last executing test programs: 3.260040187s ago: executing program 3 (id=1336): mq_open(0x0, 0x40, 0xb4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000011d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x4, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x8000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xffef, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.050495901s ago: executing program 3 (id=1341): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x2180200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x20040844) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file2\x00', 0x109141, 0xdf) pwrite64(r3, 0x0, 0x0, 0x7ff) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xf, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000440)='GPL\x00', 0x3, 0xdc, &(0x7f0000000cc0)=""/220, 0x40f00, 0x40, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000500)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3], &(0x7f0000000dc0)=[{0x3, 0x5, 0x0, 0x5}, {0x0, 0x3, 0x0, 0x9}, {0x2, 0x3, 0xc, 0xc}, {0x5, 0x4, 0x2}, {0x2, 0x3, 0x10, 0x2}, {0x3, 0x3, 0x5, 0xf}], 0x10, 0x2}, 0x94) 2.339343835s ago: executing program 1 (id=1361): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0xffffffffc0000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) 2.294058316s ago: executing program 1 (id=1363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x4a000200) 2.158768439s ago: executing program 1 (id=1367): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="3b3921f12b39317637dcbac3cdd75708d06d1fe76d2e0a26d50eb29b41a0a18563cfd80a886fc9785da9d69fe8aeecdb53b37a67e96f3985d68cc20c09bc4726b2a9d5f2ce4fccb443d1421677d50e0ac468de1d939c3bf28ec6069017298f60218da0c38b11367d43fb23155709f5199762a859a0ad9787ec5d7e01aaa1e4c8a7ced7dd7ff2ff20c7378ea3ddb601a0c063d3056c9a2849f161578901", 0x9d}, {&(0x7f0000000a80)="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", 0x654}], 0x3}, 0x4000040) 1.924106053s ago: executing program 3 (id=1369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x818018, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 1.414404703s ago: executing program 3 (id=1380): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x2180200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x20040844) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file2\x00', 0x109141, 0xdf) pwrite64(r3, 0x0, 0x0, 0x7ff) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xf, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000440)='GPL\x00', 0x3, 0xdc, &(0x7f0000000cc0)=""/220, 0x40f00, 0x40, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000500)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3], &(0x7f0000000dc0)=[{0x3, 0x5, 0x0, 0x5}, {0x0, 0x3, 0x0, 0x9}, {0x2, 0x3, 0xc, 0xc}, {0x5, 0x4, 0x2}, {0x2, 0x3, 0x10, 0x2}, {0x3, 0x3, 0x5, 0xf}], 0x10, 0x2}, 0x94) 1.376476364s ago: executing program 4 (id=1381): iopl(0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x203, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") 1.373046634s ago: executing program 2 (id=1382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 1.274132646s ago: executing program 4 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 1.159597958s ago: executing program 4 (id=1384): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 1.125787758s ago: executing program 2 (id=1385): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b0000000800"], 0x28}}, 0x50) 1.125479298s ago: executing program 4 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 1.084976519s ago: executing program 4 (id=1387): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x3, 0xe4fb}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.017740751s ago: executing program 2 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 981.259341ms ago: executing program 2 (id=1389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20040040}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@gettaction={0x64, 0x32, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000000200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r9}, 0x18) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@access_uid}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) r13 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r13, 0x1, 0x1c, &(0x7f0000000500)=""/248, &(0x7f0000000600)=0xf8) r14 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r14, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 706.226097ms ago: executing program 1 (id=1390): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0xffffffffc0000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) 646.762938ms ago: executing program 2 (id=1391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x818018, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 635.769918ms ago: executing program 1 (id=1392): socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") socket$nl_rdma(0x10, 0x3, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x445bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2223}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x7}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xe}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x100, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 550.36359ms ago: executing program 2 (id=1393): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20002000}) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="590000007502004e000000e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3af1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be363cba52305c8510ec204de2daaadf8544c44ef0fbf97cd2e5bae9d29214ec728b1901e003a263e1d2cbe9c1dee9d2021fc962c22462081401b1cd0c2c075fd43a852cd71c604a58b546aa67471b6b35779d13f4298a89209abfbed3cc7de68e105695466d5aeeeacee17e64548bc173c3e45c3406a44b2002ad3a3f9bcfe78b"], 0x59) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7472616e733d66642c7266646ea43d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 481.094391ms ago: executing program 0 (id=1394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 478.400741ms ago: executing program 3 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 478.202711ms ago: executing program 0 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 432.343562ms ago: executing program 0 (id=1397): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20002000}) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="590000007502004e000000e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3af1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be363cba52305c8510ec204de2daaadf8544c44ef0fbf97cd2e5bae9d29214ec728b1901e003a263e1d2cbe9c1dee9d2021fc962c22462081401b1cd0c2c075fd43a852cd71c604a58b546aa67471b6b35779d13f4298a89209abfbed3cc7de68e105695466d5aeeeacee17e64548bc173c3e45c3406a44b2002ad3a3f9bcfe78b"], 0x59) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7472616e733d66642c7266646ea43d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 394.091773ms ago: executing program 0 (id=1398): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b0000000800"], 0x28}}, 0x50) 331.310764ms ago: executing program 0 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 270.504075ms ago: executing program 0 (id=1400): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r3 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000feffffff0500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x143a82, 0x8) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x8000fffffffc) 224.131986ms ago: executing program 4 (id=1401): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000fe", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x143a82, 0x8) r5 = dup(r4) sendfile(r5, r2, 0x0, 0x8000fffffffc) 51.57237ms ago: executing program 3 (id=1402): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="3b3921f12b39317637dcbac3cdd75708d06d1fe76d2e0a26d50eb29b41a0a18563cfd80a886fc9785da9d69fe8aeecdb53b37a67e96f3985d68cc20c09bc4726b2a9d5f2ce4fccb443d1421677d50e0ac468de1d939c3bf28ec6069017298f60218da0c38b11367d43fb23155709f5199762a859a0ad9787ec5d7e01aaa1e4c8a7ced7dd7ff2ff20c7378ea3ddb601a0c063d3056c9a2849f161578901", 0x9d}, {&(0x7f0000000a80)="fd520d7d9fab554462faeabcbd287ac15dfaa140995d7e1945b3f5f3176ab4541f7bb308f198655fe5843f9c84b284796475ba8e4605561cb11bef1744d72a8e7a6133a7fb5220fdd2592e752760cb8c0a870374bfe180bf2cb704fdfb31849f92675869861d8046458243e3a478b82b48ded3fc60ad2ac964a920e3a323cbcbb79bc5426903b3c98f5ef1cefb42e37390ebfc5813473a42d16de83536ede08e901558728f493edc88538df04c10c63c7f596f3f8dee0262dc16cb2bb82e4606cabee05c035d8d46d5464def79bd83e8abe4b9a50fdcf05bbd38a379f678a4071429719d705b2088b27bb7873074c05d76a0ca910ae1c34c32d36dd93d61c1dd57416505aab3d244198c777a490a901582b24c72240b696b45a8511d204841e654c1d340e0108fd2a201110cc657841a41a75094d108605438524bb0c254498ebdea1f952ffaa18e837a391f5eead0a1554fd7a7b80ca94c3424140d02028a1c1b616b79b9cb4f3306f14fc844df13d2e48f5009bf521f2c4ccd72f887ab25e199e14230ead54802cbbac31c0daac3bfd79056f58c1fad4e835d581882861aef67a601759c164ca781834c60f9b6446f545d5ee6a189bd9bd5024c755232ad0176a04a9b78be64393f97d9990310361773e9a64e8a0e83635588e28f901b43e6b883ee4215d8554e0494d88c28e354f8ba8e915b0caae0f7147488c144779b73064b9298e1d696071d74e9e5af4b6b8645355ef9a2e5a6600b201d8fa3d96bb2a32376d7845b89ac6769bda9261661d848fd1a73ee77977c2f2102bbaeaa202be81985d086d028288bc7f52966c3f509f291ef8c30584393f0db043a20d0c4cdf363cc77530d510c471fe1d1357cc3e816bca205d738e495e6fce46632f934334d989741a225b205b08c6af7ab0b258957546f893640f2fa1dbbd108f337383d210a385248ad1d7fa7b2d37f784d1324776a1ac0561cd6785e858048917e56d6d7adc7e40322cf031d18e5f0ee0b5ef6e0499dab48a388c9e35f7a7dbdcfdbeeb2392c10513ed812c14656ded1748fd4d2b5dc02894f1a26bcedca0f790972e40d130020a44b86694aa265d4d10ab41acd758a1f87e339731de8a0a113f651354525926257302c7ba75910964d27c216975cc885b475b646e50ae2b422cb1d7601b99a8bce0fff4af7e7a832306f0796ccb3ab8fb24a1c5bfbf8a1328b28a14c4b58979a3f029d5d2068554d45b1e6478040d6f183bd7996b4983c021a766218a9e9fd8215660a8796f808aabeb71475db9e2c69490279eb57fc3c2c4bf49ae27476ea9e83d7cf757556db30f2c4d88e8cf9b2f05ff1f952a4bbbfd58103692e86e3e4d48ba64fdd69ad4dc527a5503b6527b68637234f1cd190106c9c13edf7d72279878191a55483a77c8727808fb37f092fb82fff8c5b70195fd864ec64f67bd42a7818d6f69ca9084dc3c6be78c6426cf9a2aa62e65b6b9617b8077f0c2abb181003deec1d780af782a3b1490dc51feb731d70da94820389e9a0b2910e7a9a859edd5e09c3bbdabd960b9876c3d8049214a735af0614bf7fa8ecaacbe20ee15e4b8c66485139cfe5dd517ef6aee681a9523980e563a87d3df7f927b063896bf7175a4c0c6ae0ff724262187c4fab15c45cecfaade239a898b4b654dee3fd8f606eb33a722a04b24d26a3f040fe8d7364031af6c66bbf517990fc00b792ccf1597005feb0fe4171868df55244ec80eb29e8bb0c703b36d94e1480be5bd99dd3fd6959ace928ffa83b87bb78c19d444b47abb0c8738bc20f55b06fbf60beb0beb75b77654d7f330e4399d7267711db6195948195ee4e55212951df411c954f740950fdc579650374508706c36576ec7358c359a666b500d885743f738d38c0ff4bfbc55b48ed55c95968ba144166e12f7688282d783080a9a4cc10140a5bd0eb05b3b9f3bb1950b724547af75ee5af846c7ed36f9fbc6e227087f147d02cf40c130ca96aac610a028dd44521e9c6fae5347ccbd003534feae227642d36f35165b04f2bfbfaf7d92150cbe4255c75afb03af020fd57cd26fd5480b1cb918c4ae50afe421d94238b27a7c7d5ade6ff120cc74af4c27846b3d9ad88a86cb45d9669e9acfe2216f7d12ee1f8d237d3d1b43c0067b25b25d480fce568d2b012a412bb35e62e8797e90018ea85a33498ee4aa970a7ba695fa023eecd191adb90a698bf46692027e5cbb8026fef78859258fb762b9088211496369384bd2319b05c4e0feddf44ea4bbb39a8540d9cc00240b7c92f042b", 0x654}], 0x3}, 0x4000040) 0s ago: executing program 1 (id=1403): iopl(0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x203, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") kernel console output (not intermixed with test programs): 342] loop2: detected capacity change from 0 to 1764 [ 70.707322][ T5354] netlink: 'syz.2.574': attribute type 6 has an invalid length. [ 70.724759][ T5358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 71.072062][ T5387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.112191][ T5387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.171419][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 71.214988][ T5387] loop2: detected capacity change from 0 to 2048 [ 71.303966][ T3737] loop2: p2 p3 p7 [ 71.353539][ T5387] loop2: p2 p3 p7 [ 72.053524][ T5393] loop2: detected capacity change from 0 to 1024 [ 72.109415][ T5393] ext4: Unknown parameter 'test_dum' [ 72.185084][ T29] audit: type=1326 audit(1758800484.287:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.2.583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91b0c7eec9 code=0x0 [ 72.812167][ T5400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'. [ 72.852507][ T5402] netlink: 'syz.0.587': attribute type 6 has an invalid length. [ 72.950630][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 73.015660][ T5416] FAULT_INJECTION: forcing a failure. [ 73.015660][ T5416] name failslab, interval 1, probability 0, space 0, times 0 [ 73.018949][ T29] audit: type=1326 audit(1758800485.117:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b0c7eec9 code=0x7ffc0000 [ 73.028341][ T5416] CPU: 1 UID: 0 PID: 5416 Comm: syz.2.589 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.028362][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.028386][ T5416] Call Trace: [ 73.028394][ T5416] [ 73.028401][ T5416] __dump_stack+0x1d/0x30 [ 73.028421][ T5416] dump_stack_lvl+0xe8/0x140 [ 73.028484][ T5416] dump_stack+0x15/0x1b [ 73.028499][ T5416] should_fail_ex+0x265/0x280 [ 73.028522][ T5416] should_failslab+0x8c/0xb0 [ 73.028619][ T5416] kmem_cache_alloc_node_noprof+0x57/0x320 [ 73.028645][ T5416] ? __alloc_skb+0x101/0x320 [ 73.028667][ T5416] __alloc_skb+0x101/0x320 [ 73.028781][ T5416] ? audit_log_start+0x365/0x6c0 [ 73.028809][ T5416] audit_log_start+0x380/0x6c0 [ 73.028874][ T5416] audit_seccomp+0x48/0x100 [ 73.028897][ T5416] ? __seccomp_filter+0x68c/0x10d0 [ 73.028920][ T5416] __seccomp_filter+0x69d/0x10d0 [ 73.028991][ T5416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 73.029014][ T5416] ? vfs_write+0x7e8/0x960 [ 73.029039][ T5416] __secure_computing+0x82/0x150 [ 73.029058][ T5416] syscall_trace_enter+0xcf/0x1e0 [ 73.029081][ T5416] do_syscall_64+0xac/0x200 [ 73.029157][ T5416] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.029253][ T5416] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.029279][ T5416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.029299][ T5416] RIP: 0033:0x7f91b0c7eec9 [ 73.029313][ T5416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.029328][ T5416] RSP: 002b:00007f91af6e6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 73.029420][ T5416] RAX: ffffffffffffffda RBX: 00000000000005c3 RCX: 00007f91b0c7eec9 [ 73.029438][ T5416] RDX: 00007f91af6e6dec RSI: 0000000000000000 RDI: 00007f91b0d02960 [ 73.029450][ T5416] RBP: 00002000000005c0 R08: 00007f91af6e6b07 R09: 0000000000000000 [ 73.029501][ T5416] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 73.029519][ T5416] R13: 00007f91af6e6dec R14: 00007f91af6e6df0 R15: 00007ffdbf949868 [ 73.029535][ T5416] [ 73.029572][ T5416] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 73.051551][ T29] audit: type=1326 audit(1758800485.117:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91b0c7d710 code=0x7ffc0000 [ 73.051571][ T29] audit: type=1326 audit(1758800485.117:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91b0c7d97f code=0x7ffc0000 [ 73.061348][ T5416] audit: out of memory in audit_log_start [ 73.327507][ T5416] loop2: detected capacity change from 0 to 2048 [ 73.334108][ T29] audit: type=1326 audit(1758800485.427:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91b0c7ef03 code=0x7ffc0000 [ 73.357148][ T29] audit: type=1326 audit(1758800485.427:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91b0c7d97f code=0x7ffc0000 [ 73.419572][ T3737] Alternate GPT is invalid, using primary GPT. [ 73.425837][ T3737] loop2: p1 p2 p3 [ 73.444714][ T5416] Alternate GPT is invalid, using primary GPT. [ 73.450988][ T5416] loop2: p1 p2 p3 [ 73.546094][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 73.548196][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 73.568769][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 73.605537][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.613973][ T5432] netlink: 'syz.2.592': attribute type 6 has an invalid length. [ 73.639817][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.641322][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 73.648733][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 73.669249][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 73.774502][ T5433] loop3: detected capacity change from 0 to 2048 [ 73.790478][ T5447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.597'. [ 73.886915][ T3737] loop3: p2 p3 p7 [ 73.910176][ T5433] loop3: p2 p3 p7 [ 74.085779][ T5471] tipc: Started in network mode [ 74.090704][ T5471] tipc: Node identity 9a3ec14db2e6, cluster identity 4711 [ 74.095669][ T5475] loop4: detected capacity change from 0 to 256 [ 74.097902][ T5471] tipc: Enabled bearer , priority 0 [ 74.143256][ T5474] loop2: detected capacity change from 0 to 2048 [ 74.163537][ T5471] syzkaller0: entered promiscuous mode [ 74.169045][ T5471] syzkaller0: entered allmulticast mode [ 74.200432][ T3737] Alternate GPT is invalid, using primary GPT. [ 74.206715][ T3737] loop2: p1 p2 p3 [ 74.220266][ T5474] Alternate GPT is invalid, using primary GPT. [ 74.226555][ T5474] loop2: p1 p2 p3 [ 74.232145][ T5471] tipc: Resetting bearer [ 74.243255][ T5471] vlan2: entered allmulticast mode [ 74.319053][ T5470] tipc: Resetting bearer [ 74.329965][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 74.349075][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.353248][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 74.370129][ T5470] tipc: Disabling bearer [ 74.392602][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.411304][ T5481] loop2: detected capacity change from 0 to 2048 [ 74.440473][ T3737] Alternate GPT is invalid, using primary GPT. [ 74.446772][ T3737] loop2: p1 p2 p3 [ 74.446800][ T5484] loop4: detected capacity change from 0 to 256 [ 74.473118][ T5481] Alternate GPT is invalid, using primary GPT. [ 74.479430][ T5481] loop2: p1 p2 p3 [ 74.499644][ T5484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.609'. [ 74.534143][ T2995] Alternate GPT is invalid, using primary GPT. [ 74.540424][ T2995] loop2: p1 p2 p3 [ 74.605038][ T5497] netlink: 'syz.0.615': attribute type 6 has an invalid length. [ 74.623134][ T5498] loop4: detected capacity change from 0 to 256 [ 74.640099][ T5493] loop2: detected capacity change from 0 to 2048 [ 74.682225][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 74.748687][ T3737] Alternate GPT is invalid, using primary GPT. [ 74.755202][ T3737] loop2: p1 p2 p3 [ 74.758984][ T3737] loop2: partition table partially beyond EOD, truncated [ 75.060007][ T5493] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 75.101950][ T5532] FAULT_INJECTION: forcing a failure. [ 75.101950][ T5532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.115201][ T5532] CPU: 0 UID: 0 PID: 5532 Comm: syz.0.623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.115295][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.115313][ T5532] Call Trace: [ 75.115318][ T5532] [ 75.115325][ T5532] __dump_stack+0x1d/0x30 [ 75.115344][ T5532] dump_stack_lvl+0xe8/0x140 [ 75.115441][ T5532] dump_stack+0x15/0x1b [ 75.115456][ T5532] should_fail_ex+0x265/0x280 [ 75.115523][ T5532] should_fail+0xb/0x20 [ 75.115539][ T5532] should_fail_usercopy+0x1a/0x20 [ 75.115607][ T5532] _copy_from_user+0x1c/0xb0 [ 75.115633][ T5532] copy_clone_args_from_user+0x38d/0x490 [ 75.115664][ T5532] __se_sys_clone3+0x6f/0x200 [ 75.115775][ T5532] __x64_sys_clone3+0x31/0x40 [ 75.115800][ T5532] x64_sys_call+0x1fc9/0x2ff0 [ 75.115817][ T5532] do_syscall_64+0xd2/0x200 [ 75.115914][ T5532] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.115933][ T5532] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.115962][ T5532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.115981][ T5532] RIP: 0033:0x7f7442abeec9 [ 75.115995][ T5532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.116011][ T5532] RSP: 002b:00007f7441526f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 75.116029][ T5532] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7442abeec9 [ 75.116042][ T5532] RDX: 00007f7441526f20 RSI: 0000000000000058 RDI: 00007f7441526f20 [ 75.116157][ T5532] RBP: 00007f7441527090 R08: 0000000000000000 R09: 0000000000000058 [ 75.116168][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.116180][ T5532] R13: 00007f7442d16038 R14: 00007f7442d15fa0 R15: 00007ffdbbe944a8 [ 75.116198][ T5532] [ 75.330823][ T5534] loop4: detected capacity change from 0 to 2048 [ 75.382821][ T3637] Alternate GPT is invalid, using primary GPT. [ 75.389262][ T3637] loop4: p1 p2 p3 [ 75.393000][ T3637] loop4: partition table partially beyond EOD, truncated [ 75.453576][ T5534] Alternate GPT is invalid, using primary GPT. [ 75.459921][ T5534] loop4: p1 p2 p3 [ 75.463678][ T5534] loop4: partition table partially beyond EOD, truncated [ 75.491901][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 75.491911][ T29] audit: type=1326 audit(1758800487.597:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 75.564496][ T5542] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.596228][ T29] audit: type=1326 audit(1758800487.637:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 75.619508][ T29] audit: type=1326 audit(1758800487.637:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7442abef03 code=0x7ffc0000 [ 75.621304][ T5544] loop3: detected capacity change from 0 to 256 [ 75.642773][ T29] audit: type=1326 audit(1758800487.637:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7442abd97f code=0x7ffc0000 [ 75.672016][ T29] audit: type=1326 audit(1758800487.647:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7442abef57 code=0x7ffc0000 [ 75.695139][ T29] audit: type=1326 audit(1758800487.647:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7442abd710 code=0x7ffc0000 [ 75.718407][ T29] audit: type=1326 audit(1758800487.647:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7442abdb2a code=0x7ffc0000 [ 75.741518][ T29] audit: type=1326 audit(1758800487.647:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 75.764956][ T29] audit: type=1326 audit(1758800487.657:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 75.788210][ T29] audit: type=1400 audit(1758800487.667:692): avc: denied { write } for pid=5541 comm="syz.2.628" path="socket:[11492]" dev="sockfs" ino=11492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.818326][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 75.943750][ T5554] netlink: 'syz.3.634': attribute type 6 has an invalid length. [ 76.016781][ T5555] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 76.113326][ T5565] loop2: detected capacity change from 0 to 512 [ 76.182289][ T5565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.200300][ T5565] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.307259][ T5581] loop3: detected capacity change from 0 to 1764 [ 76.370447][ T3310] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 64: padding at end of block bitmap is not set [ 76.412304][ T3310] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 76.425722][ T5587] IPv6: sit1: Disabled Multicast RS [ 76.437104][ T5587] sit1: entered allmulticast mode [ 76.463632][ T5585] loop4: detected capacity change from 0 to 2048 [ 76.468552][ T5589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 76.479311][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.499003][ T5590] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.523986][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 76.530971][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 76.558231][ T5597] FAULT_INJECTION: forcing a failure. [ 76.558231][ T5597] name failslab, interval 1, probability 0, space 0, times 0 [ 76.570864][ T5597] CPU: 0 UID: 0 PID: 5597 Comm: syz.3.644 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.570889][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.570900][ T5597] Call Trace: [ 76.570906][ T5597] [ 76.570913][ T5597] __dump_stack+0x1d/0x30 [ 76.570975][ T5597] dump_stack_lvl+0xe8/0x140 [ 76.570990][ T5597] dump_stack+0x15/0x1b [ 76.571043][ T5597] should_fail_ex+0x265/0x280 [ 76.571063][ T5597] should_failslab+0x8c/0xb0 [ 76.571086][ T5597] kmem_cache_alloc_node_noprof+0x57/0x320 [ 76.571114][ T5597] ? __alloc_skb+0x101/0x320 [ 76.571187][ T5597] __alloc_skb+0x101/0x320 [ 76.571213][ T5597] netlink_alloc_large_skb+0xba/0xf0 [ 76.571232][ T5597] netlink_sendmsg+0x3cf/0x6b0 [ 76.571258][ T5597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.571282][ T5597] __sock_sendmsg+0x142/0x180 [ 76.571378][ T5597] ____sys_sendmsg+0x31e/0x4e0 [ 76.571407][ T5597] ___sys_sendmsg+0x17b/0x1d0 [ 76.571458][ T5597] __x64_sys_sendmsg+0xd4/0x160 [ 76.571486][ T5597] x64_sys_call+0x191e/0x2ff0 [ 76.571568][ T5597] do_syscall_64+0xd2/0x200 [ 76.571639][ T5597] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.571659][ T5597] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.571685][ T5597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.571730][ T5597] RIP: 0033:0x7f5c35e1eec9 [ 76.571743][ T5597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.571756][ T5597] RSP: 002b:00007f5c3487f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.571771][ T5597] RAX: ffffffffffffffda RBX: 00007f5c36075fa0 RCX: 00007f5c35e1eec9 [ 76.571808][ T5597] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 76.571820][ T5597] RBP: 00007f5c3487f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.571885][ T5597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.571895][ T5597] R13: 00007f5c36076038 R14: 00007f5c36075fa0 R15: 00007ffc7440bc08 [ 76.571910][ T5597] [ 76.572835][ T3737] Alternate GPT is invalid, using primary GPT. [ 76.734209][ T5602] netlink: 'syz.3.646': attribute type 10 has an invalid length. [ 76.738150][ T3737] loop4: p1 p2 p3 [ 76.823056][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.858319][ T5585] Alternate GPT is invalid, using primary GPT. [ 76.864684][ T5585] loop4: p1 p2 p3 [ 76.873144][ T5602] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 76.909101][ T5616] FAULT_INJECTION: forcing a failure. [ 76.909101][ T5616] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.922443][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: syz.4.648 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.922470][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.922482][ T5616] Call Trace: [ 76.922488][ T5616] [ 76.922495][ T5616] __dump_stack+0x1d/0x30 [ 76.922571][ T5616] dump_stack_lvl+0xe8/0x140 [ 76.922591][ T5616] dump_stack+0x15/0x1b [ 76.922607][ T5616] should_fail_ex+0x265/0x280 [ 76.922631][ T5616] should_fail_alloc_page+0xf2/0x100 [ 76.922686][ T5616] __alloc_frozen_pages_noprof+0xff/0x360 [ 76.922764][ T5616] alloc_pages_mpol+0xb3/0x250 [ 76.922788][ T5616] vma_alloc_folio_noprof+0x1aa/0x300 [ 76.922898][ T5616] handle_mm_fault+0xec2/0x2c20 [ 76.922980][ T5616] do_user_addr_fault+0x636/0x1090 [ 76.923007][ T5616] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.923071][ T5616] exc_page_fault+0x62/0xa0 [ 76.923093][ T5616] asm_exc_page_fault+0x26/0x30 [ 76.923113][ T5616] RIP: 0033:0x7f1d448703f6 [ 76.923161][ T5616] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d fa 2f 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 3c de fe ff 4d 85 f6 0f 84 46 0a 00 [ 76.923184][ T5616] RSP: 002b:00007f1d433fcf70 EFLAGS: 00010202 [ 76.923198][ T5616] RAX: 0000000000000000 RBX: 00007f1d44bf5fa0 RCX: 0000000000000000 [ 76.923209][ T5616] RDX: 0000200000000200 RSI: 0000200000000200 RDI: 00007f1d44a233e7 [ 76.923219][ T5616] RBP: 00007f1d433ff090 R08: 00007f1d4485e570 R09: 0000000000000000 [ 76.923229][ T5616] R10: 0000000000000003 R11: 0000200000000200 R12: 0000000000000003 [ 76.923239][ T5616] R13: 000000000000005a R14: 0000200000000200 R15: 00007ffec4d36498 [ 76.923253][ T5616] [ 76.923347][ T5616] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 76.936855][ T5602] syz.3.646 (5602) used greatest stack depth: 8712 bytes left [ 76.963349][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.086116][ T5621] loop3: detected capacity change from 0 to 2048 [ 77.092944][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.156248][ T3549] Alternate GPT is invalid, using primary GPT. [ 77.162528][ T3549] loop3: p1 p2 p3 [ 77.166267][ T3549] loop3: partition table partially beyond EOD, truncated [ 77.199788][ T5621] Alternate GPT is invalid, using primary GPT. [ 77.206100][ T5621] loop3: p1 p2 p3 [ 77.208787][ T5630] loop1: detected capacity change from 0 to 1764 [ 77.212542][ T5621] loop3: partition table partially beyond EOD, truncated [ 77.253228][ T5632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.263564][ T5632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.291426][ T5635] loop1: detected capacity change from 0 to 256 [ 77.318850][ T5635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.654'. [ 77.393982][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 77.431998][ T5644] loop1: detected capacity change from 0 to 256 [ 77.490990][ T5646] netlink: 'syz.1.658': attribute type 6 has an invalid length. [ 77.655597][ T5656] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.685924][ T5662] loop4: detected capacity change from 0 to 256 [ 77.706759][ T5664] GUP no longer grows the stack in syz.3.659 (5664): 200000004000-20000000a000 (200000002000) [ 77.717060][ T5664] CPU: 1 UID: 0 PID: 5664 Comm: syz.3.659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.717086][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.717106][ T5664] Call Trace: [ 77.717112][ T5664] [ 77.717166][ T5664] __dump_stack+0x1d/0x30 [ 77.717229][ T5664] dump_stack_lvl+0xe8/0x140 [ 77.717306][ T5664] dump_stack+0x15/0x1b [ 77.717325][ T5664] __get_user_pages+0x198d/0x1fa0 [ 77.717356][ T5664] ? __rcu_read_unlock+0x4f/0x70 [ 77.717375][ T5664] get_user_pages_remote+0x1d5/0x6d0 [ 77.717398][ T5664] __access_remote_vm+0x15c/0x590 [ 77.717496][ T5664] access_remote_vm+0x32/0x40 [ 77.717518][ T5664] proc_pid_cmdline_read+0x32b/0x6c0 [ 77.717546][ T5664] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 77.717569][ T5664] vfs_readv+0x3fb/0x690 [ 77.717709][ T5664] __x64_sys_preadv+0xfd/0x1c0 [ 77.717735][ T5664] x64_sys_call+0x282a/0x2ff0 [ 77.717817][ T5664] do_syscall_64+0xd2/0x200 [ 77.717843][ T5664] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.717869][ T5664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.717887][ T5664] RIP: 0033:0x7f5c35e1eec9 [ 77.717917][ T5664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.717934][ T5664] RSP: 002b:00007f5c3485e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 77.717954][ T5664] RAX: ffffffffffffffda RBX: 00007f5c36076090 RCX: 00007f5c35e1eec9 [ 77.717967][ T5664] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 77.717980][ T5664] RBP: 00007f5c35ea1f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.717990][ T5664] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 77.718000][ T5664] R13: 00007f5c36076128 R14: 00007f5c36076090 R15: 00007ffc7440bc08 [ 77.718092][ T5664] [ 77.951617][ T5672] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.996186][ T5675] loop1: detected capacity change from 0 to 1764 [ 78.040941][ T5680] loop1: detected capacity change from 0 to 256 [ 78.085185][ T5680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 78.111528][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 78.202950][ T5691] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.220175][ T5689] loop3: detected capacity change from 0 to 256 [ 78.296056][ T5699] FAULT_INJECTION: forcing a failure. [ 78.296056][ T5699] name failslab, interval 1, probability 0, space 0, times 0 [ 78.308718][ T5699] CPU: 1 UID: 0 PID: 5699 Comm: syz.4.674 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.308803][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.308814][ T5699] Call Trace: [ 78.308820][ T5699] [ 78.308827][ T5699] __dump_stack+0x1d/0x30 [ 78.308848][ T5699] dump_stack_lvl+0xe8/0x140 [ 78.308899][ T5699] dump_stack+0x15/0x1b [ 78.308918][ T5699] should_fail_ex+0x265/0x280 [ 78.308940][ T5699] should_failslab+0x8c/0xb0 [ 78.308985][ T5699] __kmalloc_noprof+0xa5/0x3e0 [ 78.309070][ T5699] ? alloc_pipe_info+0x1c9/0x350 [ 78.309095][ T5699] alloc_pipe_info+0x1c9/0x350 [ 78.309184][ T5699] splice_direct_to_actor+0x592/0x680 [ 78.309201][ T5699] ? kstrtouint_from_user+0x9f/0xf0 [ 78.309221][ T5699] ? __pfx_direct_splice_actor+0x10/0x10 [ 78.309239][ T5699] ? __rcu_read_unlock+0x4f/0x70 [ 78.309316][ T5699] ? get_pid_task+0x96/0xd0 [ 78.309379][ T5699] ? avc_policy_seqno+0x15/0x30 [ 78.309399][ T5699] ? selinux_file_permission+0x1e4/0x320 [ 78.309421][ T5699] do_splice_direct+0xda/0x150 [ 78.309442][ T5699] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 78.309473][ T5699] do_sendfile+0x380/0x650 [ 78.309503][ T5699] __x64_sys_sendfile64+0x105/0x150 [ 78.309532][ T5699] x64_sys_call+0x2bb0/0x2ff0 [ 78.309615][ T5699] do_syscall_64+0xd2/0x200 [ 78.309646][ T5699] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.309673][ T5699] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.309696][ T5699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.309713][ T5699] RIP: 0033:0x7f1d4499eec9 [ 78.309770][ T5699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.309785][ T5699] RSP: 002b:00007f1d433ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 78.309819][ T5699] RAX: ffffffffffffffda RBX: 00007f1d44bf5fa0 RCX: 00007f1d4499eec9 [ 78.309832][ T5699] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 78.309899][ T5699] RBP: 00007f1d433ff090 R08: 0000000000000000 R09: 0000000000000000 [ 78.309911][ T5699] R10: 0000000008000002 R11: 0000000000000246 R12: 0000000000000001 [ 78.309924][ T5699] R13: 00007f1d44bf6038 R14: 00007f1d44bf5fa0 R15: 00007ffec4d36498 [ 78.309942][ T5699] [ 78.543660][ T5703] netlink: 'syz.1.675': attribute type 6 has an invalid length. [ 78.661087][ T5719] loop3: detected capacity change from 0 to 2048 [ 78.707222][ T3737] Alternate GPT is invalid, using primary GPT. [ 78.713496][ T3737] loop3: p1 p2 p3 [ 78.729917][ T5731] netlink: 'syz.4.683': attribute type 6 has an invalid length. [ 78.743340][ T5719] Alternate GPT is invalid, using primary GPT. [ 78.749783][ T5719] loop3: p1 p2 p3 [ 78.848668][ T5739] loop2: detected capacity change from 0 to 512 [ 78.860464][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 78.902443][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 78.914166][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 78.932450][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 78.932902][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 78.943450][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 79.070850][ T5739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.094215][ T5739] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.384298][ T5758] FAULT_INJECTION: forcing a failure. [ 79.384298][ T5758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.397427][ T5758] CPU: 1 UID: 0 PID: 5758 Comm: syz.1.687 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.397450][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.397459][ T5758] Call Trace: [ 79.397465][ T5758] [ 79.397523][ T5758] __dump_stack+0x1d/0x30 [ 79.397674][ T5758] dump_stack_lvl+0xe8/0x140 [ 79.397694][ T5758] dump_stack+0x15/0x1b [ 79.397735][ T5758] should_fail_ex+0x265/0x280 [ 79.397758][ T5758] should_fail+0xb/0x20 [ 79.397779][ T5758] should_fail_usercopy+0x1a/0x20 [ 79.397803][ T5758] _copy_from_user+0x1c/0xb0 [ 79.397840][ T5758] __copy_msghdr+0x244/0x300 [ 79.397876][ T5758] ___sys_sendmsg+0x109/0x1d0 [ 79.397913][ T5758] __x64_sys_sendmsg+0xd4/0x160 [ 79.397940][ T5758] x64_sys_call+0x191e/0x2ff0 [ 79.398007][ T5758] do_syscall_64+0xd2/0x200 [ 79.398039][ T5758] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.398059][ T5758] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.398157][ T5758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.398239][ T5758] RIP: 0033:0x7f41994feec9 [ 79.398252][ T5758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.398265][ T5758] RSP: 002b:00007f4197f5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.398283][ T5758] RAX: ffffffffffffffda RBX: 00007f4199755fa0 RCX: 00007f41994feec9 [ 79.398296][ T5758] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 79.398308][ T5758] RBP: 00007f4197f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.398318][ T5758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.398329][ T5758] R13: 00007f4199756038 R14: 00007f4199755fa0 R15: 00007fff2ff57e58 [ 79.398369][ T5758] [ 79.650637][ T5760] netlink: 'syz.1.688': attribute type 10 has an invalid length. [ 79.689952][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.726420][ T5762] loop4: detected capacity change from 0 to 2048 [ 79.745696][ T5766] __nla_validate_parse: 2 callbacks suppressed [ 79.745711][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 79.800931][ T3549] Alternate GPT is invalid, using primary GPT. [ 79.807288][ T3549] loop4: p1 p2 p3 [ 79.811085][ T3549] loop4: partition table partially beyond EOD, truncated [ 79.848390][ T5762] Alternate GPT is invalid, using primary GPT. [ 79.854707][ T5762] loop4: p1 p2 p3 [ 79.858418][ T5762] loop4: partition table partially beyond EOD, truncated [ 79.885072][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.950902][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.037228][ T5777] loop3: detected capacity change from 0 to 2048 [ 80.105712][ T3737] loop3: p2 p3 p7 [ 80.201933][ T5777] loop3: p2 p3 p7 [ 80.252857][ T5795] loop4: detected capacity change from 0 to 512 [ 80.268860][ T5797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.301204][ T5795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.325229][ T5795] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.337128][ T2995] loop3: p2 p3 p7 [ 80.381203][ T5797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.806017][ T5807] loop3: detected capacity change from 0 to 256 [ 80.880592][ T5809] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 81.118580][ T5819] netlink: 'syz.0.709': attribute type 6 has an invalid length. [ 81.648411][ C1] vcan0: j1939_tp_rxtimer: 0xffff888124159000: rx timeout, send abort [ 81.656699][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888124159000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.686377][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.776576][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.812399][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.875777][ T5845] loop4: detected capacity change from 0 to 2048 [ 81.897612][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 81.897627][ T29] audit: type=1326 audit(1758800493.997:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 81.985938][ T29] audit: type=1326 audit(1758800493.997:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 82.009193][ T29] audit: type=1326 audit(1758800493.997:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 82.032499][ T29] audit: type=1326 audit(1758800494.047:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 82.055957][ T29] audit: type=1326 audit(1758800494.057:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 82.096164][ T3549] loop4: p2 p3 p7 [ 82.112245][ T5845] loop4: p2 p3 p7 [ 82.152364][ T5861] netlink: 'syz.0.717': attribute type 10 has an invalid length. [ 82.236585][ T5858] loop1: detected capacity change from 0 to 2048 [ 82.258971][ T29] audit: type=1326 audit(1758800494.287:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 82.282264][ T29] audit: type=1326 audit(1758800494.287:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 82.305593][ T29] audit: type=1326 audit(1758800494.297:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 82.328843][ T29] audit: type=1326 audit(1758800494.297:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f41994fef03 code=0x7ffc0000 [ 82.351922][ T29] audit: type=1326 audit(1758800494.307:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f41994fd97f code=0x7ffc0000 [ 82.409581][ T3549] Alternate GPT is invalid, using primary GPT. [ 82.415844][ T3549] loop1: p1 p2 p3 [ 82.463232][ T5858] Alternate GPT is invalid, using primary GPT. [ 82.469627][ T5858] loop1: p1 p2 p3 [ 82.527555][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 82.538961][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 82.551016][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 82.786234][ T5877] netlink: 'syz.4.726': attribute type 6 has an invalid length. [ 82.846529][ T5882] netlink: 'syz.1.728': attribute type 6 has an invalid length. [ 83.303461][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.354060][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.492264][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 83.501119][ T5922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 83.603058][ T5924] loop1: detected capacity change from 0 to 2048 [ 83.631880][ T5924] EXT4-fs (loop1): failed to initialize system zone (-117) [ 83.639246][ T5924] EXT4-fs (loop1): mount failed [ 83.641184][ T5927] loop4: detected capacity change from 0 to 2048 [ 83.739628][ T3549] Alternate GPT is invalid, using primary GPT. [ 83.745933][ T3549] loop4: p1 p2 p3 [ 83.773555][ T5927] Alternate GPT is invalid, using primary GPT. [ 83.779928][ T5927] loop4: p1 p2 p3 [ 83.833121][ T5933] loop1: detected capacity change from 0 to 1024 [ 83.853890][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 83.859459][ T5933] ext4: Unknown parameter 'test_dum' [ 83.870704][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 83.958184][ T5939] loop1: detected capacity change from 0 to 256 [ 84.098085][ T5948] netlink: 'syz.0.744': attribute type 10 has an invalid length. [ 84.138531][ T5958] loop2: detected capacity change from 0 to 2048 [ 84.145537][ T5951] loop3: detected capacity change from 0 to 1764 [ 84.165904][ T5954] loop1: detected capacity change from 0 to 2048 [ 84.174461][ T5955] netlink: 'syz.4.747': attribute type 6 has an invalid length. [ 84.197268][ T5961] 9pnet_fd: Insufficient options for proto=fd [ 84.211421][ T5954] EXT4-fs (loop1): failed to initialize system zone (-117) [ 84.218636][ T5954] EXT4-fs (loop1): mount failed [ 84.269777][ T3736] Alternate GPT is invalid, using primary GPT. [ 84.276077][ T3736] loop2: p1 p2 p3 [ 84.291124][ T5968] loop1: detected capacity change from 0 to 1024 [ 84.319797][ T5968] ext4: Unknown parameter 'test_dum' [ 