last executing test programs: 1m11.311132636s ago: executing program 4 (id=728): r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@delalloc}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 1m10.378001391s ago: executing program 4 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x8000, r4, 'id0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0xa8, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x1, 0x8, 0xfc000000, 0x0, 0x80000001, 0x4000, 0x1}}, {0x6, 0x2, [0xba7]}}]}]}, 0xa8}}, 0x4048000) 1m10.315112872s ago: executing program 4 (id=744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') chdir(&(0x7f0000000040)='./file1\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000001500)='generic_add_lease\x00', r2}, 0x18) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="060043076003008cb89e08f088a8", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 1m10.187991264s ago: executing program 4 (id=746): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@mblk_io_submit}]}, 0x2, 0x51a, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="fbffffff1800000000000000510a8835e2b4504e76193ec3f2d0a5e24535b8f0f82ba597", @ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r2}, 0x10) getitimer(0x2, &(0x7f0000000140)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) sendmsg$tipc(r3, &(0x7f0000000300)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x2}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000200)="41167ef4b167064a17794495626ce2e74838604ac3ea7eb9ec3d68789e37b331a1e000b09b1c79401cc1627da636bee20ba75f5551481b4149c11d7e2e62a4c37c62e104a9c03fdd21872626c21c99df4b6aa689c186d6e396c5831138b7d827fdbdd6556dad092d9e9488fc31bcb984b6858b30f367d35c79c7ef3a5a240ca1f561844478ce204863261260b2b1cc1b7f032936c9cad11c02ae9bafd7aa41489636bcf5cbec24cc7d58f8d567f7785836cb213cd2429ae30d5f7fbb224b6a85119cf9a516f62a034f0cb6", 0xcb}, {&(0x7f0000000500)="413d25aed1436df5ef94c4a6d8fde6bb4f9c0184417364b857b8ed4d3a51f4349200c3b7b6ad5a61e4872fd3338e052bcee3d17bf25dca1e6513009087a0e32bbcb500c3ff92c2ca47b0d025a1a8a278677f3728cea37d483cccf7fffd2309170ae8f3c841abd76dfb30002eb49f58ba54b4b77c0e74191534be4fef81d0998f3b1e19279787f7f87468b21ca97d6a1a19a1b8f94291c8b367f982813d614c48c1ef7c41728e8e046d", 0xa9}, {&(0x7f00000005c0)="4dce760b31d43b7e07680d351a603b892ef673188fcdd80b3fbb845bf92b5f79bd80f41348d4777402845911c0ce1c2c2eff8816b906875cc2ae6eb82f09784661478e57289cb21fba9047d2f7ce94a14e3be31ee8bf3befe9c319be37b432a245b013f08f53e611622f652de6edad93e4b43464c38b4ec9614fc7e7951049396156f5df5fc3b8f42ad5f08f5c78a4152a0739e860568e5e6164fcc26941bf6fc4663a3efc884130e5a7a21bcbe0f854a99f2c1eaa6fad6f4e0cc15f1d7cfb13ac48c4c71c53a30c9ee8f93f5234435fc41bf29adda4f6637205b2a8f26d30d6cede44b35b7c34981c49effd428be1f7b20ce94d0161da19", 0xf8}, {&(0x7f0000000440)="466c5336ebfadc98007963d07df10daa07458a416076f30434ed3c7b9bd459b02977632258075c5918dc0c30ba0fe87bc4381ab285a07f9c8df3933f1dfdc30a30f55694a03d67b7613db6c45eb1305b77e6cd9e0043930447dbde213d4fadf81a2f719583dba85ff0c0dd20c034629239079bda4502f862e00c0e", 0x7b}, {&(0x7f00000006c0)="2cf93649e99b4943bb5e76ad59c20bbf2c3becb31368420fc84d6e38968fd931fd178a736ad724d04d52a36d71f38804775b26c5b94e76a25f0f7c7c22361273529d92af8f87d1", 0x47}, {&(0x7f0000000740)="7bbbabf3eee3b2c518170bc93565a17d57c8e00b5ab9f849ddc7810876edca47c07eae20e9c13d2417bcf3fdb777b10900685b40342ade1436ae12b0829f548451cc398aa9bcc04eb7136453340f03f4a2e86c2c1128c97ba538", 0x5a}, {&(0x7f00000007c0)="00cead59e9a5b9890fed6ee4e7c753a329a1eb9436f533c84106e0ef2ceb365c020b99b62fab8c81aec576722978d8d20289af7950baf836ed4034c9f8e4c6ecceb99e361b175d29a65de3127b6afbc3794fc0efbd99e95f7bb8bd8b65661598c6f70caab484835993a13eb9056615ca49cbd1177c35b684b92de56bf62b5aca8a9d20750aebb5496a79d00f59070b2660b36b3a62a961dd4b1d3692daf85b9326b5509ecf62339942d87f847f5d236b8586f51e070975553dab995b2961442b8c5b80dc1b80d4362fa988a5566c96337d26b3a7160d0d814dbdff8d597b62c11db1f00689a98c25dccdfadf17a6675a21cc722ec0", 0xf5}, {&(0x7f00000008c0)="b67e206b340e77ff7dd4cb10f68c79cbf92209cdda7ba47d11f2698bfddf082c8fc1966151179e21816d5446116b8e4f113104237b0de2e968ec599b180ac4d0872a0ce3c66063d3ae9a8928dc2037ea4497487a533a453ddfd3ee8c7297b2318256865a769dc30220d2679dfbee53f947f77cf6a617ebb5176384ff3df3a1811d9ed133109a065231002c0fce419468b514a5cb39942c9d5e8fe4fc542c2805f66294ff81ee8be7cec0a32c18836a953fde573d2db53d5e8c88955dad27717bc53b0fc96d1aa76626e3fca277c915348179974d6e92a454", 