last executing test programs: 2.541377474s ago: executing program 2 (id=1844): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002"], 0x254}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.413337194s ago: executing program 4 (id=1847): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x4e, &(0x7f0000001340)={@local, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 2.412823694s ago: executing program 4 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000000c0)={&(0x7f0000002000)={[{&(0x7f0000000040)="0521e6bc39fc1da5d5b79140f07763c432f59f3938d351d543a401def6bda9e9e5e9fc6fb6bc8f7032d2c9b88077ab07694528ca9f978639f080d08f8b99c86f8f33c4381a31fe1e06eff25019d50b52d8ea71c24e304423f1f1fb7f87cb085e06d1cdd30d4b8ffe17d547992ebd2f87dd68a2434737d1a950", 0x79, 0x3}]}, 0x1, 0x3}, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x1c6, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "53bbd7", 0x190, 0x21, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x33, 0x21, '\x00', [@generic={0x8, 0x25, "fd0be93856b6870dc0dc00c9803bd5d30485cc551931c2e4266571df2aaf13a559b6d461f8"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x30, {0x3, 0xa, 0x6, 0x0, [0xffffffffffffff7f, 0x7, 0x5cce000000000, 0x0, 0x7]}}, @generic={0x2, 0x7d, "da5882b3f2c895a92dfeda0a7a424235ff7a464607cf96829bb1c7789ab94f5309eb355147d5a828df6b5e270735b9a87bcd4f5a1bd7922f68f6438e52e06244006edbc359b99b0b3b361af5d8ea9a75fa3e49b3a73899108d4e1b712139a3a525fb29e476dafa6c268013731cc3094147d34e6e2e6262d6de6feb94c8"}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0xa}]}, @fragment={0x5c, 0x0, 0x81, 0x1, 0x0, 0x4, 0x67}, @srh={0x11, 0x2, 0x4, 0x1, 0x2, 0x20, 0x9, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x89, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1]}], {{0x4e23, 0x4e22, 0x4, 0x1, 0x9, 0x0, 0x0, 0x6, 0x6, "cb2e72", 0x6, "d7e368"}, "5a48ba587b47088d08ecd8713c61a86983806329f1387664ebdc8627c28c292b3cccaeee8c42be86278a79aa07d5290810ed1eb617328ade"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.785945815s ago: executing program 1 (id=1850): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="8d", 0x1}], 0x1}}], 0x2, 0x40081) preadv(r0, 0x0, 0x0, 0x141, 0x0) 1.586602451s ago: executing program 2 (id=1851): r0 = syz_io_uring_setup(0x3594, &(0x7f0000000600)={0x0, 0x358c, 0x40, 0x0, 0x299}, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000380)={0x0, 0x8988, 0x10, 0x0, 0xd0}, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='module_request\x00', r1}, 0x18) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc1500003c000900000000000200000005"], 0x15cc}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.542549345s ago: executing program 1 (id=1852): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d00"], 0x30}}, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r4, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, r6, 0x9c3fa077fa966179, 0x4, 0x25dfdbfb, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1.490689079s ago: executing program 4 (id=1854): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='thermal_power_allocator_pid\x00', r0, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffdb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000540)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xfff, 0x3a, 0x0, 0xfffffffd}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000140)=0x93, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f00000000c0)=ANY=[], 0xfb5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f8ff26bd7000ffdbdf090033000033000100"/33], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0xc011) sendfile(r3, r2, 0x0, 0x9c) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000002dbfb24607f41d23", @ANYRESHEX, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) pause() mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 1.35833422s ago: executing program 3 (id=1856): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30801f", 0x1001, r3) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "f01bc7838645505d96a971db00b30fc29c56e2579b7e404d229e1ec6ff0a9f0df779e51eeab0d494a09419a5f28ac6ae1af925a3a4bf9f83b36245d52caeba11", 0x18}, 0x48, r3) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0x800000009) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000740)={0x77359400}, 0x10) setns(0xffffffffffffffff, 0x2000000) r8 = gettid() r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = gettid() capget(&(0x7f0000000000)={0x20071026, r10}, &(0x7f0000000040)={0x5, 0x7, 0x4, 0x5, 0x0, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r9, 0x0, 0x2000000005}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x270, 0x30, 0xb, 0x0, 0x0, {}, [{0x25c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x210, 0x2, 0x0, 0x0, {{0xa}, {0x1e4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1dc, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x9d2d78fe2cb7d48b}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x270}}, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r11) 1.342562491s ago: executing program 3 (id=1857): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0xe2002, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1.335905622s ago: executing program 2 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x9}, &(0x7f0000000300)=0xc) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000007000000000000000000000d0a0000000000000001000006040000000505583d"], &(0x7f0000002480)=""/4095, 0x8b, 0xfff, 0x8}, 0x28) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dd, {0x0, 0x6, "29a22b", 0x4, 0x2f, 0x0, @loopback, @local}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4000000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe5}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) timer_delete(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r5}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 1.250448818s ago: executing program 3 (id=1859): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) setitimer(0x1, 0x0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 1.242551479s ago: executing program 2 (id=1860): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)) 1.179253294s ago: executing program 2 (id=1861): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.10902419s ago: executing program 0 (id=1862): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 1.10863089s ago: executing program 0 (id=1863): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.055117504s ago: executing program 1 (id=1864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000007000000150600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r8, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.045319235s ago: executing program 0 (id=1865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000000c0)={&(0x7f0000002000)={[{&(0x7f0000000040)="0521e6bc39fc1da5d5b79140f07763c432f59f3938d351d543a401def6bda9e9e5e9fc6fb6bc8f7032d2c9b88077ab07694528ca9f978639f080d08f8b99c86f8f33c4381a31fe1e06eff25019d50b52d8ea71c24e304423f1f1fb7f87cb085e06d1cdd30d4b8ffe17d547992ebd2f87dd68a2434737d1a950", 0x79, 0x3}]}, 0x1, 0x3}, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x1c6, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "53bbd7", 0x190, 0x21, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x33, 0x21, '\x00', [@generic={0x8, 0x25, "fd0be93856b6870dc0dc00c9803bd5d30485cc551931c2e4266571df2aaf13a559b6d461f8"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x30, {0x3, 0xa, 0x6, 0x0, [0xffffffffffffff7f, 0x7, 0x5cce000000000, 0x0, 0x7]}}, @generic={0x2, 0x7d, "da5882b3f2c895a92dfeda0a7a424235ff7a464607cf96829bb1c7789ab94f5309eb355147d5a828df6b5e270735b9a87bcd4f5a1bd7922f68f6438e52e06244006edbc359b99b0b3b361af5d8ea9a75fa3e49b3a73899108d4e1b712139a3a525fb29e476dafa6c268013731cc3094147d34e6e2e6262d6de6feb94c8"}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0xa}]}, @fragment={0x5c, 0x0, 0x81, 0x1, 0x0, 0x4, 0x67}, @srh={0x11, 0x2, 0x4, 0x1, 0x2, 0x20, 0x9, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x89, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1]}], {{0x4e23, 0x4e22, 0x4, 0x1, 0x9, 0x0, 0x0, 0x6, 0x6, "cb2e72", 0x6, "d7e368"}, "5a48ba587b47088d08ecd8713c61a86983806329f1387664ebdc8627c28c292b3cccaeee8c42be86278a79aa07d5290810ed1eb617328ade"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 954.576322ms ago: executing program 1 (id=1866): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 954.289662ms ago: executing program 1 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4c000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$isdn_base(0x22, 0x3, 0x0) flistxattr(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x67709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 417.808916ms ago: executing program 4 (id=1868): r0 = syz_io_uring_setup(0x3594, &(0x7f0000000600)={0x0, 0x358c, 0x40, 0x0, 0x299}, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000380)={0x0, 0x8988, 0x10, 0x0, 0xd0}, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='module_request\x00', r1}, 0x18) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc1500003c000900000000000200000005"], 0x15cc}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 374.369569ms ago: executing program 3 (id=1869): ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000200)={{0x8, 0x9}, {0x8, 0x8}, 0x5, 0x0, 0x6}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0x4}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}}, 0xf0}}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f0000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_clone3(&(0x7f0000000780)={0x1c1052500, 0x0, 0x0, 0x0, {0x10002b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 303.706084ms ago: executing program 2 (id=1870): r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000000300)=@ret_unlink={{0x4, 0x6, 0x0, 0x3141456f10587752, 0x7}, {0x1}}, 0x30) inotify_init1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r3, 0x9, 0x0, [0x10000, 0x7, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xa, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0x1ff, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x100, 0x81df244, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x100000001, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x9, 0xa24, 0xb10, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x800000000005, 0x18, 0x8, 0x7ff, 0x4000000200, 0x9147, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x6, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0x2, 0x3, 0x80000001, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0x80ff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000017c0)={r3, "0e7b325e69132379da3a5fc95f955a35"}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000340)={0x3, 0x7ff, @start={r3, 0x1, "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", "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"}, [0x7, 0xe181, 0x2, 0xffffffffffffff3a, 0x6, 0x89, 0x4, 0xf, 0x0, 0x9, 0xa, 0x1c2, 0x2, 0x87, 0x9, 0x5, 0x6, 0x902, 0x53f6, 0x8, 0xffffffffffffffff, 0x100000000, 0x7, 0x37, 0xf, 0xc66, 0x5, 0x7, 0x7fffffffffffffff, 0x4, 0x3, 0x87f, 0x1, 0x2, 0xe3c, 0x8, 0xed, 0x7fffffffffffffff, 0x10000, 0x0, 0x80000000000000, 0x7, 0x4, 0xda11, 0x2, 0x7, 0x8, 0x6ca, 0x7, 0x0, 0x1, 0xc, 0x5, 0x8000000000000001, 0xc, 0x7, 0xfffffffffffffffb, 0xc, 0x8, 0x5, 0x7ff, 0x0, 0x9, 0x8]}) 243.536269ms ago: executing program 3 (id=1871): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x20000, 0x0}) 229.967211ms ago: executing program 3 (id=1872): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030428b57000fedbdf250000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="c3521438", @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") socket$netlink(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) getpid() write$selinux_validatetrans(r4, 0x0, 0x79) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x3942, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0x1cb}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r11, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r8, 0x8005d62, 0x88c6, 0x0, 0x0, 0xfffffffffffffe9a) 175.844625ms ago: executing program 0 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000500000900000001000000", @ANYRES32, @ANYBLOB="2000000000000000000000006d00000000e6ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 134.998188ms ago: executing program 4 (id=1874): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x15, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x5]}, 0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002d9f580000000005712a9ad6126713e5b4f575c683d72d6236000000082055007300000000000e0001006e657464657673696d00ac80ee7d2a60542a7409007673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000044262d049c2bc3b23cf7bdf540bcbffa010000000000000000020000000000000000000000000000000000003feff28d7b0cc0feb985ea2e21bb0ff390b01b2892984edee94b21d74f42d1d6d19c9a7417469fd9ba921b985eaa00c02b58a9f2f7a0596392256ff9b768c6635ecc3f2efc8ea22f3e6739c996c75786cd0aee36d561ceaabd4e2dad39"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x24000000) 90.779472ms ago: executing program 0 (id=1875): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) 89.645152ms ago: executing program 1 (id=1876): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e3000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB="c3521438", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") socket$netlink(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) getpid() write$selinux_validatetrans(r3, 0x0, 0x79) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x3942, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0x1cb}, &(0x7f0000000100), &(0x7f0000000140)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) io_uring_enter(r7, 0x8005d62, 0x88c6, 0x0, 0x0, 0xfffffffffffffe9a) 19.402137ms ago: executing program 0 (id=1877): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {r4, r5+10000000}}, 0x0) 0s ago: executing program 4 (id=1878): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) setitimer(0x1, 0x0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ta journaling mode [ 123.268960][ T6828] loop1: detected capacity change from 0 to 512 [ 123.278450][ T6826] EXT4-fs (loop2): 1 truncate cleaned up [ 123.289261][ T6826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.289453][ T6828] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 123.372905][ T6831] lo speed is unknown, defaulting