84.320073][ T5958] Alternate GPT is invalid, using primary GPT. [ 84.331523][ T5958] loop2: p1 p2 p3 [ 84.382883][ T5976] loop1: detected capacity change from 0 to 256 [ 84.417959][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 84.469696][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.514849][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.525491][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 84.527815][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 84.550362][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 84.578731][ T5991] loop2: detected capacity change from 0 to 2048 [ 84.642088][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 84.642237][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 84.653360][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 84.698128][ T5991] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 84.726104][ T5991] System zones: 0-7 [ 84.775927][ T6009] loop4: detected capacity change from 0 to 1764 [ 84.802698][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 84.836844][ T6011] loop1: detected capacity change from 0 to 2048 [ 84.887211][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.896186][ T5991] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.906203][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.949033][ T5991] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 84.961245][ T5991] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.961245][ T5991] [ 84.970921][ T5991] EXT4-fs (loop2): Total free blocks count 0 [ 84.976947][ T5991] EXT4-fs (loop2): Free/Dirty block details [ 84.982891][ T5991] EXT4-fs (loop2): free_blocks=2415919104 [ 84.988599][ T5991] EXT4-fs (loop2): dirty_blocks=16 [ 84.993798][ T5991] EXT4-fs (loop2): Block reservation details [ 84.999785][ T5991] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 85.072223][ T5991] syz.2.757 (5991) used greatest stack depth: 8296 bytes left [ 85.090885][ T3736] Alternate GPT is invalid, using primary GPT. [ 85.097236][ T3736] loop1: p1 p2 p3 [ 85.100991][ T3736] loop1: partition table partially beyond EOD, truncated [ 85.139780][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 85.198147][ T6015] loop4: detected capacity change from 0 to 2048 [ 85.209285][ T6011] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 85.234301][ T6019] loop2: detected capacity change from 0 to 512 [ 85.252152][ T6019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.288366][ T2995] Alternate GPT is invalid, using primary GPT. [ 85.294749][ T2995] loop1: p1 p2 p3 [ 85.298498][ T2995] loop1: partition table partially beyond EOD, truncated [ 85.309048][ T6019] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.338069][ T3737] loop4: p2 p3 p7 [ 85.437275][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.463010][ T6015] loop4: p2 p3 p7 [ 85.713943][ T2995] loop4: p2 p3 p7 [ 85.743040][ T6028] loop2: detected capacity change from 0 to 512 [ 85.771862][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.807047][ T6032] loop1: detected capacity change from 0 to 256 [ 85.871305][ T6028] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.965849][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 85.974680][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.767'. [ 85.986975][ T6032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.766'. [ 86.026829][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.141226][ T6046] loop2: detected capacity change from 0 to 256 [ 86.263646][ T6055] loop1: detected capacity change from 0 to 512 [ 86.332333][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.369293][ T6061] loop2: detected capacity change from 0 to 512 [ 86.376104][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.385515][ T6061] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.404450][ T6055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.433184][ T6061] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.449129][ T6055] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.501412][ T6061] EXT4-fs (loop2): 1 truncate cleaned up [ 86.507480][ T6061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.680693][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 86.685805][ T6071] loop4: detected capacity change from 0 to 512 [ 86.697749][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 86.719560][ T6071] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.740163][ T6070] 9pnet_fd: Insufficient options for proto=fd [ 86.749384][ T6071] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.790894][ T6071] EXT4-fs (loop4): 1 truncate cleaned up [ 86.809512][ T6071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.936273][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.781'. [ 86.956394][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 87.024675][ T6075] 9pnet_fd: Insufficient options for proto=fd [ 87.269531][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.354567][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 87.363410][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 87.394037][ T6082] loop2: detected capacity change from 0 to 256 [ 87.489819][ T6086] loop2: detected capacity change from 0 to 2048 [ 87.537512][ T6086] EXT4-fs (loop2): failed to initialize system zone (-117) [ 87.544882][ T6086] EXT4-fs (loop2): mount failed [ 87.594744][ T6092] loop2: detected capacity change from 0 to 1764 [ 87.718501][ T6100] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.718981][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 87.718993][ T29] audit: type=1400 audit(1758800499.817:882): avc: denied { write } for pid=6099 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.727228][ T6100] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.751269][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8d3600: rx timeout, send abort [ 87.752642][ T29] audit: type=1326 audit(1758800499.857:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b0c7eec9 code=0x7ffc0000 [ 87.758604][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a8d3600: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.766619][ T29] audit: type=1326 audit(1758800499.857:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f91b0c7eec9 code=0x7ffc0000 [ 87.827305][ T29] audit: type=1326 audit(1758800499.857:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91b0c7ef03 code=0x7ffc0000 [ 87.864560][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.874439][ T6098] loop2: detected capacity change from 0 to 2048 [ 87.877005][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.909313][ T29] audit: type=1326 audit(1758800499.907:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91b0c7d97f code=0x7ffc0000 [ 87.932465][ T29] audit: type=1326 audit(1758800499.907:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f91b0c7ef57 code=0x7ffc0000 [ 87.955925][ T29] audit: type=1326 audit(1758800499.977:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91b0c7d710 code=0x7ffc0000 [ 87.979503][ T29] audit: type=1326 audit(1758800499.977:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91b0c7eacb code=0x7ffc0000 [ 88.022729][ T6104] loop4: detected capacity change from 0 to 512 [ 88.025939][ T6105] netlink: 'syz.1.794': attribute type 10 has an invalid length. [ 88.048831][ T3549] Alternate GPT is invalid, using primary GPT. [ 88.055061][ T3549] loop2: p1 p2 p3 [ 88.055173][ T29] audit: type=1326 audit(1758800500.067:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f91b0c7db2a code=0x7ffc0000 [ 88.073801][ T6104] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.082240][ T29] audit: type=1326 audit(1758800500.067:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.2.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91b0c7eacb code=0x7ffc0000 [ 88.130662][ T6098] Alternate GPT is invalid, using primary GPT. [ 88.136880][ T6098] loop2: p1 p2 p3 [ 88.149887][ T6104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.190824][ T2995] Alternate GPT is invalid, using primary GPT. [ 88.190849][ T6104] EXT4-fs (loop4): 1 truncate cleaned up [ 88.197116][ T2995] loop2: p1 p2 p3 [ 88.248306][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 88.289956][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 88.313967][ T6119] loop1: detected capacity change from 0 to 2048 [ 88.323861][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 88.324983][ T6104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.346547][ T6115] netlink: 'syz.0.798': attribute type 6 has an invalid length. [ 88.357015][ T6119] EXT4-fs (loop1): failed to initialize system zone (-117) [ 88.364373][ T6119] EXT4-fs (loop1): mount failed [ 88.387619][ T6121] loop3: detected capacity change from 0 to 2048 [ 88.421728][ T6130] loop2: detected capacity change from 0 to 512 [ 88.455476][ T6130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.469715][ T6130] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.480431][ T3637] Alternate GPT is invalid, using primary GPT. [ 88.486773][ T3637] loop3: p1 p2 p3 [ 88.490564][ T3637] loop3: partition table partially beyond EOD, truncated [ 88.507131][ T6121] Alternate GPT is invalid, using primary GPT. [ 88.513581][ T6121] loop3: p1 p2 p3 [ 88.517287][ T6121] loop3: partition table partially beyond EOD, truncated [ 88.534824][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.793'. [ 88.621671][ T6148] 9pnet_fd: Insufficient options for proto=fd [ 88.844776][ T6158] loop3: detected capacity change from 0 to 1764 [ 88.901686][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.934217][ T6163] loop4: detected capacity change from 0 to 512 [ 88.970399][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.000935][ T6163] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.044030][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.070600][ T6179] siw: device registration error -23 [ 89.072397][ T6178] loop4: detected capacity change from 0 to 256 [ 89.096113][ T6181] netlink: 'syz.0.816': attribute type 6 has an invalid length. [ 89.165631][ T6192] loop4: detected capacity change from 0 to 1764 [ 89.261302][ T6209] loop4: detected capacity change from 0 to 512 [ 89.284926][ T6209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.297784][ T6209] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.327348][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.418277][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.440090][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.456483][ T6232] loop4: detected capacity change from 0 to 2048 [ 89.487867][ T6242] netlink: 'syz.0.833': attribute type 6 has an invalid length. [ 89.523634][ T3737] loop4: p2 p3 p7 [ 89.546268][ T6232] loop4: p2 p3 p7 [ 89.755796][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813716be00: rx timeout, send abort [ 89.764079][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88813716be00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.788547][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.921091][ T6278] loop2: detected capacity change from 0 to 256 [ 89.952073][ T6282] netlink: 'syz.0.845': attribute type 6 has an invalid length. [ 90.027105][ T6284] loop3: detected capacity change from 0 to 512 [ 90.059323][ T6288] loop2: detected capacity change from 0 to 512 [ 90.070232][ T6284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.106528][ T6284] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.145605][ T6288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.169624][ T6301] loop1: detected capacity change from 0 to 2048 [ 90.180815][ T6288] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.201695][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.213321][ T6301] EXT4-fs (loop1): failed to initialize system zone (-117) [ 90.222825][ T6301] EXT4-fs (loop1): mount failed [ 90.306887][ T6317] loop3: detected capacity change from 0 to 256 [ 90.384700][ T6323] loop3: detected capacity change from 0 to 1764 [ 90.422897][ T6332] FAULT_INJECTION: forcing a failure. [ 90.422897][ T6332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.436100][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.3.859 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.436126][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.436136][ T6332] Call Trace: [ 90.436158][ T6332] [ 90.436165][ T6332] __dump_stack+0x1d/0x30 [ 90.436184][ T6332] dump_stack_lvl+0xe8/0x140 [ 90.436201][ T6332] dump_stack+0x15/0x1b [ 90.436259][ T6332] should_fail_ex+0x265/0x280 [ 90.436282][ T6332] should_fail+0xb/0x20 [ 90.436319][ T6332] should_fail_usercopy+0x1a/0x20 [ 90.436342][ T6332] _copy_to_user+0x20/0xa0 [ 90.436442][ T6332] simple_read_from_buffer+0xb5/0x130 [ 90.436465][ T6332] proc_fail_nth_read+0x10e/0x150 [ 90.436491][ T6332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.436530][ T6332] vfs_read+0x1a8/0x770 [ 90.436550][ T6332] ? __rcu_read_unlock+0x4f/0x70 [ 90.436571][ T6332] ? __fget_files+0x184/0x1c0 [ 90.436644][ T6332] ksys_read+0xda/0x1a0 [ 90.436663][ T6332] __x64_sys_read+0x40/0x50 [ 90.436680][ T6332] x64_sys_call+0x27bc/0x2ff0 [ 90.436700][ T6332] do_syscall_64+0xd2/0x200 [ 90.436792][ T6332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.436811][ T6332] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.436839][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.436861][ T6332] RIP: 0033:0x7f5c35e1d8dc [ 90.436876][ T6332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.436906][ T6332] RSP: 002b:00007f5c3487f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.436925][ T6332] RAX: ffffffffffffffda RBX: 00007f5c36075fa0 RCX: 00007f5c35e1d8dc [ 90.436936][ T6332] RDX: 000000000000000f RSI: 00007f5c3487f0a0 RDI: 0000000000000003 [ 90.437022][ T6332] RBP: 00007f5c3487f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.437106][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.437118][ T6332] R13: 00007f5c36076038 R14: 00007f5c36075fa0 R15: 00007ffc7440bc08 [ 90.437132][ T6332] [ 90.650126][ T6336] loop4: detected capacity change from 0 to 256 [ 90.658006][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 90.819638][ T6350] loop4: detected capacity change from 0 to 2048 [ 90.839956][ T6350] EXT4-fs (loop4): failed to initialize system