. [ 54.003732][ T4309] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.020578][ T4307] loop2: detected capacity change from 0 to 512 [ 54.035941][ T4307] EXT4-fs: Ignoring removed orlov option [ 54.042285][ T4307] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 54.052018][ T4307] EXT4-fs (loop2): 1 truncate cleaned up [ 54.058785][ T4307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.074319][ T4307] FAULT_INJECTION: forcing a failure. [ 54.074319][ T4307] name failslab, interval 1, probability 0, space 0, times 0 [ 54.087136][ T4307] CPU: 0 UID: 0 PID: 4307 Comm: syz.2.256 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.087168][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.087183][ T4307] Call Trace: [ 54.087190][ T4307] [ 54.087199][ T4307] __dump_stack+0x1d/0x30 [ 54.087298][ T4307] dump_stack_lvl+0xe8/0x140 [ 54.087320][ T4307] dump_stack+0x15/0x1b [ 54.087335][ T4307] should_fail_ex+0x265/0x280 [ 54.087357][ T4307] should_failslab+0x8c/0xb0 [ 54.087390][ T4307] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.087467][ T4307] ? __alloc_skb+0x101/0x320 [ 54.087488][ T4307] __alloc_skb+0x101/0x320 [ 54.087509][ T4307] ? audit_log_start+0x365/0x6c0 [ 54.087546][ T4307] audit_log_start+0x380/0x6c0 [ 54.087587][ T4307] audit_seccomp+0x48/0x100 [ 54.087675][ T4307] ? __seccomp_filter+0x68c/0x10d0 [ 54.087695][ T4307] __seccomp_filter+0x69d/0x10d0 [ 54.087718][ T4307] ? _raw_spin_unlock+0x26/0x50 [ 54.087738][ T4307] __secure_computing+0x82/0x150 [ 54.087757][ T4307] syscall_trace_enter+0xcf/0x1e0 [ 54.087781][ T4307] do_syscall_64+0xac/0x200 [ 54.087807][ T4307] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.087827][ T4307] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.087853][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.087919][ T4307] RIP: 0033:0x7f129f56d5fc [ 54.087932][ T4307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.087977][ T4307] RSP: 002b:00007f129dfd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.087994][ T4307] RAX: ffffffffffffffda RBX: 00007f129f7a5fa0 RCX: 00007f129f56d5fc [ 54.088005][ T4307] RDX: 000000000000000f RSI: 00007f129dfd70a0 RDI: 0000000000000005 [ 54.088015][ T4307] RBP: 00007f129dfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.088025][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.088047][ T4307] R13: 00007f129f7a6038 R14: 00007f129f7a5fa0 R15: 00007ffd45d67b58 [ 54.088064][ T4307] [ 54.299597][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.332868][ T2993] loop3: p1 p3 < > [ 54.345517][ T4316] bridge0: entered promiscuous mode [ 54.352062][ T4316] bridge0: port 3(macsec1) entered blocking state [ 54.358641][ T4316] bridge0: port 3(macsec1) entered disabled state [ 54.370056][ T4316] macsec1: entered allmulticast mode [ 54.375433][ T4316] bridge0: entered allmulticast mode [ 54.381630][ T4316] macsec1: left allmulticast mode [ 54.386824][ T4316] bridge0: left allmulticast mode [ 54.403026][ T4316] bridge0: left promiscuous mode [ 54.456994][ T2993] loop3: p1 p3 < > [ 54.601103][ T2993] loop3: p1 p3 < > [ 54.624686][ T4330] macvtap0: refused to change device tx_queue_len [ 54.638821][ T2993] loop3: p1 p3 < > [ 54.659114][ T4335] loop4: detected capacity change from 0 to 512 [ 54.676282][ T4335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.691855][ T4335] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.695484][ T2993] loop3: p1 p3 < > [ 54.745716][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.845056][ T4343] netlink: 20 bytes leftover after parsing attributes in process `'. [ 54.864153][ T4345] tmpfs: Unknown parameter 'usrquota' [ 54.887170][ T4345] wg2: entered promiscuous mode [ 54.892101][ T4345] wg2: entered allmulticast mode [ 54.990354][ T4352] loop0: detected capacity change from 0 to 512 [ 55.027967][ T4350] syzkaller0: entered promiscuous mode [ 55.033620][ T4350] syzkaller0: entered allmulticast mode [ 55.051884][ T4352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.071258][ T4352] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.107619][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.174328][ T2993] loop3: p1 p3 < > [ 55.216270][ T2993] loop3: p1 p3 < > [ 55.382005][ T4372] macvtap0: refused to change device tx_queue_len [ 55.446375][ T4376] bridge0: port 3(bond0) entered blocking state [ 55.452986][ T4376] bridge0: port 3(bond0) entered disabled state [ 55.461470][ T4376] bond0: entered allmulticast mode [ 55.468619][ T4376] bond_slave_0: entered allmulticast mode [ 55.475616][ T4376] bond_slave_1: entered allmulticast mode [ 55.486850][ T4377] netlink: 'syz.0.281': attribute type 10 has an invalid length. [ 55.494743][ T4377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'. [ 55.498884][ T4376] bond0: entered promiscuous mode [ 55.509264][ T4376] bond_slave_0: entered promiscuous mode [ 55.516572][ T4376] bond_slave_1: entered promiscuous mode [ 55.527311][ T4377] batman_adv: batadv0: Adding interface: veth1_vlan [ 55.533968][ T4377] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.565234][ T4377] batman_adv: batadv0: Interface activated: veth1_vlan [ 55.579805][ T4381] loop4: detected capacity change from 0 to 512 [ 55.594860][ T4381] EXT4-fs: Ignoring removed orlov option [ 55.620823][ T4381] EXT4-fs (loop4): unsupported inode size: 4096 [ 55.627246][ T4381] EXT4-fs (loop4): blocksize: 2048 [ 55.638405][ T4385] loop2: detected capacity change from 0 to 512 [ 55.652977][ T2993] loop3: p1 p3 < > [ 55.728644][ T4390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'. [ 55.795782][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'. [ 56.116351][ T2993] loop3: p1 p3 < > [ 56.187284][ T4407] bond1: entered promiscuous mode [ 56.192472][ T4407] bond1: entered allmulticast mode [ 56.223307][ T4407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.240534][ T4407] bond1 (unregistering): Released all slaves [ 56.296666][ T4412] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 56.329065][ T4418] FAULT_INJECTION: forcing a failure. [ 56.329065][ T4418] name failslab, interval 1, probability 0, space 0, times 0 [ 56.341849][ T4418] CPU: 1 UID: 0 PID: 4418 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.341879][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.341894][ T4418] Call Trace: [ 56.341902][ T4418] [ 56.341911][ T4418] __dump_stack+0x1d/0x30 [ 56.341936][ T4418] dump_stack_lvl+0xe8/0x140 [ 56.341959][ T4418] dump_stack+0x15/0x1b [ 56.341978][ T4418] should_fail_ex+0x265/0x280 [ 56.342004][ T4418] should_failslab+0x8c/0xb0 [ 56.342034][ T4418] kmem_cache_alloc_noprof+0x50/0x310 [ 56.342067][ T4418] ? mas_alloc_nodes+0x265/0x520 [ 56.342105][ T4418] mas_alloc_nodes+0x265/0x520 [ 56.342143][ T4418] mas_preallocate+0x33e/0x520 [ 56.342182][ T4418] mmap_region+0xbdd/0x1630 [ 56.342244][ T4418] do_mmap+0x9b3/0xbe0 [ 56.342287][ T4418] vm_mmap_pgoff+0x17a/0x2e0 [ 56.342329][ T4418] ksys_mmap_pgoff+0x2d0/0x310 [ 56.342353][ T4418] x64_sys_call+0x14a3/0x2ff0 [ 56.342379][ T4418] do_syscall_64+0xd2/0x200 [ 56.342413][ T4418] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.342445][ T4418] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.342474][ T4418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.342496][ T4418] RIP: 0033:0x7f10ed11ebe9 [ 56.342513][ T4418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.342533][ T4418] RSP: 002b:00007f10ebb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 56.342551][ T4418] RAX: ffffffffffffffda RBX: 00007f10ed355fa0 RCX: 00007f10ed11ebe9 [ 56.342562][ T4418] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 56.342573][ T4418] RBP: 00007f10ebb7f090 R08: ffffffffffffffff R09: 0000000000000000 [ 56.342585][ T4418] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000002 [ 56.342596][ T4418] R13: 00007f10ed356038 R14: 00007f10ed355fa0 R15: 00007ffe292c5d88 [ 56.342617][ T4418] [ 56.559708][ T2993] loop3: p1 p3 < > [ 56.576548][ T4430] loop0: detected capacity change from 0 to 512 [ 56.596388][ T4431] sch_tbf: peakrate 15235429491333648805 is lower than or equals to rate 15942523117129420729 ! [ 56.618949][ T4430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.642025][ T4430] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.732686][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.756831][ T4438] loop4: detected capacity change from 0 to 512 [ 56.771020][ T4438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.790037][ T4438] EXT4-fs (loop4): 1 truncate cleaned up [ 56.797448][ T4438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.815533][ T4438] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.825751][ T2993] loop3: p1 p3 < > [ 56.924456][ T2993] loop3: p1 p3 < > [ 56.978695][ T4451] netlink: 'syz.0.305': attribute type 21 has an invalid length. [ 56.989708][ T4451] netlink: 156 bytes leftover after parsing attributes in process `syz.0.305'. [ 56.998754][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 57.024184][ T2993] loop3: p1 p3 < > [ 57.041621][ T2993] loop3: p1 p3 < > [ 57.079342][ T4461] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 57.120156][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 57.326446][ T4478] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.354642][ T4478] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.468716][ T4472] tipc: Started in network mode [ 57.473665][ T4472] tipc: Node identity 32814b7f1e07, cluster identity 4711 [ 57.480942][ T4472] tipc: Enabled bearer , priority 0 [ 57.568237][ T4472] syzkaller0: entered promiscuous mode [ 57.573911][ T4472] syzkaller0: entered allmulticast mode [ 57.594269][ T4471] tipc: Resetting bearer [ 57.614015][ T4471] tipc: Disabling bearer [ 57.626862][ T4485] netlink: 332 bytes leftover after parsing attributes in process `syz.1.317'. [ 57.636410][ T4485] netlink: 'syz.1.317': attribute type 9 has an invalid length. [ 57.644131][ T4485] netlink: 108 bytes leftover after parsing attributes in process `syz.1.317'. [ 57.653228][ T4485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 57.772894][ T4492] loop4: detected capacity change from 0 to 256 [ 57.779906][ T4492] vfat: Unknown parameter 'set' [ 57.909065][ T4500] infiniband syz!: set active [ 57.914004][ T4500] infiniband syz!: added team_slave_0 [ 57.936362][ T4500] RDS/IB: syz!: added [ 57.940599][ T4500] smc: adding ib device syz! with port count 1 [ 57.946936][ T4500] smc: ib device syz! port 1 has pnetid [ 58.035295][ T4509] loop1: detected capacity change from 0 to 1024 [ 58.074749][ T4509] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.085705][ T4509] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.156738][ T4512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.163405][ T4509] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.323: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 58.186142][ T2993] loop3: p1 p3 < > [ 58.198150][ T4512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.226099][ T4509] EXT4-fs (loop1): no journal found [ 58.353588][ T29] kauditd_printk_skb: 