to 1000 [ 123.826724][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.828499][ T6835] loop0: detected capacity change from 0 to 512 [ 123.843519][ T6835] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 123.847647][ T6839] siw: device registration error -23 [ 123.898834][ T6843] FAULT_INJECTION: forcing a failure. [ 123.898834][ T6843] name failslab, interval 1, probability 0, space 0, times 0 [ 123.911546][ T6843] CPU: 0 UID: 0 PID: 6843 Comm: syz.0.1174 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 123.911750][ T6843] Tainted: [W]=WARN [ 123.911757][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.911773][ T6843] Call Trace: [ 123.911780][ T6843] [ 123.911796][ T6843] __dump_stack+0x1d/0x30 [ 123.911824][ T6843] dump_stack_lvl+0xe8/0x140 [ 123.911844][ T6843] dump_stack+0x15/0x1b [ 123.911860][ T6843] should_fail_ex+0x265/0x280 [ 123.911955][ T6843] should_failslab+0x8c/0xb0 [ 123.911980][ T6843] kmem_cache_alloc_node_noprof+0x57/0x320 [ 123.912016][ T6843] ? __alloc_skb+0x101/0x320 [ 123.912067][ T6843] __alloc_skb+0x101/0x320 [ 123.912107][ T6843] netlink_alloc_large_skb+0xba/0xf0 [ 123.912251][ T6843] netlink_sendmsg+0x3cf/0x6b0 [ 123.912299][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.912429][ T6843] __sock_sendmsg+0x142/0x180 [ 123.912527][ T6843] ____sys_sendmsg+0x31e/0x4e0 [ 123.912603][ T6843] ___sys_sendmsg+0x17b/0x1d0 [ 123.912664][ T6843] __x64_sys_sendmsg+0xd4/0x160 [ 123.912770][ T6843] x64_sys_call+0x191e/0x2ff0 [ 123.912797][ T6843] do_syscall_64+0xd2/0x200 [ 123.912821][ T6843] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.912891][ T6843] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.912916][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.912964][ T6843] RIP: 0033:0x7f0a97afeb69 [ 123.912980][ T6843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.913001][ T6843] RSP: 002b:00007f0a96167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.913079][ T6843] RAX: ffffffffffffffda RBX: 00007f0a97d25fa0 RCX: 00007f0a97afeb69 [ 123.913100][ T6843] RDX: 000000000000c080 RSI: 0000200000000040 RDI: 0000000000000003 [ 123.913116][ T6843] RBP: 00007f0a96167090 R08: 0000000000000000 R09: 0000000000000000 [ 123.913132][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.913212][ T6843] R13: 0000000000000000 R14: 00007f0a97d25fa0 R15: 00007ffc235615e8 [ 123.913238][ T6843] [ 124.175456][ T6851] Invalid ELF header magic: != ELF [ 124.212418][ T6856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=6856 comm=syz.2.1179 [ 124.243016][ T6856] lo speed is unknown, defaulting to 1000 [ 124.331579][ T6863] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 124.357001][ T6863] loop2: detected capacity change from 0 to 1024 [ 124.368864][ T6863] EXT4-fs: Ignoring removed bh option [ 124.374793][ T6863] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 124.406752][ T6863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.407466][ T6846] Invalid ELF header magic: != ELF [ 124.432937][ T6863] openvswitch: netlink: Message has 6 unknown bytes. [ 124.469923][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.523911][ T6870] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1182'. [ 124.724445][ T6873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1183'. [ 124.736613][ T6873] loop1: detected capacity change from 0 to 512 [ 124.748895][ T6873] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.764003][ T6873] EXT4-fs (loop1): mount failed [ 125.084345][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=6889 comm=syz.4.1190 [ 125.111575][ T6889] lo speed is unknown, defaulting to 1000 [ 125.174021][ T6892] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1191'. [ 125.377448][ T6899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1194'. [ 125.389478][ T6899] loop2: detected capacity change from 0 to 512 [ 125.409038][ T6899] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.424120][ T6899] EXT4-fs (loop2): mount failed [ 125.839704][ T6919] Invalid ELF header magic: != ELF [ 125.905690][ T6922] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1202'. [ 125.922183][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=6924 comm=syz.1.1203 [ 125.944436][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 125.956462][ T6924] lo speed is unknown, defaulting to 1000 [ 125.995499][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 125.995560][ T29] audit: type=1326 audit(1754035964.671:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 126.031013][ T29] audit: type=1326 audit(1754035964.671:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 126.054594][ T29] audit: type=1326 audit(1754035964.671:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 126.078134][ T29] audit: type=1326 audit(1754035964.671:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.1.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 126.221286][ T6935] lo speed is unknown, defaulting to 1000 [ 126.427426][ T6940] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1207'. [ 126.495878][ T6940] loop4: detected capacity change from 0 to 512 [ 126.564267][ T6944] netlink: 5560 bytes leftover after parsing attributes in process `syz.3.1210'. [ 126.578663][ T6940] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 126.590617][ T6940] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.608558][ T6940] EXT4-fs (loop4): mount failed [ 126.982044][ T6957] lo speed is unknown, defaulting to 1000 [ 127.270102][ T6963] loop0: detected capacity change from 0 to 128 [ 127.297317][ T6963] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 127.314145][ T29] audit: type=1326 audit(1754035965.941:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 127.337747][ T29] audit: type=1326 audit(1754035965.941:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 127.361270][ T29] audit: type=1326 audit(1754035965.941:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 127.385074][ T29] audit: type=1326 audit(1754035965.941:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a97afeba3 code=0x7ffc0000 [ 127.408467][ T29] audit: type=1326 audit(1754035965.941:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.0.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a97afd61f code=0x7ffc0000 [ 127.475475][ T6965] loop2: detected capacity change from 0 to 512 [ 127.490456][ T6965] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 127.546378][ T6968] loop0: detected capacity change from 0 to 512 [ 127.554642][ T6968] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 127.610357][ T6974] siw: device registration error -23 [ 127.611760][ T6961] Invalid ELF header magic: != ELF [ 127.620943][ T6976] loop2: detected capacity change from 0 to 512 [ 127.622795][ T6976] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.679580][ T6976] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.1222: iget: bad i_size value: -6917529027641081756 [ 127.699606][ T6976] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1222: couldn't read orphan inode 17 (err -117) [ 127.712344][ T6976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.741807][ T6984] __nla_validate_parse: 1 callbacks suppressed [ 127.741821][ T6984] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1226'. [ 127.802877][ T6976] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 127.852000][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.868682][ T6991] netlink: 5560 bytes leftover after parsing attributes in process `syz.4.1228'. [ 127.894162][ T6995] loop0: detected capacity change from 0 to 512 [ 127.912605][ T6995] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 127.941045][ T6997] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.1230'. [ 128.078036][ T7015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1237'. [ 128.165653][ T7017] lo speed is unknown, defaulting to 1000 [ 128.351197][ T7021] loop1: detected capacity change from 0 to 512 [ 128.521021][ T7021] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.595521][ T7021] EXT4-fs (loop1): mount failed [ 128.646348][ T7026] loop3: detected capacity change from 0 to 512 [ 128.678339][ T7026] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 128.782731][ T7032] lo speed is unknown, defaulting to 1000 [ 128.947080][ T7035] loop0: detected capacity change from 0 to 128 [ 128.992096][ T7035] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.128560][ T7039] loop1: detected capacity change from 0 to 512 [ 129.256947][ T7039] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 129.364887][ T7046] loop1: detected capacity change from 0 to 128 [ 129.373820][ T7048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1248'. [ 129.398133][ T7046] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.531563][ T7058] loop4: detected capacity change from 0 to 1024 [ 129.562523][ T7058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.592918][ T7041] Invalid ELF header magic: != ELF [ 129.608852][ T7058] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.648503][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.720439][ T7074] loop3: detected capacity change from 0 to 512 [ 129.727824][ T7074] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 129.768173][ T7077] FAULT_INJECTION: forcing a failure. [ 129.768173][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.781490][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.4.1256 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 129.781526][ T7077] Tainted: [W]=WARN [ 129.781533][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.781603][ T7077] Call Trace: [ 129.781610][ T7077] [ 129.781634][ T7077] __dump_stack+0x1d/0x30 [ 129.781661][ T7077] dump_stack_lvl+0xe8/0x140 [ 129.781705][ T7077] dump_stack+0x15/0x1b [ 129.781722][ T7077] should_fail_ex+0x265/0x280 [ 129.781756][ T7077] should_fail+0xb/0x20 [ 129.781804][ T7077] should_fail_usercopy+0x1a/0x20 [ 129.781829][ T7077] _copy_from_iter+0xcf/0xe40 [ 129.781861][ T7077] ? alloc_pages_mpol+0x201/0x250 [ 129.781989][ T7077] copy_page_from_iter+0x178/0x2a0 [ 129.782023][ T7077] tun_get_user+0x679/0x2680 [ 129.782068][ T7077] ? ref_tracker_alloc+0x1f2/0x2f0 [ 129.782167][ T7077] tun_chr_write_iter+0x15e/0x210 [ 129.782235][ T7077] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 129.782270][ T7077] vfs_write+0x4a0/0x8e0 [ 129.782300][ T7077] ksys_write+0xda/0x1a0 [ 129.782343][ T7077] __x64_sys_write+0x40/0x50 [ 129.782370][ T7077] x64_sys_call+0x27fe/0x2ff0 [ 129.782415][ T7077] do_syscall_64+0xd2/0x200 [ 129.782442][ T7077] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 129.782536][ T7077] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 129.782565][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.782597][ T7077] RIP: 0033:0x7f55ac41d61f [ 129.782617][ T7077] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 129.782642][ T7077] RSP: 002b:00007f55aaa66000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 129.782666][ T7077] RAX: ffffffffffffffda RBX: 00007f55ac646080 RCX: 00007f55ac41d61f [ 129.782690][ T7077] RDX: 0000000000000042 RSI: 0000200000000040 RDI: 00000000000000c8 [ 129.782705][ T7077] RBP: 00007f55aaa66090 R08: 0000000000000000 R09: 0000000000000000 [ 129.782722][ T7077] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 129.782737][ T7077] R13: 0000000000000001 R14: 00007f55ac646080 R15: 00007ffecd8af098 [ 129.782765][ T7077] [ 130.022734][ T7084] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1260'. [ 130.074777][ T7088] loop3: detected capacity change from 0 to 512 [ 130.083212][ T7088] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 130.121642][ T7092] loop1: detected capacity change from 0 to 1024 [ 130.139391][ T7092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.152832][ T7092] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.160242][ T7098] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1266'. [ 130.166298][ T7092] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1264: lblock 0 mapped to illegal pblock 0 (length 1) [ 130.185915][ T7092] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 130.198233][ T7092] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.198233][ T7092] [ 130.219799][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.426490][ T7119] lo speed is unknown, defaulting to 1000 [ 130.693093][ T7125] siw: device registration error -23 [ 131.011363][ T7127] loop3: detected capacity change from 0 to 1024 [ 131.030499][ T7127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.042813][ T7127] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.055656][ T7127] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.1277: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.069267][ T7127] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 131.081624][ T7127] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.081624][ T7127] [ 131.102261][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.143459][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 131.159348][ T7133] loop0: detected capacity change from 0 to 512 [ 131.168971][ T7133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 131.172742][ T7137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=7137 comm=syz.2.1280 [ 131.177075][ T7133] System zones: 0-2, 18-18, 34-34 [ 131.196022][ T7133] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1279: bg 0: block 248: padding at end of block bitmap is not set [ 131.217840][ T7133] __quota_error: 420 callbacks suppressed [ 131.217858][ T7133] Quota error (device loop0): write_blk: dquota write failed [ 131.231274][ T7133] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 131.232071][ T7137] lo speed is unknown, defaulting to 1000 [ 131.242927][ T7133] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1279: Failed to acquire dquot type 1 [ 131.260326][ T7133] EXT4-fs (loop0): 1 truncate cleaned up [ 131.266581][ T7133] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.284888][ T29] audit: type=1326 audit(1754035969.961:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 131.308604][ T29] audit: type=1326 audit(1754035969.961:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 131.332280][ T29] audit: type=1326 audit(1754035969.961:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 131.357233][ T29] audit: type=1326 audit(1754035969.961:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 131.381308][ T29] audit: type=1326 