last executing test programs: 5.602583152s ago: executing program 2 (id=2510): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000300)}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_open_dev$sg(&(0x7f0000000140), 0x7d8, 0x301001) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) keyctl$search(0xa, r0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0) 4.719230689s ago: executing program 2 (id=2528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, r1, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) 4.705724949s ago: executing program 2 (id=2529): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x101}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000004e80)=""/112, 0x70}], 0x2, &(0x7f0000000240)=""/168, 0xa8}, 0x4}, {{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000004f00)=""/4109, 0x100d}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000300)=""/41, 0x29}], 0x5, &(0x7f0000000600)=""/204, 0xcc}, 0xca1f}, {{&(0x7f0000000700)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/238, 0xee}], 0x1, &(0x7f00000008c0)=""/248, 0xf8}, 0x6}, {{&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000001bc0)=""/195, 0xc3}, {&(0x7f0000001cc0)=""/220, 0xdc}, {&(0x7f0000001dc0)=""/189, 0xbd}, {&(0x7f0000001e80)=""/184, 0xb8}], 0x4}, 0x9}, {{&(0x7f0000001f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001fc0)=""/93, 0x5d}, {&(0x7f0000002040)=""/4093, 0xffd}, {&(0x7f0000003040)=""/82, 0x52}, {&(0x7f0000000ac0)=""/5, 0x5}], 0x4}, 0x4f20}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000003100)=""/103, 0x67}], 0x1, &(0x7f00000031c0)=""/134, 0x86}, 0x7}, {{&(0x7f0000003280)=@generic, 0x80, &(0x7f0000004400)=[{&(0x7f0000003300)=""/233, 0xe9}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x2}, 0xa5}, {{&(0x7f0000004440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000044c0)=""/208, 0xd0}, {&(0x7f00000045c0)=""/78, 0x4e}, {&(0x7f0000004640)=""/85, 0x55}, {&(0x7f00000046c0)=""/68, 0x44}], 0x4, &(0x7f0000004780)=""/212, 0xd4}, 0xd16e}, {{&(0x7f0000004880)=@nl=@unspec, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004900)=""/56, 0x38}, {&(0x7f0000004940)=""/221, 0xdd}, {&(0x7f0000004a40)=""/110, 0x6e}], 0x3, &(0x7f0000004b00)=""/188, 0xbc}, 0x4}], 0x9, 0x40000000, &(0x7f0000004e00)={0x77359400}) 4.68712147s ago: executing program 2 (id=2530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(r2) 4.67030728s ago: executing program 2 (id=2531): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000300)}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_open_dev$sg(&(0x7f0000000140), 0x7d8, 0x301001) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) keyctl$search(0xa, r0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0) 2.970592693s ago: executing program 4 (id=2580): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x1, 0x5}, {0x5558, 0x3}]}, 0x14, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x80, 0xfffffffb}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000001c0)={@private=0xa010102, @private=0xa010100, 0x1, "1136025c6de4e9255a9da2083af4b4ee0253cd73fd9c58e5aa197deba9796276", 0x10, 0x6, 0x4, 0x35}, 0x3c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x14) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 2.934671013s ago: executing program 4 (id=2582): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x6) write$ppp(r1, &(0x7f0000000140)="673c278a70a8a54d6bdb", 0xa) 2.934456973s ago: executing program 3 (id=2583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) 2.934271734s ago: executing program 3 (id=2584): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRESOCT=0x0, @ANYRES16=r0], 0xc4}}, 0x20010890) 2.889557095s ago: executing program 4 (id=2585): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x101}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000004e80)=""/112, 0x70}], 0x2, &(0x7f0000000240)=""/168, 0xa8}, 0x4}, {{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000004f00)=""/4109, 0x100d}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000300)=""/41, 0x29}], 0x5, &(0x7f0000000600)=""/204, 0xcc}, 0xca1f}, {{&(0x7f0000000700)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/238, 0xee}], 0x1, &(0x7f00000008c0)=""/248, 0xf8}, 0x6}, {{&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000001bc0)=""/195, 0xc3}, {&(0x7f0000001cc0)=""/220, 0xdc}, {&(0x7f0000001dc0)=""/189, 0xbd}, {&(0x7f0000001e80)=""/184, 0xb8}], 0x4}, 0x9}, {{&(0x7f0000001f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001fc0)=""/93, 0x5d}, {&(0x7f0000002040)=""/4093, 0xffd}, {&(0x7f0000003040)=""/82, 0x52}, {&(0x7f0000000ac0)=""/5, 0x5}], 0x4}, 0x4f20}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000003100)=""/103, 0x67}], 0x1, &(0x7f00000031c0)=""/134, 0x86}, 0x7}, {{&(0x7f0000003280)=@generic, 0x80, &(0x7f0000004400)=[{&(0x7f0000003300)=""/233, 0xe9}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x2}, 0xa5}, {{&(0x7f0000004440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000044c0)=""/208, 0xd0}, {&(0x7f00000045c0)=""/78, 0x4e}, {&(0x7f0000004640)=""/85, 0x55}, {&(0x7f00000046c0)=""/68, 0x44}], 0x4, &(0x7f0000004780)=""/212, 0xd4}, 0xd16e}, {{&(0x7f0000004880)=@nl=@unspec, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004900)=""/56, 0x38}, {&(0x7f0000004940)=""/221, 0xdd}, {&(0x7f0000004a40)=""/110, 0x6e}], 0x3, &(0x7f0000004b00)=""/188, 0xbc}, 0x4}], 0x9, 0x40000000, &(0x7f0000004e00)={0x77359400}) 2.889172575s ago: executing program 3 (id=2586): close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f73"], 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.880742655s ago: executing program 4 (id=2587): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 2.859335345s ago: executing program 3 (id=2588): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='target_cmd_complete\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$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") setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) 2.858902455s ago: executing program 4 (id=2589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 2.840217265s ago: executing program 4 (id=2590): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000300)}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) keyctl$search(0xa, r0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0) 1.877917394s ago: executing program 3 (id=2602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.860630194s ago: executing program 3 (id=2604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) (fail_nth: 2) 1.633570088s ago: executing program 0 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, r1, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) 1.585133169s ago: executing program 0 (id=2610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 1.55214419s ago: executing program 0 (id=2611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) unshare(0x22020600) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.530124521s ago: executing program 0 (id=2612): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='target_cmd_complete\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$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") setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) 808.167185ms ago: executing program 1 (id=2618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd40}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0xd22}, 0x17) mknod$loop(0x0, 0x6000, 0x0) 791.776955ms ago: executing program 1 (id=2619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000600)={r5, 0xbd63, 0x5}) syz_clone3(&(0x7f0000000540)={0x2000, &(0x7f0000000080), &(0x7f0000000200)=0x0, &(0x7f0000000300), {}, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/188, &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9}, 0x58) fcntl$lock(r1, 0x5, &(0x7f00000005c0)={0x2, 0x0, 0x7fffffff, 0x8, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0xffa1, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x108000) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0x2}, 0x18) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r11, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r11, 0x1) r12 = syz_clone(0x21100, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r12, 0x8, &(0x7f0000000000)=0xfffffffffffffffa) syz_open_dev$sg(&(0x7f0000000040), 0x81, 0x20000) 611.110598ms ago: executing program 0 (id=2620): syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) 516.74362ms ago: executing program 1 (id=2621): syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) 189.528606ms ago: executing program 0 (id=2622): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x7d8, 0x301001) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84", 0x4b}], 0x1}, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0) 151.095687ms ago: executing program 1 (id=2623): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 84.376498ms ago: executing program 1 (id=2624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 70.590839ms ago: executing program 2 (id=2625): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") (fail_nth: 8) 0s ago: executing program 1 (id=2626): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x101}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000004e80)=""/112, 0x70}], 0x2, &(0x7f0000000240)=""/168, 0xa8}, 0x4}, {{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000004f00)=""/4109, 0x100d}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000300)=""/41, 0x29}], 0x5, &(0x7f0000000600)=""/204, 0xcc}, 0xca1f}, {{&(0x7f0000000700)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/238, 0xee}], 0x1, &(0x7f00000008c0)=""/248, 0xf8}, 0x6}, {{&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000001bc0)=""/195, 0xc3}, {&(0x7f0000001cc0)=""/220, 0xdc}, {&(0x7f0000001dc0)=""/189, 0xbd}, {&(0x7f0000001e80)=""/184, 0xb8}], 0x4}, 0x9}, {{&(0x7f0000001f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001fc0)=""/93, 0x5d}, {&(0x7f0000002040)=""/4093, 0xffd}, {&(0x7f0000003040)=""/82, 0x52}, {&(0x7f0000000ac0)=""/5, 0x5}], 0x4}, 0x4f20}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000003100)=""/103, 0x67}], 0x1, &(0x7f00000031c0)=""/134, 0x86}, 0x7}, {{&(0x7f0000003280)=@generic, 0x80, &(0x7f0000004400)=[{&(0x7f0000003300)=""/233, 0xe9}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x2}, 0xa5}, {{&(0x7f0000004440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000044c0)=""/208, 0xd0}, {&(0x7f00000045c0)=""/78, 0x4e}, {&(0x7f0000004640)=""/85, 0x55}, {&(0x7f00000046c0)=""/68, 0x44}], 0x4, &(0x7f0000004780)=""/212, 0xd4}, 0xd16e}, {{&(0x7f0000004880)=@nl=@unspec, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004900)=""/56, 0x38}, {&(0x7f0000004940)=""/221, 0xdd}, {&(0x7f0000004a40)=""/110, 0x6e}], 0x3, &(0x7f0000004b00)=""/188, 0xbc}, 0x4}], 0x9, 0x40000000, &(0x7f0000004e00)={0x77359400}) kernel console output (not intermixed with test programs): 7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.828786][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.828796][ T8951] Call Trace: [ 132.828801][ T8951] [ 132.828807][ T8951] __dump_stack+0x1d/0x30 [ 132.828824][ T8951] dump_stack_lvl+0xe8/0x140 [ 132.828839][ T8951] dump_stack+0x15/0x1b [ 132.828852][ T8951] should_fail_ex+0x265/0x280 [ 132.828891][ T8951] should_failslab+0x8c/0xb0 [ 132.828911][ T8951] __kmalloc_noprof+0xa5/0x3e0 [ 132.828933][ T8951] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 132.828962][ T8951] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 132.829057][ T8951] genl_family_rcv_msg_doit+0x48/0x1b0 [ 132.829129][ T8951] ? selinux_capable+0x31/0x40 [ 132.829197][ T8951] ? security_capable+0x83/0x90 [ 132.829216][ T8951] ? ns_capable+0x7d/0xb0 [ 132.829309][ T8951] genl_rcv_msg+0x422/0x460 [ 132.829347][ T8951] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 132.829375][ T8951] netlink_rcv_skb+0x123/0x220 [ 132.829394][ T8951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.829449][ T8951] genl_rcv+0x28/0x40 [ 132.829482][ T8951] netlink_unicast+0x5bd/0x690 [ 132.829509][ T8951] netlink_sendmsg+0x58b/0x6b0 [ 132.829538][ T8951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.829559][ T8951] __sock_sendmsg+0x142/0x180 [ 132.829586][ T8951] ____sys_sendmsg+0x31e/0x4e0 [ 132.829614][ T8951] ___sys_sendmsg+0x17b/0x1d0 [ 132.829647][ T8951] __x64_sys_sendmsg+0xd4/0x160 [ 132.829673][ T8951] x64_sys_call+0x191e/0x2ff0 [ 132.829708][ T8951] do_syscall_64+0xd2/0x200 [ 132.829733][ T8951] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.829757][ T8951] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.829788][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.829827][ T8951] RIP: 0033:0x7fc713cbebe9 [ 132.829840][ T8951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.829854][ T8951] RSP: 002b:00007fc712727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.829869][ T8951] RAX: ffffffffffffffda RBX: 00007fc713ef5fa0 RCX: 00007fc713cbebe9 [ 132.829879][ T8951] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 132.829889][ T8951] RBP: 00007fc712727090 R08: 0000000000000000 R09: 0000000000000000 [ 132.829898][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.829986][ T8951] R13: 00007fc713ef6038 R14: 00007fc713ef5fa0 R15: 00007ffd08592a28 [ 132.830002][ T8951] [ 133.161791][ T8959] netlink: 'syz.1.1991': attribute type 1 has an invalid length. [ 133.272459][ T8976] macvtap2: entered allmulticast mode [ 133.281187][ T8976] bridge0: port 3(macvtap2) entered blocking state [ 133.287845][ T8976] bridge0: port 3(macvtap2) entered disabled state [ 133.340832][ T8974] lo speed is unknown, defaulting to 1000 [ 133.364125][ T8976] vhci_hcd: invalid port number 96 [ 133.369310][ T8976] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 133.621692][ T8995] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 133.679329][ T9001] loop1: detected capacity change from 0 to 512 [ 133.686234][ T9001] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.910241][ T9007] loop1: detected capacity change from 0 to 4096 [ 133.918816][ T9007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.934829][ T9] hid_parser_main: 8 callbacks suppressed [ 133.934841][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 133.948307][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 133.955760][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 