2044 callbacks suppressed [ 58.353603][ T29] audit: type=1326 audit(1757031739.777:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f129f50adb9 code=0x7ffc0000 [ 58.390782][ T29] audit: type=1326 audit(1757031739.817:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f129f565ba7 code=0x7ffc0000 [ 58.414231][ T29] audit: type=1326 audit(1757031739.817:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f129f50adb9 code=0x7ffc0000 [ 58.437489][ T29] audit: type=1326 audit(1757031739.817:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f129f565ba7 code=0x7ffc0000 [ 58.460824][ T29] audit: type=1326 audit(1757031739.817:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f129f50adb9 code=0x7ffc0000 [ 58.484118][ T29] audit: type=1326 audit(1757031739.817:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f129f565ba7 code=0x7ffc0000 [ 58.507396][ T29] audit: type=1326 audit(1757031739.817:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f129f50adb9 code=0x7ffc0000 [ 58.530723][ T29] audit: type=1326 audit(1757031739.817:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f129f565ba7 code=0x7ffc0000 [ 58.554046][ T29] audit: type=1326 audit(1757031739.817:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f129f50adb9 code=0x7ffc0000 [ 58.577310][ T29] audit: type=1326 audit(1757031739.817:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4503 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f129f565ba7 code=0x7ffc0000 [ 58.740210][ T4526] netlink: 404 bytes leftover after parsing attributes in process `syz.3.327'. [ 59.232427][ T4533] loop1: detected capacity change from 0 to 512 [ 59.270267][ T4522] bond1: entered promiscuous mode [ 59.275408][ T4522] bond1: entered allmulticast mode [ 59.280848][ T4522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.287734][ T4533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.305294][ T4533] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.319320][ T4522] bond1 (unregistering): Released all slaves [ 59.351520][ T4526] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.407172][ T4526] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.432193][ T4537] loop0: detected capacity change from 0 to 128 [ 59.455493][ T4526] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.456463][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.484998][ T4537] bio_check_eod: 61 callbacks suppressed [ 59.485017][ T4537] syz.0.334: attempt to access beyond end of device [ 59.485017][ T4537] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 59.515392][ T4526] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.573389][ T4543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.583226][ T145] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.591719][ T145] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.610040][ T4537] syz.0.334: attempt to access beyond end of device [ 59.610040][ T4537] loop0: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 59.625435][ T145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.628559][ T4543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.643223][ T145] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.653083][ T4537] syz.0.334: attempt to access beyond end of device [ 59.653083][ T4537] loop0: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 59.666474][ T4537] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 59.686925][ T4537] syz.0.334: attempt to access beyond end of device [ 59.686925][ T4537] loop0: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 59.707533][ T4537] syz.0.334: attempt to access beyond end of device [ 59.707533][ T4537] loop0: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 59.714502][ T4543] loop1: detected capacity change from 0 to 1024 [ 59.720945][ T4537] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 59.740637][ T4537] syz.0.334: attempt to access beyond end of device [ 59.740637][ T4537] loop0: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 59.755394][ T4537] syz.0.334: attempt to access beyond end of device [ 59.755394][ T4537] loop0: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 59.768929][ T4537] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 59.779362][ T4537] syz.0.334: attempt to access beyond end of device [ 59.779362][ T4537] loop0: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 59.793591][ T4537] syz.0.334: attempt to access beyond end of device [ 59.793591][ T4537] loop0: rw=2049, sector=216, nr_sectors = 2 limit=128 [ 59.807052][ T4537] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 59.958972][ T4537] syz.0.334: attempt to access beyond end of device [ 59.958972][ T4537] loop0: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 59.980904][ T4556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.340'. [ 59.990462][ T4537] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 60.008618][ T4537] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 60.045288][ T4537] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 60.059207][ T4557] netlink: 404 bytes leftover after parsing attributes in process `syz.1.336'. [ 60.080314][ T4557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.116763][ T4537] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 60.157199][ T4537] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 60.170397][ T4557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.220432][ T4537] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 60.243245][ T4557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.284870][ T4561] loop2: detected capacity change from 0 to 512 [ 60.317785][ T4557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.502869][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.525929][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.552091][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.556305][ T4561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.340: error while reading EA inode 32 err=-116 [ 60.573589][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.573884][ T4561] EXT4-fs (loop2): Remounting filesystem read-only [ 60.588567][ T4561] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 60.599094][ T4561] EXT4-fs (loop2): 1 orphan inode deleted [ 60.606618][ T4561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.620235][ T4561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.661875][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 60.696184][ T4568] macvtap0: refused to change device tx_queue_len [ 60.865377][ T4578] bond1: entered promiscuous mode [ 60.870588][ T4578] bond1: entered allmulticast mode [ 60.877401][ T4578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.886526][ T4578] bond1 (unregistering): Released all slaves [ 61.208850][ T2993] loop3: p1 p3 < > [ 61.239770][ T2993] loop3: p1 p3 < > [ 61.384439][ T4594] loop4: detected capacity change from 0 to 512 [ 61.410011][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.459244][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.732294][ T4605] loop0: detected capacity change from 0 to 512 [ 61.752064][ T4605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.853472][ T2993] loop3: p1 p3 < > [ 61.886143][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.948651][ T4613] loop4: detected capacity change from 0 to 128 [ 61.963925][ T4613] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.982873][ T4613] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.106164][ T4617] bond1: entered promiscuous mode [ 62.111269][ T4617] bond1: entered allmulticast mode [ 62.144355][ T4617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.171692][ T4617] bond1 (unregistering): Released all slaves [ 62.293942][ T4629] macvtap0: refused to change device tx_queue_len [ 62.337853][ T2993] loop3: p1 p3 < > [ 62.382159][ T4638] loop4: detected capacity change from 0 to 512 [ 62.389532][ T4639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.400412][ T4634] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 62.412816][ T4634] team0: Port device dummy0 added [ 62.423539][ T4639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.427521][ T4634] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 62.442271][ T4641] macvtap0: refused to change device tx_queue_len [ 62.458155][ T4634] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.468495][ T4638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.482417][ T4639] loop2: detected capacity change from 0 to 1024 [ 62.484150][ T4634] team0: Failed to send options change via netlink (err -105) [ 62.503358][ T4634] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.512512][ T4634] team0: Port device dummy0 removed [ 62.631540][ T2993] loop3: p1 p3 < > [ 62.641002][ T4654] __nla_validate_parse: 1 callbacks suppressed [ 62.641020][ T4654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.373'. [ 62.710436][ T4657] netlink: 404 bytes leftover after parsing attributes in process `syz.2.368'. [ 62.756834][ T4657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.857698][ T4657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.897620][ T4657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.997451][ T4657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.051406][ T4662] loop1: detected capacity change from 0 to 1024 [ 63.107020][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.124779][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.134541][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.142927][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.152842][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.163539][ T4662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.176170][ T4667] loop0: detected capacity change from 0 to 512 [ 63.184380][ T4667] netlink: 'syz.0.379': attribute type 13 has an invalid length. [ 63.194120][ T2993] loop3: p1 p3 < > [ 63.207559][ T4660] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 63.238458][ T4660] EXT4-fs (loop1): Remounting filesystem read-only [ 63.251413][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.258808][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.268487][ T2993] loop3: p1 p3 < > [ 63.300724][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.332441][ T4667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.346756][ T4679] loop4: detected capacity change from 0 to 512 [ 63.357967][ T4667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.378292][ T4679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.387330][ T4667] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 63.425622][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.435316][ T4681] macvtap0: refused to change device tx_queue_len [ 63.441884][ T51] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.462359][ T51] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.490516][ T51] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.502554][ T51] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.534794][ T4687] loop0: detected capacity