audit(1754035969.961:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 131.405464][ T29] audit: type=1400 audit(1754035969.961:3637): avc: denied { read } for pid=7139 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 131.426244][ T7133] usb usb8: usbfs: process 7133 (syz.0.1279) did not claim interface 0 before use [ 131.437933][ T29] audit: type=1400 audit(1754035970.121:3638): avc: denied { setopt } for pid=7139 comm="syz.1.1281" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.514047][ T7152] loop2: detected capacity change from 0 to 512 [ 131.528489][ T7152] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 131.538504][ T29] audit: type=1326 audit(1754035970.221:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 131.582316][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 131.632825][ T7159] loop2: detected capacity change from 0 to 512 [ 131.648928][ T7159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 131.657200][ T7159] System zones: 0-2, 18-18, 34-34 [ 131.663389][ T7159] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1289: bg 0: block 248: padding at end of block bitmap is not set [ 131.678248][ T7159] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1289: Failed to acquire dquot type 1 [ 131.690846][ T7159] EXT4-fs (loop2): 1 truncate cleaned up [ 131.697044][ T7159] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.710638][ T7159] usb usb8: usbfs: process 7159 (syz.2.1289) did not claim interface 0 before use [ 132.220145][ T7179] lo speed is unknown, defaulting to 1000 [ 132.599253][ T7188] loop2: detected capacity change from 0 to 512 [ 132.639447][ T7188] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 132.716793][ T7192] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1301'. [ 132.783658][ T7196] FAULT_INJECTION: forcing a failure. [ 132.783658][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 132.796524][ T7196] CPU: 1 UID: 0 PID: 7196 Comm: syz.4.1304 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 132.796634][ T7196] Tainted: [W]=WARN [ 132.796642][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.796740][ T7196] Call Trace: [ 132.796828][ T7196] [ 132.796867][ T7196] __dump_stack+0x1d/0x30 [ 132.796891][ T7196] dump_stack_lvl+0xe8/0x140 [ 132.796913][ T7196] dump_stack+0x15/0x1b [ 132.796991][ T7196] should_fail_ex+0x265/0x280 [ 132.797033][ T7196] ? alloc_pipe_info+0xae/0x350 [ 132.797088][ T7196] should_failslab+0x8c/0xb0 [ 132.797119][ T7196] __kmalloc_cache_noprof+0x4c/0x320 [ 132.797166][ T7196] alloc_pipe_info+0xae/0x350 [ 132.797218][ T7196] splice_direct_to_actor+0x592/0x680 [ 132.797252][ T7196] ? kstrtouint_from_user+0x9f/0xf0 [ 132.797278][ T7196] ? __pfx_direct_splice_actor+0x10/0x10 [ 132.797302][ T7196] ? __rcu_read_unlock+0x4f/0x70 [ 132.797330][ T7196] ? get_pid_task+0x96/0xd0 [ 132.797452][ T7196] ? avc_policy_seqno+0x15/0x30 [ 132.797474][ T7196] ? selinux_file_permission+0x1e4/0x320 [ 132.797519][ T7196] do_splice_direct+0xda/0x150 [ 132.797543][ T7196] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 132.797576][ T7196] do_sendfile+0x380/0x650 [ 132.797681][ T7196] __x64_sys_sendfile64+0x105/0x150 [ 132.797763][ T7196] x64_sys_call+0x2bb0/0x2ff0 [ 132.797789][ T7196] do_syscall_64+0xd2/0x200 [ 132.797818][ T7196] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.797849][ T7196] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.797934][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.798022][ T7196] RIP: 0033:0x7f55ac41eb69 [ 132.798043][ T7196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.798071][ T7196] RSP: 002b:00007f55aaa87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 132.798095][ T7196] RAX: ffffffffffffffda RBX: 00007f55ac645fa0 RCX: 00007f55ac41eb69 [ 132.798110][ T7196] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 132.798125][ T7196] RBP: 00007f55aaa87090 R08: 0000000000000000 R09: 0000000000000000 [ 132.798137][ T7196] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 132.798187][ T7196] R13: 0000000000000000 R14: 00007f55ac645fa0 R15: 00007ffecd8af098 [ 132.798217][ T7196] [ 132.799590][ T7198] loop2: detected capacity change from 0 to 512 [ 132.850366][ T7200] loop4: detected capacity change from 0 to 1024 [ 132.856546][ T7198] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 132.870453][ T7200] EXT4-fs: Ignoring removed bh option [ 133.085633][ T7204] loop2: detected capacity change from 0 to 512 [ 133.104817][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 133.105830][ T7200] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1306'. [ 133.123084][ T7206] loop0: detected capacity change from 0 to 512 [ 133.130179][ T7204] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 133.150466][ T7206] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 133.159488][ T7206] System zones: 0-2, 18-18, 34-34 [ 133.165478][ T7206] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1309: bg 0: block 248: padding at end of block bitmap is not set [ 133.181779][ T7206] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1309: Failed to acquire dquot type 1 [ 133.197367][ T7206] EXT4-fs (loop0): 1 truncate cleaned up [ 133.205388][ T7206] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.244211][ T7220] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1314'. [ 133.260578][ T7206] usb usb8: usbfs: process 7206 (syz.0.1309) did not claim interface 0 before use [ 133.330023][ T7226] FAULT_INJECTION: forcing a failure. [ 133.330023][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 133.342845][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.2.1317 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 133.342888][ T7226] Tainted: [W]=WARN [ 133.342949][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.342967][ T7226] Call Trace: [ 133.342977][ T7226] [ 133.342987][ T7226] __dump_stack+0x1d/0x30 [ 133.343014][ T7226] dump_stack_lvl+0xe8/0x140 [ 133.343091][ T7226] dump_stack+0x15/0x1b [ 133.343113][ T7226] should_fail_ex+0x265/0x280 [ 133.343168][ T7226] should_failslab+0x8c/0xb0 [ 133.343195][ T7226] kmem_cache_alloc_node_noprof+0x57/0x320 [ 133.343231][ T7226] ? dup_task_struct+0x70/0x6a0 [ 133.343312][ T7226] dup_task_struct+0x70/0x6a0 [ 133.343339][ T7226] ? _parse_integer+0x27/0x40 [ 133.343379][ T7226] copy_process+0x399/0x2000 [ 133.343407][ T7226] ? kstrtouint+0x76/0xc0 [ 133.343522][ T7226] ? kstrtouint_from_user+0x9f/0xf0 [ 133.343545][ T7226] ? __rcu_read_unlock+0x4f/0x70 [ 133.343724][ T7226] kernel_clone+0x16c/0x5c0 [ 133.343760][ T7226] ? vfs_write+0x75e/0x8e0 [ 133.343792][ T7226] __x64_sys_clone+0xe6/0x120 [ 133.343832][ T7226] x64_sys_call+0x119c/0x2ff0 [ 133.343857][ T7226] do_syscall_64+0xd2/0x200 [ 133.343971][ T7226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.344004][ T7226] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.344034][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.344063][ T7226] RIP: 0033:0x7f2a418deb69 [ 133.344086][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.344176][ T7226] RSP: 002b:00007f2a3ff3efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 133.344201][ T7226] RAX: ffffffffffffffda RBX: 00007f2a41b05fa0 RCX: 00007f2a418deb69 [ 133.344218][ T7226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000638c1000 [ 133.344233][ T7226] RBP: 00007f2a3ff3f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.344296][ T7226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 133.344312][ T7226] R13: 0000000000000001 R14: 00007f2a41b05fa0 R15: 00007ffc87083948 [ 133.344337][ T7226] [ 133.610655][ T7235] debugfs: 'ptm1' already exists in 'caif_serial' [ 133.615295][ T7237] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.626019][ T7237] vhci_hcd: invalid port number 253 [ 133.631349][ T7237] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 133.631398][ T7235] loop9: detected capacity change from 0 to 7 [ 133.646106][ T7235] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.655370][ T7235] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.663612][ T7235] loop9: unable to read partition table [ 133.670061][ T7235] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 133.670061][ T7235] ) failed (rc=-5) [ 133.942984][ T3301] EXT4-fs unmount: 7 callbacks suppressed [ 133.943008][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.974201][ T7247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1325'. [ 134.025171][ T7255] FAULT_INJECTION: forcing a failure. [ 134.025171][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 134.038137][ T7255] CPU: 0 UID: 0 PID: 7255 Comm: syz.0.1329 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 134.038174][ T7255] Tainted: [W]=WARN [ 134.038181][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.038194][ T7255] Call Trace: [ 134.038200][ T7255] [ 134.038250][ T7255] __dump_stack+0x1d/0x30 [ 134.038278][ T7255] dump_stack_lvl+0xe8/0x140 [ 134.038301][ T7255] dump_stack+0x15/0x1b [ 134.038320][ T7255] should_fail_ex+0x265/0x280 [ 134.038362][ T7255] ? proc_do_submiturb+0x83d/0x1d20 [ 134.038426][ T7255] should_failslab+0x8c/0xb0 [ 134.038494][ T7255] __kmalloc_cache_noprof+0x4c/0x320 [ 134.038611][ T7255] proc_do_submiturb+0x83d/0x1d20 [ 134.038652][ T7255] ? proc_do_submiturb+0x191/0x1d20 [ 134.038691][ T7255] ? should_fail_ex+0xdb/0x280 [ 134.038775][ T7255] proc_submiturb+0x7b/0xa0 [ 134.038801][ T7255] usbdev_ioctl+0xcc2/0x1710 [ 134.038830][ T7255] ? __pfx_usbdev_ioctl+0x10/0x10 [ 134.038851][ T7255] __se_sys_ioctl+0xce/0x140 [ 134.038883][ T7255] __x64_sys_ioctl+0x43/0x50 [ 134.038961][ T7255] x64_sys_call+0x1816/0x2ff0 [ 134.038981][ T7255] do_syscall_64+0xd2/0x200 [ 134.039068][ T7255] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.039093][ T7255] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.039136][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.039202][ T7255] RIP: 0033:0x7f0a97afeb69 [ 134.039251][ T7255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.039278][ T7255] RSP: 002b:00007f0a96167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.039303][ T7255] RAX: ffffffffffffffda RBX: 00007f0a97d25fa0 RCX: 00007f0a97afeb69 [ 134.039319][ T7255] RDX: 0000200000000080 RSI: 000000008038550a RDI: 0000000000000004 [ 134.039330][ T7255] RBP: 00007f0a96167090 R08: 0000000000000000 R09: 0000000000000000 [ 134.039342][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.039353][ T7255] R13: 0000000000000000 R14: 00007f0a97d25fa0 R15: 00007ffc235615e8 [ 134.039374][ T7255] [ 134.306552][ T7260] loop4: detected capacity change from 0 to 256 [ 134.316055][ T7260] syzkaller1: entered promiscuous mode [ 134.321646][ T7260] syzkaller1: entered allmulticast mode [ 134.368427][ T7270] loop0: detected capacity change from 0 to 1024 [ 134.380854][ T7270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.393050][ T7270] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.405630][ T7270] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1335: lblock 0 mapped to illegal pblock 0 (length 1) [ 134.419367][ T7270] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 134.431995][ T7270] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.431995][ T7270] [ 134.456593][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.493802][ T7279] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1338'. [ 134.686226][ T7289] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.693765][ T7289] vhci_hcd: invalid port number 253 [ 134.699026][ T7289] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 134.909437][ T7300] loop3: detected capacity change from 0 to 512 [ 134.920215][ T7300] EXT4-fs (loop3): 1 orphan inode deleted [ 134.926527][ T7300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.940128][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 134.951732][ T7300] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.403531][ T7311] loop0: detected capacity change from 0 to 256 [ 135.411966][ T7311] syzkaller1: entered promiscuous mode [ 135.411996][ T7311] syzkaller1: entered allmulticast mode [ 135.413510][ T7313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1349'. [ 135.464553][ T7317] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1351'. [ 135.576316][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'. [ 135.795454][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.237440][ T7326] loop0: detected capacity change from 0 to 512 [ 136.249594][ T7326] __quota_error: 209 callbacks suppressed [ 136.249612][ T7326] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 136.266219][ T7326] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.281998][ T7326] EXT4-fs (loop0): mount failed [ 136.317026][ T29] audit: type=1326 audit(1754035974.991:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 136.343333][ T7332] loop2: detected capacity change from 0 to 128 [ 136.347096][ T29] audit: type=1326 audit(1754035975.021:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 136.350806][ T7332] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 136.373297][ T29] audit: type=1326 audit(1754035975.021:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 136.405088][ T29] audit: type=1326 audit(1754035975.021:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a418deba3 code=0x7ffc0000 [ 136.428574][ T29] audit: type=1326 audit(1754035975.021:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a418dd61f code=0x7ffc0000 [ 136.452023][ T29] audit: type=1326 audit(1754035975.021:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2a418debf7 code=0x7ffc0000 [ 136.475399][ T29] audit: type=1326 audit(1754035975.021:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a418dd4d0 code=0x7ffc0000 [ 136.499052][ T29] audit: type=1326 audit(1754035975.021:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a418de76b code=0x7ffc0000 [ 136.530083][ T29] audit: type=1326 audit(1754035975.031:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2a418dd7ca code=0x7ffc0000 [ 136.580396][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 136.597302][ T7346] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1361'. [ 136.621769][ T7344] loop0: detected capacity change from 0 to 512 [ 136.661632][ T7344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 136.669962][ T7344] System zones: 0-2, 18-18, 34-34 [ 136.676019][ T7344] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1362: bg 0: block 248: padding at end of block bitmap is not set [ 136.692140][ T7344] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1362: Failed to acquire dquot type 1 [ 136.705958][ T7344] EXT4-fs (loop0): 1 truncate cleaned up [ 136.712674][ T7344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.726075][ T7344] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.742534][ T7362] siw: device registration error -23 [ 136.768198][ T7344] usb usb8: usbfs: process 7344 (syz.0.1362) did not claim interface 0 before use [ 136.792602][ T7364] loop3: detected capacity change from 0 to 256 [ 136.794691][ T7364] syzkaller1: entered promiscuous mode [ 136.805369][ T7364] syzkaller1: entered allmulticast mode [ 137.429336][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.481598][ T7372] loop0: detected capacity change from 0 to 512 [ 137.482473][ T7372] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 137.712524][ T7384] lo speed is unknown, defaulting to 1000 [ 137.802517][ T7376] loop0: detected capacity change from 0 to 512 [ 137.803595][ T7376] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 138.005707][ T7392] loop3: detected capacity change from 0 to 128 [ 138.055216][ T7392] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 138.087782][ T7394] lo speed is unknown, defaulting to 1000 [ 138.262396][ T7398] __nla_validate_parse: 1 callbacks suppressed [ 138.262416][ T7398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1377'. [ 138.425932][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 138.506745][ T7400] loop1: detected capacity change from 0 to 512 [ 138.590706][ T7400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 138.600182][ T7400] System zones: 0-2, 18-18, 34-34 [ 138.606170][ T7400] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1378: bg 0: block 248: padding at end of block bitmap is not set [ 138.621876][ T7400] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1378: Failed to acquire dquot type 1 [ 138.634962][ T7400] EXT4-fs (loop1): 1 truncate cleaned up [ 138.641184][ T7400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.654139][ T7400] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.668774][ T7410] loop3: detected capacity change from 0 to 512 [ 138.676004][ T7410] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 138.689095][ T7400] usb usb8: usbfs: process 7400 (syz.1.1378) did not claim interface 0 before use [ 138.866992][ T7423] lo speed is unknown, defaulting to 1000 [ 138.946586][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1385'. [ 138.963736][ T7426] loop2: detected capacity change from 0 to 512 [ 138.978005][ T7420] siw: device registration error -23 [ 138.999887][ T7426] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.015540][ T7426] EXT4-fs (loop2): mount failed [ 139.250501][ T7400] syz.1.1378 (7400) used greatest stack depth: 9224 bytes left [ 139.286195][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.426756][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 139.464181][ T7436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1389'. [ 139.499243][ T7440] loop2: detected capacity change from 0 to 128 [ 139.506352][ T7440] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 139.662698][ T7449] loop3: detected capacity change from 0 to 512 [ 139.672213][ T7449] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 139.737803][ T7455] loop1: detected capacity change from 0 to 1024 [ 139.749646][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 139.765254][ T7459] loop4: detected capacity change from 0 to 512 [ 139.796060][ T7459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 139.798228][ T7455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.817658][ T7459] System zones: 0-2, 18-18, 34-34 [ 139.824617][ T7459] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1396: bg 0: block 248: padding at end of block bitmap is not set [ 139.827865][ T7438] Invalid ELF header magic: != ELF [ 139.844535][ T7455] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.860616][ T7469] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.1400'. [ 139.870692][ T7459] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1396: Failed to acquire dquot type 1 [ 139.871197][ T7455] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1395: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.899219][ T7459] EXT4-fs (loop4): 1 truncate cleaned up [ 139.909736][ T7455] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 139.910928][ T7459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.922215][ T7455] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.922215][ T7455] [ 139.944610][ T7459] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.999253][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.018617][ T7459] usb usb8: usbfs: process 7459 (syz.4.1396) did not claim interface 0 before use [ 140.086694][ T7477] loop0: detected capacity change from 0 to 512 [ 140.094871][ T7477] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 140.243184][ T7483] siw: device registration error -23 [ 140.312575][ T7491] loop2: detected capacity change from 0 to 128 [ 140.319849][ T7491] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 140.412176][ T7493] loop2: detected capacity change from 0 to 512 [ 140.429646][ T7493] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.444923][ T7493] EXT4-fs (loop2): mount failed [ 140.507387][ T7501] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1411'. [ 140.595706][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.717264][ T7516] loop3: detected capacity change from 0 to 512 [ 140.725995][ T7516] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 140.953780][ T7518] Invalid ELF header magic: != ELF [ 141.072612][ T7525] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1422'. [ 141.104512][ T7529] loop3: detected capacity change from 0 to 512 [ 141.112841][ T7529] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 141.284688][ T7537] lo speed is unknown, defaulting to 1000 [ 141.869074][ T7542] lo speed is unknown, defaulting to 1000 [ 142.518813][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 142.518831][ T29] audit: type=1326 audit(1754035981.191:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 142.548562][ T29] audit: type=1326 audit(1754035981.191:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 142.572264][ T29] audit: type=1326 audit(1754035981.191:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 142.595859][ T29] audit: type=1326 audit(1754035981.191:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 142.619342][ T29] audit: type=1326 audit(1754035981.191:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 142.676507][ T29] audit: type=1326 audit(1754035981.341:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 142.700007][ T29] audit: type=1326 audit(1754035981.341:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 142.723481][ T29] audit: type=1326 audit(1754035981.341:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 142.747015][ T29] audit: type=1326 audit(1754035981.341:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 142.770530][ T29] audit: type=1326 audit(1754035981.341:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a418deb69 code=0x7ffc0000 [ 142.770709][ T7570] loop4: detected capacity change from 0 to 128 [ 142.848442][ T7570] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 143.019559][ T7553] Invalid ELF header magic: != ELF [ 143.152692][ T7574] lo speed is unknown, defaulting to 1000 [ 143.167264][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 143.280545][ T7587] loop4: detected capacity change from 0 to 512 [ 143.287567][ T7587] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 143.481303][ T7601] lo speed is unknown, defaulting to 1000 [ 143.652734][ T7604] loop2: detected capacity change from 0 to 512 [ 143.893142][ T7611] lo speed is unknown, defaulting to 1000 [ 144.053085][ T7614] loop3: detected capacity change from 0 to 512 [ 144.062499][ T7614] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 144.144053][ T7604] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1452: error while reading EA inode 32 err=-116 [ 144.167779][ T7604] EXT4-fs (loop2): Remounting filesystem read-only [ 144.174361][ T7604] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.187375][ T7604] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 144.202698][ T7604] EXT4-fs (loop2): 1 orphan inode deleted [ 144.208911][ T7604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.248175][ T7604] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.291670][ T7620] lo speed is unknown, defaulting to 1000 [ 144.319708][ T7635] loop0: detected capacity change from 0 to 128 [ 144.329195][ T7635] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 144.358293][ T7638] siw: device registration error -23 [ 144.399729][ T7639] loop1: detected capacity change from 0 to 256 [ 144.414417][ T7639] syzkaller1: entered promiscuous mode [ 144.414436][ T7639] syzkaller1: entered allmulticast mode [ 144.542416][ T7652] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1469'. [ 144.557039][ T7652] loop4: detected capacity change from 0 to 512 [ 144.654708][ T7652] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.670977][ T7652] EXT4-fs (loop4): mount failed [ 144.734155][ T7659] loop9: detected capacity change from 0 to 7 [ 144.734323][ T7659] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.734357][ T7659] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.734445][ T7659] loop9: unable to read partition table [ 144.734534][ T7659] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 144.734534][ T7659] ) failed (rc=-5) [ 144.798440][ T7661] lo speed is unknown, defaulting to 1000 [ 145.070786][ T7668] loop9: detected capacity change from 0 to 7 [ 145.071087][ T7668] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.071123][ T7668] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.071216][ T7668] loop9: unable to read partition table [ 145.071241][ T7668] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 145.071241][ T7668] ) failed (rc=-5) [ 145.365238][ T7678] loop4: detected capacity change from 0 to 128 [ 145.376003][ T7680] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.379688][ T7681] netlink: 5560 bytes leftover after parsing attributes in process `syz.1.1479'. [ 145.399047][ T7678] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 145.399447][ T7680] SELinux: failed to load policy [ 145.440681][ T7683] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1481'. [ 145.452688][ T7683] loop0: detected capacity change from 0 to 512 [ 145.459588][ T7685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1482'. [ 145.485888][ T7685] loop3: detected capacity change from 0 to 512 [ 145.488852][ T7683] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.527520][ T7685] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 145.535694][ T7685] System zones: 0-2, 18-18, 34-34 [ 145.547168][ T7683] EXT4-fs (loop0): mount failed [ 145.598392][ T7685] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1482: bg 0: block 248: padding at end of block bitmap is not set [ 145.620729][ T7701] loop2: detected capacity change from 0 to 256 [ 145.630376][ T7696] syzkaller1: entered promiscuous mode [ 145.635888][ T7696] syzkaller1: entered allmulticast mode [ 145.655903][ T7685] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1482: Failed to acquire dquot type 1 [ 145.669704][ T7685] EXT4-fs (loop3): 1 truncate cleaned up [ 145.675735][ T7685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.690101][ T7685] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.703554][ T7704] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1487'. [ 145.739451][ T7704] loop0: detected capacity change from 0 to 512 [ 145.746139][ T7685] usb usb8: usbfs: process 7685 (syz.3.1482) did not claim interface 0 before use [ 145.769153][ T7704] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 145.779723][ T7704] System zones: 0-2, 18-18, 34-34 [ 145.785900][ T7704] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1487: bg 0: block 248: padding at end of block bitmap is not set [ 145.820641][ T7704] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1487: Failed to acquire dquot type 1 [ 145.821377][ T7704] EXT4-fs (loop0): 1 truncate cleaned up [ 145.821815][ T7704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.821894][ T7704] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.826367][ T7704] usb usb8: usbfs: process 7704 (syz.0.1487) did not claim interface 0 before use [ 145.882514][ T7719] loop4: detected capacity change from 0 to 256 [ 145.897086][ T51] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.897371][ T7719] syzkaller1: entered promiscuous mode [ 145.897389][ T7719] syzkaller1: entered allmulticast mode [ 145.917830][ T51] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.917911][ T51] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.917965][ T51] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.300829][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.540681][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.744088][ T7740] loop4: detected capacity change from 0 to 128 [ 146.779123][ T7740] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 146.796382][ T7742] lo speed is unknown, defaulting to 1000 [ 146.845058][ T7746] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.1501'. [ 146.877924][ T7750] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1503'. [ 146.933420][ T7752] loop1: detected capacity change from 0 to 512 [ 146.973710][ T7752] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 146.985676][ T7752] System zones: 0-2, 18-18, 34-34 [ 147.022676][ T7752] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1503: bg 0: block 248: padding at end of block bitmap is not set [ 147.086779][ T7752] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1503: Failed to acquire dquot type 1 [ 147.141107][ T7752] EXT4-fs (loop1): 1 truncate cleaned up [ 147.151858][ T7752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.192991][ T7752] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.258650][ T7750] usb usb8: usbfs: process 7750 (syz.1.1503) did not claim interface 0 before use [ 147.731596][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.860667][ T7787] lo speed is unknown, defaulting to 1000 [ 148.014191][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 148.014243][ T29] audit: type=1326 