zone (-117) [ 90.847425][ T6350] EXT4-fs (loop4): mount failed [ 90.894305][ T6354] netlink: 'syz.4.866': attribute type 6 has an invalid length. [ 91.275175][ T6386] __nla_validate_parse: 8 callbacks suppressed [ 91.275190][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 91.429668][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.452564][ T6401] loop1: detected capacity change from 0 to 1024 [ 91.462960][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.472752][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8caa00: rx timeout, send abort [ 91.481038][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a8caa00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 91.505098][ T6398] loop4: detected capacity change from 0 to 2048 [ 91.512926][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.513361][ T6401] ext4: Unknown parameter 'test_dum' [ 91.554960][ T6398] loop4: p2 p3 p7 [ 91.676608][ T6408] siw: device registration error -23 [ 91.768057][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.802793][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.879484][ T6410] loop1: detected capacity change from 0 to 2048 [ 91.963056][ T6410] loop1: p2 p3 p7 [ 92.620372][ T6432] loop1: detected capacity change from 0 to 256 [ 92.781224][ T6434] siw: device registration error -23 [ 92.786587][ T6436] loop3: detected capacity change from 0 to 256 [ 92.803829][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.895'. [ 92.825688][ T6434] loop1: detected capacity change from 0 to 512 [ 92.882428][ T6434] EXT4-fs (loop1): too many log groups per flexible block group [ 92.890237][ T6434] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 92.933950][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 92.933964][ T29] audit: type=1326 audit(1758800505.037:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x0 [ 92.969265][ T6434] EXT4-fs (loop1): mount failed [ 93.042229][ T6450] siw: device registration error -23 [ 93.074408][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.097676][ T6456] loop2: detected capacity change from 0 to 1764 [ 93.104586][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.189975][ T6451] loop4: detected capacity change from 0 to 2048 [ 93.206587][ T6462] loop1: detected capacity change from 0 to 2048 [ 93.224420][ T6451] loop4: p2 p3 p7 [ 93.249906][ T6462] EXT4-fs (loop1): failed to initialize system zone (-117) [ 93.265777][ T6462] EXT4-fs (loop1): mount failed [ 93.496911][ T2995] loop4: p2 p3 p7 [ 93.782131][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812f3ece00: rx timeout, send abort [ 93.790472][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812f3ece00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.838964][ T29] audit: type=1326 audit(1758800505.927:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4499eec9 code=0x7ffc0000 [ 93.862381][ T29] audit: type=1326 audit(1758800505.927:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1d4499eec9 code=0x7ffc0000 [ 93.885737][ T29] audit: type=1326 audit(1758800505.927:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d4499ef03 code=0x7ffc0000 [ 93.908870][ T29] audit: type=1326 audit(1758800505.927:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d4499d97f code=0x7ffc0000 [ 93.938732][ T29] audit: type=1326 audit(1758800505.997:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1d4499ef57 code=0x7ffc0000 [ 93.957571][ T6470] loop3: detected capacity change from 0 to 1024 [ 93.968641][ T6467] loop4: detected capacity change from 0 to 2048 [ 93.990345][ T6470] ext4: Unknown parameter 'test_dum' [ 94.010834][ T6473] loop1: detected capacity change from 0 to 256 [ 94.020261][ T6467] Alternate GPT is invalid, using primary GPT. [ 94.026657][ T6467] loop4: p1 p2 p3 [ 94.040087][ T29] audit: type=1326 audit(1758800506.077:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d4499d710 code=0x7ffc0000 [ 94.063505][ T29] audit: type=1326 audit(1758800506.077:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d4499eacb code=0x7ffc0000 [ 94.086736][ T29] audit: type=1326 audit(1758800506.107:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d4499db2a code=0x7ffc0000 [ 94.109932][ T29] audit: type=1326 audit(1758800506.107:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d4499eacb code=0x7ffc0000 [ 94.200472][ T2995] Alternate GPT is invalid, using primary GPT. [ 94.206745][ T2995] loop4: p1 p2 p3 [ 94.213417][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 94.251113][ T6478] loop4: detected capacity change from 0 to 512 [ 94.300526][ T6478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.323393][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 94.325264][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.334567][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 94.379411][ T6478] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.423143][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 94.423758][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.434030][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 94.463624][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.475442][ T6488] siw: device registration error -23 [ 94.508669][ T6492] loop1: detected capacity change from 0 to 2048 [ 94.560533][ T6492] Alternate GPT is invalid, using primary GPT. [ 94.566854][ T6492] loop1: p1 p2 p3 [ 94.570632][ T6492] loop1: partition table partially beyond EOD, truncated [ 94.926963][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.920'. [ 94.999205][ T6505] loop1: detected capacity change from 0 to 2048 [ 95.232076][ T6511] loop3: detected capacity change from 0 to 2048 [ 95.250871][ T6505] Alternate GPT is invalid, using primary GPT. [ 95.257293][ T6505] loop1: p1 p2 p3 [ 95.261100][ T6505] loop1: partition table partially beyond EOD, truncated [ 95.279620][ T3549] Alternate GPT is invalid, using primary GPT. [ 95.285886][ T3549] loop3: p1 p2 p3 [ 95.333105][ T6511] Alternate GPT is invalid, using primary GPT. [ 95.339484][ T6511] loop3: p1 p2 p3 [ 95.350952][ T2995] Alternate GPT is invalid, using primary GPT. [ 95.357206][ T2995] loop3: p1 p2 p3 [ 95.412770][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 95.423681][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 95.424308][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 95.473689][ T6515] loop3: detected capacity change from 0 to 256 [ 95.554424][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'. [ 95.822270][ T6525] loop4: detected capacity change from 0 to 1764 [ 95.932158][ T6530] netlink: 'syz.1.932': attribute type 6 has an invalid length. [ 95.932542][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 96.071364][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.091057][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.128232][ T6542] loop2: detected capacity change from 0 to 2048 [ 96.188462][ T3737] loop2: p2 p3 p7 [ 96.234574][ T6542] loop2: p2 p3 p7 [ 96.274496][ T6555] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 96.348351][ T6557] loop1: detected capacity change from 0 to 256 [ 96.419735][ T6559] loop3: detected capacity change from 0 to 512 [ 96.450157][ T6561] loop1: detected capacity change from 0 to 2048 [ 96.467935][ T6559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.497759][ T6559] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.512806][ T3737] Alternate GPT is invalid, using primary GPT. [ 96.519103][ T3737] loop1: p1 p2 p3 [ 96.522812][ T3737] loop1: partition table partially beyond EOD, truncated [ 96.564241][ T6561] Alternate GPT is invalid, using primary GPT. [ 96.570521][ T6561] loop1: p1 p2 p3 [ 96.574231][ T6561] loop1: partition table partially beyond EOD, truncated [ 96.582878][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.633291][ T6565] siw: device registration error -23 [ 96.664532][ T6565] loop3: detected capacity change from 0 to 512 [ 96.702265][ T6565] EXT4-fs (loop3): too many log groups per flexible block group [ 96.710016][ T6565] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 96.731175][ T6565] EXT4-fs (loop3): mount failed [ 96.976505][ T6581] netlink: 'syz.3.946': attribute type 6 has an invalid length. [ 97.026362][ T6585] loop1: detected capacity change from 0 to 2048 [ 97.082315][ T6585] EXT4-fs (loop1): failed to initialize system zone (-117) [ 97.123574][ T6585] EXT4-fs (loop1): mount failed [ 97.440083][ T6609] netlink: 'syz.3.950': attribute type 6 has an invalid length. [ 97.454104][ T6611] siw: device registration error -23 [ 97.478015][ T6611] loop2: detected capacity change from 0 to 512 [ 97.532299][ T6611] EXT4-fs (loop2): too many log groups per flexible block group [ 97.540068][ T6611] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 97.608243][ T6611] EXT4-fs (loop2): mount failed [ 97.730159][ T6632] siw: device registration error -23 [ 97.764215][ T6632] loop2: detected capacity change from 0 to 512 [ 97.835324][ T6632] EXT4-fs (loop2): too many log groups per flexible block group [ 97.843045][ T6632] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 97.852327][ T6636] loop3: detected capacity change from 0 to 1024 [ 97.862852][ T6636] ext4: Unknown parameter 'test_dum' [ 97.889549][ T6632] EXT4-fs (loop2): mount failed [ 97.942141][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 97.982256][ T6650] netlink: 'syz.2.960': attribute type 6 has an invalid length. [ 97.993531][ T6646] loop3: detected capacity change from 0 to 1764 [ 98.097795][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.112830][ T6662] loop3: detected capacity change from 0 to 2048 [ 98.131214][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.180775][ T3737] Alternate GPT is invalid, using primary GPT. [ 98.187029][ T3737] loop3: p1 p2 p3 [ 98.190890][ T3737] loop3: partition table partially beyond EOD, truncated [ 98.228681][ T6662] Alternate GPT is invalid, using primary GPT. [ 98.235021][ T6662] loop3: p1 p2 p3 [ 98.238739][ T6662] loop3: partition table partially beyond EOD, truncated [ 98.388471][ T6689] loop2: detected capacity change from 0 to 1024 [ 98.408199][ T6688] siw: device registration error -23 [ 98.420751][ T6688] loop1: detected capacity change from 0 to 512 [ 98.472511][ T6689] ext4: Unknown parameter 'test_dum' [ 98.483251][ T6688] EXT4-fs (loop1): too many log groups per flexible block group [ 98.491110][ T6688] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 98.511979][ T6688] EXT4-fs (loop1): mount failed [ 98.568886][ T6693] siw: device registration error -23 [ 98.579975][ T6693] loop2: detected capacity change from 0 to 512 [ 98.593455][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 98.654263][ T6693] EXT4-fs (loop2): too many log groups per flexible block group [ 98.662072][ T6693] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 98.681296][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 98.681308][ T29] audit: type=1326 audit(1758800510.787:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.712730][ T29] audit: type=1326 audit(1758800510.827:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.736105][ T29] audit: type=1326 audit(1758800510.827:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.747674][ T6693] EXT4-fs (loop2): mount failed [ 98.759511][ T29] audit: type=1326 audit(1758800510.827:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.787721][ T29] audit: type=1326 audit(1758800510.827:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.811103][ T29] audit: type=1326 audit(1758800510.827:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.834550][ T29] audit: type=1326 audit(1758800510.827:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.858005][ T29] audit: type=1326 audit(1758800510.827:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.909097][ T29] audit: type=1326 audit(1758800511.007:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.932432][ T29] audit: type=1326 audit(1758800511.007:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 98.997393][ T6705] loop2: detected capacity change from 0 to 1764 [ 99.040592][ T6708] loop2: detected capacity change from 0 to 256 [ 99.049280][ T6710] netlink: 'syz.1.977': attribute type 6 has an invalid length. [ 99.083470][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.975'. [ 99.084406][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.976'. [ 99.154251][ T6715] loop2: detected capacity change from 0 to 2048 [ 99.204487][ T6715] Alternate GPT is invalid, using primary GPT. [ 99.210834][ T6715] loop2: p1 p2 p3 [ 99.214554][ T6715] loop2: partition table partially beyond EOD, truncated [ 99.475002][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.532329][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.675078][ T6742] loop1: detected capacity change from 0 to 2048 [ 99.721921][ T6753] loop4: detected capacity change from 0 to 2048 [ 99.726394][ T6755] loop3: detected capacity change from 0 to 1024 [ 99.752386][ T6755] ext4: Unknown parameter 'test_dum' [ 99.769888][ T3737] Alternate GPT is invalid, using primary GPT. [ 99.776143][ T3737] loop4: p1 p2 p3 [ 99.779931][ T3737] loop4: partition table partially beyond EOD, truncated [ 99.794710][ T6742] loop1: p2 p3 p7 [ 99.839507][ T6753] Alternate GPT is invalid, using primary GPT. [ 99.845804][ T6753] loop4: p1 p2 p3 [ 99.849544][ T6753] loop4: partition table partially beyond EOD, truncated [ 99.882450][ T2995] loop1: p2 p3 p7 [ 100.323448][ T6782] loop4: detected capacity change from 0 to 1024 [ 100.331934][ T6784] siw: device registration error -23 [ 100.352863][ T6784] loop2: detected capacity change from 0 to 512 [ 100.359478][ T6782] ext4: Unknown parameter 'test_dum' [ 100.380752][ T6784] EXT4-fs (loop2): too many log groups per flexible block group [ 100.388492][ T6784] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 100.435609][ T6784] EXT4-fs (loop2): mount failed [ 100.449332][ T6789] loop4: detected capacity change from 0 to 512 [ 100.482233][ T6789] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.504791][ T6789] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.524817][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 100.534617][ T6789] EXT4-fs (loop4): 1 truncate cleaned up [ 100.553778][ T6789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.587895][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.623078][ T6802] loop2: detected capacity change from 0 to 256 [ 100.648324][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.732233][ T6805] 9pnet_fd: Insufficient options for proto=fd [ 100.805769][ T6797] loop1: detected capacity change from 0 to 2048 [ 100.934656][ T6813] loop3: detected capacity change from 0 to 2048 [ 100.970146][ T3737] loop1: p2 p3 p7 [ 100.979793][ T3549] Alternate GPT is invalid, using primary GPT. [ 100.986121][ T3549] loop3: p1 p2 p3 [ 100.989891][ T3549] loop3: partition table partially beyond EOD, truncated [ 101.043003][ T6815] loop2: detected capacity change from 0 to 2048 [ 101.052387][ T6813] Alternate GPT is invalid, using primary GPT. [ 101.058734][ T6813] loop3: p1 p2 p3 [ 101.062478][ T6813] loop3: partition table partially beyond EOD, truncated [ 101.106591][ T6815] Alternate GPT is invalid, using primary GPT. [ 101.113009][ T6815] loop2: p1 p2 p3 [ 101.184419][ T6797] loop1: p2 p3 p7 [ 101.198876][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 101.205208][ T6820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.219957][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.257727][ T2995] loop1: p2 p3 p7 [ 101.322077][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.326967][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 101.332527][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 101.370300][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.380007][ T6820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.422332][ T6824] netlink: 'syz.4.1013': attribute type 6 has an invalid length. [ 101.458063][ T6820] loop2: detected capacity change from 0 to 2048 [ 101.517994][ T6831] netlink: 'syz.0.1015': attribute type 6 has an invalid length. [ 101.554899][ T6820] loop2: p2 p3 p7 [ 101.999429][ T6874] loop4: detected capacity change from 0 to 512 [ 102.026808][ T6874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.049131][ T6874] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.123999][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.232511][ T6889] loop2: detected capacity change from 0 to 2048 [ 102.319216][ T6889] Alternate GPT is invalid, using primary GPT. [ 102.325637][ T6889] loop2: p1 p2 p3 [ 102.329445][ T6889] loop2: partition table partially beyond EOD, truncated [ 102.472623][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.544501][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.573029][ T6901] netlink: 'syz.0.1031': attribute type 6 has an invalid length. [ 102.591574][ T6897] loop4: detected capacity change from 0 to 2048 [ 102.652909][ T3549] loop4: p2 p3 p7 [ 102.681026][ T6897] loop4: p2 p3 p7 [ 102.831629][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.850220][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.885410][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.905815][ T6923] loop3: detected capacity change from 0 to 2048 [ 102.965262][ T6927] loop1: detected capacity change from 0 to 256 [ 102.972016][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.990856][ T3737] loop3: p2 p3 p7 [ 103.090243][ T6931] loop2: detected capacity change from 0 to 512 [ 103.099751][ T6933] loop1: detected capacity change from 0 to 1764 [ 103.144408][ T6931] EXT4-fs (loop2): too many log groups per flexible block group [ 103.152314][ T6931] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 103.161643][ T6923] loop3: p2 p3 p7 [ 103.209015][ T6931] EXT4-fs (loop2): mount failed [ 103.312047][ T6945] netlink: 'syz.2.1043': attribute type 6 has an invalid length. [ 103.325061][ T6943] loop1: detected capacity change from 0 to 2048 [ 103.371220][ T3736] Alternate GPT is invalid, using primary GPT. [ 103.377621][ T3736] loop1: p1 p2 p3 [ 103.399475][ T6943] Alternate GPT is invalid, using primary GPT. [ 103.405741][ T6943] loop1: p1 p2 p3 [ 103.430165][ T6947] loop4: detected capacity change from 0 to 2048 [ 103.472194][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'. [ 103.519550][ T6947] Alternate GPT is invalid, using primary GPT. [ 103.525803][ T6947] loop4: p1 p2 p3 [ 103.529561][ T6947] loop4: partition table partially beyond EOD, truncated [ 103.540212][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 103.550129][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 103.551235][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 103.594178][ T6962] loop1: detected capacity change from 0 to 512 [ 103.675007][ T6962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.699043][ T6962] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.708795][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 103.724804][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 103.821075][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 103.821090][ T29] audit: type=1326 audit(1758800515.927:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.3.1046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x0 [ 103.872596][ T6979] loop2: detected capacity change from 0 to 256 [ 103.901499][ T29] audit: type=1326 audit(1758800515.927:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 103.924923][ T29] audit: type=1326 audit(1758800515.927:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 104.004192][ T6982] loop2: detected capacity change from 0 to 256 [ 104.063427][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1050'. [ 104.225348][ T6984] siw: device registration error -23 [ 104.233856][ T6984] loop2: detected capacity change from 0 to 512 [ 104.268139][ T6984] EXT4-fs (loop2): too many log groups per flexible block group [ 104.275916][ T6984] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 104.312406][ T6984] EXT4-fs (loop2): mount failed [ 104.395630][ T29] audit: type=1326 audit(1758800516.487:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 104.419116][ T29] audit: type=1326 audit(1758800516.487:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 104.524368][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1058'. [ 104.602629][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.621277][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.629680][ T7005] netlink: 'syz.0.1059': attribute type 6 has an invalid length. [ 104.670778][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.689737][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.706051][ T7007] loop2: detected capacity change from 0 to 2048 [ 104.731983][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.734864][ T7010] loop3: detected capacity change from 0 to 2048 [ 104.791009][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.804338][ T3737] loop3: p2 p3 p7 [ 104.821781][ T7010] loop3: p2 p3 p7 [ 104.980658][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812f3ec000: rx timeout, send abort [ 104.988921][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812f3ec000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.040704][ T7014] loop4: detected capacity change from 0 to 2048 [ 105.099346][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.119014][ T7007] loop2: p2 p3 p7 [ 105.158183][ T2995] loop2: p2 p3 p7 [ 105.169493][ T3737] loop4: p2 p3 p7 [ 105.176492][ T7036] loop1: detected capacity change from 0 to 2048 [ 105.198524][ T29] audit: type=1326 audit(1758800517.277:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 105.221971][ T29] audit: type=1326 audit(1758800517.277:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 105.245468][ T29] audit: type=1326 audit(1758800517.297:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7442abeec9 code=0x7ffc0000 [ 105.311562][ T2995] Alternate GPT is invalid, using primary GPT. [ 105.317803][ T2995] loop1: p1 p2 p3 [ 105.321557][ T2995] loop1: partition table partially beyond EOD, truncated [ 105.397081][ T7014] loop4: p2 p3 p7 [ 105.434111][ T2995] Alternate GPT is invalid, using primary GPT. [ 105.440407][ T2995] loop1: p1 p2 p3 [ 105.444116][ T2995] loop1: partition table partially beyond EOD, truncated [ 105.594235][ T7047] netlink: 'syz.0.1068': attribute type 10 has an invalid length. [ 105.608036][ T7036] Alternate GPT is invalid, using primary GPT. [ 105.614389][ T7036] loop1: p1 p2 p3 [ 105.618115][ T7036] loop1: partition table partially beyond EOD, truncated [ 105.711906][ T2995] loop4: p2 p3 p7 [ 105.774583][ T29] audit: type=1326 audit(1758800517.877:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 105.798026][ T29] audit: type=1326 audit(1758800517.877:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 105.851172][ T7051] loop3: detected capacity change from 0 to 2048 [ 105.895553][ T7059] netlink: 'syz.1.1074': attribute type 6 has an invalid length. [ 105.912825][ T3518] Alternate GPT is invalid, using primary GPT. [ 105.919182][ T3518] loop3: p1 p2 p3 [ 105.942486][ T7051] Alternate GPT is invalid, using primary GPT. [ 105.948753][ T7051] loop3: p1 p2 p3 [ 106.014934][ T7063] loop2: detected capacity change from 0 to 256 [ 106.054383][ T2995] Alternate GPT is invalid, using primary GPT. [ 106.060810][ T2995] loop3: p1 p2 p3 [ 106.090197][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 106.277470][ T7089] loop4: detected capacity change from 0 to 512 [ 106.401950][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 106.434756][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 106.491307][ T7089] EXT4-fs (loop4): too many log groups per flexible block group [ 106.499114][ T7089] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 106.508079][ T7089] EXT4-fs (loop4): mount failed [ 106.516286][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 106.591107][ T7104] loop1: detected capacity change from 0 to 256 [ 106.640906][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.670075][ T7112] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1089'. [ 106.689907][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.706502][ T7109] loop4: detected capacity change from 0 to 2048 [ 106.749340][ T7116] loop1: detected capacity change from 0 to 512 [ 106.773221][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.785006][ T7105] loop3: detected capacity change from 0 to 2048 [ 106.801750][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.801883][ T7116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.860597][ T3737] Alternate GPT is invalid, using primary GPT. [ 106.866996][ T3737] loop4: p1 p2 p3 [ 106.869034][ T7116] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.870734][ T3737] loop4: partition table partially beyond EOD, truncated [ 106.943662][ T3549] loop3: p2 p3 p7 [ 106.991191][ T7109] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 107.060860][ T2995] Alternate GPT is invalid, using primary GPT. [ 107.067134][ T2995] loop4: p1 p2 p3 [ 107.070935][ T2995] loop4: partition table partially beyond EOD, truncated [ 107.117368][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.153526][ T7105] loop3: p2 p3 p7 [ 107.373510][ T7131] netlink: 'syz.1.1095': attribute type 6 has an invalid length. [ 107.471757][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.495168][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.567292][ T7137] loop2: detected capacity change from 0 to 2048 [ 107.626403][ T3737] loop2: p2 p3 p7 [ 107.671141][ T7137] loop2: p2 p3 p7 [ 107.810428][ T7155] netlink: 'syz.4.1098': attribute type 6 has an invalid length. [ 107.847129][ T7157] netlink: 'syz.1.1099': attribute type 6 has an invalid length. [ 107.961852][ T7163] loop3: detected capacity change from 0 to 256 [ 108.210264][ T7179] loop3: detected capacity change from 0 to 256 [ 108.231346][ T7179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1101'. [ 108.357327][ T7190] siw: device registration error -23 [ 108.401634][ T7190] loop3: detected capacity change from 0 to 512 [ 108.422930][ T7197] loop1: detected capacity change from 0 to 512 [ 108.454499][ T7197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.500181][ T7197] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.512716][ T7190] EXT4-fs (loop3): too many log groups per flexible block group [ 108.520516][ T7190] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 108.544580][ T7190] EXT4-fs (loop3): mount failed [ 108.569509][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.662816][ T7217] loop2: detected capacity change from 0 to 256 [ 108.680693][ T7218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1108'. [ 108.842490][ T7223] netlink: 'syz.2.1112': attribute type 10 has an invalid length. [ 108.864021][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 108.864034][ T29] audit: type=1326 audit(1758800520.967:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7216 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 108.893596][ T29] audit: type=1326 audit(1758800520.967:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7216 comm="syz.3.