0xd8}, {&(0x7f00000009c0)="b872aa5a06334734fc0f2d906680d0c921190a9511f9a9e3c447a7f105202d2e6c28c0bc0078795faa6f9e77b9ea7c472ddab4688c8b7b973877fd44dca0fa2b93f001e632c34300d04fe2f1914858b3e7391ec9c969b3d952544ecf15d38b6ebda2529fb82e2568b2362c8f813dec3d26d5a3b38191d6e22047199473d6a23d7294093260b3c03c80bf0d30460c8d2dd7312c21c11ff13b6e22c940eca30b679d922fb6950028e7a9e1dd73eec1b119b3aaca7550479410fbabe96c08dce0797dc9c67881a8e9dd9e", 0xc9}], 0x9, &(0x7f0000000d00)="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", 0xfb, 0x20040004}, 0x24008000) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffeeb, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x1, r4, &(0x7f0000000140), 0x40000000000041) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0xd, 0x66300) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={0x0, 0x4, 0x40000, {r5}}, 0x20) 1m9.497930734s ago: executing program 4 (id=759): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1m9.183983659s ago: executing program 4 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write$binfmt_script(r3, 0x0, 0xd9) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000bc0)={0x0, 0x0}) fstat(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000380)="b0f066fdc8e33120039a456ec8484dc69a79e77590e6d1f0cae208a982e8f1d874d5174c130108c8e97577325ea21594", 0x30}, {&(0x7f0000000400)}, {&(0x7f0000000600)="db15d94fbee6ecbdefde0dda0b79aee5f3718ae6ac9ae7a4d5e639eff177b868aaf48605bb469af9bdda0ae38be2ea997c146df8090f6c7f44d831ce7a89cc4e29d11995b29c7ad697a8479bc847ede3eae4a83209fcf407f668add6ff30dfa4c113eae3451a13ca10b572522834a9ee27ef18f2b8fe08eda72776ccb0bf60729ffecfd73ee07c1c58e58988c549ce37f1e1e158b79fee846e297c4567a16ee3ef053bd941ba170a3474daef4999ac1758233a4d0cf70470b06282a4b0fb27986bd1c3f51f1a12d512ace5763540ac1aa07a", 0xd2}, {&(0x7f0000000700)="afc243c81c672ba865e583c279f2cc186944df518fbf1881a93742dbd065ea788319032a93e06ad9a1dc781c6f1ca7ca5f8f53eeba2a7f5f50f14ddc7f14576b6c830bbd8d6bccb99774a39e6d8899652568199db02b831259", 0x59}, {&(0x7f0000000780)="68dafe4e852d415e92e1f102128d1aa7f2244d73fba0565a7e3ec04d52dae1fb01904d5e92dc732a9eee830f7ed040de4355fbd6367a71566d101ff71e59966ce605e978a846236ab35df7c9ea74371a3ec93e722996e4300d84a63e159360aacf04e656221249683bff6c730e2c1e1a00b94c305e14f01242ee031af20dc635d66c2ff324453a833d7a87295e79f6fa16bf6e9465e06058", 0x98}, {&(0x7f0000000580)="a556", 0x2}, {&(0x7f0000000840)="44c7c82ce64d5885249af4e178f8de399d07df66134855775f79c9433d17c99b3ce72a30dda18be579f94a58a60bc6edbd84f224471a7d47c7f9c6b99e197d76dd", 0x41}, {&(0x7f00000008c0)="f4e7639e78af9748d8355f72880d5c6df1e1703b6d7dd2ca817aa6c3a207cd082d6eb6e0372a12f9a240bf25634ae3a7d16d1e19d268f93e151495e2", 0x3c}, {&(0x7f0000000900)="80d19eb6ebaccaaf789b24b5f7d4514f334b4fcb523779fafdbe64c4b1692a0296bdda4f588f5c0296af87038af3ebc12f12a204fe7497e8d9b484f04b8836d24ddfa9dabd61dcfe300a64bd31c365b683d0f9aaf2afd6c7b361f21603c333c34825660a58bf18ee33fa96cfda20bab24a07ef56f0f68fa2bbd24ca0e51208786c9d528788ce3212c206c91247111c06a9a903a53e0ead603dafb0ea", 0x9c}], 0x9, &(0x7f0000000d40)=[@rights={{0x20, 0x1, 0x1, [r4, r5, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}], 0x40, 0x40}}], 0x1, 0xcc810) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@permit_directio}, {@uid_gt={'uid>', r7}}, {@fowner_lt={'fowner<', r8}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}, 0x1, 0x56d, &(0x7f0000000640)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r10, 0x10, 0x800, 0x8001) 1m9.17572189s ago: executing program 32 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write$binfmt_script(r3, 0x0, 0xd9) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000bc0)={0x0, 0x0}) fstat(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000380)="b0f066fdc8e33120039a456ec8484dc69a79e77590e6d1f0cae208a982e8f1d874d5174c130108c8e97577325ea21594", 