audit(1754035986.691:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.144698][ T29] audit: type=1326 audit(1754035986.731:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.168382][ T29] audit: type=1326 audit(1754035986.731:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.191850][ T29] audit: type=1326 audit(1754035986.731:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.215321][ T29] audit: type=1326 audit(1754035986.731:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.238818][ T29] audit: type=1326 audit(1754035986.731:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.262693][ T29] audit: type=1326 audit(1754035986.731:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.263135][ T7790] loop9: detected capacity change from 0 to 7 [ 148.286347][ T29] audit: type=1326 audit(1754035986.731:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.316078][ T29] audit: type=1326 audit(1754035986.731:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.319254][ T7790] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.339663][ T29] audit: type=1326 audit(1754035986.731:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 148.373581][ T7790] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.381771][ T7790] loop9: unable to read partition table [ 148.390369][ T7790] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 148.390369][ T7790] ) failed (rc=-5) [ 148.474382][ T7802] loop3: detected capacity change from 0 to 512 [ 148.481030][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 148.486611][ T7802] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.500171][ T7804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1523'. [ 148.513336][ T7804] loop4: detected capacity change from 0 to 512 [ 148.520833][ T7802] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 148.530371][ T7802] EXT4-fs (loop3): orphan cleanup on readonly fs [ 148.537379][ T7802] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.560205][ T7802] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 148.567394][ T7802] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1522: bg 0: block 40: padding at end of block bitmap is not set [ 148.570059][ T7808] lo speed is unknown, defaulting to 1000 [ 148.583128][ T7802] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 148.599088][ T7802] EXT4-fs (loop3): 1 truncate cleaned up [ 148.605162][ T7802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.619658][ T7804] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 148.637806][ T7804] System zones: 0-2, 18-18, 34-34 [ 148.644141][ T7804] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1523: bg 0: block 248: padding at end of block bitmap is not set [ 148.660245][ T7804] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1523: Failed to acquire dquot type 1 [ 148.673533][ T7804] EXT4-fs (loop4): 1 truncate cleaned up [ 148.680586][ T7804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.686315][ T7815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1526'. [ 148.693535][ T7804] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.720445][ T7815] loop2: detected capacity change from 0 to 512 [ 148.736467][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.748824][ T7815] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.768247][ T7815] EXT4-fs (loop2): mount failed [ 148.777882][ T7804] usb usb8: usbfs: process 7804 (syz.4.1523) did not claim interface 0 before use [ 148.799832][ T7821] loop9: detected capacity change from 0 to 7 [ 148.811794][ T7821] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.820525][ T7821] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.828477][ T7821] loop9: unable to read partition table [ 148.836077][ T7821] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 148.836077][ T7821] ) failed (rc=-5) [ 149.131926][ T7844] lo speed is unknown, defaulting to 1000 [ 149.342406][ T7832] Invalid ELF header magic: != ELF [ 149.412911][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.703666][ T7857] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1542'. [ 149.767571][ T7867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1547'. [ 149.781073][ T7867] loop2: detected capacity change from 0 to 512 [ 149.798835][ T7867] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 149.806945][ T7867] System zones: 0-2, 18-18, 34-34 [ 149.813726][ T7867] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1547: bg 0: block 248: padding at end of block bitmap is not set [ 149.906740][ T7867] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1547: Failed to acquire dquot type 1 [ 149.932485][ T7873] lo speed is unknown, defaulting to 1000 [ 150.071437][ T7867] EXT4-fs (loop2): 1 truncate cleaned up [ 150.078497][ T7867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.091486][ T7867] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.159243][ T7878] siw: device registration error -23 [ 150.168848][ T7867] usb usb8: usbfs: process 7867 (syz.2.1547) did not claim interface 0 before use [ 150.321102][ T7880] loop3: detected capacity change from 0 to 512 [ 150.335583][ T7880] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1550: error while reading EA inode 32 err=-116 [ 150.350363][ T7880] EXT4-fs (loop3): Remounting filesystem read-only [ 150.357111][ T7880] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 150.371889][ T7880] EXT4-fs (loop3): 1 orphan inode deleted [ 150.386297][ T7880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.403250][ T7880] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.515519][ T7885] loop3: detected capacity change from 0 to 512 [ 150.524919][ T7885] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1551: error while reading EA inode 32 err=-116 [ 150.537801][ T7885] EXT4-fs (loop3): Remounting filesystem read-only [ 150.544403][ T7885] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 150.563864][ T7885] EXT4-fs (loop3): 1 orphan inode deleted [ 150.570639][ T7885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.586367][ T7885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.641548][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.716286][ T7901] loop9: detected capacity change from 0 to 7 [ 150.722810][ T7901] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.731408][ T7901] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.739314][ T7901] loop9: unable to read partition table [ 150.745165][ T7901] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 150.745165][ T7901] ) failed (rc=-5) [ 150.762616][ T7907] Invalid ELF header magic: != ELF [ 150.794854][ T7909] siw: device registration error -23 [ 150.867362][ T7913] loop9: detected capacity change from 0 to 7 [ 150.874010][ T7913] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.882639][ T7913] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.890574][ T7913] loop9: unable to read partition table [ 150.898719][ T7913] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 150.898719][ T7913] ) failed (rc=-5) [ 150.975132][ T7917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1564'. [ 150.984530][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.991670][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.999107][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.006204][ T7917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.013779][ T7917] bridge0: entered allmulticast mode [ 151.025309][ T7917] loop3: detected capacity change from 0 to 512 [ 151.039812][ T7917] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 151.048084][ T7917] System zones: 0-2, 18-18, 34-34 [ 151.053979][ T7917] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1564: bg 0: block 248: padding at end of block bitmap is not set [ 151.069057][ T7917] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1564: Failed to acquire dquot type 1 [ 151.080897][ T7917] EXT4-fs (loop3): 1 truncate cleaned up [ 151.086916][ T7917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.099580][ T7917] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.138252][ T7917] usb usb8: usbfs: process 7917 (syz.3.1564) did not claim interface 0 before use [ 151.548611][ T7930] loop2: detected capacity change from 0 to 512 [ 151.555924][ T7930] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 151.697279][ T7940] loop1: detected capacity change from 0 to 128 [ 151.710375][ T7940] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 151.799594][ T7943] lo speed is unknown, defaulting to 1000 [ 151.970470][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.084639][ T7947] loop9: detected capacity change from 0 to 7 [ 152.136501][ T7947] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.194361][ T7947] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.202400][ T7947] loop9: unable to read partition table [ 152.284834][ T7947] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 152.284834][ T7947] ) failed (rc=-5) [ 152.299148][ T7936] Invalid ELF header magic: != ELF [ 152.507223][ T7962] netlink: 5560 bytes leftover after parsing attributes in process `syz.3.1581'. [ 152.525490][ T7951] Invalid ELF header magic: != ELF [ 152.583040][ T7968] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1584'. [ 152.592375][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.599503][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.606864][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.613949][ T7968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.622167][ T7968] bridge0: entered allmulticast mode [ 152.636230][ T7968] loop1: detected capacity change from 0 to 512 [ 152.686371][ T7972] lo speed is unknown, defaulting to 1000 [ 152.880031][ T7979] loop0: detected capacity change from 0 to 128 [ 152.887059][ T7979] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 153.005539][ T7984] loop9: detected capacity change from 0 to 7 [ 153.018998][ T7968] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 153.020512][ T7984] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.027139][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 153.027162][ T29] audit: type=1326 audit(1754035991.701:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 153.035032][ T7984] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.041409][ T29] audit: type=1326 audit(1754035991.701:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.0.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 153.064712][ T7984] loop9: unable to read partition table [ 153.072776][ T7968] System zones: 0-2, 18-18 [ 153.096803][ T7984] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 153.096803][ T7984] ) failed (rc=-5) [ 153.102013][ T7968] , 34-34 [ 153.104591][ T7968] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1584: bg 0: block 248: padding at end of block bitmap is not set [ 153.138530][ T7968] Quota error (device loop1): write_blk: dquota write failed [ 153.145962][ T7968] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 153.156568][ T7968] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1584: Failed to acquire dquot type 1 [ 153.169648][ T7968] EXT4-fs (loop1): 1 truncate cleaned up [ 153.175746][ T7968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.188477][ T7968] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.216428][ T29] audit: type=1326 audit(1754035991.891:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 153.238182][ T7968] usb usb8: usbfs: process 7968 (syz.1.1584) did not claim interface 0 before use [ 153.240968][ T29] audit: type=1326 audit(1754035991.911:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 153.272674][ T29] audit: type=1326 audit(1754035991.911:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 153.296214][ T29] audit: type=1326 audit(1754035991.911:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 153.319684][ T29] audit: type=1326 audit(1754035991.911:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 153.343117][ T29] audit: type=1326 audit(1754035991.911:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 153.412673][ T7995] loop3: detected capacity change from 0 to 512 [ 153.419842][ T7995] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 153.456750][ T7999] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1596'. [ 153.483661][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.491215][ T8001] lo speed is unknown, defaulting to 1000 [ 153.532407][ T8006] loop1: detected capacity change from 0 to 512 [ 153.559142][ T8006] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.574676][ T8006] EXT4-fs (loop1): mount failed [ 153.620412][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'. [ 153.740801][ T8024] loop2: detected capacity change from 0 to 512 [ 153.748100][ T8024] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 153.820054][ T8026] lo speed is unknown, defaulting to 1000 [ 153.952207][ T8033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1609'. [ 153.961998][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.969117][ T8033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.976618][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.983730][ T8033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.992733][ T8033] bridge0: entered allmulticast mode [ 154.026107][ T8033] loop2: detected capacity change from 0 to 512 [ 154.062774][ T8033] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 154.072414][ T8033] System zones: 0-2, 18-18, 34-34 [ 154.078574][ T8033] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1609: bg 0: block 248: padding at end of block bitmap is not set [ 154.094693][ T8033] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1609: Failed to acquire dquot type 1 [ 154.124479][ T8033] EXT4-fs (loop2): 1 truncate cleaned up [ 154.131885][ T8033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.146256][ T8033] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.188654][ T8033] usb usb8: usbfs: process 8033 (syz.2.1609) did not claim interface 0 before use [ 154.311977][ T8041] loop3: detected capacity change from 0 to 512 [ 154.329133][ T8041] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.344970][ T8041] EXT4-fs (loop3): mount failed [ 154.385337][ T8045] lo speed is unknown, defaulting to 1000 [ 154.530791][ T8053] loop1: detected capacity change from 0 to 512 [ 154.569492][ T8053] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.585186][ T8053] EXT4-fs (loop1): mount failed [ 