133.963241][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 133.970650][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 133.978092][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 133.985458][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 133.993014][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 134.000446][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 134.007886][ T9] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 134.016029][ T9] hid-generic 0003:0004:0000.0029: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 134.225188][ T9012] lo speed is unknown, defaulting to 1000 [ 134.312505][ T9024] netlink: 'syz.0.2015': attribute type 1 has an invalid length. [ 134.359431][ T9029] bridge0: entered promiscuous mode [ 134.364868][ T9029] macvtap1: entered allmulticast mode [ 134.370291][ T9029] bridge0: entered allmulticast mode [ 134.377190][ T9029] bridge0: port 3(macvtap1) entered blocking state [ 134.383746][ T9029] bridge0: port 3(macvtap1) entered disabled state [ 134.391341][ T9029] bridge0: left allmulticast mode [ 134.396658][ T9029] bridge0: left promiscuous mode [ 134.410199][ T9031] macvtap2: entered allmulticast mode [ 134.418396][ T9031] bridge0: port 3(macvtap2) entered blocking state [ 134.425048][ T9031] bridge0: port 3(macvtap2) entered disabled state [ 134.456339][ T9029] vhci_hcd: invalid port number 96 [ 134.461483][ T9029] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 134.469559][ T9033] vhci_hcd: invalid port number 96 [ 134.474784][ T9033] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 134.721611][ T9058] loop0: detected capacity change from 0 to 164 [ 134.729701][ T9058] rock: directory entry would overflow storage [ 134.735917][ T9058] rock: sig=0x66, size=4, remaining=3 [ 134.747281][ T9058] rock: directory entry would overflow storage [ 134.753578][ T9058] rock: sig=0x66, size=4, remaining=3 [ 134.759575][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.808947][ T9062] lo speed is unknown, defaulting to 1000 [ 135.301724][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.326032][ T9074] macvtap3: entered allmulticast mode [ 135.333338][ T9074] bridge0: port 3(macvtap3) entered blocking state [ 135.339949][ T9074] bridge0: port 3(macvtap3) entered disabled state [ 135.351129][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.362148][ T9078] bridge0: entered promiscuous mode [ 135.367633][ T9078] macvtap1: entered allmulticast mode [ 135.373034][ T9078] bridge0: entered allmulticast mode [ 135.379570][ T9078] bridge0: port 3(macvtap1) entered blocking state [ 135.386338][ T9078] bridge0: port 3(macvtap1) entered disabled state [ 135.400600][ T9079] vhci_hcd: invalid port number 96 [ 135.405747][ T9079] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 135.415640][ T9080] vhci_hcd: invalid port number 96 [ 135.420815][ T9080] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 135.445017][ T9078] bridge0: left allmulticast mode [ 135.450248][ T9078] bridge0: left promiscuous mode [ 135.491764][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.507229][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.587680][ T9094] lo speed is unknown, defaulting to 1000 [ 135.596786][ T9091] loop4: detected capacity change from 0 to 4096 [ 135.611030][ T9095] lo speed is unknown, defaulting to 1000 [ 135.662546][ T9091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.679334][ T9108] __nla_validate_parse: 2 callbacks suppressed [ 135.679348][ T9108] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2042'. [ 135.694667][ T9108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2042'. [ 135.707773][ T5074] hid-generic 0003:0004:0000.002A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 135.717993][ T9110] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2044'. [ 135.762606][ T9118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2039'. [ 135.972649][ T9132] bridge0: entered promiscuous mode [ 135.980605][ T9132] macvtap1: entered allmulticast mode [ 135.986140][ T9132] bridge0: entered allmulticast mode [ 135.992956][ T9132] bridge0: port 3(macvtap1) entered blocking state [ 135.999572][ T9132] bridge0: port 3(macvtap1) entered disabled state [ 136.003337][ T9134] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 136.015151][ T9132] bridge0: left allmulticast mode [ 136.020275][ T9132] bridge0: left promiscuous mode [ 136.067162][ T9132] vhci_hcd: invalid port number 96 [ 136.072349][ T9132] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 136.173839][ T9141] loop1: detected capacity change from 0 to 2048 [ 136.216443][ T9141] loop1: p1 < > p4 [ 136.220785][ T9141] loop1: p4 size 8388608 extends beyond EOD, truncated [ 136.246416][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 136.246433][ T29] audit: type=1326 audit(1757207908.102:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 136.277342][ T29] audit: type=1326 audit(1757207908.102:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 136.300809][ T29] audit: type=1326 audit(1757207908.102:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 136.324569][ T29] audit: type=1326 audit(1757207908.102:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 136.348125][ T29] audit: type=1326 audit(1757207908.102:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 136.371782][ T29] audit: type=1326 audit(1757207908.102:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 136.395394][ T29] audit: type=1326 audit(1757207908.102:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 136.418963][ T29] audit: type=1326 audit(1757207908.102:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 136.471079][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.505124][ T9157] loop2: detected capacity change from 0 to 164 [ 136.513937][ T9157] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 136.552388][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 136.586734][ T9159] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 136.685482][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 136.694578][ C1] vcan0: j1939_session_tx_dat: 0xffff88811a588e00: queue data error: -100 [ 136.703158][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 136.710744][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 136.718368][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.726242][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.734130][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.742001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.749863][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.757699][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.765538][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.773379][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.781258][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.789132][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.797045][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.804893][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.812780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.820620][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.828480][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.836322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.844181][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.852048][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.859999][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.867862][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.875732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.883577][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.891470][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.899301][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.907208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.915015][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.922892][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.930740][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.938601][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.946466][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.954352][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.962227][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.970111][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.977965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.985840][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.993662][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.001565][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.009390][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.017282][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.025100][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.033006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.040845][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.048705][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.056543][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.064417][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.072243][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.080110][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.087944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.095813][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.103661][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.111515][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.119344][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.127210][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.135017][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.142878][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.150710][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.158547][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.166372][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.174219][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.182094][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.189944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.197760][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.205620][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.213456][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.221323][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.229155][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.237007][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.244824][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.252644][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.260462][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.268286][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.276095][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.283915][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.291759][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.299586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.307391][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.315199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.323016][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.330870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.338681][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.346503][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.354293][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.362144][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.369969][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.377787][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.385599][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.393419][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.401233][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.409050][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.416900][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.424715][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.432531][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.440361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.448228][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.456073][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.463867][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.471691][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.479540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.487393][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.495287][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.503133][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.510949][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.518800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.526637][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.534445][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.542274][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.550091][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.557906][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.565745][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.573654][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.581468][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.589309][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.597135][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.604938][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.612749][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.620566][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.628397][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.636196][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.643992][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.651816][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.659624][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.667436][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.675235][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.683077][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.690890][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.698701][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.706602][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.714425][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.722248][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.730089][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.737913][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.745740][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.753571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.761380][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.769192][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.777010][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.784867][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.792678][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.800495][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.808304][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.816143][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.823974][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.831794][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.839599][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.847433][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.855267][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.863080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.870888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.878698][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.886542][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.894358][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.902177][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.910011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.917810][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.925658][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.933453][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.941268][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.949085][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.956920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.964740][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.972565][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.980397][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 