0x30}, {&(0x7f0000000400)}, {&(0x7f0000000600)="db15d94fbee6ecbdefde0dda0b79aee5f3718ae6ac9ae7a4d5e639eff177b868aaf48605bb469af9bdda0ae38be2ea997c146df8090f6c7f44d831ce7a89cc4e29d11995b29c7ad697a8479bc847ede3eae4a83209fcf407f668add6ff30dfa4c113eae3451a13ca10b572522834a9ee27ef18f2b8fe08eda72776ccb0bf60729ffecfd73ee07c1c58e58988c549ce37f1e1e158b79fee846e297c4567a16ee3ef053bd941ba170a3474daef4999ac1758233a4d0cf70470b06282a4b0fb27986bd1c3f51f1a12d512ace5763540ac1aa07a", 0xd2}, {&(0x7f0000000700)="afc243c81c672ba865e583c279f2cc186944df518fbf1881a93742dbd065ea788319032a93e06ad9a1dc781c6f1ca7ca5f8f53eeba2a7f5f50f14ddc7f14576b6c830bbd8d6bccb99774a39e6d8899652568199db02b831259", 0x59}, {&(0x7f0000000780)="68dafe4e852d415e92e1f102128d1aa7f2244d73fba0565a7e3ec04d52dae1fb01904d5e92dc732a9eee830f7ed040de4355fbd6367a71566d101ff71e59966ce605e978a846236ab35df7c9ea74371a3ec93e722996e4300d84a63e159360aacf04e656221249683bff6c730e2c1e1a00b94c305e14f01242ee031af20dc635d66c2ff324453a833d7a87295e79f6fa16bf6e9465e06058", 0x98}, {&(0x7f0000000580)="a556", 0x2}, {&(0x7f0000000840)="44c7c82ce64d5885249af4e178f8de399d07df66134855775f79c9433d17c99b3ce72a30dda18be579f94a58a60bc6edbd84f224471a7d47c7f9c6b99e197d76dd", 0x41}, {&(0x7f00000008c0)="f4e7639e78af9748d8355f72880d5c6df1e1703b6d7dd2ca817aa6c3a207cd082d6eb6e0372a12f9a240bf25634ae3a7d16d1e19d268f93e151495e2", 0x3c}, {&(0x7f0000000900)="80d19eb6ebaccaaf789b24b5f7d4514f334b4fcb523779fafdbe64c4b1692a0296bdda4f588f5c0296af87038af3ebc12f12a204fe7497e8d9b484f04b8836d24ddfa9dabd61dcfe300a64bd31c365b683d0f9aaf2afd6c7b361f21603c333c34825660a58bf18ee33fa96cfda20bab24a07ef56f0f68fa2bbd24ca0e51208786c9d528788ce3212c206c91247111c06a9a903a53e0ead603dafb0ea", 0x9c}], 0x9, &(0x7f0000000d40)=[@rights={{0x20, 0x1, 0x1, [r4, r5, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}], 0x40, 0x40}}], 0x1, 0xcc810) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@permit_directio}, {@uid_gt={'uid>', r7}}, {@fowner_lt={'fowner<', r8}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}, 0x1, 0x56d, &(0x7f0000000640)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r10, 0x10, 0x800, 0x8001) 2.380548373s ago: executing program 0 (id=1872): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) link(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file1\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0xc00, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x60004ce) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 2.153398146s ago: executing program 5 (id=1874): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80), 0x0, 0x4000000}, 0x0) 2.130969256s ago: executing program 5 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) finit_module(r2, &(0x7f00000000c0)='+.\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) write$tun(r5, 0x0, 0xffe) 1.666479484s ago: executing program 1 (id=1881): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1.641083744s ago: executing program 1 (id=1882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000680)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@i_version, 0x0}, {@noload}, {@usrquota}, {@grpquota}, {@noinit_itable}, {@acl}, {@nolazytime}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$eJzs3EtvVFUcAPD/nbaUCtiKTx7KKBobjZSW58IFEE3YmJhoDC5rWwhSwNCaAGmkGAOJCw2fwMfOxE/gSjdGjQuNW4lbY0JMN6ALc82duVOnvZ2+mHYs/f2SGc6999w55z/3HuY8ZhrAulXOnpKIzRHxa0R0VzdnZihX/7kzNTH019TEUBJp+tqfSSXf7amJoVrW2nmb8o3eUkTpgyR2FIvtHLt0+czg6OjIhXxH33gpT50dPDVyauTcwOHD+/d1HTo4cKApcWZ1ur39vfM7tx1/88YrQyduvPX9l1l90/x4fRxVPZXnDYsuoa2wpxzlme9lnWcWX/U1YUtdOmnPnkutqwyLlt212eXqqLT/7mirbFV1x8vvt7RywIpK0zTtLOyd/iybTOslSfWENL2aAveAJFpdA6A1ah/0t6eykerEUHEcfG+7dTQqI6As7jv5o3qkvTKCLfdUx0YdK1T+QxFxYvLvT7JHzDkPAQDQXF8fjbh+rNrvqD2qR0rxSF2++/O1oZ6IeCAitkbEg3n/5eGISt5HI+KxunM2L2IVoDxru9j/+bkrT9R3V5sm6/+9mK9tzez/Tde8py3f2lKJvyM5eXp0ZG/+nvRGR2e23V986elptW9e+uXjRuWX6/p/2SMrv9YXzOvxR/usCbrhwfHBu4275tbVyht7pRh/Eu1JLRWxLSK2L+P1s/fs9HNf7Gx0fEb8WZyF+D9q/OLty6jQLOlnEc9Wr/9kzIo/8vW/pLI+efadvrFLl184Xb8+2X/o4MCBvo0xOrK3r3ZXFP3w07VX82RhGDHP9a81jRVdSMuu/31z3v/TK5c9WWp6vXZs6WVcu3m94Zhmuff/huT1Srq2PntxcHz8Qn/EhmSyuH/gv3MvDnbNyJ/F37t77va/NeKfT/PzdkREdhM/HhFPRMSuvO5PRsRTEbF7nvi/O/b0242GkAvHv7Ky+IeXdP0bJY78GDH3obYz335VKPjDciH+jmh0/fdXUr35nuHB8Y0LxTVfTesTd/0GAgAAwBqwqzJPm5T25BNNm6NU2rMnYtP0DMrY+PMnz797brg6n9sTHaXaTFd33Xxofz43nG1nZw3UbWfH91XmjdM0Tbuy7Wz8PrqltaHDurepQfvP/F78SQtwr1nSOlqjX7QBa9Ls9n9z0Wc2/wsZwOpqwvdogDVK+4f1a9Htf6V+BQe0zFzt/0rEnRZUBVhlc7X/Nwp7jqxKXYDVZfwP69fy278vA8Ba5/Mf1qVF/Uh+GYmtx+fJk7SvTKGNE6WY/68A9ETU9tT6NPO/4G+liObUsK2pkXbNuKalOfNsjGaUFaUF87Qv4Q8xrG6i9P+oRjXRGREL3L3TN9uVWuLySles0gg+b+3/TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfv3wAAAP//C4DT6g==") ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) fcntl$addseals(r1, 0x409, 0x8) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7c}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x51) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.473258867s ago: executing program 1 (id=1884): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80), 0x0, 0x4000000}, 0x0) 1.463627627s ago: executing program 3 (id=1885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) r9 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8=r3, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r6, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r4, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000440), &(0x7f0000000600)=0x0, &(0x7f0000000680)) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="02000000010001000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040004000000000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00\f\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000600", @ANYRES32=r12, @ANYBLOB="300002000000000020f2000000001cfc"], 0x84, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r14, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x8001, 0x10, 0x3, 0x7, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @private=0xa010101, {[@generic={0x88, 0xa, "56b8a54b7bd5b0c7"}, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x0, [{@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010102, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x9}]}, @cipso={0x86, 0xd, 0x1, [{0x5, 0x7, "f865439647"}]}, @ra={0x94, 0x4}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000a40)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x7fffffff, 0x0, {{0x25, 0x4, 0x1, 0x2b, 0x94, 0x65, 0x0, 0x5, 0x4, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x1c, [@local, @private=0xa010100, @local]}, @lsrr={0x83, 0x27, 0xc5, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2, @multicast2, @multicast2, @empty, @rand_addr=0x64010102, @broadcast]}, @lsrr={0x83, 0xb, 0x6, [@multicast1, @multicast1]}, @lsrr={0x83, 0x23, 0xb0, [@loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @private=0xa010100, @loopback]}, @noop, @ssrr={0x89, 0x17, 0x26, [@broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @multicast1, @remote, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000001240)=ANY=[@ANYBLOB="a8010000", @ANYRES8, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="08000300030000001400020073797a5f74756e000000000000000000140002007866726d300000000000000000000000080003000000000008000100", @ANYRESDEC=r4, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="da1101800800010000e7c400bb34643fb08eebc611bdf18a4fa4e54409d20b1666662805a3de6f17638131c78713044731eea1b36d3f02cc00927f2f4b97b5b80674d9ffe68090d79d8a4ce33f708933f630d41808c2fb31e6ccd15c", @ANYRES32=r7, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468315f766c616e0000000000000800030004000000300001801400020064756d6d793000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="28000180140002000000000000000000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="08000300000000001c00018008000100", @ANYRES32=r16, @ANYBLOB="08080100", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0800030001000000140002007465616d5f736c6176655f31000000000800030001000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) r20 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x10}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r20}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 1.27815052s ago: executing program 1 (id=1886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="19001000", @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25050000000800110001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x4}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000003e00002c0012800b828005001900000000a3d12a4fb9375f8b000800140000000000cd48608fd90db13b664a728934cc9de562bf8508b6720d91201468fa3ca6310299c5a940338b6ccd8b4f39963a1b2f1e16b56cae39350e7e20693354793c3c039ff4cd35001179fb4c2bc7563e0b5a7b67da1399f455635ceaa8dcfc44e9c544d0e5a64a2b17affe4c7c5265ac54d359bf6103e3d2d52472acf34c24bb7a525b50ab8ae84a9837023ca6465f09"], 0x4c}}, 0x0) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000002c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x3f, 0x1}, 0x3, 0x65, 0x0, 0x0, 0xffff, 0x10, 0x0, 0x0, 0xffffffe1, 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f0000000040)) 1.26614566s ago: executing program 5 (id=1887): io_setup(0x8, &(0x7f0000004200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket(0x9, 0x3, 0x7) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 1.190935151s ago: executing program 0 (id=1888): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd']) (fail_nth: 1) 1.190261211s ago: executing program 3 (id=1889): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r0, 0x0, 0x478) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 1.088350272s ago: executing program 0 (id=1890): unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) 1.087511403s ago: executing program 1 (id=1891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0706000004000000002bead8179baf00"/30, @ANYRES32, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r4, 0x2007ffc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r1, r9, 0x38, 0x2030, 0x4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.066094753s ago: executing program 0 (id=1892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) finit_module(r2, &(0x7f00000000c0)='+.\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) write$tun(r5, &(0x7f0000000380)=ANY=[], 0xffe) 959.559175ms ago: executing program 5 (id=1893): prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000e3ffff1712000019cab35e52aa0285e832e0a3ae54eaf6e93a2b2b1b2c684dc0f95978d9db356c5923adb5fe39e39a3937dfe0bab9724f37bb0680d4257ccc9acca3ae7d64460ac37074ded9597da391576357aac9b2f17e203f1625dffab6314f663e55459006339a2d5da58c745691dd43d046f4bb", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000760000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") shmget$private(0x0, 0x2000, 0xc0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x3000010, &(0x7f0000000200)={[], [{@fsname={'fsname', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, 'block_validity'}}, {@appraise}, {@hash}, {@fsname={'fsname', 0x3d, '\\\x8f.%'}}, {@dont_hash}]}, 0x1e, 0x521, &(0x7f0000000e00)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000006c0)={0x5, 0x2, 0x1, 0x4}) fspick(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', '', [], 0xa, "dadcc78ff558dfc2891aa028246153eb911586c4ebc0cfe04938bd1daf332dcec41224ef5e5083790184f113e76ccbaa9cec52859a84c7fbb007a3284cfd7790d31a0ae3bbdfa8b98c4993e1b84f5d2a826432a161f123a9ca95c371dcacf71a3a52f0928c8bbd8800000000"}, 0x70) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="00000000f42228169cf2a3850000000000000000", @ANYRES32], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0x1, &(0x7f0000000580)="00328c8810fb77938a"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYBLOB="00fe7d1830daa688de001d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x4890) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]}) unshare(0x2040400) 860.137546ms ago: executing program 3 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a01010100"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 842.081467ms ago: executing program 2 (id=1895): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003440)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = inotify_init1(0x80800) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xda0) inotify_rm_watch(r3, r4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x10ab}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000040)=""/122, 0x7a}], 0xb, 0x0, 0x0, 0xb00}, 0x40d60b70}, {{&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000000bc0)=""/235, 0xeb}], 0x3, &(0x7f0000001fc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/143, 0x8f}], 0x1, &(0x7f0000000cc0)=""/251, 