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 108.980933][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.012499][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 109.029114][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.158268][ T7227] loop3: detected capacity change from 0 to 2048 [ 109.210220][ T7239] loop2: detected capacity change from 0 to 512 [ 109.244222][ T7227] loop3: p2 p3 p7 [ 109.274230][ T7239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.297444][ T7239] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.384668][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.555664][ T7253] netlink: 'syz.2.1125': attribute type 6 has an invalid length. [ 109.609024][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 109.660091][ T29] audit: type=1326 audit(1758800521.767:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 109.728574][ T29] audit: type=1326 audit(1758800521.797:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 109.752057][ T29] audit: type=1326 audit(1758800521.797:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 109.775553][ T29] audit: type=1326 audit(1758800521.797:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 109.798980][ T29] audit: type=1326 audit(1758800521.817:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 109.822284][ T29] audit: type=1326 audit(1758800521.817:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 109.845660][ T29] audit: type=1326 audit(1758800521.817:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 109.869104][ T29] audit: type=1326 audit(1758800521.817:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f41994feec9 code=0x7ffc0000 [ 109.949473][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1129'. [ 110.079072][ T7289] netlink: 'syz.2.1133': attribute type 6 has an invalid length. [ 110.117232][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.168210][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.238545][ T7287] loop3: detected capacity change from 0 to 2048 [ 110.286964][ T7309] loop2: detected capacity change from 0 to 256 [ 110.307488][ T7287] loop3: p2 p3 p7 [ 110.378790][ T2995] loop3: p2 p3 p7 [ 110.899846][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813768e400: rx timeout, send abort [ 110.908089][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88813768e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.973391][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 111.273345][ T7325] loop1: detected capacity change from 0 to 1764 [ 111.327816][ T7328] loop3: detected capacity change from 0 to 512 [ 111.378398][ T7328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.399660][ T7328] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.412298][ T7335] loop1: detected capacity change from 0 to 256 [ 111.425468][ T7333] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 111.494622][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1143'. [ 111.515635][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.616837][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1146'. [ 111.641203][ T7344] netlink: 'syz.3.1144': attribute type 6 has an invalid length. [ 111.691284][ T7348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1149'. [ 111.710892][ T7346] loop1: detected capacity change from 0 to 2048 [ 111.780102][ T7346] EXT4-fs (loop1): failed to initialize system zone (-117) [ 111.821873][ T7346] EXT4-fs (loop1): mount failed [ 111.830657][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 111.937586][ T7362] loop1: detected capacity change from 0 to 2048 [ 112.020341][ T3737] Alternate GPT is invalid, using primary GPT. [ 112.026638][ T3737] loop1: p1 p2 p3 [ 112.044115][ T7362] Alternate GPT is invalid, using primary GPT. [ 112.050412][ T7362] loop1: p1 p2 p3 [ 112.176530][ T7378] netlink: 'syz.1.1154': attribute type 6 has an invalid length. [ 112.188064][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 112.201908][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 112.213268][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 112.713551][ T7439] netlink: 'syz.4.1172': attribute type 10 has an invalid length. [ 112.832563][ T7447] loop4: detected capacity change from 0 to 256 [ 112.849657][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1176'. [ 112.881679][ T7450] loop4: detected capacity change from 0 to 512 [ 112.904233][ T7450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.948387][ T7450] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.987075][ T7457] loop2: detected capacity change from 0 to 512 [ 113.011115][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.048861][ T7457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.062044][ T7461] netlink: 'syz.4.1180': attribute type 6 has an invalid length. [ 113.070180][ T7457] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.089147][ T7463] 9pnet_fd: Insufficient options for proto=fd [ 113.143399][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.250541][ T7480] loop3: detected capacity change from 0 to 2048 [ 113.268644][ T7477] loop2: detected capacity change from 0 to 1764 [ 113.281059][ T7480] Alternate GPT is invalid, using primary GPT. [ 113.287554][ T7480] loop3: p1 p2 p3 [ 113.317249][ T2995] Alternate GPT is invalid, using primary GPT. [ 113.323602][ T2995] loop3: p1 p2 p3 [ 113.379302][ T7490] netlink: 'syz.2.1186': attribute type 6 has an invalid length. [ 113.379319][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 113.388710][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 113.401125][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 113.418737][ T7494] loop4: detected capacity change from 0 to 256 [ 113.434521][ T7498] loop3: detected capacity change from 0 to 512 [ 113.470788][ T7498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.483483][ T7500] loop1: detected capacity change from 0 to 2048 [ 113.488041][ T7498] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.539630][ T2995] Alternate GPT is invalid, using primary GPT. [ 113.545957][ T2995] loop1: p1 p2 p3 [ 113.557443][ T2995] Alternate GPT is invalid, using primary GPT. [ 113.563786][ T2995] loop1: p1 p2 p3 [ 113.582763][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.655105][ T7500] Alternate GPT is invalid, using primary GPT. [ 113.661427][ T7500] loop1: p1 p2 p3 [ 113.722013][ T7526] __nla_validate_parse: 3 callbacks suppressed [ 113.722029][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 113.724488][ T2995] Alternate GPT is invalid, using primary GPT. [ 113.743414][ T2995] loop1: p1 p2 p3 [ 113.783943][ T7534] loop1: detected capacity change from 0 to 512 [ 113.787198][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 113.804248][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 113.807034][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 113.842650][ T7536] loop2: detected capacity change from 0 to 2048 [ 113.869025][ T7534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.878704][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 113.891590][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 113.891604][ T29] audit: type=1326 audit(1758800525.997:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f91b0c7db2a code=0x7ffc0000 [ 113.894078][ T7534] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.897767][ T29] audit: type=1326 audit(1758800525.997:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91b0c7eacb code=0x7ffc0000 [ 113.954708][ T29] audit: type=1326 audit(1758800525.997:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91b0c7eacb code=0x7ffc0000 [ 113.985078][ T7541] netlink: 'syz.3.1199': attribute type 6 has an invalid length. [ 113.994311][ T3518] Alternate GPT is invalid, using primary GPT. [ 114.000649][ T3518] loop2: p1 p2 p3 [ 114.032970][ T7536] Alternate GPT is invalid, using primary GPT. [ 114.039374][ T7536] loop2: p1 p2 p3 [ 114.044264][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.068070][ T29] audit: type=1326 audit(1758800526.167:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f91b0c7d5ba code=0x7ffc0000 [ 114.091517][ T29] audit: type=1326 audit(1758800526.167:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f91b0c7e447 code=0x7ffc0000 [ 114.115022][ T29] audit: type=1326 audit(1758800526.167:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f91b0c7d5ba code=0x7ffc0000 [ 114.138417][ T29] audit: type=1326 audit(1758800526.167:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f91b0c7e447 code=0x7ffc0000 [ 114.161842][ T29] audit: type=1326 audit(1758800526.167:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f91b0c7d5ba code=0x7ffc0000 [ 114.185406][ T29] audit: type=1326 audit(1758800526.167:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f91b0c7e447 code=0x7ffc0000 [ 114.208796][ T29] audit: type=1326 audit(1758800526.167:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.2.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f91b0c7d5ba code=0x7ffc0000 [ 114.259621][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1202'. [ 114.292149][ T7548] siw: device registration error -23 [ 114.300886][ T7548] loop2: detected capacity change from 0 to 512 [ 114.310727][ T7548] EXT4-fs (loop2): too many log groups per flexible block group [ 114.318600][ T7548] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 114.335681][ T7548] EXT4-fs (loop2): mount failed [ 114.344952][ T7561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.357285][ T7561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.371915][ T7566] loop1: detected capacity change from 0 to 256 [ 114.453576][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 114.550564][ T7590] loop3: detected capacity change from 0 to 2048 [ 114.604811][ T7590] EXT4-fs (loop3): failed to initialize system zone (-117) [ 114.610521][ T7592] loop1: detected capacity change from 0 to 2048 [ 114.612507][ T7590] EXT4-fs (loop3): mount failed [ 114.643637][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1215'. [ 114.666280][ T7592] EXT4-fs (loop1): failed to initialize system zone (-117) [ 114.689559][ T7592] EXT4-fs (loop1): mount failed [ 114.747788][ T7606] siw: device registration error -23 [ 114.771552][ T7610] loop2: detected capacity change from 0 to 256 [ 114.773681][ T7609] loop1: detected capacity change from 0 to 512 [ 114.780944][ T7606] loop3: detected capacity change from 0 to 512 [ 114.791414][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 114.799476][ T7609] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.823254][ T7609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.839603][ T7606] EXT4-fs (loop3): too many log groups per flexible block group [ 114.847280][ T7606] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 114.855922][ T7606] EXT4-fs (loop3): mount failed [ 114.879242][ T7609] EXT4-fs (loop1): 1 truncate cleaned up [ 114.885283][ T7609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.927796][ T7622] netlink: 'syz.3.1224': attribute type 6 has an invalid length. [ 115.104463][ T7641] 9pnet_fd: Insufficient options for proto=fd [ 115.262954][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 115.295894][ T7652] loop2: detected capacity change from 0 to 2048 [ 115.381190][ T7652] EXT4-fs (loop2): failed to initialize system zone (-117) [ 115.398966][ T7652] EXT4-fs (loop2): mount failed [ 115.451691][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 115.546546][ T7665] loop3: detected capacity change from 0 to 512 [ 115.655747][ T7665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.678426][ T7665] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.703871][ T7669] loop4: detected capacity change from 0 to 256 [ 115.732963][ T7670] netlink: 'syz.2.1233': attribute type 10 has an invalid length. [ 115.780010][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.810210][ T7679] loop4: detected capacity change from 0 to 512 [ 115.861798][ T7679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.880995][ T7679] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.952138][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.994286][ T7677] 9pnet_fd: Insufficient options for proto=fd [ 116.252434][ T7694] netlink: 'syz.4.1243': attribute type 6 has an invalid length. [ 116.497957][ T7713] loop1: detected capacity change from 0 to 2048 [ 116.526581][ T7713] EXT4-fs (loop1): failed to initialize system zone (-117) [ 116.539180][ T7713] EXT4-fs (loop1): mount failed [ 116.618405][ T7724] loop1: detected capacity change from 0 to 256 [ 116.711655][ T7731] loop1: detected capacity change from 0 to 2048 [ 116.770273][ T7731] Alternate GPT is invalid, using primary GPT. [ 116.776537][ T7731] loop1: p1 p2 p3 [ 116.780275][ T7731] loop1: partition table partially beyond EOD, truncated [ 116.962547][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a75b800: rx timeout, send abort [ 116.970907][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a75b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.995415][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.037958][ T7734] loop3: detected capacity change from 0 to 512 [ 117.062803][ T7734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.085624][ T7734] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.143000][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.158476][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 117.214985][ T7748] netlink: 'syz.3.1255': attribute type 10 has an invalid length. [ 117.335533][ T7760] loop1: detected capacity change from 0 to 256 [ 117.336527][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 117.370725][ T7763] loop3: detected capacity change from 0 to 2048 [ 117.400298][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1262'. [ 117.432623][ T7761] netlink: 'syz.0.1260': attribute type 10 has an invalid length. [ 117.441010][ T7763] EXT4-fs (loop3): failed to initialize system zone (-117) [ 117.459201][ T7763] EXT4-fs (loop3): mount failed [ 117.558394][ T7779] loop3: detected capacity change from 0 to 512 [ 117.587519][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.604415][ T7779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.630653][ T7779] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.644958][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.704072][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.714649][ T7773] loop4: detected capacity change from 0 to 2048 [ 117.763979][ T7788] loop3: detected capacity change from 0 to 512 [ 117.809613][ T7788] EXT4-fs (loop3): too many log groups per flexible block group [ 117.817365][ T7788] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 117.838953][ T7788] EXT4-fs (loop3): mount failed [ 117.861053][ T3737] loop4: p2 p3 p7 [ 117.923178][ T7773] loop4: p2 p3 p7 [ 118.015341][ T2995] loop4: p2 p3 p7 [ 118.531614][ T7797] loop3: detected capacity change from 0 to 256 [ 118.595366][ T7799] loop3: detected capacity change from 0 to 256 [ 118.810615][ T7810] __nla_validate_parse: 2 callbacks suppressed [ 118.810703][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 119.002189][ T7826] loop4: detected capacity change from 0 to 512 [ 119.038002][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.054743][ T7826] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.072010][ T7826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.072078][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.090339][ T7826] EXT4-fs (loop4): 1 truncate cleaned up [ 119.117027][ T7826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.242757][ T7828] loop1: detected capacity change from 0 to 2048 [ 119.282445][ T7835] 9pnet_fd: Insufficient options for proto=fd [ 119.304274][ T3737] loop1: p2 p3 p7 [ 119.340676][ T7828] loop1: p2 p3 p7 [ 119.779512][ T7840] siw: device registration error -23 [ 119.813090][ T7840] loop3: detected capacity change from 0 to 512 [ 119.854430][ T7840] EXT4-fs (loop3): too many log groups per flexible block group [ 119.862243][ T7840] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 119.872076][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.922404][ T7840] EXT4-fs (loop3): mount failed [ 120.003196][ T7855] loop4: detected capacity change from 0 to 256 [ 120.064117][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1297'. [ 120.077885][ T7862] loop2: detected capacity change from 0 to 256 [ 120.141345][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1300'. [ 120.156526][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 120.213734][ T7872] loop1: detected capacity change from 0 to 256 [ 120.240663][ T7874] loop2: detected capacity change from 0 to 512 [ 120.242901][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 120.260282][ T7869] netlink: 'syz.0.1310': attribute type 10 has an invalid length. [ 120.309589][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.312786][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 120.312851][ T29] audit: type=1326 audit(1758800532.417:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.335906][ T7874] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.387051][ T7888] loop1: detected capacity change from 0 to 512 [ 120.391691][ T7892] loop4: detected capacity change from 0 to 256 [ 120.430740][ T7888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.459784][ T29] audit: type=1326 audit(1758800532.467:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.483240][ T29] audit: type=1326 audit(1758800532.467:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.506642][ T29] audit: type=1326 audit(1758800532.467:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.530101][ T29] audit: type=1326 audit(1758800532.467:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.553554][ T29] audit: type=1326 audit(1758800532.467:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.562558][ T7888] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.576904][ T29] audit: type=1326 audit(1758800532.467:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.610704][ T29] audit: type=1326 audit(1758800532.467:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.616974][ T7895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.634203][ T29] audit: type=1326 audit(1758800532.467:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.634268][ T29] audit: type=1326 audit(1758800532.467:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c35e1eec9 code=0x7ffc0000 [ 120.704763][ T7895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.722091][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.790059][ T7901] loop4: detected capacity change from 0 to 2048 [ 120.814289][ T7895] loop3: detected capacity change from 0 to 2048 [ 120.821150][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.865381][ T3737] Alternate GPT is invalid, using primary GPT. [ 120.871772][ T3737] loop4: p1 p2 p3 [ 120.877349][ T7905] loop1: detected capacity change from 0 to 256 [ 120.887637][ T3549] loop3: p2 p3 p7 [ 120.902378][ T7901] Alternate GPT is invalid, using primary GPT. [ 120.908703][ T7901] loop4: p1 p2 p3 [ 120.915321][ T7895] loop3: p2 p3 p7 [ 120.916704][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1315'. [ 121.032166][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 121.036776][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 121.060308][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 121.061499][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 121.138352][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 121.138492][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 121.162541][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 121.173706][ T7917] loop2: detected capacity change from 0 to 2048 [ 121.225690][ T7920] netlink: 'syz.1.1322': attribute type 10 has an invalid length. [ 121.260221][ T3637] Alternate GPT is invalid, using primary GPT. [ 121.266495][ T3637] loop2: p1 p2 p3 [ 121.270314][ T3637] loop2: partition table partially beyond EOD, truncated [ 121.304971][ T7917] Alternate GPT is invalid, using primary GPT. [ 121.311402][ T7917] loop2: p1 p2 p3 [ 121.315113][ T7917] loop2: partition table partially beyond EOD, truncated [ 121.364493][ T7927] loop4: detected capacity change from 0 to 512 [ 121.419333][ T7927] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.471894][ T7927] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.482229][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1328'. [ 121.520215][ T7927] EXT4-fs (loop4): 1 truncate cleaned up [ 121.536339][ T7927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.656851][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 121.720021][ T7942] 9pnet_fd: Insufficient options for proto=fd [ 121.752632][ T7943] loop3: detected capacity change from 0 to 256 [ 122.243872][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.267978][ T7958] loop1: detected capacity change from 0 to 2048 [ 122.285461][ T7955] netlink: 'syz.3.1336': attribute type 10 has an invalid length. [ 122.373875][ T7958] EXT4-fs (loop1): failed to initialize system zone (-117) [ 122.380388][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 122.389256][ T7958] EXT4-fs (loop1): mount failed [ 122.404539][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.481217][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'. [ 122.516345][ T7980] loop2: detected capacity change from 0 to 512 [ 122.530894][ T7980] EXT4-fs (loop2): too many log groups per flexible block group [ 122.538625][ T7980] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 122.540692][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.554602][ T7980] EXT4-fs (loop2): mount failed [ 122.664057][ T7965] loop3: detected capacity change from 0 to 2048 [ 122.689809][ T7991] netlink: 'syz.4.1350': attribute type 6 has an invalid length. [ 122.763666][ T7992] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 122.776709][ T7996] loop2: detected capacity change from 0 to 512 [ 122.793983][ T7965] loop3: p2 p3 p7 [ 122.832331][ T7996] EXT4-fs (loop2): too many log groups per flexible block group [ 122.840201][ T7996] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 122.873912][ T7996] EXT4-fs (loop2): mount failed [ 123.066328][ T8021] netlink: 'syz.2.1356': attribute type 10 has an invalid length. [ 123.171238][ T8034] netlink: 'syz.4.1364': attribute type 10 has an invalid length. [ 123.234955][ T8041] loop1: detected capacity change from 0 to 512 [ 123.251158][ T8038] loop2: detected capacity change from 0 to 2048 [ 123.270372][ T8042] loop4: detected capacity change from 0 to 512 [ 123.300067][ T3737] Alternate GPT is invalid, using primary GPT. [ 123.306278][ T3737] loop2: p1 p2 p3 [ 123.319919][ T8042] EXT4-fs (loop4): too many log groups per flexible block group [ 123.327628][ T8042] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 123.334383][ T8041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.334443][ T8041] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.399609][ T8042] EXT4-fs (loop4): mount failed [ 123.406132][ T8038] Alternate GPT is invalid, using primary GPT. [ 123.412488][ T8038] loop2: p1 p2 p3 [ 123.503425][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 123.503627][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 123.514604][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 123.602212][ T8052] loop3: detected capacity change from 0 to 2048 [ 123.641830][ T8062] loop4: detected capacity change from 0 to 2048 [ 123.684359][ T8052] EXT4-fs (loop3): failed to initialize system zone (-117) [ 123.692131][ T3549] Alternate GPT is invalid, using primary GPT. [ 123.698403][ T3549] loop4: p1 p2 p3 [ 123.702163][ T3549] loop4: partition table partially beyond EOD, truncated [ 123.725879][ T8062] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 123.757850][ T8052] EXT4-fs (loop3): mount failed [ 123.826729][ T2995] Alternate GPT is invalid, using primary GPT. [ 123.833078][ T2995] loop4: p1 p2 p3 [ 123.836892][ T2995] loop4: partition table partially beyond EOD, truncated [ 123.848542][ T8071] loop2: detected capacity change from 0 to 256 [ 124.015987][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.031020][ T8081] loop4: detected capacity change from 0 to 512 [ 124.052388][ T8082] loop2: detected capacity change from 0 to 2048 [ 124.061283][ T8081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.070007][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.079013][ T8081] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.110536][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.120878][ T3549] Alternate GPT is invalid, using primary GPT. [ 124.127185][ T3549] loop2: p1 p2 p3 [ 124.164461][ T8082] Alternate GPT is invalid, using primary GPT. [ 124.167910][ T8077] loop3: detected capacity change from 0 to 2048 [ 124.170761][ T8082] loop2: p1 p2 p3 [ 124.253213][ T3637] loop3: p2 p3 p7 [ 124.306345][ T8091] __nla_validate_parse: 5 callbacks suppressed [ 124.306360][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 124.309866][ T8077] loop3: p2 p3 p7 [ 124.639974][ C0] vcan0: j1939_tp_rxtimer: 0xffff888131775000: rx timeout, send abort [ 124.648201][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888131775000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.679295][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.713945][ T8103] loop2: detected capacity change from 0 to 2048 [ 124.769177][ T8103] EXT4-fs (loop2): failed to initialize system zone (-117) [ 124.776406][ T8103] EXT4-fs (loop2): mount failed [ 124.786627][ T8109] loop1: detected capacity change from 0 to 2048 [ 124.850075][ T3737] Alternate GPT is invalid, using primary GPT. [ 124.850137][ T8111] loop2: detected capacity change from 0 to 512 [ 124.856361][ T3737] loop1: p1 p2 p3 [ 124.866213][ T3737] loop1: partition table partially beyond EOD, truncated [ 124.877641][ T8111] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.905941][ T8109] Alternate GPT is invalid, using primary GPT. [ 124.907180][ T8111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.912237][ T8109] loop1: p1 p2 p3 [ 124.925735][ T8109] loop1: partition table partially beyond EOD, truncated [ 124.954633][ T8111] EXT4-fs (loop2): 1 truncate cleaned up [ 124.963434][ T2995] Alternate GPT is invalid, using primary GPT. [ 124.969770][ T2995] loop1: p1 p2 p3 [ 124.973513][ T2995] loop1: partition table partially beyond EOD, truncated [ 124.985788][ T8111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.998677][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 125.038052][ T8117] loop3: detected capacity change from 0 to 2048 [ 125.131147][ T8127] netlink: 'syz.0.1400': attribute type 6 has an invalid length. [ 125.150093][ T8117] Alternate GPT is invalid, using primary GPT. [ 125.156312][ T8117] loop3: p1 p2 p3 [ 125.167916][ T8129] netlink: 'syz.4.1401': attribute type 6 has an invalid length. [ 125.230932][ T8134] 9pnet_fd: Insufficient options for proto=fd [ 125.443529][ T8139] loop1: detected capacity change from 0 to 512 [ 125.462093][ T8139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.490813][ T2995] ================================================================== [ 125.494289][ T3736] udevd[3736]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 125.498904][ T2995] BUG: KCSAN: data-race in d_delete / lookup_fast [ 125.510565][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.514990][ T2995] [ 125.514997][ T2995] read-write to 0xffff88810704bb40 of 4 bytes by task 3637 on cpu 0: [ 125.526345][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 125.526977][ T2995] d_delete+0x15a/0x180 [ 125.548830][ T2995] d_delete_notify+0x32/0x100 [ 125.553499][ T2995] vfs_unlink+0x30b/0x420 [ 125.553717][ T8139] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.557826][ T2995] do_unlinkat+0x24e/0x480 [ 125.557849][ T2995] __x64_sys_unlink+0x2e/0x40 [ 125.577272][ T2995] x64_sys_call+0x2dc0/0x2ff0 [ 125.581943][ T2995] do_syscall_64+0xd2/0x200 [ 125.586457][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.592351][ T2995] [ 125.594663][ T2995] read to 0xffff88810704bb40 of 4 bytes by task 2995 on cpu 1: [ 125.602190][ T2995] lookup_fast+0xf0/0x320 [ 125.606520][ T2995] walk_component+0x3f/0x220 [ 125.611112][ T2995] path_lookupat+0xfe/0x2a0 [ 125.615615][ T2995] filename_lookup+0x147/0x340 [ 125.620378][ T2995] do_readlinkat+0x7d/0x320 [ 125.624867][ T2995] __x64_sys_readlink+0x47/0x60 [ 125.629724][ T2995] x64_sys_call+0x28da/0x2ff0 [ 125.634395][ T2995] do_syscall_64+0xd2/0x200 [ 125.638901][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.644787][ T2995] [ 125.647098][ T2995] value changed: 0x00300180 -> 0x00004080 [ 125.652802][ T2995] [ 125.655116][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 125.661260][ T2995] CPU: 1 UID: 0 PID: 2995 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.670536][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.680582][ T2995] ================================================================== [ 125.692839][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.722981][ T8148] loop3: detected capacity change from 0 to 512 [ 125.824660][ T8148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.849310][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 125.865741][ T8148] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.887572][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.901101][ T8161] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 127.246941][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812ec15a00: rx timeout, send abort [ 127.255169][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812ec15a00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.277452][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.