137.988249][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 137.996063][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.003869][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.011683][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.019524][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.027333][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.035133][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.042940][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.050759][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.058607][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.066427][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.074221][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.082032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.089856][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.097666][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.105458][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.113276][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.121116][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.128931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.136763][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.144568][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.152395][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.160239][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.168083][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.175903][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.183717][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.191532][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.199335][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.207155][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.214946][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.222761][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.230568][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.238378][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.246208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.254015][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.261864][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.269686][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.277510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.285327][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.293137][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.300971][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.308773][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.316596][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.324388][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.332207][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.340046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.347869][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.355691][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.363500][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.371304][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.379116][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.386922][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.394756][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.402566][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.410394][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.418205][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.426052][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.433853][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.441669][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.449469][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.457284][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.465080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.472915][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.480736][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.488553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.496407][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.504239][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.512069][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.519943][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.527768][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.535610][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.543411][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.551224][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.559025][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.566864][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.574676][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.582491][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 138.590301][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 138.613658][ T29] audit: type=1326 audit(1757207910.463:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9176 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f771ebe9 code=0x7ffc0000 [ 138.637249][ T29] audit: type=1326 audit(1757207910.463:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9176 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f771ebe9 code=0x7ffc0000 [ 138.687612][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2067'. [ 138.717818][ T9181] bridge0: entered promiscuous mode [ 138.723139][ T9181] macvtap1: entered allmulticast mode [ 138.728583][ T9181] bridge0: entered allmulticast mode [ 138.746727][ T9181] bridge0: port 3(macvtap1) entered blocking state [ 138.753277][ T9181] bridge0: port 3(macvtap1) entered disabled state [ 138.774481][ T9181] bridge0: left allmulticast mode [ 138.779617][ T9181] bridge0: left promiscuous mode [ 138.869656][ T9197] netlink: 'syz.1.2075': attribute type 1 has an invalid length. [ 138.903068][ T9193] loop4: detected capacity change from 0 to 4096 [ 138.911946][ T9202] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2072'. [ 138.921182][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2072'. [ 138.933120][ T9193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.947963][ T9204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2077'. [ 138.983931][ T9200] loop1: detected capacity change from 0 to 8192 [ 139.044109][ T5077] hid_parser_main: 26 callbacks suppressed [ 139.044127][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.057489][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.064893][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.072293][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.079703][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.087120][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.094554][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.102000][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.109410][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.116881][ T5077] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 139.125250][ T5077] hid-generic 0003:0004:0000.002B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 139.196674][ T9207] loop0: detected capacity change from 0 to 512 [ 139.262563][ T9207] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2070: missing EA_INODE flag [ 139.275839][ T9207] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2070: error while reading EA inode 11 err=-117 [ 139.293016][ T9207] EXT4-fs (loop0): 1 orphan inode deleted [ 139.300351][ T9207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.710281][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.791978][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.860574][ T9226] loop2: detected capacity change from 0 to 2048 [ 139.916469][ T9226] loop2: p1 < > p4 [ 139.920877][ T9226] loop2: p4 size 8388608 extends beyond EOD, truncated [ 139.930996][ T9234] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 139.992778][ T9237] bridge0: entered promiscuous mode [ 139.998348][ T9237] macvtap1: entered allmulticast mode [ 140.003878][ T9237] bridge0: entered allmulticast mode [ 140.011289][ T9237] bridge0: port 3(macvtap1) entered blocking state [ 140.017962][ T9237] bridge0: port 3(macvtap1) entered disabled state [ 140.037383][ T9237] bridge0: left allmulticast mode [ 140.042504][ T9237] bridge0: left promiscuous mode [ 140.072409][ T9244] macvtap2: entered allmulticast mode [ 140.082166][ T9246] loop1: detected capacity change from 0 to 2048 [ 140.104175][ T9244] bridge0: port 3(macvtap2) entered blocking state [ 140.110836][ T9244] bridge0: port 3(macvtap2) entered disabled state [ 140.122508][ T9250] vhci_hcd: invalid port number 96 [ 140.127725][ T9250] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 140.137169][ T9246] loop1: p1 < > p4 [ 140.142152][ T9246] loop1: p4 size 8388608 extends beyond EOD, truncated [ 140.155967][ T9252] bridge0: entered promiscuous mode [ 140.161531][ T9252] macvtap1: entered allmulticast mode [ 140.166972][ T9252] bridge0: entered allmulticast mode [ 140.174296][ T9252] bridge0: port 3(macvtap1) entered blocking state [ 140.181124][ T9252] bridge0: port 3(macvtap1) entered disabled state [ 140.195371][ T9252] bridge0: left allmulticast mode [ 140.200461][ T9252] bridge0: left promiscuous mode [ 140.225321][ T9260] loop1: detected capacity change from 0 to 512 [ 140.238198][ T9260] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.293768][ T9262] macvtap3: entered allmulticast mode [ 140.308770][ T9266] netlink: 'syz.2.2098': attribute type 1 has an invalid length. [ 140.317608][ T9262] bridge0: port 3(macvtap3) entered blocking state [ 140.324233][ T9262] bridge0: port 3(macvtap3) entered disabled state [ 140.348055][ T9267] vhci_hcd: invalid port number 96 [ 140.353197][ T9267] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 140.386036][ T9275] +}[@: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 140.400414][ T9275] CPU: 1 UID: 0 PID: 9275 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.400465][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.400477][ T9275] Call Trace: [ 140.400483][ T9275] [ 140.400490][ T9275] __dump_stack+0x1d/0x30 [ 140.400510][ T9275] dump_stack_lvl+0xe8/0x140 [ 140.400534][ T9275] dump_stack+0x15/0x1b [ 140.400555][ T9275] warn_alloc+0x12b/0x1a0 [ 140.400598][ T9275] __vmalloc_node_range_noprof+0x9c/0xe00 [ 140.400628][ T9275] ? __futex_wait+0x1ff/0x260 [ 140.400679][ T9275] ? __pfx_futex_wake_mark+0x10/0x10 [ 140.400717][ T9275] ? __rcu_read_unlock+0x4f/0x70 [ 140.400775][ T9275] ? avc_has_perm_noaudit+0x1b1/0x200 [ 140.400799][ T9275] ? should_fail_ex+0x30/0x280 [ 140.400821][ T9275] ? xskq_create+0x36/0xe0 [ 140.400847][ T9275] vmalloc_user_noprof+0x7d/0xb0 [ 140.400887][ T9275] ? xskq_create+0x80/0xe0 [ 140.400969][ T9275] xskq_create+0x80/0xe0 [ 140.401072][ T9275] xsk_init_queue+0x95/0xf0 [ 140.401116][ T9275] xsk_setsockopt+0x477/0x640 [ 140.401157][ T9275] ? __pfx_xsk_setsockopt+0x10/0x10 [ 140.401257][ T9275] __sys_setsockopt+0x181/0x200 [ 140.401289][ T9275] __x64_sys_setsockopt+0x64/0x80 [ 140.401317][ T9275] x64_sys_call+0x20ec/0x2ff0 [ 140.401363][ T9275] do_syscall_64+0xd2/0x200 [ 140.401389][ T9275] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.401474][ T9275] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.401576][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.401603][ T9275] RIP: 0033:0x7fb5f771ebe9 [ 140.401621][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.401667][ T9275] RSP: 002b:00007fb5f6187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.401688][ T9275] RAX: ffffffffffffffda RBX: 00007fb5f7955fa0 RCX: 00007fb5f771ebe9 [ 140.401700][ T9275] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 140.401711][ T9275] RBP: 00007fb5f77a1e19 R08: 0000000000000004 R09: 0000000000000000 [ 140.401723][ T9275] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 140.401734][ T9275] R13: 00007fb5f7956038 R14: 00007fb5f7955fa0 R15: 00007ffe0417e1a8 [ 140.401754][ T9275] [ 140.401761][ T9275] Mem-Info: [ 140.433286][ T9278] lo speed is unknown, defaulting to 1000 [ 140.436422][ T9275] active_anon:3890 inactive_anon:6 isolated_anon:0 [ 140.436422][ T9275] active_file:20919 inactive_file:2302 isolated_file:0 [ 140.436422][ T9275] unevictable:0 dirty:393 writeback:0 [ 140.436422][ T9275] slab_reclaimable:3270 slab_unreclaimable:30581 [ 140.436422][ T9275] mapped:29765 shmem:209 pagetables:1186 [ 140.436422][ T9275] sec_pagetables:0 bounce:0 [ 140.436422][ T9275] kernel_misc_reclaimable:0 [ 140.436422][ T9275] free:1865217 