154.796305][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.986759][ T8067] lo speed is unknown, defaulting to 1000 [ 155.484034][ T8074] lo speed is unknown, defaulting to 1000 [ 155.825870][ T8078] lo speed is unknown, defaulting to 1000 [ 155.835201][ T8082] loop2: detected capacity change from 0 to 512 [ 155.892931][ T8082] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1624: error while reading EA inode 32 err=-116 [ 156.005275][ T8082] EXT4-fs (loop2): Remounting filesystem read-only [ 156.011913][ T8082] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 156.034047][ T8082] EXT4-fs (loop2): 1 orphan inode deleted [ 156.040411][ T8082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.110991][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.161933][ T8093] loop0: detected capacity change from 0 to 512 [ 156.180804][ T8079] Invalid ELF header magic: != ELF [ 156.214604][ T8093] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 156.238970][ T8101] loop1: detected capacity change from 0 to 512 [ 156.248779][ T8093] System zones: 0-2, 18-18, 34-34 [ 156.254997][ T8101] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 156.275720][ T8093] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1627: bg 0: block 248: padding at end of block bitmap is not set [ 156.312036][ T8093] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1627: Failed to acquire dquot type 1 [ 156.342831][ T8093] EXT4-fs (loop0): 1 truncate cleaned up [ 156.345725][ T8110] loop1: detected capacity change from 0 to 512 [ 156.351631][ T8093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.369130][ T8093] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.370857][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 156.399165][ T8110] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.414336][ T8110] EXT4-fs (loop1): mount failed [ 156.418506][ T8093] usb usb8: usbfs: process 8093 (syz.0.1627) did not claim interface 0 before use [ 156.492229][ T8121] lo speed is unknown, defaulting to 1000 [ 156.691423][ T8131] lo speed is unknown, defaulting to 1000 [ 156.996318][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.015620][ T8134] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1642'. [ 157.167478][ T8144] lo speed is unknown, defaulting to 1000 [ 157.739804][ T8153] lo speed is unknown, defaulting to 1000 [ 157.795220][ T8160] loop1: detected capacity change from 0 to 512 [ 157.826304][ T8142] Invalid ELF header magic: != ELF [ 157.865336][ T8160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 157.875857][ T8160] System zones: 0-2, 18-18, 34-34 [ 157.928447][ T8160] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1652: bg 0: block 248: padding at end of block bitmap is not set [ 157.945091][ T8160] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1652: Failed to acquire dquot type 1 [ 157.962035][ T8160] EXT4-fs (loop1): 1 truncate cleaned up [ 157.969236][ T8169] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1654'. [ 157.988107][ T8160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.002967][ T8160] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.058191][ T8160] usb usb8: usbfs: process 8160 (syz.1.1652) did not claim interface 0 before use [ 158.210208][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 158.210227][ T29] audit: type=1326 audit(1754035996.891:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.239907][ T29] audit: type=1326 audit(1754035996.891:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.263735][ T29] audit: type=1326 audit(1754035996.891:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.287362][ T29] audit: type=1326 audit(1754035996.891:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.311061][ T29] audit: type=1326 audit(1754035996.891:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.311472][ T8177] loop4: detected capacity change from 0 to 512 [ 158.370973][ T29] audit: type=1326 audit(1754035996.971:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.394549][ T29] audit: type=1326 audit(1754035996.971:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.418278][ T29] audit: type=1326 audit(1754035996.971:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.430971][ T8177] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1657: error while reading EA inode 32 err=-116 [ 158.442016][ T29] audit: type=1326 audit(1754035996.971:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.455126][ T8177] EXT4-fs (loop4): Remounting filesystem read-only [ 158.477666][ T29] audit: type=1326 audit(1754035996.971:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 158.484193][ T8177] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 158.518007][ T8177] EXT4-fs (loop4): 1 orphan inode deleted [ 158.524296][ T8177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.538677][ T8177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.621175][ T8187] loop4: detected capacity change from 0 to 512 [ 158.632086][ T8187] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1661: error while reading EA inode 32 err=-116 [ 158.645430][ T8187] EXT4-fs (loop4): Remounting filesystem read-only [ 158.645911][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.652225][ T8187] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 158.653135][ T8187] EXT4-fs (loop4): 1 orphan inode deleted [ 158.678190][ T8187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.691350][ T8187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.731509][ T8197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1664'. [ 158.735078][ T8196] netlink: 5560 bytes leftover after parsing attributes in process `syz.3.1665'. [ 158.772728][ T8199] loop1: detected capacity change from 0 to 512 [ 158.791764][ T8199] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 158.807326][ T8199] EXT4-fs (loop1): mount failed [ 159.689930][ T8213] lo speed is unknown, defaulting to 1000 [ 159.866683][ T8214] lo speed is unknown, defaulting to 1000 [ 159.884978][ T8211] loop3: detected capacity change from 0 to 512 [ 160.156578][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 160.217463][ T8222] loop2: detected capacity change from 0 to 512 [ 160.240254][ T8211] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1671: error while reading EA inode 32 err=-116 [ 160.255018][ T8211] EXT4-fs (loop3): Remounting filesystem read-only [ 160.261794][ T8211] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 160.264171][ T8230] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1676'. [ 160.282829][ T8211] EXT4-fs (loop3): 1 orphan inode deleted [ 160.291604][ T8211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.293242][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 160.304591][ T8211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.322763][ T8222] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 160.333029][ T8233] loop4: detected capacity change from 0 to 512 [ 160.335965][ T8222] System zones: 0-2, 18-18, 34-34 [ 160.352261][ T8222] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1672: bg 0: block 248: padding at end of block bitmap is not set [ 160.367239][ T8236] loop0: detected capacity change from 0 to 512 [ 160.369888][ T8222] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1672: Failed to acquire dquot type 1 [ 160.374926][ T8236] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 160.392846][ T8233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 160.395420][ T8222] EXT4-fs (loop2): 1 truncate cleaned up [ 160.408406][ T8233] System zones: 0-2, 18-18, 34-34 [ 160.416523][ T8222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.429191][ T8222] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.434195][ T8233] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1677: bg 0: block 248: padding at end of block bitmap is not set [ 160.478968][ T8233] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1677: Failed to acquire dquot type 1 [ 160.492858][ T8233] EXT4-fs (loop4): 1 truncate cleaned up [ 160.498805][ T8242] loop0: detected capacity change from 0 to 512 [ 160.499252][ T8233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.518354][ T8222] usb usb8: usbfs: process 8222 (syz.2.1672) did not claim interface 0 before use [ 160.520506][ T8233] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.549067][ T8242] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.549729][ T8233] usb usb8: usbfs: process 8233 (syz.4.1677) did not claim interface 0 before use [ 160.569147][ T8247] loop3: detected capacity change from 0 to 512 [ 160.581491][ T8242] EXT4-fs (loop0): mount failed [ 160.608651][ T8247] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.628523][ T8247] EXT4-fs (loop3): mount failed [ 160.758429][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.781954][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 161.149660][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.333602][ T8268] siw: device registration error -23 [ 161.353064][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 161.422199][ T8274] loop1: detected capacity change from 0 to 512 [ 161.429803][ T8274] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 161.485912][ T8278] loop1: detected capacity change from 0 to 512 [ 161.512162][ T8278] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.527133][ T8278] EXT4-fs (loop1): mount failed [ 161.537099][ T8287] netlink: 'syz.0.1695': attribute type 4 has an invalid length. [ 161.549023][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 161.558703][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 161.572017][ T8287] loop0: detected capacity change from 0 to 512 [ 161.579125][ T8287] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 161.581259][ T8289] loop9: detected capacity change from 0 to 7 [ 161.598488][ T8289] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.606512][ T8289] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.614529][ T8289] loop9: unable to read partition table [ 161.621476][ T8289] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.621476][ T8289] ) failed (rc=-5) [ 161.664685][ T8293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=8293 comm=syz.0.1698 [ 161.697295][ T8293] lo speed is unknown, defaulting to 1000 [ 161.778785][ T8301] loop1: detected capacity change from 0 to 512 [ 161.799861][ T8301] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 161.810412][ T8303] loop9: detected capacity change from 0 to 7 [ 161.817973][ T8301] System zones: 0-2, 18-18, 34-34 [ 161.823913][ T8301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1700: bg 0: block 248: padding at end of block bitmap is not set [ 161.847168][ T8301] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1700: Failed to acquire dquot type 1 [ 161.860484][ T8301] EXT4-fs (loop1): 1 truncate cleaned up [ 161.866645][ T8301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.880150][ T8301] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.896116][ T8303] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.905217][ T8303] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.913140][ T8303] loop9: unable to read partition table [ 161.918980][ T8303] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.918980][ T8303] ) failed (rc=-5) [ 161.933185][ T8301] usb usb8: usbfs: process 8301 (syz.1.1700) did not claim interface 0 before use [ 162.085390][ T8320] loop0: detected capacity change from 0 to 512 [ 162.100033][ T8320] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.115214][ T8320] EXT4-fs (loop0): mount failed [ 162.137455][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1707'. [ 162.176934][ T8328] loop9: detected capacity change from 0 to 7 [ 162.183521][ T8328] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.191524][ T8328] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.199595][ T8328] loop9: unable to read partition table [ 162.205578][ T8328] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 162.205578][ T8328] ) failed (rc=-5) [ 162.418913][ T8340] lo speed is unknown, defaulting to 1000 [ 162.906812][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.012200][ T8351] loop2: detected capacity change from 0 to 128 [ 163.019578][ T8351] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 163.272042][ T8353] lo speed is unknown, defaulting to 1000 [ 163.456218][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 163.456233][ T29] audit: type=1400 audit(1754036002.131:5818): avc: denied { create } for pid=8357 comm="syz.3.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.549332][ T8358] loop3: detected capacity change from 0 to 512 [ 163.691588][ T8361] lo speed is unknown, defaulting to 1000 [ 163.929042][ T8358] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 164.019492][ T29] audit: type=1400 audit(1754036002.661:5819): avc: denied { create } for pid=8367 comm="syz.2.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.063151][ T8358] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 164.108132][ T8358] EXT4-fs (loop3): mount failed [ 164.153555][ T29] audit: type=1400 audit(1754036002.831:5820): avc: denied { create } for pid=8367 comm="syz.2.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.194579][ T29] audit: type=1400 audit(1754036002.861:5821): avc: denied { write } for pid=8367 comm="syz.2.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.214971][ T29] audit: type=1400 audit(1754036002.871:5822): avc: denied { create } for pid=8373 comm="syz.1.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 164.293455][ T29] audit: type=1400 audit(1754036002.871:5823): avc: denied { write } for pid=8357 comm="syz.3.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.313005][ T29] audit: type=1400 audit(1754036002.871:5824): avc: denied { write } for pid=8357 comm="syz.3.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.333567][ T29] audit: type=1400 audit(1754036002.921:5825): avc: denied { execmem } for pid=8373 comm="syz.1.