change from 0 to 2048 [ 63.583782][ T4687] loop0: p1 < > p4 [ 63.588321][ T4687] loop0: p4 size 722688 extends beyond EOD, truncated [ 63.613502][ T29] kauditd_printk_skb: 1936 callbacks suppressed [ 63.613519][ T29] audit: type=1326 audit(63.597:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.643665][ T29] audit: type=1326 audit(63.607:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.666371][ T29] audit: type=1326 audit(63.607:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.689118][ T29] audit: type=1326 audit(63.607:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.711797][ T29] audit: type=1326 audit(63.607:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.734579][ T29] audit: type=1326 audit(63.607:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.757546][ T29] audit: type=1326 audit(63.607:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.780201][ T29] audit: type=1326 audit(63.627:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.802929][ T29] audit: type=1326 audit(63.627:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.805919][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'. [ 63.841755][ T29] audit: type=1326 audit(63.637:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 63.938544][ T4700] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 63.965328][ T4704] FAULT_INJECTION: forcing a failure. [ 63.965328][ T4704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.978470][ T4704] CPU: 0 UID: 0 PID: 4704 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.978551][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.978570][ T4704] Call Trace: [ 63.978605][ T4704] [ 63.978614][ T4704] __dump_stack+0x1d/0x30 [ 63.978652][ T4704] dump_stack_lvl+0xe8/0x140 [ 63.978676][ T4704] dump_stack+0x15/0x1b [ 63.978696][ T4704] should_fail_ex+0x265/0x280 [ 63.978723][ T4704] should_fail+0xb/0x20 [ 63.978747][ T4704] should_fail_usercopy+0x1a/0x20 [ 63.978813][ T4704] strncpy_from_user+0x25/0x230 [ 63.978848][ T4704] ? kmem_cache_alloc_noprof+0x186/0x310 [ 63.978938][ T4704] ? getname_flags+0x80/0x3b0 [ 63.978973][ T4704] getname_flags+0xae/0x3b0 [ 63.979008][ T4704] do_sys_openat2+0x60/0x110 [ 63.979088][ T4704] __se_sys_openat2+0x194/0x1f0 [ 63.979132][ T4704] __x64_sys_openat2+0x55/0x70 [ 63.979171][ T4704] x64_sys_call+0x1121/0x2ff0 [ 63.979197][ T4704] do_syscall_64+0xd2/0x200 [ 63.979245][ T4704] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.979309][ T4704] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.979363][ T4704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.979385][ T4704] RIP: 0033:0x7f10ed11ebe9 [ 63.979400][ T4704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.979428][ T4704] RSP: 002b:00007f10ebb7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 63.979512][ T4704] RAX: ffffffffffffffda RBX: 00007f10ed355fa0 RCX: 00007f10ed11ebe9 [ 63.979523][ T4704] RDX: 0000200000000280 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 63.979535][ T4704] RBP: 00007f10ebb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.979546][ T4704] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 63.979560][ T4704] R13: 00007f10ed356038 R14: 00007f10ed355fa0 R15: 00007ffe292c5d88 [ 63.979584][ T4704] [ 63.982223][ T4700] bridge0: entered allmulticast mode [ 64.192588][ T4706] bridge_slave_1: left allmulticast mode [ 64.198368][ T4706] bridge_slave_1: left promiscuous mode [ 64.204126][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.217708][ T2993] loop3: p1 p3 < > [ 64.228751][ T4706] bridge_slave_0: left allmulticast mode [ 64.234642][ T4706] bridge_slave_0: left promiscuous mode [ 64.240558][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.248632][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 64.259219][ T2993] loop3: p1 p3 < > [ 64.346900][ T4709] bond1: entered promiscuous mode [ 64.352044][ T4709] bond1: entered allmulticast mode [ 64.358067][ T4709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.368778][ T4709] bond1 (unregistering): Released all slaves [ 64.384655][ T4719] loop1: detected capacity change from 0 to 512 [ 64.398682][ T4719] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.394: error while reading EA inode 32 err=-116 [ 64.427108][ T2993] loop3: p1 p3 < > [ 64.435137][ T4719] EXT4-fs (loop1): Remounting filesystem read-only [ 64.441714][ T4719] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 64.453681][ T4719] EXT4-fs (loop1): 1 orphan inode deleted [ 64.494094][ T4719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.557674][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.824205][ T4727] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 65.029732][ T4738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.403'. [ 65.056362][ T2993] loop3: p1 p3 < > [ 65.133451][ T2993] loop3: p1 p3 < > [ 65.263115][ T2993] loop3: p1 p3 < > [ 65.309185][ T2993] loop3: p1 p3 < > [ 65.370719][ T4766] loop1: detected capacity change from 0 to 512 [ 65.409560][ T4766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.471468][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.498343][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 65.507252][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 65.517448][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 65.551785][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 65.560817][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 65.578581][ T2993] loop3: p1 p3 < > [ 65.620454][ T2993] loop3: p1 p3 < > [ 65.666976][ T4791] loop1: detected capacity change from 0 to 128 [ 65.681857][ T4791] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.703348][ T4791] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.726978][ T4793] tipc: Started in network mode [ 65.731952][ T4793] tipc: Node identity a6523b530e13, cluster identity 4711 [ 65.739159][ T4793] tipc: Enabled bearer , priority 0 [ 65.776609][ T4796] syzkaller0: entered promiscuous mode [ 65.782141][ T4796] syzkaller0: entered allmulticast mode [ 65.785998][ T4795] loop1: detected capacity change from 0 to 512 [ 65.829031][ T4793] tipc: Resetting bearer [ 65.839473][ T4795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.880959][ T4792] tipc: Resetting bearer [ 65.902282][ T4792] tipc: Disabling bearer [ 65.912725][ T4802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.922110][ T4802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.956137][ T4802] loop0: detected capacity change from 0 to 1024 [ 65.976576][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.120391][ T2993] loop3: p1 p3 < > [ 66.484893][ T4818] IPv6: Can't replace route, no match found [ 66.740852][ T4812] loop1: detected capacity change from 0 to 2048 [ 66.742359][ T2993] loop3: p1 p3 < > [ 66.793864][ T4812] loop1: p1 < > p4 [ 66.801273][ T4812] loop1: p4 size 8388608 extends beyond EOD, truncated [ 66.802479][ T4826] loop4: detected capacity change from 0 to 256 [ 66.823029][ T2993] loop3: p1 p3 < > [ 66.843380][ T4826] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.861363][ T2993] loop1: p1 < > p4 [ 66.867434][ T2993] loop1: p4 size 8388608 extends beyond EOD, truncated [ 66.891877][ T4826] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 0) [ 66.900460][ T4826] FAT-fs (loop4): Filesystem has been set read-only [ 67.040235][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 67.040653][ T3814] udevd[3814]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 67.122927][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 67.152041][ T3814] udevd[3814]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 67.352506][ T4842] loop2: detected capacity change from 0 to 128 [ 67.359416][ T4842] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.372837][ T4842] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.412529][ T4846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.429125][ T4848] loop2: detected capacity change from 0 to 1024 [ 67.437195][ T4848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.441906][ T4846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.454988][ T4848] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 67.468444][ T4848] System zones: 0-1, 3-36 [ 67.477801][ T4846] loop1: detected capacity change from 0 to 1024 [ 67.488334][ T2993] loop3: p1 p3 < > [ 67.492898][ T4848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.580718][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.639286][ T2993] loop3: p1 p3 < > [ 67.741067][ T4857] __nla_validate_parse: 6 callbacks suppressed [ 67.741084][ T4857] netlink: 404 bytes leftover after parsing attributes in process `syz.1.440'. [ 67.765559][ T4857] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.294980][ T4857] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.356035][ T4857] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.372969][ T4866] macvtap0: refused to change device tx_queue_len [ 68.383121][ T2993] loop3: p1 p3 < > [ 68.400368][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 68.416165][ T4857] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.493087][ T408] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.501942][ T408] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.511710][ T408] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.520321][ T408] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.579668][ T2993] loop3: p1 p3 < > [ 68.716009][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 68.716027][ T29] audit: type=1326 audit(68.691:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.717000][ T4892] netlink: 288 bytes leftover after parsing attributes in process `syz.4.455'. [ 68.722321][ T29] audit: type=1326 audit(68.691:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.793520][ T29] audit: type=1326 audit(68.691:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.816214][ T29] audit: type=1326 audit(68.691:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.838878][ T29] audit: type=1326 audit(68.691:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.861561][ T29] audit: type=1326 audit(68.691:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.874065][ T4892] SELinux: failed to load policy [ 68.884226][ T29] audit: type=1326 audit(68.691:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.911809][ T29] audit: type=1326 audit(68.691:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.934374][ T29] audit: type=1326 audit(68.731:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 68.957089][ T29] audit: type=1326 audit(68.731:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 69.099513][ T4901] loop2: detected capacity change from 0 to 512 [ 69.115382][ T4901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.147879][ T4901] EXT4-fs (loop2): 1 truncate cleaned up [ 69.154199][ T4901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.167477][ T4899] hub 2-0:1.0: USB hub found [ 69.174215][ T4899] hub 2-0:1.0: 8 ports detected [ 69.197784][ T4903] loop4: detected capacity change from 0 to 1024 [ 69.241450][ T4907] netlink: 'syz.0.463': attribute type 3 has an invalid length. [ 69.258967][ T4903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.297647][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 69.310015][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.340132][ T4915] loop2: detected capacity change from 0 to 512 [ 69.348810][ T4915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.369466][ T4915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.400984][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.435028][ T4922] FAULT_INJECTION: forcing a failure. [ 69.435028][ T4922] name failslab, interval 1, probability 0, space 0, times 0 [ 69.435763][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.447810][ T4922] CPU: 0 UID: 0 PID: 4922 Comm: syz.4.467 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.447847][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.447864][ T4922] Call Trace: [ 69.447874][ T4922] [ 69.447886][ T4922] __dump_stack+0x1d/0x30 [ 69.447914][ T4922] dump_stack_lvl+0xe8/0x140 [ 69.447941][ T4922] dump_stack+0x15/0x1b [ 69.447962][ T4922] should_fail_ex+0x265/0x280 [ 69.447992][ T4922] should_failslab+0x8c/0xb0 [ 69.448033][ T4922] kmem_cache_alloc_noprof+0x50/0x310 [ 69.448072][ T4922] ? mas_alloc_nodes+0x265/0x520 [ 69.448115][ T4922] mas_alloc_nodes+0x265/0x520 [ 69.448157][ T4922] mas_preallocate+0x33e/0x520 [ 69.448201][ T4922] __split_vma+0x240/0x650 [ 69.448239][ T4922] ? path_openat+0x1bf8/0x2170 [ 69.448268][ T4922] vma_modify+0x21e/0xc80 [ 69.448297][ T4922] ? _parse_integer+0x27/0x40 [ 69.448329][ T4922] vma_modify_policy+0x101/0x130 [ 69.448369][ T4922] mbind_range+0x1b8/0x440 [ 69.448400][ T4922] __se_sys_set_mempolicy_home_node+0x351/0x530 [ 69.448450][ T4922] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 69.448493][ T4922] x64_sys_call+0x2261/0x2ff0 [ 69.448524][ T4922] do_syscall_64+0xd2/0x200 [ 69.448561][ T4922] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.448593][ T4922] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.448631][ T4922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.448659][ T4922] RIP: 0033:0x7f7b2c7eebe9 [ 69.448679][ T4922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.448703][ T4922] RSP: 002b:00007f7b2b257038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 69.448729][ T4922] RAX: ffffffffffffffda RBX: 00007f7b2ca25fa0 RCX: 00007f7b2c7eebe9 [ 69.448746][ T4922] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000417000 [ 69.448761][ T4922] RBP: 00007f7b2b257090 R08: 0000000000000000 R09: 0000000000000000 [ 69.448778][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.448793][ T4922] R13: 00007f7b2ca26038 R14: 00007f7b2ca25fa0 R15: 00007ffd8a2aaa88 [ 69.448830][ T4922] [ 69.674950][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 69.716338][ T4926] loop4: detected capacity change from 0 to 512 [ 69.765343][ T4926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.790763][ T2993] loop3: p1 p3 < > [ 69.823797][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.846670][ T2993] loop3: p1 p3 < > [ 69.885043][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 69.916634][ T2993] loop3: p1 p3 < > [ 69.945232][ T4941] loop4: detected capacity change from 0 to 512 [ 69.983654][ T2993] loop3: p1 p3 < > [ 70.007243][ T4941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.097772][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.106989][ T4951] loop0: detected capacity change from 0 to 512 [ 70.164403][ T4951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.251196][ T3698] IPVS: starting estimator thread 0... [ 70.310908][ T4961] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 70.340406][ T4961] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.478: corrupted inode contents [ 70.363809][ T4957] IPVS: using max 1824 ests per chain, 91200 per kthread [ 70.367729][ T4956] loop4: detected capacity change from 0 to 8192 [ 70.378032][ T4961] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.478: mark_inode_dirty error [ 70.394798][ T4956] bio_check_eod: 15 callbacks suppressed [ 70.394880][ T4956] syz.4.479: attempt to access beyond end of device [ 70.394880][ T4956] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 70.416630][ T4961] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.478: corrupted inode contents [ 70.428704][ T4956] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 70.436592][ T4956] FAT-fs (loop4): Filesystem has been set read-only [ 70.444285][ T4961] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.478: mark_inode_dirty error [ 70.456969][ T4956] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 70.466437][ T4956] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 70.476418][ T4964] macvtap0: refused to change device tx_queue_len [ 70.493315][ T2993] loop3: p1 p3 < > [ 70.535901][ T2993] loop3: p1 p3 < > [ 70.587770][ T4973] loop4: detected capacity change from 0 to 128 [ 70.608313][ T4969] bond1: entered promiscuous mode [ 70.613545][ T4969] bond1: entered allmulticast mode [ 70.622387][ T4973] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.636072][ T4969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.649413][ T4973] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.661028][ T4969] bond1 (unregistering): Released all slaves [ 70.859716][ T4982] loop4: detected capacity change from 0 to 1024 [ 70.881931][ T4982] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 6597069766659)! [ 70.893184][ T4982] EXT4-fs (loop4): group descriptors corrupted! [ 70.971229][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.987237][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 71.035551][ T2993] loop3: p1 p3 < > [ 71.087954][ T2993] loop3: p1 p3 < > [ 71.095492][ T4994] macvtap0: refused to change device tx_queue_len [ 71.149935][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 71.151090][ T2993] loop3: p1 p3 < > [ 71.182216][ T5000] loop2: detected capacity change from 0 to 128 [ 71.190377][ T5000] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.204723][ T5000] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.220889][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.496'. [ 71.246489][ T4998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.496'. [ 71.301396][ T5003] loop2: detected capacity change from 0 to 512 [ 71.318820][ T5003] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 71.335886][ T5003] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (2) [ 71.444122][ T2993] loop3: p1 p3 < > [ 71.486442][ T2993] loop3: p1 p3 < > [ 71.573766][ T5023] macvtap0: refused to change device tx_queue_len [ 71.674559][ T5028] loop2: detected capacity change from 0 to 128 [ 71.682574][ T5025] random: crng reseeded on system resumption [ 71.716186][ T2993] loop3: p1 p3 < > [ 71.716556][ T5028] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.796322][ T5028] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.866212][ T5035] loop4: detected capacity change from 0 to 512 [ 71.925253][ T5035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.998157][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.126358][ T5033] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.153321][ T5033] FAT-fs (loop7): unable to read boot sector [ 72.238839][ T5055] loop4: detected capacity change from 0 to 512 [ 72.271796][ T5055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.354341][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.451904][ T2993] loop3: p1 p3 < > [ 72.484338][ T5067] loop1: detected capacity change from 0 to 128 [ 72.492274][ T5064] hsr_slave_1 (unregistering): left promiscuous mode [ 72.529837][ T5067] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 72.610676][ T5067] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.737464][ T2993] loop3: p1 p3 < > [ 72.747019][ T5084] __nla_validate_parse: 5 callbacks suppressed [ 72.747038][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 72.786255][ T5084] loop1: detected capacity change from 0 to 512 [ 72.822009][ T2993] loop3: p1 p3 < > [ 72.836483][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.930484][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.974066][ T5097] lo: entered promiscuous mode [ 72.991305][ T5097] tunl0: entered promiscuous mode [ 73.025412][ T5097] gre0: entered promiscuous mode [ 73.058978][ T5097] gretap0: entered promiscuous mode [ 73.078947][ T5097] erspan0: entered promiscuous mode [ 73.100628][ T5101] loop1: detected capacity change from 0 to 1764 [ 73.113425][ T5097] ip_vti0: entered promiscuous mode [ 73.126071][ T5097] ip6_vti0: entered promiscuous mode [ 73.139184][ T5101] ISOFS: Bad logical zone size 2051 [ 73.146254][ T5097] sit0: entered promiscuous mode [ 73.169576][ T5097] ip6tnl0: entered promiscuous mode [ 73.191164][ T5097] ip6gre0: entered promiscuous mode [ 73.212202][ T5097] syz_tun: entered promiscuous mode [ 73.225935][ T5097] ip6gretap0: entered promiscuous mode [ 73.250727][ T5097] bridge0: entered promiscuous mode [ 73.261423][ T5109] FAULT_INJECTION: forcing a failure. [ 73.261423][ T5109] name failslab, interval 1, probability 0, space 0, times 0 [ 73.274198][ T5109] CPU: 1 UID: 0 PID: 5109 Comm: syz.4.539 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.274289][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.274304][ T5109] Call Trace: [ 73.274310][ T5109] [ 73.274318][ T5109] __dump_stack+0x1d/0x30 [ 73.274341][ T5109] dump_stack_lvl+0xe8/0x140 [ 73.274360][ T5109] dump_stack+0x15/0x1b [ 73.274377][ T5109] should_fail_ex+0x265/0x280 [ 73.274397][ T5109] should_failslab+0x8c/0xb0 [ 73.274484][ T5109] kmem_cache_alloc_noprof+0x50/0x310 [ 73.274512][ T5109] ? security_inode_alloc+0x37/0x100 [ 73.274605][ T5109] security_inode_alloc+0x37/0x100 [ 73.274632][ T5109] inode_init_always_gfp+0x4b7/0x500 [ 73.274662][ T5109] ? __pfx_proc_alloc_inode+0x10/0x10 [ 73.274734][ T5109] alloc_inode+0x58/0x170 [ 73.274760][ T5109] new_inode+0x1d/0xe0 [ 73.274782][ T5109] proc_pid_make_inode+0x1f/0xd0 [ 73.274853][ T5109] proc_ns_dir_lookup+0x486/0x560 [ 73.274881][ T5109] __lookup_slow+0x193/0x250 [ 73.274918][ T5109] lookup_slow+0x3c/0x60 [ 73.274952][ T5109] walk_component+0x1ec/0x220 [ 73.275020][ T5109] path_lookupat+0xfe/0x2a0 [ 73.275057][ T5109] filename_lookup+0x147/0x340 [ 73.275107][ T5109] user_path_at+0x3e/0x130 [ 73.275177][ T5109] do_fchmodat+0x9c/0x180 [ 73.275280][ T5109] __x64_sys_fchmodat+0x42/0x50 [ 73.275312][ T5109] x64_sys_call+0x288d/0x2ff0 [ 73.275340][ T5109] do_syscall_64+0xd2/0x200 [ 73.275417][ T5109] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.275503][ T5109] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.275533][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.275560][ T5109] RIP: 0033:0x7f7b2c7eebe9 [ 73.275574][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.275598][ T5109] RSP: 002b:00007f7b2b257038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 73.275692][ T5109] RAX: ffffffffffffffda RBX: 00007f7b2ca25fa0 RCX: 00007f7b2c7eebe9 [ 73.275706][ T5109] RDX: 000000000000015a RSI: 0000200000000140 RDI: 0000000000000003 [ 73.275718][ T5109] RBP: 00007f7b2b257090 R08: 0000000000000000 R09: 0000000000000000 [ 73.275729][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.275739][ T5109] R13: 00007f7b2ca26038 R14: 00007f7b2ca25fa0 R15: 00007ffd8a2aaa88 [ 73.275763][ T5109] [ 73.281833][ T5097] vcan0: entered promiscuous mode [ 73.522848][ T5114] FAULT_INJECTION: forcing a failure. [ 73.522848][ T5114] name failslab, interval 1, probability 0, space 0, times 0 [ 73.528813][ T5115] loop4: detected capacity change from 0 to 512 [ 73.535612][ T5114] CPU: 0 UID: 0 PID: 5114 Comm: syz.1.541 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.535649][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.535666][ T5114] Call Trace: [ 73.535675][ T5114] [ 73.535687][ T5114] __dump_stack+0x1d/0x30 [ 73.535715][ T5114] dump_stack_lvl+0xe8/0x140 [ 73.535805][ T5114] dump_stack+0x15/0x1b [ 73.535827][ T5114] should_fail_ex+0x265/0x280 [ 73.535855][ T5114] ? alloc_fs_context+0x44/0x4e0 [ 73.535885][ T5114] should_failslab+0x8c/0xb0 [ 73.535917][ T5114] __kmalloc_cache_noprof+0x4c/0x320 [ 73.536041][ T5114] alloc_fs_context+0x44/0x4e0 [ 73.536089][ T5114] fs_context_for_mount+0x22/0x30 [ 73.536118][ T5114] do_new_mount+0xe9/0x5e0 [ 73.536147][ T5114] ? security_capable+0x83/0x90 [ 73.536182][ T5114] path_mount+0x4a4/0xb20 [ 73.536211][ T5114] ? user_path_at+0x109/0x130 [ 73.536332][ T5114] __se_sys_mount+0x28f/0x2e0 [ 73.536391][ T5114] ? fput+0x8f/0xc0 [ 73.536435][ T5114] __x64_sys_mount+0x67/0x80 [ 73.536466][ T5114] x64_sys_call+0x2b4d/0x2ff0 [ 73.536563][ T5114] do_syscall_64+0xd2/0x200 [ 73.536661][ T5114] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.536693][ T5114] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.536730][ T5114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.536812][ T5114] RIP: 0033:0x7f10ed11ebe9 [ 73.536832][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.536856][ T5114] RSP: 002b:00007f10ebb7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.536925][ T5114] RAX: ffffffffffffffda RBX: 00007f10ed355fa0 RCX: 00007f10ed11ebe9 [ 73.536943][ T5114] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 73.536960][ T5114] RBP: 00007f10ebb7f090 R08: 0000200000000340 R09: 0000000000000000 [ 73.536977][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.537025][ T5114] R13: 00007f10ed356038 R14: 00007f10ed355fa0 R15: 00007ffe292c5d88 [ 73.537054][ T5114] [ 73.629591][ T5118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 73.743099][ T5115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.764468][ T5097] bond0: entered promiscuous mode [ 73.771330][ T5115] EXT4-fs (loop4): 1 truncate cleaned up [ 73.779071][ T5115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.791936][ T5097] team0: entered promiscuous mode [ 73.815244][ T5097] dummy0: entered promiscuous mode [ 73.829791][ T5097] nlmon0: entered promiscuous mode [ 73.836733][ T5097] caif0: entered promiscuous mode [ 73.842328][ T5097] vxcan0: entered promiscuous mode [ 73.847952][ T5123] loop1: detected capacity change from 0 to 512 [ 73.848415][ T5097] vxcan1: entered promiscuous mode [ 73.860375][ T5097] veth0: entered promiscuous mode [ 73.867075][ T5097] veth1: entered promiscuous mode [ 73.868558][ T5123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.882757][ T5097] wg0: entered promiscuous mode [ 73.889513][ T5123] EXT4-fs (loop1): 1 truncate cleaned up [ 73.895668][ T5097] wg1: entered promiscuous mode [ 73.898251][ T5124] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #12: comm syz.4.542: corrupted in-inode xattr: bad e_name length [ 73.902186][ T5123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.926908][ T5097] wg2: entered promiscuous mode [ 73.933202][ T5097] veth0_to_bridge: entered promiscuous mode [ 73.940645][ T5097] bridge_slave_0: entered promiscuous mode [ 73.951470][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.958016][ T5097] veth1_to_bridge: entered promiscuous mode [ 73.968151][ T5097] bridge_slave_1: entered promiscuous mode [ 73.976814][ T5097] veth0_to_bond: entered promiscuous mode [ 73.994283][ T5097] bond_slave_0: entered promiscuous mode [ 73.994579][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 74.010067][ T5097] veth1_to_bond: entered promiscuous mode [ 74.015036][ T5127] loop4: detected capacity change from 0 to 512 [ 74.024756][ T5097] bond_slave_1: entered promiscuous mode [ 74.037331][ T5097] veth0_to_team: entered promiscuous mode [ 74.045558][ T5097] team_slave_0: entered promiscuous mode [ 74.051534][ T5097] veth1_to_team: entered promiscuous mode [ 74.063018][ T5097] team_slave_1: entered promiscuous mode [ 74.064109][ T5127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.069186][ T5097] veth0_to_batadv: entered promiscuous mode [ 74.086295][ T5128] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #12: comm syz.1.545: corrupted in-inode xattr: bad e_name length [ 74.089294][ T5097] batadv_slave_0: entered promiscuous mode [ 74.107609][ T5097] veth1_to_batadv: entered promiscuous mode [ 74.114622][ T5097] batadv_slave_1: entered promiscuous mode [ 74.121788][ T5097] xfrm0: entered promiscuous mode [ 74.127983][ T5097] veth0_to_hsr: entered promiscuous mode [ 74.135798][ T5097] hsr0: entered promiscuous mode [ 74.141353][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.141975][ T5097] veth1_virt_wifi: entered promiscuous mode [ 74.158209][ T5097] veth0_virt_wifi: entered promiscuous mode [ 74.169790][ T5097] vlan0: entered promiscuous mode [ 74.175396][ T5097] vlan1: entered promiscuous mode [ 74.182084][ T5097] macvlan0: entered promiscuous mode [ 74.190620][ T5097] macvlan1: entered promiscuous mode [ 74.202457][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.207427][ T5097] ipvlan0: entered promiscuous mode [ 74.217039][ T5097] ipvlan1: entered promiscuous mode [ 74.229328][ T5097] macvtap0: entered promiscuous mode [ 74.240238][ T5097] macsec0: entered promiscuous mode [ 74.247670][ T5097] geneve0: entered promiscuous mode [ 74.255126][ T5097] geneve1: entered promiscuous mode [ 74.271999][ T5136] loop1: detected capacity change from 0 to 512 [ 74.279117][ T5097] bridge1: entered promiscuous mode [ 74.285643][ T5097] ip6gre1: entered promiscuous mode [ 74.291601][ T5097] netdevsim netdevsim2 eth0: entered promiscuous mode [ 74.298809][ T5097] netdevsim netdevsim2 eth1: entered promiscuous mode [ 74.305852][ T5097] netdevsim netdevsim2 eth2: entered promiscuous mode [ 74.312752][ T5097] netdevsim netdevsim2 eth3: entered promiscuous mode [ 74.315748][ T5136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.358481][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 74.358499][ T29] audit: type=1326 audit(74.331:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.361363][ T145] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.393189][ T29] audit: type=1326 audit(74.331:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.418634][ T29] audit: type=1326 audit(74.331:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.441368][ T29] audit: type=1326 audit(74.331:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.464094][ T29] audit: type=1326 audit(74.331:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.483382][ T5138] macvtap0: refused to change device tx_queue_len [ 74.486746][ T29] audit: type=1326 audit(74.331:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.493363][ T145] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.528628][ T29] audit: type=1326 audit(74.381:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.551275][ T29] audit: type=1326 audit(74.501:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.574027][ T29] audit: type=1326 audit(74.501:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed11ebe9 code=0x7ffc0000 [ 74.618422][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.634560][ T145] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.643409][ T145] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.666943][ T5153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'. [ 74.712652][ T2993] loop3: p1 p3 < > [ 74.718671][ T5157] loop1: detected capacity change from 0 to 128 [ 74.787756][ T5157] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.812112][ T5157] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.835495][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 74.850869][ T5160] loop4: detected capacity change from 0 to 512 [ 74.869406][ T5163] loop1: detected capacity change from 0 to 512 [ 74.946658][ T2993] loop3: p1 p3 < > [ 74.982479][ T2993] loop3: p1 p3 < > [ 74.996841][ T5160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.997991][ T5163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.035399][ T29] audit: type=1400 audit(75.011:5832): avc: denied { bind } for pid=5168 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.057753][ T5163] FAULT_INJECTION: forcing a failure. [ 75.057753][ T5163] name failslab, interval 1, probability 0, space 0, times 0 [ 75.070433][ T5163] CPU: 1 UID: 0 PID: 5163 Comm: syz.1.558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.070523][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.070537][ T5163] Call Trace: [ 75.070545][ T5163] [ 75.070554][ T5163] __dump_stack+0x1d/0x30 [ 75.070577][ T5163] dump_stack_lvl+0xe8/0x140 [ 75.070605][ T5163] dump_stack+0x15/0x1b [ 75.070625][ T5163] should_fail_ex+0x265/0x280 [ 75.070645][ T5163] should_failslab+0x8c/0xb0 [ 75.070678][ T5163] __kmalloc_noprof+0xa5/0x3e0 [ 75.070709][ T5163] ? find_tree_dqentry+0x4ef/0x8c0 [ 75.070768][ T5163] find_tree_dqentry+0x4ef/0x8c0 [ 75.070800][ T5163] find_tree_dqentry+0x4c9/0x8c0 [ 75.070830][ T5163] find_tree_dqentry+0x4c9/0x8c0 [ 75.070860][ T5163] find_tree_dqentry+0x4c9/0x8c0 [ 75.070888][ T5163] qtree_read_dquot+0x35c/0x4a0 [ 75.071011][ T5163] ? __traceiter_kfree+0x2e/0x50 [ 75.071036][ T5163] ? kfree+0x27b/0x320 [ 75.071061][ T5163] v2_read_dquot+0x98/0xd0 [ 75.071119][ T5163] dquot_acquire+0xce/0x2b0 [ 75.071154][ T5163] ext4_acquire_dquot+0x15f/0x200 [ 75.071237][ T5163] dqget+0x532/0x8d0 [ 75.071273][ T5163] __dquot_initialize+0x27f/0x7c0 [ 75.071307][ T5163] ? _raw_spin_unlock+0x26/0x50 [ 75.071332][ T5163] ? __d_add+0x413/0x4f0 [ 75.071446][ T5163] dquot_initialize+0x1a/0x30 [ 75.071503][ T5163] ext4_create+0x49/0x2f0 [ 75.071535][ T5163] ? __pfx_ext4_create+0x10/0x10 [ 75.071568][ T5163] path_openat+0x1102/0x2170 [ 75.071616][ T5163] do_filp_open+0x109/0x230 [ 75.071655][ T5163] do_sys_openat2+0xa6/0x110 [ 75.071705][ T5163] __x64_sys_creat+0x65/0x90 [ 75.071781][ T5163] x64_sys_call+0x2d94/0x2ff0 [ 75.071809][ T5163] do_syscall_64+0xd2/0x200 [ 75.071846][ T5163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.071878][ T5163] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.071948][ T5163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.071976][ T5163] RIP: 0033:0x7f10ed11ebe9 [ 75.071994][ T5163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.072012][ T5163] RSP: 002b:00007f10ebb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 75.072030][ T5163] RAX: ffffffffffffffda RBX: 00007f10ed355fa0 RCX: 00007f10ed11ebe9 [ 75.072049][ T5163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 75.072114][ T5163] RBP: 00007f10ebb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.072155][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.072176][ T5163] R13: 00007f10ed356038 R14: 00007f10ed355fa0 R15: 00007ffe292c5d88 [ 75.072200][ T5163] [ 75.072290][ T5163] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.558: Failed to acquire dquot type 0 [ 75.384627][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.405528][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.473821][ T5180] loop1: detected capacity change from 0 to 256 [ 75.492566][ T5182] loop2: detected capacity change from 0 to 512 [ 75.500669][ T5180] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.514226][ T5182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.607528][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.667972][ T5190] loop0: detected capacity change from 0 to 256 [ 75.681920][ T5190] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.711525][ T5193] loop1: detected capacity change from 0 to 128 [ 75.724939][ T5193] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.744371][ T5193] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.858196][ T2993] loop3: p1 p3 < > [ 75.870199][ T5202] loop1: detected capacity change from 0 to 512 [ 75.894026][ T2993] loop3: p1 p3 < > [ 75.905987][ T5202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.947057][ T2993] loop3: p1 p3 < > [ 75.958837][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.005964][ T5213] loop1: detected capacity change from 0 to 512 [ 76.044832][ T5213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.223944][ T5219] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.234719][ T5219] FAT-fs (loop7): unable to read boot sector [ 76.248481][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.396946][ T5227] FAULT_INJECTION: forcing a failure. [ 76.396946][ T5227] name failslab, interval 1, probability 0, space 0, times 0 [ 76.409646][ T5227] CPU: 0 UID: 0 PID: 5227 Comm: syz.1.581 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.409680][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.409696][ T5227] Call Trace: [ 76.409703][ T5227] [ 76.409712][ T5227] __dump_stack+0x1d/0x30 [ 76.409736][ T5227] dump_stack_lvl+0xe8/0x140 [ 76.409755][ T5227] dump_stack+0x15/0x1b [ 76.409770][ T5227] should_fail_ex+0x265/0x280 [ 76.409790][ T5227] should_failslab+0x8c/0xb0 [ 76.409819][ T5227] kmem_cache_alloc_noprof+0x50/0x310 [ 76.409855][ T5227] ? mas_alloc_nodes+0x265/0x520 [ 76.409895][ T5227] mas_alloc_nodes+0x265/0x520 [ 76.409931][ T5227] mas_preallocate+0x33e/0x520 [ 76.409973][ T5227] mmap_region+0xbdd/0x1630 [ 76.410030][ T5227] do_mmap+0x9b3/0xbe0 [ 76.410074][ T5227] vm_mmap_pgoff+0x17a/0x2e0 [ 76.410114][ T5227] ksys_mmap_pgoff+0xc2/0x310 [ 76.410136][ T5227] ? __x64_sys_mmap+0x49/0x70 [ 76.410166][ T5227] x64_sys_call+0x14a3/0x2ff0 [ 76.410193][ T5227] do_syscall_64+0xd2/0x200 [ 76.410229][ T5227] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.410254][ T5227] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.410295][ T5227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.410322][ T5227] RIP: 0033:0x7f10ed11ec23 [ 76.410336][ T5227] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 76.410355][ T5227] RSP: 002b:00007f10ebb7ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 76.410377][ T5227] RAX: ffffffffffffffda RBX: 0000000000000354 RCX: 00007f10ed11ec23 [ 76.410393][ T5227] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 76.410408][ T5227] RBP: 0000200000000202 R08: 00000000ffffffff R09: 0000000000000000 [ 76.410424][ T5227] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000a [ 76.410439][ T5227] R13: 00007f10ebb7eef0 R14: 00007f10ebb7eeb0 R15: 0000200000000140 [ 76.410462][ T5227] [ 76.847760][ T2993] loop3: p1 p3 < > [ 76.860567][ T5232] FAULT_INJECTION: forcing a failure. [ 76.860567][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 76.873264][ T5232] CPU: 1 UID: 0 PID: 5232 Comm: syz.3.583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.873290][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.873358][ T5232] Call Trace: [ 76.873363][ T5232] [ 76.873370][ T5232] __dump_stack+0x1d/0x30 [ 76.873392][ T5232] dump_stack_lvl+0xe8/0x140 [ 76.873411][ T5232] dump_stack+0x15/0x1b [ 76.873444][ T5232] should_fail_ex+0x265/0x280 [ 76.873469][ T5232] should_failslab+0x8c/0xb0 [ 76.873498][ T5232] __kvmalloc_node_noprof+0x123/0x4e0 [ 76.873591][ T5232] ? alloc_netdev_mqs+0x553/0xa30 [ 76.873664][ T5232] alloc_netdev_mqs+0x553/0xa30 [ 76.873697][ T5232] slip_open+0x2d1/0x920 [ 76.873734][ T5232] ? vfree+0x295/0x3a0 [ 76.873769][ T5232] ? up_write+0x18/0x60 [ 76.873937][ T5232] tty_ldisc_open+0x5a/0xb0 [ 76.873983][ T5232] tty_set_ldisc+0x1db/0x380 [ 76.874038][ T5232] tiocsetd+0x51/0x60 [ 76.874071][ T5232] tty_ioctl+0xa7f/0xb80 [ 76.874141][ T5232] ? __pfx_tty_ioctl+0x10/0x10 [ 76.874177][ T5232] __se_sys_ioctl+0xce/0x140 [ 76.874200][ T5232] __x64_sys_ioctl+0x43/0x50 [ 76.874264][ T5232] x64_sys_call+0x1816/0x2ff0 [ 76.874290][ T5232] do_syscall_64+0xd2/0x200 [ 76.874386][ T5232] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.874415][ T5232] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.874448][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.874537][ T5232] RIP: 0033:0x7fe29502ebe9 [ 76.874556][ T5232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.874624][ T5232] RSP: 002b:00007fe293a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.874648][ T5232] RAX: ffffffffffffffda RBX: 00007fe295265fa0 RCX: 00007fe29502ebe9 [ 76.874664][ T5232] RDX: 0000200000000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 76.874678][ T5232] RBP: 00007fe293a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.874694][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.874709][ T5232] R13: 00007fe295266038 R14: 00007fe295265fa0 R15: 00007ffc995770d8 [ 76.874769][ T5232] [ 77.104554][ T5234] loop1: detected capacity change from 0 to 1024 [ 77.198606][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 77.232105][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 77.247786][ T5234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.270162][ T5245] loop4: detected capacity change from 0 to 512 [ 77.277686][ T5245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.289953][ T5245] EXT4-fs (loop4): 1 truncate cleaned up [ 77.296352][ T5245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.346229][ T5242] loop2: detected capacity change from 0 to 512 [ 77.423810][ T5250] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #12: comm syz.4.589: corrupted in-inode xattr: bad e_name length [ 77.488812][ T5251] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.584: Allocating blocks 449-513 which overlap fs metadata [ 77.514513][ T5242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.618533][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.680011][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.876586][ T5277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.600'. [ 77.934144][ T5233] EXT4-fs (loop1): pa ffff888106e048c0: logic 48, phys. 177, len 21 [ 77.942267][ T5233] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 78.002077][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.033887][ T2993] loop3: p1 p3 < > [ 78.059100][ T5283] macvtap0: refused to change device tx_queue_len [ 78.282486][ T5290] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 78.289151][ T5290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.296680][ T5290] vhci_hcd vhci_hcd.0: Device attached [ 78.310042][ T5290] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 78.323813][ T5290] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 78.330480][ T5290] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.338166][ T5290] vhci_hcd vhci_hcd.0: Device attached [ 78.504279][ T3383] vhci_hcd: vhci_device speed not set [ 78.569124][ T3383] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 78.967758][ T5291] vhci_hcd: connection reset by peer [ 78.973450][ T5293] vhci_hcd: connection closed [ 78.975074][ T145] vhci_hcd: stop threads [ 78.984112][ T145] vhci_hcd: release socket [ 78.988551][ T145] vhci_hcd: disconnect device [ 79.019692][ T145] vhci_hcd: stop threads [ 79.024043][ T145] vhci_hcd: release socket [ 79.028510][ T145] vhci_hcd: disconnect device [ 79.040718][ T5308] loop2: detected capacity change from 0 to 512 [ 79.069192][ T2993] loop3: p1 p3 < > [ 79.098377][ T5308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.240905][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.296134][ T5316] loop2: detected capacity change from 0 to 128 [ 79.327091][ T5316] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.370560][ T5321] macvtap0: refused to change device tx_queue_len [ 79.377340][ T5316] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.388967][ T2993] loop3: p1 p3 < > [ 79.428412][ T2993] loop3: p1 p3 < > [ 79.463098][ T2993] loop3: p1 p3 < > [ 79.589323][ T5337] loop4: detected capacity change from 0 to 256 [ 79.597717][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 79.597734][ T29] audit: type=1400 audit(79.571:6123): avc: denied { create } for pid=5326 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.636268][ T2993] udevd[2993]: worker [3292] terminated by signal 33 (Unknown signal 33) [ 79.646643][ T5337] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.653286][ T2993] udevd[2993]: worker [3292] failed while handling '/devices/virtual/block/loop3/loop3p3' [ 79.679058][ T5341] loop0: detected capacity change from 0 to 256 [ 79.693188][ T29] audit: type=1326 audit(79.661:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.715911][ T29] audit: type=1326 audit(79.661:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.716159][ T5343] random: crng reseeded on system resumption [ 79.738601][ T29] audit: type=1326 audit(79.661:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.767388][ T29] audit: type=1326 audit(79.661:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.767486][ T29] audit: type=1326 audit(79.661:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.767520][ T29] audit: type=1326 audit(79.661:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.767547][ T29] audit: type=1326 audit(79.661:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.767586][ T29] audit: type=1326 audit(79.661:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.767639][ T29] audit: type=1326 audit(79.661:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2c7eebe9 code=0x7ffc0000 [ 79.768178][ T2993] udevd[2993]: worker [3815] terminated by signal 33 (Unknown signal 33) [ 79.768210][ T2993] udevd[2993]: worker [3815] failed while handling '/devices/virtual/block/loop3/loop3p1' [ 79.771107][ T5341] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.913211][ T5346] loop4: detected capacity change from 0 to 512 [ 79.930596][ T5346] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.623: casefold flag without casefold feature [ 80.032544][ T5346] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.623: couldn't read orphan inode 15 (err -117) [ 80.107439][ T5353] macvtap0: refused to change device tx_queue_len [ 80.136001][ T5346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.170741][ T2993] loop3: p1 p3 < > [ 80.247222][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 80.294878][ T2993] loop3: p1 p3 < > [ 80.322240][ T5363] loop0: detected capacity change from 0 to 512 [ 80.410227][ T5363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.508680][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.544789][ T5378] loop1: detected capacity change from 0 to 128 [ 80.592002][ T5378] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.594177][ T2993] loop3: p1 p3 < > [ 80.621267][ T5385] macvtap0: refused to change device tx_queue_len [ 80.636757][ T5378] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.694565][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 80.782122][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 80.836295][ T5390] loop1: detected capacity change from 0 to 512 [ 80.875409][ T5390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.952033][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.974187][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.091806][ T5399] loop1: detected capacity change from 0 to 512 [ 81.142440][ T5401] loop4: detected capacity change from 0 to 512 [ 81.164238][ T5399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.197636][ T5401] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.222445][ T5401] EXT4-fs (loop4): 1 truncate cleaned up [ 81.250707][ T5401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.277000][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.375750][ T2993] loop3: p1 p3 < > [ 81.381365][ T5401] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #12: comm syz.4.645: corrupted in-inode xattr: bad e_name length [ 81.406747][ T5413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'. [ 81.446310][ T2993] loop3: p1 p3 < > [ 81.476104][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.498387][ T5421] macvtap0: refused to change device tx_queue_len [ 81.519690][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 81.569798][ T5423] loop0: detected capacity change from 0 to 512 [ 81.581402][ T5425] loop2: detected capacity change from 0 to 512 [ 81.582181][ T5427] loop4: detected capacity change from 0 to 512 [ 81.608627][ T5425] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.654: casefold flag without casefold feature [ 81.628175][ T5425] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.654: couldn't read orphan inode 15 (err -117) [ 81.648353][ T5425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.650995][ T5423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.688411][ T5427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.701495][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.842716][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.898442][ T5437] loop0: detected capacity change from 0 to 512 [ 81.907180][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.933249][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.952718][ T5437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.981342][ T5439] loop4: detected capacity change from 0 to 1024 [ 82.037265][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.200174][ T2993] loop3: p1 p3 < > [ 82.254786][ T5449] netlink: 404 bytes leftover after parsing attributes in process `syz.4.656'. [ 82.693903][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.717420][ T2993] loop3: p1 p3 < > [ 82.723318][ T5455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.662'. [ 82.759862][ T5457] loop2: detected capacity change from 0 to 256 [ 82.801925][ T5457] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.038554][ T2993] loop3: p1 p3 < > [ 83.068383][ T2993] loop3: p1 p3 < > [ 83.100839][ T2993] loop3: p1 p3 < > [ 83.268049][ T5501] team0 (unregistering): Port device team_slave_0 removed [ 83.281045][ T5473] loop0: detected capacity change from 0 to 512 [ 83.301399][ T5501] team0 (unregistering): Port device team_slave_1 removed [ 83.319319][ T5473] EXT4-fs: Ignoring removed nobh option [ 83.436192][ T5473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.669: corrupted inode contents [ 83.465242][ T5473] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.669: mark_inode_dirty error [ 83.514302][ T5473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.669: corrupted inode contents [ 83.545178][ T5473] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.669: mark_inode_dirty error [ 83.579080][ T5473] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.669: Failed to acquire dquot type 0 [ 83.616980][ T5473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.669: corrupted inode contents [ 83.649469][ T5473] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.669: mark_inode_dirty error [ 83.666176][ T3383] usb 3-1: enqueue for inactive port 0 [ 83.675548][ T3383] usb 3-1: enqueue for inactive port 0 [ 83.686945][ T5473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.669: corrupted inode contents [ 83.712457][ T5473] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.669: mark_inode_dirty error [ 83.741091][ T5473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.669: corrupted inode contents [ 83.753780][ T3383] vhci_hcd: vhci_device speed not set [ 83.774969][ T5473] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 83.798433][ T5473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.669: corrupted inode contents [ 83.834707][ T5473] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.669: mark_inode_dirty error [ 83.857053][ T5473] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 83.895097][ T5473] EXT4-fs (loop0): 1 truncate cleaned up [ 83.947983][ T5473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.017700][ T5473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.047545][ T5519] loop1: detected capacity change from 0 to 256 [ 84.059068][ T2993] loop3: p1 p3 < > [ 84.066604][ T5519] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.175036][ T5473] syz.0.669 (5473) used greatest stack depth: 9688 bytes left [ 84.201555][ T5526] loop0: detected capacity change from 0 to 512 [ 84.224346][ T5526] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 84.247218][ T5527] bond1: entered promiscuous mode [ 84.252313][ T5527] bond1: entered allmulticast mode [ 84.258413][ T5527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.263895][ T5526] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 84.284742][ T5527] bond1 (unregistering): Released all slaves [ 84.313610][ T5526] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.682: corrupted inode contents [ 84.353371][ T5526] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #11: comm syz.0.682: mark_inode_dirty error [ 84.373968][ T2993] loop3: p1 p3 < > [ 84.401723][ T5526] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.682: invalid indirect mapped block 1 (level 1) [ 84.442346][ T5526] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.682: corrupted inode contents [ 84.459331][ T5538] loop2: detected capacity change from 0 to 128 [ 84.465693][ T5526] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 84.465834][ T5526] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.682: corrupted inode contents [ 84.477588][ T5538] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.489444][ T5536] pim6reg1: entered promiscuous mode [ 84.505576][ T5526] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.682: mark_inode_dirty error [ 84.517258][ T5526] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 84.527004][ T5526] EXT4-fs (loop0): 1 truncate cleaned up [ 84.534142][ T5526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.547842][ T5538] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.576388][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.604506][ T5541] loop0: detected capacity change from 0 to 512 [ 84.614148][ T5541] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.639256][ T5541] EXT4-fs (loop0): 1 truncate cleaned up [ 84.649537][ T5541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.689392][ T5549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.690'. [ 84.753816][ T5541] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #12: comm syz.0.687: corrupted in-inode xattr: bad e_name length [ 84.770488][ T5556] loop1: detected capacity change from 0 to 512 [ 84.789476][ T5556] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.693: casefold flag without casefold feature [ 84.804878][ T5556] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.693: couldn't read orphan inode 15 (err -117) [ 84.818583][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.867467][ T5563] loop0: detected capacity change from 0 to 512 [ 84.895296][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 84.895312][ T29] audit: type=1326 audit(84.871:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 84.951893][ T29] audit: type=1326 audit(84.871:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 84.974607][ T29] audit: type=1326 audit(84.871:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 84.997456][ T29] audit: type=1326 audit(84.871:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 85.020137][ T29] audit: type=1326 audit(84.871:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 85.043015][ T29] audit: type=1326 audit(84.871:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 85.065699][ T29] audit: type=1326 audit(84.871:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 85.088468][ T29] audit: type=1326 audit(84.871:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 85.111290][ T29] audit: type=1326 audit(84.871:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 85.133945][ T29] audit: type=1326 audit(84.871:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129f56ebe9 code=0x7ffc0000 [ 85.163174][ T5573] loop4: detected capacity change from 0 to 512 [ 85.253060][ T2993] loop3: p1 p3 < > [ 85.360114][ T5589] FAULT_INJECTION: forcing a failure. [ 85.360114][ T5589] name failslab, interval 1, probability 0, space 0, times 0 [ 85.372836][ T5589] CPU: 0 UID: 0 PID: 5589 Comm: syz.3.706 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.372944][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.372956][ T5589] Call Trace: [ 85.372961][ T5589] [ 85.372968][ T5589] __dump_stack+0x1d/0x30 [ 85.372994][ T5589] dump_stack_lvl+0xe8/0x140 [ 85.373018][ T5589] dump_stack+0x15/0x1b [ 85.373062][ T5589] should_fail_ex+0x265/0x280 [ 85.373096][ T5589] should_failslab+0x8c/0xb0 [ 85.373132][ T5589] kmem_cache_alloc_noprof+0x50/0x310 [ 85.373165][ T5589] ? sctp_get_port_local+0x438/0xae0 [ 85.373187][ T5589] sctp_get_port_local+0x438/0xae0 [ 85.373223][ T5589] sctp_do_bind+0x398/0x4b0 [ 85.373244][ T5589] sctp_connect_new_asoc+0x153/0x3a0 [ 85.373290][ T5589] sctp_sendmsg+0xf10/0x18d0 [ 85.373385][ T5589] ? selinux_socket_sendmsg+0x161/0x1b0 [ 85.373567][ T5589] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.373613][ T5589] inet_sendmsg+0xc2/0xd0 [ 85.373641][ T5589] __sock_sendmsg+0x102/0x180 [ 85.373752][ T5589] ____sys_sendmsg+0x345/0x4e0 [ 85.373810][ T5589] ___sys_sendmsg+0x17b/0x1d0 [ 85.373855][ T5589] __sys_sendmmsg+0x178/0x300 [ 85.373899][ T5589] __x64_sys_sendmmsg+0x57/0x70 [ 85.374003][ T5589] x64_sys_call+0x1c4a/0x2ff0 [ 85.374031][ T5589] do_syscall_64+0xd2/0x200 [ 85.374074][ T5589] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.374105][ T5589] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.374155][ T5589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.374181][ T5589] RIP: 0033:0x7fe29502ebe9 [ 85.374195][ T5589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.374212][ T5589] RSP: 002b:00007fe293a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.374288][ T5589] RAX: ffffffffffffffda RBX: 00007fe295265fa0 RCX: 00007fe29502ebe9 [ 85.374305][ T5589] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000007 [ 85.374320][ T5589] RBP: 00007fe293a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.374331][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.374342][ T5589] R13: 00007fe295266038 R14: 00007fe295265fa0 R15: 00007ffc995770d8 [ 85.374437][ T5589] [ 85.725406][ T5593] loop1: detected capacity change from 0 to 512 [ 85.778706][ T2993] loop3: p1 p3 < > [ 85.871997][ T5619] loop2: detected capacity change from 0 to 512 [ 85.889466][ T2993] loop3: p1 p3 < > [ 85.895553][ T5619] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.923042][ T5619] EXT4-fs (loop2): 1 truncate cleaned up [ 85.942323][ T2993] loop3: p1 p3 < > [ 85.982683][ T2993] loop3: p1 p3 < > [ 86.047818][ T2993] loop3: p1 p3 < > [ 86.052240][ T5633] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #12: comm syz.2.720: corrupted in-inode xattr: bad e_name length [ 86.085373][ T2993] loop3: p1 p3 < > [ 86.095136][ T5635] loop1: detected capacity change from 0 to 512 [ 86.124347][ T5635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.146556][ T2993] loop3: p1 p3 < > [ 86.155304][ T5635] EXT4-fs (loop1): 1 truncate cleaned up [ 86.187908][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 86.201936][ T2993] loop3: p1 p3 < > [ 86.238138][ T5647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.280590][ T2993] loop3: p1 p3 < > [ 86.307358][ T2993] loop3: p1 p3 < > [ 86.314561][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 86.410263][ T5635] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #12: comm syz.1.726: corrupted in-inode xattr: bad e_name length [ 86.461310][ T5657] bond1: entered promiscuous mode [ 86.466433][ T5657] bond1: entered allmulticast mode [ 86.487669][ T5657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.523592][ T5668] loop1: detected capacity change from 0 to 512 [ 86.555068][ T5666] bond1: entered promiscuous mode [ 86.560181][ T5666] bond1: entered allmulticast mode [ 86.568425][ T5666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.663066][ T5680] loop1: detected capacity change from 0 to 512 [ 86.670754][ T5680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.682233][ T2993] loop3: p1 p3 < > [ 86.695597][ T5680] EXT4-fs (loop1): 1 truncate cleaned up [ 86.697960][ T5681] bridge0: entered promiscuous mode [ 86.706733][ T5681] bridge0: entered allmulticast mode [ 86.714003][ T5681] team0: Port device bridge0 added [ 86.732957][ T5681] tun0: tun_chr_ioctl cmd 1074025675 [ 86.738578][ T5681] tun0: persist disabled [ 86.837314][ T5691] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #12: comm syz.1.741: corrupted in-inode xattr: bad e_name length [ 87.097866][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 87.137051][ T5698] loop1: detected capacity change from 0 to 512 [ 87.365790][ T5722] loop2: detected capacity change from 0 to 512 [ 87.555415][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 87.610969][ T5741] loop0: detected capacity change from 0 to 128 [ 87.619928][ T5744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.765'. [ 87.628713][ T5741] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.693281][ T5741] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.811187][ T3698] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.849575][ T3698] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.869894][ T5752] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.259375][ T2993] loop3: p1 p3 < > [ 88.294723][ T5779] loop2: detected capacity change from 0 to 128 [ 88.318417][ T5779] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.340755][ T5779] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.428603][ T5790] macvtap0: refused to change device tx_queue_len [ 88.447665][ T2993] loop3: p1 p3 < > [ 88.454001][ T5792] macvtap0: refused to change device tx_queue_len [ 88.474082][ T5795] random: crng reseeded on system resumption [ 88.568339][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 88.579122][ T5805] loop2: detected capacity change from 0 to 1024 [ 88.611324][ T5805] EXT4-fs: Ignoring removed orlov option [ 88.617306][ T5805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.654511][ T2993] loop3: p1 p3 < > [ 88.667448][ T5811] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 88.674035][ T5811] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.681594][ T5811] vhci_hcd vhci_hcd.0: Device attached [ 88.725453][ T5817] loop0: detected capacity change from 0 to 128 [ 88.732873][ T5817] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.745351][ T5818] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 88.751893][ T5818] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.753731][ T5817] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.759444][ T5818] vhci_hcd vhci_hcd.0: Device attached [ 88.816431][ T5811] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 88.823120][ T5811] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.830617][ T5811] vhci_hcd vhci_hcd.0: Device attached [ 88.868029][ T5811] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 88.874699][ T5811] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.882425][ T5811] vhci_hcd vhci_hcd.0: Device attached [ 88.888120][ T3667] vhci_hcd: vhci_device speed not set [ 88.897710][ T5823] vhci_hcd: connection closed [ 88.897913][ T5829] vhci_hcd: connection closed [ 88.903210][ T5812] vhci_hcd: connection closed [ 88.908040][ T5819] vhci_hcd: connection closed [ 88.914518][ T51] vhci_hcd: stop threads [ 88.923513][ T51] vhci_hcd: release socket [ 88.928022][ T51] vhci_hcd: disconnect device [ 88.950474][ T51] vhci_hcd: stop threads [ 88.954914][ T51] vhci_hcd: release socket [ 88.959362][ T51] vhci_hcd: disconnect device [ 88.962175][ T2993] loop3: p1 p3 < > [ 88.964534][ T3667] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 88.977365][ T5813] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 89.001306][ T51] vhci_hcd: stop threads [ 89.005725][ T51] vhci_hcd: release socket [ 89.010212][ T51] vhci_hcd: disconnect device [ 89.022136][ T51] vhci_hcd: stop threads [ 89.026552][ T51] vhci_hcd: release socket [ 89.031031][ T51] vhci_hcd: disconnect device [ 89.037240][ T5833] FAULT_INJECTION: forcing a failure. [ 89.037240][ T5833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.050413][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz.3.798 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.050445][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.050526][ T5833] Call Trace: [ 89.050532][ T5833] [ 89.050540][ T5833] __dump_stack+0x1d/0x30 [ 89.050595][ T5833] dump_stack_lvl+0xe8/0x140 [ 89.050617][ T5833] dump_stack+0x15/0x1b [ 89.050638][ T5833] should_fail_ex+0x265/0x280 [ 89.050685][ T5833] should_fail+0xb/0x20 [ 89.050709][ T5833] should_fail_usercopy+0x1a/0x20 [ 89.050747][ T5833] strncpy_from_user+0x25/0x230 [ 89.050804][ T5833] ? __kmalloc_cache_noprof+0x189/0x320 [ 89.050844][ T5833] getname_flags+0x230/0x3b0 [ 89.050881][ T5833] __x64_sys_mkdir+0x33/0x50 [ 89.050906][ T5833] x64_sys_call+0x2daa/0x2ff0 [ 89.050972][ T5833] do_syscall_64+0xd2/0x200 [ 89.051009][ T5833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.051047][ T5833] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.051121][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.051148][ T5833] RIP: 0033:0x7fe29502ebe9 [ 89.051167][ T5833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.051347][ T5833] RSP: 002b:00007fe293a6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 89.051372][ T5833] RAX: ffffffffffffffda RBX: 00007fe295266090 RCX: 00007fe29502ebe9 [ 89.051388][ T5833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 89.051403][ T5833] RBP: 00007fe293a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 89.051415][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.051431][ T5833] R13: 00007fe295266128 R14: 00007fe295266090 R15: 00007ffc995770d8 [ 89.051472][ T5833] [ 89.264518][ T3534] ================================================================== [ 89.272656][ T3534] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 89.279815][ T3534] [ 89.282162][ T3534] write to 0xffff88811b274f78 of 4 bytes by task 3814 on cpu 0: [ 89.289819][ T3534] touch_atime+0x1e8/0x340 [ 89.294260][ T3534] shmem_file_read_iter+0x477/0x540 [ 89.299475][ T3534] vfs_read+0x64c/0x770 [ 89.303635][ T3534] ksys_read+0xda/0x1a0 [ 89.307929][ T3534] __x64_sys_read+0x40/0x50 [ 89.312438][ T3534] x64_sys_call+0x27bc/0x2ff0 [ 89.317210][ T3534] do_syscall_64+0xd2/0x200 [ 89.321726][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.327629][ T3534] [ 89.329955][ T3534] read to 0xffff88811b274f78 of 4 bytes by task 3534 on cpu 1: [ 89.337501][ T3534] generic_fillattr+0x172/0x340 [ 89.342367][ T3534] shmem_getattr+0x181/0x200 [ 89.346967][ T3534] vfs_getattr_nosec+0x146/0x1e0 [ 89.351919][ T3534] __se_sys_newfstat+0x96/0x2e0 [ 89.356822][ T3534] __x64_sys_newfstat+0x31/0x40 [ 89.361688][ T3534] x64_sys_call+0x2764/0x2ff0 [ 89.366377][ T3534] do_syscall_64+0xd2/0x200 [ 89.370896][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.376795][ T3534] [ 89.379117][ T3534] value changed: 0x0edbed15 -> 0x0ef6b7c1 [ 89.384836][ T3534] [ 89.387158][ T3534] Reported by Kernel Concurrency Sanitizer on: [ 89.393308][ T3534] CPU: 1 UID: 0 PID: 3534 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.402596][ T3534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.412675][ T3534] ================================================================== [ 89.729038][ T2993] loop3: p1 p3 < > [ 94.053204][ T3667] usb 9-1: enqueue for inactive port 0 [ 94.058779][ T3667] usb 9-1: enqueue for inactive port 0 [ 94.133210][ T3667] vhci_hcd: vhci_device speed not set