free_pcp:14455 free_cma:0 [ 140.674494][ T9275] Node 0 active_anon:16092kB inactive_anon:24kB active_file:83676kB inactive_file:9176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119116kB dirty:1648kB writeback:0kB shmem:820kB kernel_stack:3776kB pagetables:5128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.701856][ T9275] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.730588][ T9275] lowmem_reserve[]: 0 2883 7862 7862 [ 140.735945][ T9275] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 140.766057][ T9275] lowmem_reserve[]: 0 0 4978 4978 [ 140.771098][ T9275] Node 0 Normal free:4495876kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15976kB inactive_anon:24kB active_file:83676kB inactive_file:9176kB unevictable:0kB writepending:1648kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:53620kB local_pcp:50080kB free_cma:0kB [ 140.803242][ T9275] lowmem_reserve[]: 0 0 0 0 [ 140.807817][ T9275] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.820561][ T9275] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 140.836685][ T9275] Node 0 Normal: 1034*4kB (M) 775*8kB (UME) 329*16kB (UME) 362*32kB (UME) 295*64kB (UM) 124*128kB (UM) 68*256kB (UM) 36*512kB (UME) 21*1024kB (UME) 11*2048kB (UM) 1063*4096kB (UM) = 4495856kB [ 140.855660][ T9275] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 140.864940][ T9275] 23397 total pagecache pages [ 140.869670][ T9275] 6 pages in swap cache [ 140.873818][ T9275] Free swap = 124972kB [ 140.877989][ T9275] Total swap = 124996kB [ 140.882132][ T9275] 2097051 pages RAM [ 140.885949][ T9275] 0 pages HighMem/MovableOnly [ 140.890613][ T9275] 80446 pages reserved [ 140.900846][ T9280] bridge0: entered promiscuous mode [ 140.906701][ T9280] macvtap1: entered allmulticast mode [ 140.912115][ T9280] bridge0: entered allmulticast mode [ 140.918856][ T9280] bridge0: port 3(macvtap1) entered blocking state [ 140.925448][ T9280] bridge0: port 3(macvtap1) entered disabled state [ 140.933514][ T9280] bridge0: left allmulticast mode [ 140.938672][ T9280] bridge0: left promiscuous mode [ 140.959186][ T9289] loop1: detected capacity change from 0 to 512 [ 140.972857][ T9289] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.988714][ T9293] vhci_hcd: invalid port number 96 [ 140.993868][ T9293] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 141.049632][ T9301] bridge0: entered promiscuous mode [ 141.054988][ T9301] macvtap1: entered allmulticast mode [ 141.060471][ T9301] bridge0: entered allmulticast mode [ 141.067581][ T9301] bridge0: port 3(macvtap1) entered blocking state [ 141.074139][ T9301] bridge0: port 3(macvtap1) entered disabled state [ 141.086257][ T9301] bridge0: left allmulticast mode [ 141.091347][ T9301] bridge0: left promiscuous mode [ 141.099411][ T9307] vhci_hcd: invalid port number 96 [ 141.104576][ T9307] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 141.138445][ T9306] bridge0: entered promiscuous mode [ 141.143856][ T9306] macvtap1: entered allmulticast mode [ 141.144478][ T9313] random: crng reseeded on system resumption [ 141.149464][ T9306] bridge0: entered allmulticast mode [ 141.162389][ T9306] bridge0: port 3(macvtap1) entered blocking state [ 141.166883][ T9313] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 141.169027][ T9306] bridge0: port 3(macvtap1) entered disabled state [ 141.176794][ T9313] __nla_validate_parse: 2 callbacks suppressed [ 141.176819][ T9313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2116'. [ 141.192338][ T9315] vhci_hcd: invalid port number 96 [ 141.203963][ T9315] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 141.211687][ T9306] bridge0: left allmulticast mode [ 141.216871][ T9306] bridge0: left promiscuous mode [ 141.345630][ T9328] bridge0: entered promiscuous mode [ 141.350908][ T9328] macvtap1: entered allmulticast mode [ 141.356460][ T9328] bridge0: entered allmulticast mode [ 141.370743][ T9328] bridge0: port 3(macvtap1) entered blocking state [ 141.377479][ T9328] bridge0: port 3(macvtap1) entered disabled state [ 141.418444][ T9328] bridge0: left allmulticast mode [ 141.423505][ T9328] bridge0: left promiscuous mode [ 141.455694][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 141.455708][ T29] audit: type=1326 audit(1757207913.313:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9312 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f771ebe9 code=0x7ffc0000 [ 141.485463][ T29] audit: type=1326 audit(1757207913.313:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9312 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f771ebe9 code=0x7ffc0000 [ 141.579960][ T9351] loop4: detected capacity change from 0 to 4096 [ 141.590798][ T9351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.611000][ T5077] hid-generic 0003:0004:0000.002C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 141.620474][ T9357] loop0: detected capacity change from 0 to 512 [ 141.627743][ T9357] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.800308][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2132'. [ 142.107300][ T9391] bridge0: entered promiscuous mode [ 142.112888][ T9391] macvtap1: entered allmulticast mode [ 142.118484][ T9391] bridge0: entered allmulticast mode [ 142.127014][ T9391] bridge0: port 3(macvtap1) entered blocking state [ 142.133587][ T9391] bridge0: port 3(macvtap1) entered disabled state [ 142.142492][ T9391] bridge0: left allmulticast mode [ 142.147692][ T9391] bridge0: left promiscuous mode [ 142.199274][ T9392] vhci_hcd: invalid port number 96 [ 142.204459][ T9392] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 142.402620][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.477210][ T9402] loop4: detected capacity change from 0 to 512 [ 142.484095][ T9402] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.713737][ T9411] loop2: detected capacity change from 0 to 512 [ 142.727445][ T9411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.2147: missing EA_INODE flag [ 142.739419][ T9411] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2147: error while reading EA inode 11 err=-117 [ 142.752217][ T9411] EXT4-fs (loop2): 1 orphan inode deleted [ 142.758998][ T9411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.959098][ T9422] lo speed is unknown, defaulting to 1000 [ 143.127727][ T9448] loop0: detected capacity change from 0 to 512 [ 143.134629][ T9448] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.248955][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.251857][ T9452] macvtap3: entered allmulticast mode [ 143.265183][ T9452] bridge0: port 3(macvtap3) entered blocking state [ 143.271746][ T9452] bridge0: port 3(macvtap3) entered disabled state [ 143.382272][ T9473] lo speed is unknown, defaulting to 1000 [ 143.438493][ T9483] loop2: detected capacity change from 0 to 512 [ 143.447731][ T9479] lo speed is unknown, defaulting to 1000 [ 143.456204][ T9483] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.508883][ T9491] loop0: detected capacity change from 0 to 164 [ 143.517851][ T9491] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 143.549824][ T29] audit: type=1326 audit(1757210493.404:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 143.574885][ T9496] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 143.579713][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'. [ 143.582594][ T9496] audit: out of memory in audit_log_start [ 143.584980][ T29] audit: type=1326 audit(1757210493.404:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 143.620613][ T29] audit: type=1326 audit(1757210493.404:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 143.644040][ T29] audit: type=1326 audit(1757210493.404:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 143.667493][ T29] audit: type=1326 audit(1757210493.404:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 143.690915][ T29] audit: type=1326 audit(1757210493.404:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 143.879478][ T9503] lo speed is unknown, defaulting to 1000 [ 143.932608][ T9523] SELinux: policydb version 635058363 does not match my version range 15-35 [ 143.957907][ T9523] SELinux: failed to load policy [ 143.971517][ T9526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2197'. [ 143.980648][ T9526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2197'. [ 143.992193][ T9527] lo speed is unknown, defaulting to 1000 [ 144.097051][ T9545] bridge0: entered promiscuous mode [ 144.102692][ T9545] macvtap1: entered allmulticast mode [ 144.108163][ T9545] bridge0: entered allmulticast mode [ 144.112714][ T9546] loop1: detected capacity change from 0 to 4096 [ 144.115346][ T9545] bridge0: port 3(macvtap1) entered blocking state [ 144.126595][ T9545] bridge0: port 3(macvtap1) entered disabled state [ 144.134888][ T9545] bridge0: left allmulticast mode [ 144.139939][ T9545] bridge0: left promiscuous mode [ 144.141327][ T9546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.179725][ T5051] hid_parser_main: 26 callbacks suppressed [ 144.179746][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.193038][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.200498][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.207905][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.215319][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.222729][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.225332][ T9547] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2201'. [ 144.230228][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.246662][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.254064][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.261538][ T5051] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 144.269635][ T5051] hid-generic 0003:0004:0000.002D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 144.312282][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2206'. [ 144.373231][ T9563] netlink: 'syz.2.2210': attribute type 17 has an invalid length. [ 144.381111][ T9563] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2210'. [ 144.402481][ T9563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.441287][ T9568] ALSA: seq fatal error: cannot create timer (-19) [ 144.754148][ T9601] loop0: detected capacity change from 0 to 512 [ 144.904418][ T9609] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 144.914160][ T9601] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2217: missing EA_INODE flag [ 144.927989][ T9601] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2217: error while reading EA inode 11 err=-117 [ 144.941213][ T9601] EXT4-fs (loop0): 1 orphan inode deleted [ 144.947616][ T9601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.019183][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.055994][ T9609] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.147212][ T9618] loop4: detected capacity change from 0 to 2048 [ 145.166989][ T9618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.201672][ T9625] loop1: detected capacity change from 0 to 512 [ 145.208929][ T9625] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.262970][ T9630] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 145.286447][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.346775][ T9640] FAULT_INJECTION: forcing a failure. [ 145.346775][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 145.359622][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.1.2240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.359802][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.359816][ T9640] Call Trace: [ 145.359824][ T9640] [ 145.359832][ T9640] __dump_stack+0x1d/0x30 [ 145.359854][ T9640] dump_stack_lvl+0xe8/0x140 [ 145.359871][ T9640] dump_stack+0x15/0x1b [ 145.359885][ T9640] should_fail_ex+0x265/0x280 [ 145.359912][ T9640] should_failslab+0x8c/0xb0 [ 145.359961][ T9640] __kmalloc_noprof+0xa5/0x3e0 [ 145.359987][ T9640] ? security_prepare_creds+0x52/0x120 [ 145.360074][ T9640] security_prepare_creds+0x52/0x120 [ 145.360096][ T9640] prepare_creds+0x34a/0x4c0 [ 145.360140][ T9640] selinux_lsm_setattr+0x1a4/0x660 [ 145.360169][ T9640] selinux_setprocattr+0x4f/0x70 [ 145.360193][ T9640] security_setprocattr+0x1a7/0x1d0 [ 145.360216][ T9640] proc_pid_attr_write+0x1eb/0x220 [ 145.360271][ T9640] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 145.360300][ T9640] vfs_write+0x269/0x960 [ 145.360377][ T9640] ? __rcu_read_unlock+0x4f/0x70 [ 145.360468][ T9640] ? __fget_files+0x184/0x1c0 [ 145.360499][ T9640] ksys_write+0xda/0x1a0 [ 145.360522][ T9640] __x64_sys_write+0x40/0x50 [ 145.360547][ T9640] x64_sys_call+0x27fe/0x2ff0 [ 145.360640][ T9640] do_syscall_64+0xd2/0x200 [ 145.360669][ T9640] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.360697][ T9640] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.360799][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.360855][ T9640] RIP: 0033:0x7f83935bebe9 [ 145.360868][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.360883][ T9640] RSP: 002b:00007f839201f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.360899][ T9640] RAX: ffffffffffffffda RBX: 00007f83937f5fa0 RCX: 00007f83935bebe9 [ 145.360911][ T9640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 145.360925][ T9640] RBP: 00007f839201f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.360938][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.360951][ T9640] R13: 00007f83937f6038 R14: 00007f83937f5fa0 R15: 00007fff7faf16c8 [ 145.361035][ T9640] [ 145.585603][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.602080][ T9641] FAULT_INJECTION: forcing a failure. [ 145.602080][ T9641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.615396][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.615450][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.615461][ T9641] Call Trace: [ 145.615466][ T9641] [ 145.615473][ T9641] __dump_stack+0x1d/0x30 [ 145.615498][ T9641] dump_stack_lvl+0xe8/0x140 [ 145.615523][ T9641] dump_stack+0x15/0x1b [ 145.615543][ T9641] should_fail_ex+0x265/0x280 [ 145.615605][ T9641] should_fail+0xb/0x20 [ 145.615626][ T9641] should_fail_usercopy+0x1a/0x20 [ 145.615653][ T9641] _copy_from_iter+0xd2/0xe80 [ 145.615707][ T9641] ? __build_skb_around+0x1a0/0x200 [ 145.615735][ T9641] ? __alloc_skb+0x223/0x320 [ 145.615764][ T9641] netlink_sendmsg+0x471/0x6b0 [ 145.615798][ T9641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.615840][ T9641] __sock_sendmsg+0x142/0x180 [ 145.615876][ T9641] ____sys_sendmsg+0x31e/0x4e0 [ 145.615907][ T9641] ___sys_sendmsg+0x17b/0x1d0 [ 145.615945][ T9641] __x64_sys_sendmsg+0xd4/0x160 [ 145.616007][ T9641] x64_sys_call+0x191e/0x2ff0 [ 145.616034][ T9641] do_syscall_64+0xd2/0x200 [ 145.616066][ T9641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.616089][ T9641] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.616139][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.616165][ T9641] RIP: 0033:0x7f4294c6ebe9 [ 145.616204][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.616226][ T9641] RSP: 002b:00007f42936ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.616247][ T9641] RAX: ffffffffffffffda RBX: 00007f4294ea6090 RCX: 00007f4294c6ebe9 [ 145.616258][ T9641] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 145.616269][ T9641] RBP: 00007f42936ae090 R08: 0000000000000000 R09: 0000000000000000 [ 145.616309][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.616324][ T9641] R13: 00007f4294ea6128 R14: 00007f4294ea6090 R15: 00007ffddb23d7c8 [ 145.616348][ T9641] [ 145.618662][ T9643] loop1: detected capacity change from 0 to 4096 [ 145.827262][ T9643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.846357][ T9650] loop2: detected capacity change from 0 to 512 [ 145.848261][ T5077] hid-generic 0003:0004:0000.002E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 145.853171][ T9650] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.946331][ T9662] netlink: 'syz.2.2247': attribute type 1 has an invalid length. [ 145.954297][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2242'. [ 145.981359][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'. [ 146.031589][ T9668] bridge0: entered promiscuous mode [ 146.037186][ T9668] macvtap1: entered allmulticast mode [ 146.042582][ T9668] bridge0: entered allmulticast mode [ 146.049316][ T9668] bridge0: port 3(macvtap1) entered blocking state [ 146.055998][ T9668] bridge0: port 3(macvtap1) entered disabled state [ 146.063590][ T9668] bridge0: left allmulticast mode [ 146.068744][ T9668] bridge0: left promiscuous mode [ 146.116643][ T9669] vhci_hcd: invalid port number 96 [ 146.121896][ T9669] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 146.214296][ T9682] loop4: detected capacity change from 0 to 512 [ 146.221252][ T9682] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.261978][ T9686] random: crng reseeded on system resumption [ 146.266908][ T9688] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 146.452358][ T9703] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.475620][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.526460][ T9703] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.527768][ T9714] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 146.623509][ T9721] loop0: detected capacity change from 0 to 512 [ 146.633456][ T9703] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.685876][ T9721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.711209][ T9721] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.725018][ T9703] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.755530][ T9732] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 146.771701][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.820561][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2280'. [ 146.831671][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 146.831684][ T29] audit: type=1326 audit(1757213074.683:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 146.887394][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.889699][ T29] audit: type=1326 audit(1757213074.713:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 146.911646][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.919126][ T29] audit: type=1326 audit(1757213074.713:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 146.919160][ T29] audit: type=1326 audit(1757213074.713:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 146.919191][ T29] audit: type=1326 audit(1757213074.723:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 146.968335][ T9740] netlink: 'syz.2.2281': attribute type 1 has an invalid length. [ 146.974246][ T29] audit: type=1326 audit(1757213074.723:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 147.010653][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.028790][ T29] audit: type=1326 audit(1757213074.723:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 147.028822][ T29] audit: type=1326 audit(1757213074.723:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 147.054533][ T9744] loop2: detected capacity change from 0 to 128 [ 147.060627][ T29] audit: type=1326 audit(1757213074.723:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 147.085235][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.090164][ T29] audit: type=1326 audit(1757213074.723:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f83935bebe9 code=0x7ffc0000 [ 147.121524][ T9744] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 147.153144][ T9744] FAT-fs (loop2): Filesystem has been set read-only [ 147.215519][ T9744] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 147.223697][ T9744] bio_check_eod: 16433 callbacks suppressed [ 147.223712][ T9744] syz.2.2283: attempt to access beyond end of device [ 147.223712][ T9744] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 147.245390][ T9753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.283500][ T9754] loop1: detected capacity change from 0 to 1024 [ 147.290557][ T9754] EXT4-fs: Ignoring removed bh option [ 147.309113][ T9753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.319323][ T9754] EXT4-fs: Ignoring removed nobh option [ 147.325024][ T9754] EXT4-fs: Ignoring removed bh option [ 147.345836][ T9754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.363635][ T9767] loop4: detected capacity change from 0 to 512 [ 147.371272][ T9754] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 147.372912][ T9767] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.405994][ T9753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.476468][ T9753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.517330][ T9784] loop4: detected capacity change from 0 to 512 [ 147.534236][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.546833][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.551019][ T9784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.562612][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.568182][ T9784] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.590441][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.602113][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.620743][ T9792] loop1: detected capacity change from 0 to 128 [ 147.629103][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.630447][ T9792] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 147.645972][ T9792] FAT-fs (loop1): Filesystem has been set read-only [ 147.664343][ T9792] syz.1.2301: attempt to access beyond end of device [ 147.664343][ T9792] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 147.678539][ T9792] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 147.686438][ T9792] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 147.702479][ T9795] syz.1.2301: attempt to access beyond end of device [ 147.702479][ T9795] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 147.715851][ T9795] buffer_io_error: 10 callbacks suppressed [ 147.715939][ T9795] Buffer I/O error on dev loop1, logical block 2065, async page read [ 147.730035][ T9795] syz.1.2301: attempt to access beyond end of device [ 147.730035][ T9795] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 147.743430][ T9795] Buffer I/O error on dev loop1, logical block 2066, async page read [ 147.751676][ T9795] syz.1.2301: attempt to access beyond end of device [ 147.751676][ T9795] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 147.764964][ T9795] Buffer I/O error on dev loop1, logical block 2067, async page read [ 147.773072][ T9795] syz.1.2301: attempt to access beyond end of device [ 147.773072][ T9795] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 147.786468][ T9795] Buffer I/O error on dev loop1, logical block 2068, async page read [ 147.804288][ T9795] syz.1.2301: attempt to access beyond end of device [ 147.804288][ T9795] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 147.817745][ T9795] Buffer I/O error on dev loop1, logical block 2069, async page read [ 147.848916][ T9795] syz.1.2301: attempt to access beyond end of device [ 147.848916][ T9795] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 147.860531][ T9809] lo speed is unknown, defaulting to 1000 [ 147.862240][ T9795] Buffer I/O error on dev loop1, logical block 2070, async page read [ 147.878665][ T9812] loop4: detected capacity change from 0 to 128 [ 147.886389][ T9795] syz.1.2301: attempt to access beyond end of device [ 147.886389][ T9795] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 147.899715][ T9795] Buffer I/O error on dev loop1, logical block 2071, async page read [ 147.900398][ T9812] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.907984][ T9795] syz.1.2301: attempt to access beyond end of device [ 147.907984][ T9795] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 147.915844][ T9812] FAT-fs (loop4): Filesystem has been set read-only [ 147.929071][ T9795] Buffer I/O error on dev loop1, logical block 2072, async page read [ 147.938489][ T9812] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.944025][ T9792] Buffer I/O error on dev loop1, logical block 2065, async page read [ 147.951600][ T9812] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.960148][ T9792] Buffer I/O error on dev loop1, logical block 2066, async page read [ 147.980132][ T9810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.989250][ T9810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.997122][ T9810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.010512][ T9791] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.011470][ T9810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.025219][ T9791] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.026277][ T9810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.034083][ T9791] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.044102][ T9810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.054149][ T9791] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.057799][ T9810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.065612][ T9791] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.125483][ T9822] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.145984][ T9791] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.153868][ T9791] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.248475][ T9822] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.325899][ T9822] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.405625][ T9822] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.503465][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.549902][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.584181][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.618060][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.768872][ T9851] loop2: detected capacity change from 0 to 512 [ 148.776869][ T9849] lo speed is unknown, defaulting to 1000 [ 148.790445][ T9851] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.941866][ T9862] lo speed is unknown, defaulting to 1000 [ 149.207351][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 149.253396][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 149.273171][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 149.298196][ T9871] loop2: detected capacity change from 0 to 4096 [ 149.305167][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 149.331195][ T9874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2331'. [ 149.350475][ T9871] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 149.390679][ T9871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.586942][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.723839][ T9895] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2339'. [ 149.782579][ T9908] loop0: detected capacity change from 0 to 512 [ 149.832821][ T9908] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2335: missing EA_INODE flag [ 149.846565][ T9907] loop1: detected capacity change from 0 to 512 [ 149.857857][ T9907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.882213][ T9908] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2335: error while reading EA inode 11 err=-117 [ 149.897542][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 149.910647][ T9907] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2344: invalid indirect mapped block 4294967295 (level 0) [ 149.926558][ T9912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9912 comm=syz.2.2345 [ 149.939656][ T9907] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2344: invalid indirect mapped block 4294967295 (level 1) [ 149.959017][ T9908] EXT4-fs (loop0): 1 orphan inode deleted [ 149.965580][ T9907] EXT4-fs (loop1): 1 orphan inode deleted [ 149.971401][ T9907] EXT4-fs (loop1): 1 truncate cleaned up [ 149.987179][ T9908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.999937][ T9907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.046305][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2344'. [ 150.055419][ T9907] netlink: 'syz.1.2344': attribute type 7 has an invalid length. [ 150.063252][ T9907] netlink: 'syz.1.2344': attribute type 8 has an invalid length. [ 150.071129][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'. [ 150.096147][ T9907] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.2344: iget: bad extra_isize 46 (inode size 256) [ 150.153237][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.247519][ T9917] FAULT_INJECTION: forcing a failure. [ 150.247519][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 150.260254][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.1.2346 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.260289][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.260382][ T9917] Call Trace: [ 150.260391][ T9917] [ 150.260400][ T9917] __dump_stack+0x1d/0x30 [ 150.260425][ T9917] dump_stack_lvl+0xe8/0x140 [ 150.260450][ T9917] dump_stack+0x15/0x1b [ 150.260468][ T9917] should_fail_ex+0x265/0x280 [ 150.260567][ T9917] should_failslab+0x8c/0xb0 [ 150.260594][ T9917] kmem_cache_alloc_noprof+0x50/0x310 [ 150.260620][ T9917] ? _sctp_make_chunk+0xbf/0x210 [ 150.260655][ T9917] _sctp_make_chunk+0xbf/0x210 [ 150.260777][ T9917] sctp_make_abort_user+0x4c/0x3a0 [ 150.260817][ T9917] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 150.260911][ T9917] sctp_sendmsg+0x10bb/0x18d0 [ 150.260937][ T9917] ? __pfx_sctp_sendmsg+0x10/0x10 [ 150.260961][ T9917] inet_sendmsg+0xc5/0xd0 [ 150.260993][ T9917] __sock_sendmsg+0x102/0x180 [ 150.261064][ T9917] ____sys_sendmsg+0x31e/0x4e0 [ 150.261094][ T9917] ___sys_sendmsg+0x17b/0x1d0 [ 150.261157][ T9917] __x64_sys_sendmsg+0xd4/0x160 [ 150.261187][ T9917] x64_sys_call+0x191e/0x2ff0 [ 150.261214][ T9917] do_syscall_64+0xd2/0x200 [ 150.261302][ T9917] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.261329][ T9917] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.261356][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.261376][ T9917] RIP: 0033:0x7f83935bebe9 [ 150.261391][ T9917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.261492][ T9917] RSP: 002b:00007f8391ffe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.261515][ T9917] RAX: ffffffffffffffda RBX: 00007f83937f6090 RCX: 00007f83935bebe9 [ 150.261531][ T9917] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 150.261547][ T9917] RBP: 00007f8391ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 150.261562][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.261578][ T9917] R13: 00007f83937f6128 R14: 00007f83937f6090 R15: 00007fff7faf16c8 [ 150.261602][ T9917] [ 150.599919][ T9924] bridge0: entered promiscuous mode [ 150.605355][ T9924] macvtap1: entered allmulticast mode [ 150.610791][ T9924] bridge0: entered allmulticast mode [ 150.645822][ T9924] bridge0: port 3(macvtap1) entered blocking state [ 150.652387][ T9924] bridge0: port 3(macvtap1) entered disabled state [ 150.665677][ T9924] bridge0: left allmulticast mode [ 150.670846][ T9924] bridge0: left promiscuous mode [ 150.915176][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.967989][ T9943] loop2: detected capacity change from 0 to 4096 [ 150.979516][ T9943] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.997044][ T9943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.045606][ T9958] bridge0: entered promiscuous mode [ 151.051867][ T9958] macvtap1: entered allmulticast mode [ 151.057314][ T9958] bridge0: entered allmulticast mode [ 151.076629][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.088910][ T9958] bridge0: port 3(macvtap1) entered blocking state [ 151.095540][ T9958] bridge0: port 3(macvtap1) entered disabled state [ 151.105037][ T9958] bridge0: left allmulticast mode [ 151.110100][ T9958] bridge0: left promiscuous mode [ 151.125948][ T9961] vhci_hcd: invalid port number 96 [ 151.131213][ T9961] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 151.152331][ T9967] random: crng reseeded on system resumption [ 151.179588][ T9972] SELinux: failed to load policy [ 151.181420][ T9967] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 151.457235][ T9988] lo speed is unknown, defaulting to 1000 [ 151.739877][ T9994] netlink: 'syz.1.2376': attribute type 4 has an invalid length. [ 151.773866][T10004] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 151.835560][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 151.835578][ T29] audit: type=1326 audit(1757213079.694:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 151.866181][T10010] random: crng reseeded on system resumption [ 151.876066][T10010] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 151.883852][T10010] __nla_validate_parse: 2 callbacks suppressed [ 151.883931][T10010] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2384'. [ 151.935550][ T29] audit: type=1326 audit(1757213079.724:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 151.959219][ T29] audit: type=1326 audit(1757213079.724:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 151.960162][T10018] bridge_slave_0: left allmulticast mode [ 151.982747][ T29] audit: type=1326 audit(1757213079.724:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 151.988425][T10018] bridge_slave_0: left promiscuous mode [ 152.011931][ T29] audit: type=1326 audit(1757213079.724:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 152.017555][T10018] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.040939][ T29] audit: type=1326 audit(1757213079.724:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 152.071453][ T29] audit: type=1326 audit(1757213079.724:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 152.095284][ T29] audit: type=1326 audit(1757213079.734:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 152.118915][ T29] audit: type=1326 audit(1757213079.734:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 152.142554][ T29] audit: type=1326 audit(1757213079.734:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.2.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc713cbebe9 code=0x7ffc0000 [ 152.186431][T10018] bridge_slave_1: left allmulticast mode [ 152.192222][T10018] bridge_slave_1: left promiscuous mode [ 152.197964][T10018] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.209081][T10018] bond0: (slave bond_slave_0): Releasing backup interface [ 152.225280][T10018] bond0: (slave bond_slave_1): Releasing backup interface [ 152.239444][T10018] team0: Port device team_slave_0 removed [ 152.248178][T10018] team0: Port device team_slave_1 removed [ 152.255187][T10018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.262597][T10018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.271086][T10018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.278540][T10018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.317717][T10017] lo speed is unknown, defaulting to 1000 [ 152.467026][T10031] loop0: detected capacity change from 0 to 4096 [ 152.492481][T10042] FAULT_INJECTION: forcing a failure. [ 152.492481][T10042] name failslab, interval 1, probability 0, space 0, times 0 [ 152.505274][T10042] CPU: 1 UID: 0 PID: 10042 Comm: syz.1.2394 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.505306][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.505322][T10042] Call Trace: [ 152.505330][T10042] [ 152.505339][T10042] __dump_stack+0x1d/0x30 [ 152.505422][T10042] dump_stack_lvl+0xe8/0x140 [ 152.505517][T10042] dump_stack+0x15/0x1b [ 152.505537][T10042] should_fail_ex+0x265/0x280 [ 152.505565][T10042] ? __se_sys_fsopen+0x10d/0x1e0 [ 152.505589][T10042] should_failslab+0x8c/0xb0 [ 152.505684][T10042] __kmalloc_cache_noprof+0x4c/0x320 [ 152.505762][T10042] __se_sys_fsopen+0x10d/0x1e0 [ 152.505787][T10042] __x64_sys_fsopen+0x31/0x40 [ 152.505833][T10042] x64_sys_call+0x2a9d/0x2ff0 [ 152.505859][T10042] do_syscall_64+0xd2/0x200 [ 152.505911][T10042] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.506015][T10042] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 152.506059][T10042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.506122][T10042] RIP: 0033:0x7f83935bebe9 [ 152.506140][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.506157][T10042] RSP: 002b:00007f839201f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 152.506250][T10042] RAX: ffffffffffffffda RBX: 00007f83937f5fa0 RCX: 00007f83935bebe9 [ 152.506265][T10042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 152.506329][T10042] RBP: 00007f839201f090 R08: 0000000000000000 R09: 0000000000000000 [ 152.506339][T10042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.506350][T10042] R13: 00007f83937f6038 R14: 00007f83937f5fa0 R15: 00007fff7faf16c8 [ 152.506367][T10042] [ 152.507484][T10031] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 152.541499][T10042] 9pnet: Could not find request transport: Ø» [ 152.604458][T10031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.709969][T10046] loop1: detected capacity change from 0 to 256 [ 152.717477][T10046] FAT-fs (loop1): Directory bread(block 1285) failed [ 152.797231][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.850042][T10052] random: crng reseeded on system resumption [ 152.878956][T10052] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 152.886877][T10052] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2398'. [ 153.166962][T10068] loop1: detected capacity change from 0 to 512 [ 153.224822][T10067] netlink: 'syz.0.2403': attribute type 4 has an invalid length. [ 153.232677][T10067] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2403'. [ 153.404595][T10068] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2396: missing EA_INODE flag [ 153.417607][T10068] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2396: error while reading EA inode 11 err=-117 [ 153.430314][T10068] EXT4-fs (loop1): 1 orphan inode deleted [ 153.436719][T10068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.939795][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.004346][T10087] random: crng reseeded on system resumption [ 154.016602][T10087] netlink: 'syz.0.2411': attribute type 1 has an invalid length. [ 154.024463][T10087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2411'. [ 154.053707][T10090] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2410'. [ 154.378167][T10102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2414'. [ 154.871152][T10113] netlink: 'syz.1.2421': attribute type 4 has an invalid length. [ 154.879033][T10113] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2421'. [ 155.086691][T10123] SELinux: failed to load policy [ 155.126348][T10125] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.226377][T10125] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.284888][T10125] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.325086][T10134] warn_alloc: 7 callbacks suppressed [ 155.325103][T10134] syz.3.2431: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 155.345337][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.3.2431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.345370][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.345381][T10134] Call Trace: [ 155.345387][T10134] [ 155.345394][T10134] __dump_stack+0x1d/0x30 [ 155.345431][T10134] dump_stack_lvl+0xe8/0x140 [ 155.345447][T10134] dump_stack+0x15/0x1b [ 155.345501][T10134] warn_alloc+0x12b/0x1a0 [ 155.345611][T10134] __vmalloc_node_range_noprof+0x9c/0xe00 [ 155.345637][T10134] ? __futex_wait+0x1ff/0x260 [ 155.345664][T10134] ? __pfx_futex_wake_mark+0x10/0x10 [ 155.345743][T10134] ? __rcu_read_unlock+0x4f/0x70 [ 155.345763][T10134] ? avc_has_perm_noaudit+0x1b1/0x200 [ 155.345785][T10134] ? should_fail_ex+0x30/0x280 [ 155.345822][T10134] ? xskq_create+0x36/0xe0 [ 155.345867][T10134] vmalloc_user_noprof+0x7d/0xb0 [ 155.345906][T10134] ? xskq_create+0x80/0xe0 [ 155.345927][T10134] xskq_create+0x80/0xe0 [ 155.346000][T10134] xsk_init_queue+0x95/0xf0 [ 155.346022][T10134] xsk_setsockopt+0x477/0x640 [ 155.346111][T10134] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.346168][T10134] __sys_setsockopt+0x181/0x200 [ 155.346192][T10134] __x64_sys_setsockopt+0x64/0x80 [ 155.346223][T10134] x64_sys_call+0x20ec/0x2ff0 [ 155.346291][T10134] do_syscall_64+0xd2/0x200 [ 155.346316][T10134] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 155.346336][T10134] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 155.346394][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.346412][T10134] RIP: 0033:0x7f08f0e6ebe9 [ 155.346424][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.346447][T10134] RSP: 002b:00007f08ef8cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.346463][T10134] RAX: ffffffffffffffda RBX: 00007f08f10a5fa0 RCX: 00007f08f0e6ebe9 [ 155.346473][T10134] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 155.346482][T10134] RBP: 00007f08f0ef1e19 R08: 0000000000000004 R09: 0000000000000000 [ 155.346492][T10134] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 155.346516][T10134] R13: 00007f08f10a6038 R14: 00007f08f10a5fa0 R15: 00007fffb7339128 [ 155.346585][T10134] [ 155.346590][T10134] Mem-Info: [ 155.569180][T10134] active_anon:6863 inactive_anon:8 isolated_anon:0 [ 155.569180][T10134] active_file:21045 inactive_file:2314 isolated_file:0 [ 155.569180][T10134] unevictable:2050 dirty:666 writeback:0 [ 155.569180][T10134] slab_reclaimable:3290 slab_unreclaimable:30573 [ 155.569180][T10134] mapped:29930 shmem:3054 pagetables:1118 [ 155.569180][T10134] sec_pagetables:0 bounce:0 [ 155.569180][T10134] kernel_misc_reclaimable:0 [ 155.569180][T10134] free:1852635 free_pcp:21851 free_cma:0 [ 155.614440][T10134] Node 0 active_anon:15852kB inactive_anon:32kB active_file:84180kB inactive_file:9256kB unevictable:8200kB isolated(anon):0kB isolated(file):0kB mapped:119720kB dirty:2664kB writeback:0kB shmem:848kB kernel_stack:3680kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.642144][T10134] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.653784][T10139] bridge0: entered promiscuous mode [ 155.670712][T10134] lowmem_reserve[]: 0 2883 7862 7862 [ 155.677429][T10139] macvtap1: entered allmulticast mode [ 155.681273][T10134] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 155.681341][T10134] lowmem_reserve[]: 0 [ 155.686739][T10139] bridge0: entered allmulticast mode [ 155.688715][T10139] bridge0: port 3(macvtap1) entered blocking state [ 155.716782][T10134] 0 [ 155.720892][T10139] bridge0: port 3(macvtap1) entered disabled state [ 155.726119][T10134] 4978 4978 [ 155.744885][T10134] Node 0 Normal free:4460972kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16084kB inactive_anon:32kB active_file:84180kB inactive_file:9256kB unevictable:8200kB writepending:2664kB present:5242880kB managed:5098240kB mlocked:8200kB bounce:0kB free_pcp:79984kB local_pcp:29088kB free_cma:0kB [ 155.777552][T10134] lowmem_reserve[]: 0 0 0 0 [ 155.782129][T10134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.785658][T10141] vhci_hcd: invalid port number 96 [ 155.794989][T10134] Node 0 DMA32: 4*4kB [ 155.800182][T10141] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 155.804322][T10134] (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 155.825742][T10134] Node 0 Normal: 1158*4kB (UME) 335*8kB (UME) 115*16kB (UME) 152*32kB (UME) 212*64kB (UME) 142*128kB (UM) 73*256kB (UM) 29*512kB (UME) 19*1024kB (UME) 12*2048kB (UM) 1058*4096kB (UM) = 4456896kB [ 155.845186][T10134] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 155.854533][T10134] 23531 total pagecache pages [ 155.859203][T10134] 10 pages in swap cache [ 155.863468][T10134] Free swap = 124956kB [ 155.867625][T10134] Total swap = 124996kB [ 155.871808][T10134] 2097051 pages RAM [ 155.875628][T10134] 0 pages HighMem/MovableOnly [ 155.880297][T10134] 80446 pages reserved [ 155.888325][T10139] bridge0: left allmulticast mode [ 155.893436][T10139] bridge0: left promiscuous mode [ 155.927981][T10125] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.961660][T10151] random: crng reseeded on system resumption [ 155.988363][T10151] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 155.996193][T10151] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2437'. [ 156.035845][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.044539][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.057000][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.076563][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.131781][T10166] loop2: detected capacity change from 0 to 4096 [ 156.141680][T10166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.159962][ T5075] hid_parser_main: 26 callbacks suppressed [ 156.159983][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.173408][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.181066][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.188518][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.196147][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.203571][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.210963][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.218433][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.225875][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.233308][ T5075] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 156.241446][ T5075] hid-generic 0003:0004:0000.002F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 156.287601][T10174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2444'. [ 156.333623][T10187] bridge0: entered promiscuous mode [ 156.338935][T10187] macvtap1: entered allmulticast mode [ 156.344389][T10187] bridge0: entered allmulticast mode [ 156.351114][T10187] bridge0: port 3(macvtap1) entered blocking state [ 156.357814][T10187] bridge0: port 3(macvtap1) entered disabled state [ 156.365792][T10180] netlink: 'syz.4.2443': attribute type 4 has an invalid length. [ 156.373714][T10180] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2443'. [ 156.384034][T10187] bridge0: left allmulticast mode [ 156.389106][T10187] bridge0: left promiscuous mode [ 156.538130][T10197] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.594349][T10197] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.644646][T10197] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.704523][T10197] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.751358][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.763158][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.775379][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.786650][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.941372][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.003226][T10215] bridge0: entered promiscuous mode [ 157.008607][T10215] macvtap1: entered allmulticast mode [ 157.014155][T10215] bridge0: entered allmulticast mode [ 157.021139][T10215] bridge0: port 3(macvtap1) entered blocking state [ 157.028452][T10215] bridge0: port 3(macvtap1) entered disabled state [ 157.037936][T10215] bridge0: left allmulticast mode [ 157.043096][T10215] bridge0: left promiscuous mode [ 157.048148][ T29] kauditd_printk_skb: 2924 callbacks suppressed [ 157.048162][ T29] audit: type=1326 audit(1757213084.905:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.078094][ T29] audit: type=1326 audit(1757213084.905:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.101732][ T29] audit: type=1326 audit(1757213084.905:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.125382][ T29] audit: type=1326 audit(1757213084.905:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.132288][T10221] loop4: detected capacity change from 0 to 1024 [ 157.148922][ T29] audit: type=1326 audit(1757213084.905:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.155995][T10221] EXT4-fs: Ignoring removed bh option [ 157.178716][ T29] audit: type=1326 audit(1757213084.905:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.200862][T10220] vhci_hcd: invalid port number 96 [ 157.207639][ T29] audit: type=1326 audit(1757213084.905:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.212836][T10220] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 157.243433][ T29] audit: type=1326 audit(1757213084.905:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.266971][ T29] audit: type=1326 audit(1757213084.905:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.290529][ T29] audit: type=1326 audit(1757213084.905:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4294c6ebe9 code=0x7ffc0000 [ 157.316056][T10221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.373536][T10221] lo speed is unknown, defaulting to 1000 [ 157.382001][T10233] lo speed is unknown, defaulting to 1000 [ 157.446812][T10238] netlink: 'syz.2.2468': attribute type 1 has an invalid length. [ 157.457982][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.490781][T10241] loop2: detected capacity change from 0 to 512 [ 157.498705][T10241] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.517912][T10241] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2470: invalid indirect mapped block 4294967295 (level 0) [ 157.533445][T10241] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2470: invalid indirect mapped block 4294967295 (level 1) [ 157.548564][T10241] EXT4-fs (loop2): 1 orphan inode deleted [ 157.554343][T10241] EXT4-fs (loop2): 1 truncate cleaned up [ 157.561699][T10241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.574920][T10241] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.2470: iget: bad extra_isize 46 (inode size 256) [ 157.575990][T10253] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.606860][T10241] FAULT_INJECTION: forcing a failure. [ 157.606860][T10241] name failslab, interval 1, probability 0, space 0, times 0 [ 157.619644][T10241] CPU: 1 UID: 0 PID: 10241 Comm: syz.2.2470 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.619668][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.619680][T10241] Call Trace: [ 157.619687][T10241] [ 157.619713][T10241] __dump_stack+0x1d/0x30 [ 157.619737][T10241] dump_stack_lvl+0xe8/0x140 [ 157.619759][T10241] dump_stack+0x15/0x1b [ 157.619777][T10241] should_fail_ex+0x265/0x280 [ 157.619800][T10241] should_failslab+0x8c/0xb0 [ 157.619829][T10241] kmem_cache_alloc_noprof+0x50/0x310 [ 157.619933][T10241] ? skb_clone+0x151/0x1f0 [ 157.619959][T10241] skb_clone+0x151/0x1f0 [ 157.619981][T10241] __netlink_deliver_tap+0x2c9/0x500 [ 157.620004][T10241] ? netlink_attachskb+0x2d0/0x610 [ 157.620072][T10241] netlink_sendskb+0x126/0x150 [ 157.620096][T10241] netlink_unicast+0x2a2/0x690 [ 157.620123][T10241] netlink_ack+0x4c8/0x500 [ 157.620151][T10241] netlink_rcv_skb+0x192/0x220 [ 157.620281][T10241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.620314][T10241] rtnetlink_rcv+0x1c/0x30 [ 157.620346][T10241] netlink_unicast+0x5bd/0x690 [ 157.620403][T10241] netlink_sendmsg+0x58b/0x6b0 [ 157.620430][T10241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.620459][T10241] __sock_sendmsg+0x142/0x180 [ 157.620501][T10241] ____sys_sendmsg+0x31e/0x4e0 [ 157.620544][T10241] ___sys_sendmsg+0x17b/0x1d0 [ 157.620630][T10241] __x64_sys_sendmsg+0xd4/0x160 [ 157.620664][T10241] x64_sys_call+0x191e/0x2ff0 [ 157.620683][T10241] do_syscall_64+0xd2/0x200 [ 157.620780][T10241] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.620841][T10241] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.620917][T10241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.620940][T10241] RIP: 0033:0x7fc713cbebe9 [ 157.620954][T10241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.620969][T10241] RSP: 002b:00007fc712727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.621032][T10241] RAX: ffffffffffffffda RBX: 00007fc713ef5fa0 RCX: 00007fc713cbebe9 [ 157.621043][T10241] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000009 [ 157.621054][T10241] RBP: 00007fc712727090 R08: 0000000000000000 R09: 0000000000000000 [ 157.621068][T10241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.621078][T10241] R13: 00007fc713ef6038 R14: 00007fc713ef5fa0 R15: 00007ffd08592a28 [ 157.621094][T10241] [ 157.880954][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.890464][T10258] __nla_validate_parse: 1 callbacks suppressed [ 157.890480][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2485'. [ 157.924691][T10253] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.968783][T10264] loop2: detected capacity change from 0 to 4096 [ 157.977448][T10264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.994499][ T5051] hid-generic 0003:0004:0000.0030: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 158.007242][T10267] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2475'. [ 158.018476][T10253] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.064899][T10253] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.091619][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2478'. [ 158.150444][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.161998][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.173605][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.185438][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.236720][T10278] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 158.260003][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2482'. [ 158.314741][T10284] loop4: detected capacity change from 0 to 4096 [ 158.321726][T10284] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 158.333446][T10284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.365314][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.411319][T10289] lo speed is unknown, defaulting to 1000 [ 158.680825][T10300] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.733861][T10300] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.750985][T10305] netlink: 'syz.0.2493': attribute type 1 has an invalid length. [ 158.774969][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2494'. [ 158.786585][T10300] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.797659][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.824810][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 158.835853][T10300] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.128023][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 159.181315][T10330] netlink: 'syz.1.2504': attribute type 1 has an invalid length. [ 159.226250][T10333] loop1: detected capacity change from 0 to 4096 [ 159.236219][T10333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.254868][ T5077] hid-generic 0003:0004:0000.0031: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 159.358195][T10335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2505'. [ 159.980113][T10351] loop0: detected capacity change from 0 to 1024 [ 159.994248][T10351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.021835][T10351] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2511: Allocating blocks 449-513 which overlap fs metadata [ 160.037354][T10349] EXT4-fs (loop0): pa ffff888106ece690: logic 48, phys. 177, len 21 [ 160.045439][T10349] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 160.068535][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.090352][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.156948][T10362] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 160.167356][T10354] netlink: 'syz.2.2510': attribute type 4 has an invalid length. [ 160.175202][T10354] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2510'. [ 160.187941][T10354] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.202796][T10364] macvtap2: entered allmulticast mode [ 160.208590][T10364] bridge0: port 3(macvtap2) entered blocking state [ 160.215201][T10364] bridge0: port 3(macvtap2) entered disabled state [ 160.233942][T10354] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.275263][T10364] vhci_hcd: invalid port number 96 [ 160.280425][T10364] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 160.313734][T10354] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.368468][T10370] SELinux: failed to load policy [ 160.374751][T10354] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.420063][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.431632][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.443456][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.455889][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.610361][T10388] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 161.003712][T10411] netlink: 'syz.3.2537': attribute type 1 has an invalid length. [ 161.072861][T10412] netlink: 'syz.2.2531': attribute type 4 has an invalid length. [ 161.080719][T10412] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2531'. [ 161.092358][T10412] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.163774][T10412] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.233528][T10412] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.304154][T10412] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.409477][T10437] lo speed is unknown, defaulting to 1000 [ 161.793484][T10457] loop0: detected capacity change from 0 to 512 [ 161.803163][T10457] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2554: missing EA_INODE flag [ 161.816424][T10457] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2554: error while reading EA inode 11 err=-117 [ 161.829789][T10457] EXT4-fs (loop0): 1 orphan inode deleted [ 161.836045][T10457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.896876][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.053507][ T29] kauditd_printk_skb: 1130 callbacks suppressed [ 162.053524][ T29] audit: type=1326 audit(1757213089.916:8225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.083602][ T29] audit: type=1326 