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 164.378575][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 164.382751][ T8379] loop3: detected capacity change from 0 to 512 [ 164.404066][ T8379] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 164.404102][ T8379] System zones: 0-2, 18-18, 34-34 [ 164.404843][ T8379] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1724: bg 0: block 248: padding at end of block bitmap is not set [ 164.432225][ T8379] Quota error (device loop3): write_blk: dquota write failed [ 164.432277][ T8379] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1724: Failed to acquire dquot type 1 [ 164.432854][ T8379] EXT4-fs (loop3): 1 truncate cleaned up [ 164.433296][ T8379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.433605][ T8379] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.459586][ T8379] usb usb8: usbfs: process 8379 (syz.3.1724) did not claim interface 0 before use [ 164.503422][ T8382] loop0: detected capacity change from 0 to 256 [ 164.505620][ T8382] syzkaller1: entered promiscuous mode [ 164.516295][ T8382] syzkaller1: entered allmulticast mode [ 164.850788][ T8385] loop2: detected capacity change from 0 to 512 [ 164.859643][ T8385] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1725: error while reading EA inode 32 err=-116 [ 164.859861][ T8385] EXT4-fs (loop2): Remounting filesystem read-only [ 164.859894][ T8385] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 164.859944][ T8385] EXT4-fs (loop2): 1 orphan inode deleted [ 164.860416][ T8385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.908624][ T8385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.096290][ T8391] loop9: detected capacity change from 0 to 7 [ 165.096485][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.096529][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.096549][ T8391] loop9: unable to read partition table [ 165.096573][ T8391] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 165.096573][ T8391] ) failed (rc=-5) [ 165.161518][ T8401] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1731'. [ 165.224998][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.285771][ T8409] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1733'. [ 165.936167][ T8412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=8412 comm=syz.4.1734 [ 165.963444][ T8412] lo speed is unknown, defaulting to 1000 [ 166.034043][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 166.046906][ T8421] loop2: detected capacity change from 0 to 512 [ 166.060363][ T8421] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 166.075707][ T8421] EXT4-fs (loop2): mount failed [ 166.193622][ T8433] loop0: detected capacity change from 0 to 512 [ 166.220635][ T8433] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 166.235846][ T8433] EXT4-fs (loop0): mount failed [ 166.835158][ T8446] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1746'. [ 166.865288][ T8448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=8448 comm=syz.1.1747 [ 166.892527][ T8448] lo speed is unknown, defaulting to 1000 [ 167.025634][ T8459] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1751'. [ 167.350240][ T8468] lo speed is unknown, defaulting to 1000 [ 167.889765][ T8473] loop2: detected capacity change from 0 to 512 [ 167.919334][ T8473] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 167.937857][ T8473] EXT4-fs (loop2): mount failed [ 168.031533][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 168.052551][ T8492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=8492 comm=syz.3.1762 [ 168.053184][ T8490] loop0: detected capacity change from 0 to 128 [ 168.081810][ T8492] lo speed is unknown, defaulting to 1000 [ 168.130298][ T8498] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1764'. [ 168.141757][ T8496] loop2: detected capacity change from 0 to 512 [ 168.169621][ T8496] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.184780][ T8496] EXT4-fs (loop2): mount failed [ 168.349993][ T8510] lo speed is unknown, defaulting to 1000 [ 168.875672][ T8515] loop4: detected capacity change from 0 to 512 [ 168.889660][ T8515] __quota_error: 236 callbacks suppressed [ 168.889733][ T8515] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 168.905721][ T8515] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.924666][ T8515] EXT4-fs (loop4): mount failed [ 168.929906][ T29] audit: type=1400 audit(1754036007.611:6057): avc: denied { cpu } for pid=8516 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.936511][ T8517] sch_fq: defrate 0 ignored. [ 168.949444][ T29] audit: type=1400 audit(1754036007.611:6058): avc: denied { setopt } for pid=8516 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.973233][ T29] audit: type=1400 audit(1754036007.611:6059): avc: denied { getopt } for pid=8516 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.992680][ T29] audit: type=1400 audit(1754036007.611:6060): avc: denied { write } for pid=8516 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.049028][ T8529] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 169.058675][ T29] audit: type=1400 audit(1754036007.731:6061): avc: denied { load_policy } for pid=8528 comm="syz.1.1774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 169.084879][ T8529] SELinux: failed to load policy [ 169.143662][ T29] audit: type=1326 audit(1754036007.791:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 169.167162][ T29] audit: type=1326 audit(1754036007.791:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 169.190816][ T29] audit: type=1326 audit(1754036007.791:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 169.214261][ T29] audit: type=1326 audit(1754036007.791:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700e29eb69 code=0x7ffc0000 [ 169.239070][ T8535] FAULT_INJECTION: forcing a failure. [ 169.239070][ T8535] name failslab, interval 1, probability 0, space 0, times 0 [ 169.251820][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.3.1775 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 169.251856][ T8535] Tainted: [W]=WARN [ 169.251862][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.251903][ T8535] Call Trace: [ 169.251912][ T8535] [ 169.251922][ T8535] __dump_stack+0x1d/0x30 [ 169.251949][ T8535] dump_stack_lvl+0xe8/0x140 [ 169.251975][ T8535] dump_stack+0x15/0x1b [ 169.251996][ T8535] should_fail_ex+0x265/0x280 [ 169.252063][ T8535] should_failslab+0x8c/0xb0 [ 169.252086][ T8535] __kmalloc_cache_node_noprof+0x54/0x320 [ 169.252114][ T8535] ? __get_vm_area_node+0x106/0x1d0 [ 169.252164][ T8535] __get_vm_area_node+0x106/0x1d0 [ 169.252193][ T8535] __vmalloc_node_range_noprof+0x273/0xe00 [ 169.252257][ T8535] ? sel_write_load+0x158/0x380 [ 169.252284][ T8535] ? __rcu_read_unlock+0x4f/0x70 [ 169.252308][ T8535] ? sel_write_load+0x158/0x380 [ 169.252328][ T8535] vmalloc_noprof+0x82/0xc0 [ 169.252372][ T8535] ? sel_write_load+0x158/0x380 [ 169.252422][ T8535] sel_write_load+0x158/0x380 [ 169.252443][ T8535] ? __pfx_sel_write_load+0x10/0x10 [ 169.252462][ T8535] vfs_write+0x266/0x8e0 [ 169.252482][ T8535] ? __rcu_read_unlock+0x4f/0x70 [ 169.252561][ T8535] ? __fget_files+0x184/0x1c0 [ 169.252628][ T8535] ksys_write+0xda/0x1a0 [ 169.252649][ T8535] __x64_sys_write+0x40/0x50 [ 169.252669][ T8535] x64_sys_call+0x27fe/0x2ff0 [ 169.252688][ T8535] do_syscall_64+0xd2/0x200 [ 169.252748][ T8535] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.252769][ T8535] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 169.252843][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.252868][ T8535] RIP: 0033:0x7fe29008eb69 [ 169.252888][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.252916][ T8535] RSP: 002b:00007fe28e6ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.252933][ T8535] RAX: ffffffffffffffda RBX: 00007fe2902b5fa0 RCX: 00007fe29008eb69 [ 169.252965][ T8535] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.252976][ T8535] RBP: 00007fe28e6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 169.252987][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.252997][ T8535] R13: 0000000000000000 R14: 00007fe2902b5fa0 R15: 00007ffc52046a98 [ 169.253017][ T8535] [ 169.253024][ T8535] syz.3.1775: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 169.503652][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.3.1775 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 169.503683][ T8535] Tainted: [W]=WARN [ 169.503689][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.503715][ T8535] Call Trace: [ 169.503721][ T8535] [ 169.503728][ T8535] __dump_stack+0x1d/0x30 [ 169.503808][ T8535] dump_stack_lvl+0xe8/0x140 [ 169.503827][ T8535] dump_stack+0x15/0x1b [ 169.503841][ T8535] warn_alloc+0x12b/0x1a0 [ 169.503876][ T8535] __vmalloc_node_range_noprof+0x297/0xe00 [ 169.503979][ T8535] ? __rcu_read_unlock+0x4f/0x70 [ 169.504041][ T8535] ? sel_write_load+0x158/0x380 [ 169.504062][ T8535] vmalloc_noprof+0x82/0xc0 [ 169.504127][ T8535] ? sel_write_load+0x158/0x380 [ 169.504151][ T8535] sel_write_load+0x158/0x380 [ 169.504171][ T8535] ? __pfx_sel_write_load+0x10/0x10 [ 169.504230][ T8535] vfs_write+0x266/0x8e0 [ 169.504251][ T8535] ? __rcu_read_unlock+0x4f/0x70 [ 169.504271][ T8535] ? __fget_files+0x184/0x1c0 [ 169.504298][ T8535] ksys_write+0xda/0x1a0 [ 169.504353][ T8535] __x64_sys_write+0x40/0x50 [ 169.504374][ T8535] x64_sys_call+0x27fe/0x2ff0 [ 169.504393][ T8535] do_syscall_64+0xd2/0x200 [ 169.504450][ T8535] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.504483][ T8535] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 169.504507][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.504594][ T8535] RIP: 0033:0x7fe29008eb69 [ 169.504615][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.504640][ T8535] RSP: 002b:00007fe28e6ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.504664][ T8535] RAX: ffffffffffffffda RBX: 00007fe2902b5fa0 RCX: 00007fe29008eb69 [ 169.504681][ T8535] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.504695][ T8535] RBP: 00007fe28e6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 169.504711][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.504749][ T8535] R13: 0000000000000000 R14: 00007fe2902b5fa0 R15: 00007ffc52046a98 [ 169.504770][ T8535] [ 169.504792][ T8535] Mem-Info: [ 169.719243][ T8535] active_anon:3851 inactive_anon:0 isolated_anon:0 [ 169.719243][ T8535] active_file:6349 inactive_file:2262 isolated_file:0 [ 169.719243][ T8535] unevictable:0 dirty:241 writeback:0 [ 169.719243][ T8535] slab_reclaimable:3226 slab_unreclaimable:14801 [ 169.719243][ T8535] mapped:29338 shmem:191 pagetables:1112 [ 169.719243][ T8535] sec_pagetables:0 bounce:0 [ 169.719243][ T8535] kernel_misc_reclaimable:0 [ 169.719243][ T8535] free:1901698 free_pcp:14110 free_cma:0 [ 169.764059][ T8535] Node 0 active_anon:15404kB inactive_anon:0kB active_file:25396kB inactive_file:9048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117352kB dirty:964kB writeback:0kB shmem:764kB kernel_stack:3328kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 169.791262][ T8535] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.819982][ T8535] lowmem_reserve[]: 0 2883 7862 7862 [ 169.825328][ T8535] Node 0 DMA32 free:2949276kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952908kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 169.855607][ T8535] lowmem_reserve[]: 0 0 4978 4978 [ 169.860668][ T8535] Node 0 Normal free:4642156kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15404kB inactive_anon:0kB active_file:25396kB inactive_file:9048kB unevictable:0kB writepending:964kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:52808kB local_pcp:34536kB free_cma:0kB [ 169.892567][ T8535] lowmem_reserve[]: 0 0 0 0 [ 169.897110][ T8535] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.909969][ T8535] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949276kB [ 169.926206][ T8535] Node 0 Normal: 394*4kB (UM) 30*8kB (U) 33*16kB (UE) 87*32kB (UME) 137*64kB (UME) 45*128kB (UME) 16*256kB (M) 9*512kB (M) 10*1024kB (UM) 12*2048kB (UE) 1118*4096kB (UM) = 4642504kB [ 169.944530][ T8535] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 169.953964][ T8535] 8796 total pagecache pages [ 169.958634][ T8535] 0 pages in swap cache [ 169.962785][ T8535] Free swap = 124996kB [ 169.966970][ T8535] Total swap = 124996kB [ 169.971132][ T8535] 2097051 pages RAM [ 169.974962][ T8535] 0 pages HighMem/MovableOnly [ 169.979648][ T8535] 80424 pages reserved [ 170.053941][ T8547] lo speed is unknown, defaulting to 1000 [ 170.281121][ T8554] loop2: detected capacity change from 0 to 512 [ 170.310287][ T8557] loop3: detected capacity change from 0 to 512 [ 170.330982][ T8554] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.375829][ T8557] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.401968][ T8554] EXT4-fs (loop2): mount failed [ 170.427468][ T8557] EXT4-fs (loop3): mount failed [ 170.642130][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'. [ 170.656184][ T8580] loop1: detected capacity change from 0 to 512 [ 170.669039][ T8556] Invalid ELF header magic: != ELF [ 170.672740][ T8580] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 170.682568][ T8580] System zones: 0-2, 18-18, 34-34 [ 170.689732][ T8580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1792: bg 0: block 248: padding at end of block bitmap is not set [ 170.761533][ T8580] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1792: Failed to acquire dquot type 1 [ 170.786271][ T8584] lo speed is unknown, defaulting to 1000 [ 170.906551][ T8580] EXT4-fs (loop1): 1 truncate cleaned up [ 170.915719][ T8580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.928870][ T8580] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.012189][ T8580] usb usb8: usbfs: process 8580 (syz.1.1792) did not claim interface 0 before use [ 171.306387][ T8597] loop3: detected capacity change from 0 to 2048 [ 171.313254][ T8597] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 171.369804][ T8601] FAULT_INJECTION: forcing a failure. [ 171.369804][ T8601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.382956][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.3.1798 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 171.383042][ T8601] Tainted: [W]=WARN [ 171.383051][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.383067][ T8601] Call Trace: [ 171.383076][ T8601] [ 171.383086][ T8601] __dump_stack+0x1d/0x30 [ 171.383154][ T8601] dump_stack_lvl+0xe8/0x140 [ 171.383181][ T8601] dump_stack+0x15/0x1b [ 171.383212][ T8601] should_fail_ex+0x265/0x280 [ 171.383258][ T8601] should_fail+0xb/0x20 [ 171.383293][ T8601] should_fail_usercopy+0x1a/0x20 [ 171.383312][ T8601] _copy_from_user+0x1c/0xb0 [ 171.383383][ T8601] __sys_bpf+0x178/0x7b0 [ 171.383432][ T8601] __x64_sys_bpf+0x41/0x50 [ 171.383462][ T8601] x64_sys_call+0x2aea/0x2ff0 [ 171.383486][ T8601] do_syscall_64+0xd2/0x200 [ 171.383588][ T8601] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.383621][ T8601] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.383651][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.383689][ T8601] RIP: 0033:0x7fe29008eb69 [ 171.383709][ T8601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.383730][ T8601] RSP: 002b:00007fe28e6ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.383795][ T8601] RAX: ffffffffffffffda RBX: 00007fe2902b5fa0 RCX: 00007fe29008eb69 [ 171.383812][ T8601] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000001 [ 171.383829][ T8601] RBP: 00007fe28e6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 171.383840][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.383885][ T8601] R13: 0000000000000000 R14: 00007fe2902b5fa0 R15: 00007ffc52046a98 [ 171.383906][ T8601] [ 171.624229][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.647615][ T8611] sch_fq: defrate 0 ignored. [ 171.675765][ T8615] loop2: detected capacity change from 0 to 128 [ 171.684683][ T8615] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 171.695330][ T8618] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1806'. [ 171.708126][ T8616] loop0: detected capacity change from 0 to 512 [ 171.729878][ T8616] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.744739][ T8616] EXT4-fs (loop0): mount failed [ 171.821630][ T8623] lo speed is unknown, defaulting to 1000 [ 172.330529][ T8644] loop9: detected capacity change from 0 to 7 [ 172.337307][ T8644] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.345352][ T8644] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.353531][ T8644] loop9: unable to read partition table [ 172.361007][ T8644] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 172.361007][ T8644] ) failed (rc=-5) [ 172.392247][ T8646] loop2: detected capacity change from 0 to 128 [ 172.400003][ T8646] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 172.470350][ T8648] loop0: detected capacity change from 0 to 512 [ 172.478157][ T8648] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 172.560978][ T8652] sch_fq: defrate 0 ignored. [ 172.647427][ T8668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1822'. [ 172.660258][ T8668] loop1: detected capacity change from 0 to 512 [ 172.760234][ T8670] lo speed is unknown, defaulting to 1000 [ 172.930063][ T8668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 172.939819][ T8668] System zones: 0-2, 18-18, 34-34 [ 172.948117][ T8668] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1822: bg 0: block 248: padding at end of block bitmap is not set [ 172.985855][ T8668] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1822: Failed to acquire dquot type 1 [ 173.029971][ T8668] EXT4-fs (loop1): 1 truncate cleaned up [ 173.099207][ T8668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.159706][ T8668] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.183447][ T8678] loop9: detected capacity change from 0 to 7 [ 173.201065][ T8678] Buffer I/O error on dev loop9, logical block 0, async page read [ 173.232042][ T8678] Buffer I/O error on dev loop9, logical block 0, async page read [ 173.240092][ T8678] loop9: unable to read partition table [ 173.251947][ T8678] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 173.251947][ T8678] ) failed (rc=-5) [ 173.290504][ T8668] usb usb8: usbfs: process 8668 (syz.1.1822) did not claim interface 0 before use [ 174.507835][ T8687] FAULT_INJECTION: forcing a failure. [ 174.507835][ T8687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.521100][ T8687] CPU: 1 UID: 0 PID: 8687 Comm: syz.2.1826 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 174.521241][ T8687] Tainted: [W]=WARN [ 174.521250][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.521266][ T8687] Call Trace: [ 174.521275][ T8687] [ 174.521286][ T8687] __dump_stack+0x1d/0x30 [ 174.521315][ T8687] dump_stack_lvl+0xe8/0x140 [ 174.521346][ T8687] dump_stack+0x15/0x1b [ 174.521363][ T8687] should_fail_ex+0x265/0x280 [ 174.521460][ T8687] should_fail+0xb/0x20 [ 174.521549][ T8687] should_fail_usercopy+0x1a/0x20 [ 174.521596][ T8687] _copy_from_user+0x1c/0xb0 [ 174.521626][ T8687] perf_copy_attr+0x145/0x610 [ 174.521702][ T8687] __se_sys_perf_event_open+0x67/0x11c0 [ 174.521748][ T8687] ? vfs_write+0x75e/0x8e0 [ 174.521778][ T8687] ? __rcu_read_unlock+0x4f/0x70 [ 174.521875][ T8687] __x64_sys_perf_event_open+0x67/0x80 [ 174.521918][ T8687] x64_sys_call+0x7bd/0x2ff0 [ 174.521946][ T8687] do_syscall_64+0xd2/0x200 [ 174.521978][ T8687] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.522002][ T8687] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 174.522024][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.522047][ T8687] RIP: 0033:0x7f2a418deb69 [ 174.522140][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.522230][ T8687] RSP: 002b:00007f2a3fefd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 174.522358][ T8687] RAX: ffffffffffffffda RBX: 00007f2a41b06160 RCX: 00007f2a418deb69 [ 174.522373][ T8687] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 174.522385][ T8687] RBP: 00007f2a3fefd090 R08: 0000000000000000 R09: 0000000000000000 [ 174.522397][ T8687] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 174.522409][ T8687] R13: 0000000000000000 R14: 00007f2a41b06160 R15: 00007ffc87083948 [ 174.522448][ T8687] [ 174.808382][ T8691] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1828'. [ 174.823329][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 174.823359][ T29] audit: type=1326 audit(1754036013.501:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 174.838946][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.859202][ T29] audit: type=1326 audit(1754036013.501:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 174.885796][ T29] audit: type=1326 audit(1754036013.501:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 174.909437][ T29] audit: type=1326 audit(1754036013.501:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 174.932889][ T29] audit: type=1326 audit(1754036013.501:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 174.956381][ T29] audit: type=1326 audit(1754036013.501:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 174.960835][ T8700] 8021q: VLANs not supported on xfrm0 [ 174.979957][ T29] audit: type=1326 audit(1754036013.501:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a97afeb69 code=0x7ffc0000 [ 175.010019][ T29] audit: type=1326 audit(1754036013.581:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 175.033676][ T29] audit: type=1326 audit(1754036013.581:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 175.057234][ T29] audit: type=1326 audit(1754036013.581:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ac41eb69 code=0x7ffc0000 [ 175.084930][ T8702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=8702 comm=syz.2.1832 [ 175.113517][ T8702] lo speed is unknown, defaulting to 1000 [ 175.340060][ T8723] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.1837'. [ 175.489403][ T8725] netlink: 'syz.3.1838': attribute type 3 has an invalid length. [ 175.550500][ T8729] netlink: 'syz.3.1840': attribute type 11 has an invalid length. [ 175.558482][ T8729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1840'. [ 175.612751][ T8729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.650905][ T8734] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.683127][ T8729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.683233][ T8738] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1844'. [ 176.089745][ T8729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.144263][ T8749] lo speed is unknown, defaulting to 1000 [ 176.275510][ T8729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.457413][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.546421][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.703006][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.727763][ T8758] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.1851'. [ 176.747231][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.942991][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'. [ 176.982467][ T8778] 9pnet_fd: Insufficient options for proto=fd [ 177.047531][ T8781] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1861'. [ 177.077522][ T8757] Invalid ELF header magic: != ELF [ 177.354245][ T8797] lo speed is unknown, defaulting to 1000 [ 177.821107][ T8800] netlink: 5560 bytes leftover after parsing attributes in process `syz.4.1868'. [ 177.851945][ T8802] lo speed is unknown, defaulting to 1000 [ 177.857838][ T8802] lo speed is unknown, defaulting to 1000 [ 177.863761][ T8802] lo speed is unknown, defaulting to 1000 [ 177.871283][ T8802] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 177.883665][ T8802] lo speed is unknown, defaulting to 1000 [ 177.889888][ T8802] lo speed is unknown, defaulting to 1000 [ 177.896124][ T8802] lo speed is unknown, defaulting to 1000 [ 177.902337][ T8802] lo speed is unknown, defaulting to 1000 [ 177.908587][ T8802] lo speed is unknown, defaulting to 1000 [ 177.920292][ T8805] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 177.926865][ T8805] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.934518][ T8805] vhci_hcd vhci_hcd.0: Device attached [ 177.942380][ T8806] vhci_hcd: cannot find the pending unlink 6 [ 177.949564][ T8806] vhci_hcd: connection closed [ 177.952968][ T1479] vhci_hcd: stop threads [ 177.962080][ T1479] vhci_hcd: release socket [ 177.966733][ T1479] vhci_hcd: disconnect device [ 177.987708][ T8811] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1872'. [ 178.002339][ T8811] loop3: detected capacity change from 0 to 512 [ 178.019471][ T8811] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 178.028775][ T8811] System zones: 0-2, 18-18, 34-34 [ 178.034913][ T8811] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1872: bg 0: block 248: padding at end of block bitmap is not set [ 178.057924][ T8811] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1872: Failed to acquire dquot type 1 [ 178.080826][ T8811] EXT4-fs (loop3): 1 truncate cleaned up [ 178.087387][ T8811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.104991][ T8811] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.127858][ T8818] loop4: detected capacity change from 0 to 512 [ 178.138771][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'. [ 178.153939][ T8811] usb usb8: usbfs: process 8811 (syz.3.1872) did not claim interface 0 before use [ 178.164658][ T8818] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 178.179712][ T8822] loop1: detected capacity change from 0 to 512 [ 178.181243][ T8818] EXT4-fs (loop4): mount failed [ 178.199356][ T8822] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 178.207454][ T8822] System zones: 0-2, 18-18, 34-34 [ 178.213453][ T8822] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1876: bg 0: block 248: padding at end of block bitmap is not set [ 178.229254][ T8822] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1876: Failed to acquire dquot type 1 [ 178.239423][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'. [ 178.250254][ T8832] ================================================================== [ 178.251966][ T8822] EXT4-fs (loop1): 1 truncate cleaned up [ 178.258354][ T8832] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 178.258390][ T8832] [ 178.258397][ T8832] write to 0xffffffff86a1f7c8 of 8 bytes by task 8822 on cpu 1: [ 178.258426][ T8832] console_flush_all+0x35a/0x730 [ 178.264718][ T8822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.271802][ T8832] console_unlock+0xa1/0x330 [ 178.271829][ T8832] vprintk_emit+0x388/0x650 [ 178.271850][ T8832] vprintk_default+0x26/0x30 [ 178.271871][ T8832] vprintk+0x1d/0x30 [ 178.271897][ T8832] _printk+0x79/0xa0 [ 178.271925][ T8832] __ext4_msg+0x18f/0x1a0 [ 178.274511][ T8822] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.281973][ T8832] ext4_process_orphan+0xd7/0x1c0 [ 178.282002][ T8832] ext4_orphan_cleanup+0x6a8/0xa00 [ 178.282027][ T8832] ext4_fill_super+0x3171/0x34e0 [ 178.318391][ T8822] usb usb8: usbfs: process 8822 (syz.1.1876) did not claim interface 0 before use [ 178.321111][ T8832] get_tree_bdev_flags+0x28e/0x300 [ 178.365312][ T8832] get_tree_bdev+0x1f/0x30 [ 178.369745][ T8832] ext4_get_tree+0x1c/0x30 [ 178.374190][ T8832] vfs_get_tree+0x57/0x1d0 [ 178.378613][ T8832] do_new_mount+0x207/0x5e0 [ 178.383142][ T8832] path_mount+0x4a4/0xb20 [ 178.387505][ T8832] __se_sys_mount+0x28f/0x2e0 [ 178.392201][ T8832] __x64_sys_mount+0x67/0x80 [ 178.396832][ T8832] x64_sys_call+0x2b4d/0x2ff0 [ 178.401531][ T8832] do_syscall_64+0xd2/0x200 [ 178.406096][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.412012][ T8832] [ 178.414350][ T8832] read to 0xffffffff86a1f7c8 of 8 bytes by task 8832 on cpu 0: [ 178.421904][ T8832] console_flush_all+0x563/0x730 [ 178.426864][ T8832] console_unlock+0xa1/0x330 [ 178.431545][ T8832] vprintk_emit+0x388/0x650 [ 178.436105][ T8832] vprintk_default+0x26/0x30 [ 178.440704][ T8832] vprintk+0x1d/0x30 [ 178.444698][ T8832] _printk+0x79/0xa0 [ 178.448622][ T8832] __nla_validate_parse+0x1738/0x1d00 [ 178.454020][ T8832] __nla_parse+0x40/0x60 [ 178.458292][ T8832] xfrm_user_rcv_msg+0x3b1/0x660 [ 178.463258][ T8832] netlink_rcv_skb+0x123/0x220 [ 178.468053][ T8832] xfrm_netlink_rcv+0x48/0x60 [ 178.472755][ T8832] netlink_unicast+0x5bd/0x690 [ 178.477535][ T8832] netlink_sendmsg+0x58b/0x6b0 [ 178.482324][ T8832] __sock_sendmsg+0x142/0x180 [ 178.487108][ T8832] ____sys_sendmsg+0x31e/0x4e0 [ 178.491913][ T8832] ___sys_sendmsg+0x17b/0x1d0 [ 178.496621][ T8832] __x64_sys_sendmsg+0xd4/0x160 [ 178.501513][ T8832] x64_sys_call+0x191e/0x2ff0 [ 178.506221][ T8832] do_syscall_64+0xd2/0x200 [ 178.510753][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.516661][ T8832] [ 178.518993][ T8832] value changed: 0x00000000000013b7 -> 0x00000000000013b8 [ 178.526099][ T8832] [ 178.528427][ T8832] Reported by Kernel Concurrency Sanitizer on: [ 178.534587][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.4.1878 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 178.548230][ T8832] Tainted: [W]=WARN [ 178.552036][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.562097][ T8832] ================================================================== [ 178.829865][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.980137][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.