audit(1757213089.916:8226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.107199][ T29] audit: type=1326 audit(1757213089.916:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.130768][ T29] audit: type=1326 audit(1757213089.916:8228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.155290][ T29] audit: type=1326 audit(1757213089.916:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.179304][ T29] audit: type=1326 audit(1757213089.916:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.202810][ T29] audit: type=1326 audit(1757213089.916:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.226317][ T29] audit: type=1326 audit(1757213089.916:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.249840][ T29] audit: type=1326 audit(1757213089.916:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.273361][ T29] audit: type=1326 audit(1757213089.916:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f0e6ebe9 code=0x7ffc0000 [ 162.486940][T10511] bridge0: entered promiscuous mode [ 162.492377][T10511] macvtap1: entered allmulticast mode [ 162.497860][T10511] bridge0: entered allmulticast mode [ 162.504708][T10511] bridge0: port 3(macvtap1) entered blocking state [ 162.511248][T10511] bridge0: port 3(macvtap1) entered disabled state [ 162.518936][T10511] bridge0: left allmulticast mode [ 162.524031][T10511] bridge0: left promiscuous mode [ 162.548660][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.561650][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.576810][ T384] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.592468][ T384] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.738895][T10535] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.823083][T10535] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.019642][T10540] 9pnet_fd: Insufficient options for proto=fd [ 163.223009][T10535] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.293180][T10535] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.429924][T10555] FAULT_INJECTION: forcing a failure. [ 163.429924][T10555] name failslab, interval 1, probability 0, space 0, times 0 [ 163.442637][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.1.2596 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.442681][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.442696][T10555] Call Trace: [ 163.442703][T10555] [ 163.442711][T10555] __dump_stack+0x1d/0x30 [ 163.442773][T10555] dump_stack_lvl+0xe8/0x140 [ 163.442792][T10555] dump_stack+0x15/0x1b [ 163.442811][T10555] should_fail_ex+0x265/0x280 [ 163.442837][T10555] ? alloc_fs_context+0x44/0x4e0 [ 163.442886][T10555] should_failslab+0x8c/0xb0 [ 163.442919][T10555] __kmalloc_cache_noprof+0x4c/0x320 [ 163.443017][T10555] alloc_fs_context+0x44/0x4e0 [ 163.443042][T10555] fs_context_for_mount+0x22/0x30 [ 163.443066][T10555] do_new_mount+0xe9/0x5e0 [ 163.443091][T10555] ? security_capable+0x83/0x90 [ 163.443162][T10555] path_mount+0x4a4/0xb20 [ 163.443181][T10555] ? user_path_at+0x109/0x130 [ 163.443217][T10555] __se_sys_mount+0x28f/0x2e0 [ 163.443295][T10555] __x64_sys_mount+0x67/0x80 [ 163.443316][T10555] x64_sys_call+0x2b4d/0x2ff0 [ 163.443366][T10555] do_syscall_64+0xd2/0x200 [ 163.443402][T10555] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.443434][T10555] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 163.443535][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.443561][T10555] RIP: 0033:0x7f83935bebe9 [ 163.443575][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.443592][T10555] RSP: 002b:00007f839201f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.443612][T10555] RAX: ffffffffffffffda RBX: 00007f83937f5fa0 RCX: 00007f83935bebe9 [ 163.443627][T10555] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 163.443710][T10555] RBP: 00007f839201f090 R08: 0000200000000100 R09: 0000000000000000 [ 163.443724][T10555] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 163.443739][T10555] R13: 00007f83937f6038 R14: 00007f83937f5fa0 R15: 00007fff7faf16c8 [ 163.443760][T10555] [ 163.719560][T10569] lo speed is unknown, defaulting to 1000 [ 163.868894][T10579] lo speed is unknown, defaulting to 1000 [ 163.944566][T10579] chnl_net:caif_netlink_parms(): no params data found [ 163.976588][T10598] loop1: detected capacity change from 0 to 4096 [ 163.987749][T10598] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 163.994435][T10603] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 163.999925][T10598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.025652][T10579] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.032766][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.039932][T10579] bridge_slave_0: entered allmulticast mode [ 164.047334][T10579] bridge_slave_0: entered promiscuous mode [ 164.057856][T10579] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.065014][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.072422][T10579] bridge_slave_1: entered allmulticast mode [ 164.089511][T10579] bridge_slave_1: entered promiscuous mode [ 164.102215][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.118677][T10579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.130534][T10579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.153097][T10579] team0: Port device team_slave_0 added [ 164.159767][T10579] team0: Port device team_slave_1 added [ 164.179247][T10579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.186292][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.212232][T10579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.227144][T10579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.234134][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.260110][T10579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.279253][T10615] loop1: detected capacity change from 0 to 128 [ 164.286080][T10615] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 164.322562][T10579] hsr_slave_0: entered promiscuous mode [ 164.360592][T10616] loop0: detected capacity change from 0 to 512 [ 164.375692][T10579] hsr_slave_1: entered promiscuous mode [ 164.384273][T10579] debugfs: 'hsr0' already exists in 'hsr' [ 164.390021][T10579] Cannot create hsr debugfs directory [ 164.397856][T10616] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2612: missing EA_INODE flag [ 164.409814][T10616] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2612: error while reading EA inode 11 err=-117 [ 164.423368][T10616] EXT4-fs (loop0): 1 orphan inode deleted [ 164.429548][T10616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.463452][ T52] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.533780][ T52] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.554411][T10623] lo speed is unknown, defaulting to 1000 [ 164.592358][ T52] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.642766][ T52] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.706937][ T52] bridge_slave_1: left allmulticast mode [ 164.712702][ T52] bridge_slave_1: left promiscuous mode [ 164.718393][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.726028][ T52] bridge_slave_0: left allmulticast mode [ 164.731811][ T52] bridge_slave_0: left promiscuous mode [ 164.737488][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.814104][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.824065][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.833518][ T52] bond0 (unregistering): Released all slaves [ 164.845608][T10631] bridge0: entered promiscuous mode [ 164.850894][T10631] macvtap1: entered allmulticast mode [ 164.856290][T10631] bridge0: entered allmulticast mode [ 164.863388][T10631] bridge0: port 3(macvtap1) entered blocking state [ 164.870089][T10631] bridge0: port 3(macvtap1) entered disabled state [ 164.870196][T10632] vhci_hcd: invalid port number 96 [ 164.870205][T10632] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 164.891259][T10631] bridge0: left allmulticast mode [ 164.896314][T10631] bridge0: left promiscuous mode [ 164.914962][ T52] hsr_slave_0: left promiscuous mode [ 164.920917][ T52] hsr_slave_1: left promiscuous mode [ 164.928645][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.936047][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.944856][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.952295][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.963590][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.977561][ T52] veth1_macvtap: left promiscuous mode [ 164.983289][ T52] veth0_macvtap: left promiscuous mode [ 164.988831][ T52] veth1_vlan: left promiscuous mode [ 164.994417][ T52] veth0_vlan: left promiscuous mode [ 165.069066][ T52] team0 (unregistering): Port device team_slave_1 removed [ 165.078805][ T52] team0 (unregistering): Port device team_slave_0 removed [ 165.122893][T10639] lo speed is unknown, defaulting to 1000 [ 165.131703][T10635] lo speed is unknown, defaulting to 1000 [ 165.245604][T10579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.254370][T10579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.262946][T10579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.271987][T10579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.311298][T10579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.323923][T10579] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.341827][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.348899][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.364962][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.372119][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.410434][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.429678][ T52] IPVS: stop unused estimator thread 0... [ 165.439353][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.474857][T10579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.490066][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.509774][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.521569][T10661] ================================================================== [ 165.529692][T10661] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 165.536753][T10661] [ 165.539077][T10661] write to 0xffff88811a2e84c8 of 8 bytes by task 3302 on cpu 1: [ 165.546716][T10661] release_task+0x6f9/0xb60 [ 165.551235][T10661] wait_consider_task+0x114a/0x1660 [ 165.556431][T10661] __do_wait+0xfa/0x510 [ 165.560601][T10661] do_wait+0xb7/0x260 [ 165.564591][T10661] kernel_wait4+0x16b/0x1e0 [ 165.569100][T10661] __x64_sys_wait4+0x91/0x120 [ 165.573790][T10661] x64_sys_call+0x2a66/0x2ff0 [ 165.578476][T10661] do_syscall_64+0xd2/0x200 [ 165.582992][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.588886][T10661] [ 165.591208][T10661] read to 0xffff88811a2e8000 of 3264 bytes by task 10661 on cpu 0: [ 165.599089][T10661] memcpy_and_pad+0x48/0x80 [ 165.603693][T10661] arch_dup_task_struct+0x2c/0x40 [ 165.608718][T10661] dup_task_struct+0x83/0x6a0 [ 165.613399][T10661] copy_process+0x399/0x2000 [ 165.618011][T10661] kernel_clone+0x16c/0x5c0 [ 165.622532][T10661] __se_sys_clone3+0x1c2/0x200 [ 165.627313][T10661] __x64_sys_clone3+0x31/0x40 [ 165.631999][T10661] x64_sys_call+0x1fc9/0x2ff0 [ 165.636678][T10661] do_syscall_64+0xd2/0x200 [ 165.641189][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.647093][T10661] [ 165.649414][T10661] Reported by Kernel Concurrency Sanitizer on: [ 165.655560][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.2.2625 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.665367][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.675427][T10661] ================================================================== [ 165.685198][T10664] FAULT_INJECTION: forcing a failure. [ 165.685198][T10664] name failslab, interval 1, probability 0, space 0, times 0 [ 165.697922][T10664] CPU: 1 UID: 0 PID: 10664 Comm: syz.2.2625 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.697952][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.697965][T10664] Call Trace: [ 165.697970][T10664] [ 165.697979][T10664] __dump_stack+0x1d/0x30 [ 165.697999][T10664] dump_stack_lvl+0xe8/0x140 [ 165.698019][T10664] dump_stack+0x15/0x1b [ 165.698037][T10664] should_fail_ex+0x265/0x280 [ 165.698060][T10664] should_failslab+0x8c/0xb0 [ 165.698085][T10664] kmem_cache_alloc_noprof+0x50/0x310 [ 165.698116][T10664] ? vm_area_alloc+0x2c/0xb0 [ 165.698155][T10664] vm_area_alloc+0x2c/0xb0 [ 165.698183][T10664] mmap_region+0xaa2/0x1630 [ 165.698224][T10664] do_mmap+0x9b3/0xbe0 [ 165.698262][T10664] vm_mmap_pgoff+0x17a/0x2e0 [ 165.698294][T10664] ksys_mmap_pgoff+0xc2/0x310 [ 165.698309][T10664] ? __x64_sys_mmap+0x49/0x70 [ 165.698329][T10664] x64_sys_call+0x14a3/0x2ff0 [ 165.698347][T10664] do_syscall_64+0xd2/0x200 [ 165.698380][T10664] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.698408][T10664] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 165.698440][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.698464][T10664] RIP: 0033:0x7fc713cbec23 [ 165.698477][T10664] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 165.698493][T10664] RSP: 002b:00007fc712726e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 165.698513][T10664] RAX: ffffffffffffffda RBX: 0000000000000451 RCX: 00007fc713cbec23 [ 165.698527][T10664] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 165.698540][T10664] RBP: 0000200000002a82 R08: 00000000ffffffff R09: 0000000000000000 [ 165.698550][T10664] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 165.698560][T10664] R13: 00007fc712726ef0 R14: 00007fc712726eb0 R15: 0000200000000000 [ 165.698576][T10664] [ 165.937657][T10579] veth0_vlan: entered promiscuous mode [ 165.945373][T10579] veth1_vlan: entered promiscuous mode [ 165.962719][T10579] veth0_macvtap: entered promiscuous mode [ 165.969683][T10579] veth1_macvtap: entered promiscuous mode [ 165.980255][T10579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.990797][T10579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.000504][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.010431][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.021895][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.046276][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.045866][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.056540][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.066899][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.078142][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0