0xfb}, 0x4}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000e40)=""/127, 0x7f}, {&(0x7f0000000ec0)=""/186, 0xba}, {&(0x7f0000000f80)=""/26, 0x1a}, {&(0x7f0000002fc0)=""/232, 0xe8}, {&(0x7f00000030c0)=""/50, 0x32}, {&(0x7f0000003100)=""/45, 0x2d}, {&(0x7f0000003140)=""/99, 0x63}], 0x7, &(0x7f0000003800)=""/4096, 0x1000}, 0x9}], 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000200)='btrfs_set_extent_bit\x00'}, 0x18) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) write(r6, 0x0, 0x0) r9 = syz_io_uring_setup(0x208c, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000003340)=0x0) r12 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r12, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0, 0xd64f3a65823df9db}) io_uring_enter(r9, 0x27e2, 0x0, 0x40, 0x0, 0x0) r13 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='5fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB=',k']) 815.366957ms ago: executing program 3 (id=1896): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80), 0x0, 0x4000000}, 0x0) 793.389747ms ago: executing program 3 (id=1897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) 719.622438ms ago: executing program 2 (id=1898): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r3, 0x0) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000300)=r5}, 0x20) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000001f) close_range(r8, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) open_by_handle_at(r9, &(0x7f00000002c0)=@isofs_parent={0x14, 0x2, {0x24, 0x0, 0x50, 0x4, 0x8}}, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_adjtime(0x0, &(0x7f0000000680)={0x7, 0x5, 0xfffffffffffffffa, 0x1ff, 0x1, 0x7fff, 0xea, 0x8000000000000001, 0x4, 0x10, 0x6, 0x1, 0x4, 0x401, 0xffffffffffffffff, 0x1000, 0x4, 0x8507, 0x100000001, 0xba6, 0x5, 0x546bb5d4, 0x6, 0x0, 0xaf, 0x400}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x86) fchdir(r12) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000200)={'pim6reg\x00', 0x200}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r10}, 0x10) r13 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c7266642e6f3d9e90c925181de8bdbff7be1c958977d6b6bac7d6feb0fa8cf48c7bb8dd552d18f4a6e2cee983d50e51643376dc29b607432af2c1bfb036d2151eb0633cafe0aa89f54e8dca27eb0d02887976c829bc19f55299302675707422a9b1e89b07fff8a5", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB=',k']) 718.629638ms ago: executing program 3 (id=1899): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xe, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x8}, 0x1, 0x0, 0x0, 0x20004191}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c060}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000000140119a2320a0521e5662cd3be4c8b3883a52d6c6abba283dc7a722c9663badc554ecb75f8b15080b5d2c7afd7ef8e800d011b56e511d80cdd1b22956c7a7392402e9bdaa539c7df5582cc1e4850118d1e2d5e", @ANYRESHEX=r8, @ANYRES64=r9, @ANYBLOB="5dcb77ee13dffc727c5fa9c01062ffdc4555353cad342309ff138f0856f0702f53c46015dca98dd0ed67041082383f35ebd80e2db20a85188e47b98257f185b25a6e97ff443f842ed489d8303bfd841d7ba23875746e5ea23889513ec487fbb553504b94a55f2d929a008c233fc0ded22b7378a810092b14c92b13f5a649cc3a0151c73d984d6760d1cf259429b8a189a8817534d2563073fc917fb65a506e59721149add10fa64ba42fc8c75174ec6079cdf454bebb92a0c5e7f94c534d2095e31405b2f45b05100e229d9fe2aafad441b23d673c6b136f212ba081bc036befdab3dd64e0f87e"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r11}, 0x10) 676.419479ms ago: executing program 2 (id=1900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 676.030629ms ago: executing program 2 (id=1901): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000dd00090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a60000000060a0b040000000000000000020000000900010073797a3000000000340004803000018008000100636d7000240002801000038009000100e7a6f6264f000000080001401000000a08000240000000010900020073797a32"], 0x88}}, 0x0) tkill(0x0, 0x14) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") 558.402281ms ago: executing program 2 (id=1902): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) io_submit(0x0, 0x0, 0x0) 557.700151ms ago: executing program 1 (id=1903): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000840) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) 528.939331ms ago: executing program 2 (id=1904): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000840) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) 196.103797ms ago: executing program 0 (id=1905): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r0, 0x0, 0x478) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 36.882009ms ago: executing program 0 (id=1906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000004c0)) dup3(r1, r0, 0x80000) r2 = socket(0xa, 0x800, 0x1e) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f0000000200)=""/236, 0xec) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}]}, 0x2c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x20000000013f, 0x1], 0x2, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000020000000000000000000000000000000000000000000ab00000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendto$inet6(r2, &(0x7f0000000240)="cfcd72dd48f2a659730d4e98df7daad3f169df460ba5a0d3ead238144ef6c90d9fb5712e0f896c368cb69b3e57a543d3a0d0b28eddd0b4254fe9763dc890b2574241fb4d689867efaa1b16c94f297fbb56508e6fdea703944bd0740ed72a0faf8370655c85007159148c8971385200401debbbd871c303d6e98f6ad75641f8cdcda4607a3df5c84083ce5849fbacb09747f2b439a52d28107eb296b7ea98f88efa2d66e8dc0191acfad9d0fc5ab54a3f0fd56a9051b242741e35be9c8aeb172527a70be8c7af701eddf2bdc40c44d0", 0xcf, 0x8080, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf4, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd2, 0x6, "fdd7115379926e4de5e361729422ff3bbf65a6347bb0af0123615cbefd713d6981e2d4720a86bdbd37e46f316c6447c134118c91fb1ee72ff12721429a95f8e89b441c1ebdea06d55ec0963357b9273c9eba3349869e79557aa2d4b333d7c48119ef60597a82d3ebe5b8529e80fddbf0cd2d5784629160fdf1ea664edf085b0b04252d2cc5679969c03eae8a492f0c0ca62d819686e1eb51e5d4595c205983ba4c7216f9beaf85d0f1956be838828380af4b5f9cf996c5dbed2713594642daa66153752d378c25ff4f0f8fb52624"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x4) 448.2µs ago: executing program 5 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e230000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 0s ago: executing program 5 (id=1908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) 0s ago: executing program 0 (id=1910): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) gettid() (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =1326 audit(1754039221.153:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cff9e9a9 code=0x7ffc0000 [ 124.673029][ T29] audit: type=1326 audit(1754039221.153:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01cff9e9a9 code=0x7ffc0000 [ 124.924648][ T7235] veth1_macvtap: left promiscuous mode [ 124.930229][ T7235] macsec0: entered allmulticast mode [ 124.965219][ T7235] veth1_macvtap: entered promiscuous mode [ 124.971027][ T7235] veth1_macvtap: entered allmulticast mode [ 124.977361][ T7235] macsec0: entered promiscuous mode [ 125.432615][ T7268] loop0: detected capacity change from 0 to 128 [ 125.448048][ T7266] loop5: detected capacity change from 0 to 8192 [ 125.492124][ T7266] tipc: Enabled bearer , priority 0 [ 125.507879][ T7266] syzkaller0: entered promiscuous mode [ 125.513521][ T7266] syzkaller0: entered allmulticast mode [ 125.541130][ T7266] tipc: Resetting bearer [ 125.551996][ T7271] IPVS: Error joining to the multicast group [ 125.950676][ T377] kworker/u8:5: attempt to access beyond end of device [ 125.950676][ T377] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 125.978414][ T7265] tipc: Resetting bearer [ 125.996501][ T7265] tipc: Disabling bearer [ 126.002584][ T377] kworker/u8:5: attempt to access beyond end of device [ 126.002584][ T377] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 126.061978][ T7292] bridge0: entered promiscuous mode [ 126.068253][ T7292] bridge0: port 1(macsec1) entered blocking state [ 126.074762][ T7292] bridge0: port 1(macsec1) entered disabled state [ 126.082508][ T7292] macsec1: entered allmulticast mode [ 126.087911][ T7292] bridge0: entered allmulticast mode [ 126.103993][ T7292] macsec1: left allmulticast mode [ 126.109118][ T7292] bridge0: left allmulticast mode [ 126.125786][ T7292] bridge0: left promiscuous mode [ 126.171679][ T7301] loop3: detected capacity change from 0 to 1024 [ 126.178975][ T7301] EXT4-fs: Ignoring removed orlov option [ 127.047754][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 127.910649][ T7392] lo speed is unknown, defaulting to 1000 [ 128.137708][ T7404] FAULT_INJECTION: forcing a failure. [ 128.137708][ T7404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.151196][ T7404] CPU: 1 UID: 0 PID: 7404 Comm: syz.1.1311 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 128.151226][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.151238][ T7404] Call Trace: [ 128.151243][ T7404] [ 128.151250][ T7404] __dump_stack+0x1d/0x30 [ 128.151352][ T7404] dump_stack_lvl+0xe8/0x140 [ 128.151422][ T7404] dump_stack+0x15/0x1b [ 128.151443][ T7404] should_fail_ex+0x265/0x280 [ 128.151479][ T7404] should_fail+0xb/0x20 [ 128.151581][ T7404] should_fail_usercopy+0x1a/0x20 [ 128.151621][ T7404] _copy_from_iter+0xcf/0xe40 [ 128.151675][ T7404] ? __build_skb_around+0x1a0/0x200 [ 128.151761][ T7404] ? __alloc_skb+0x223/0x320 [ 128.151798][ T7404] netlink_sendmsg+0x471/0x6b0 [ 128.151826][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.151850][ T7404] __sock_sendmsg+0x142/0x180 [ 128.151936][ T7404] ____sys_sendmsg+0x31e/0x4e0 [ 128.151958][ T7404] ___sys_sendmsg+0x17b/0x1d0 [ 128.151992][ T7404] __x64_sys_sendmsg+0xd4/0x160 [ 128.152021][ T7404] x64_sys_call+0x2999/0x2fb0 [ 128.152098][ T7404] do_syscall_64+0xd2/0x200 [ 128.152121][ T7404] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.152148][ T7404] ? clear_bhb_loop+0x40/0x90 [ 128.152224][ T7404] ? clear_bhb_loop+0x40/0x90 [ 128.152245][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.152265][ T7404] RIP: 0033:0x7fd1e2e6e9a9 [ 128.152282][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.152306][ T7404] RSP: 002b:00007fd1e14d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.152373][ T7404] RAX: ffffffffffffffda RBX: 00007fd1e3095fa0 RCX: 00007fd1e2e6e9a9 [ 128.152386][ T7404] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 128.152399][ T7404] RBP: 00007fd1e14d7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.152413][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.152429][ T7404] R13: 0000000000000000 R14: 00007fd1e3095fa0 R15: 00007ffe6f73f6b8 [ 128.152453][ T7404] [ 128.543352][ T7419] loop1: detected capacity change from 0 to 128 [ 128.550699][ T7419] FAT-fs (loop1): invalid media value (0x00) [ 128.556816][ T7419] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 128.566027][ T7419] FAT-fs (loop1): Can't find a valid FAT filesystem [ 128.870843][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 128.870860][ T29] audit: type=1326 audit(1754039225.398:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 128.937718][ T29] audit: type=1326 audit(1754039225.438:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 128.961482][ T29] audit: type=1326 audit(1754039225.438:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 128.985036][ T29] audit: type=1326 audit(1754039225.438:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 129.008495][ T29] audit: type=1326 audit(1754039225.438:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 129.032314][ T29] audit: type=1326 audit(1754039225.438:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 129.055878][ T29] audit: type=1326 audit(1754039225.438:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 129.079424][ T29] audit: type=1326 audit(1754039225.438:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 129.102932][ T29] audit: type=1326 audit(1754039225.438:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 129.126396][ T29] audit: type=1326 audit(1754039225.438:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 129.153074][ T7446] loop2: detected capacity change from 0 to 128 [ 129.213064][ T7448] loop3: detected capacity change from 0 to 128 [ 129.274744][ T7451] IPVS: Error joining to the multicast group [ 129.300426][ T7453] loop0: detected capacity change from 0 to 512 [ 129.310155][ T7454] IPVS: Error joining to the multicast group [ 129.331506][ T7453] EXT4-fs: dax option not supported [ 129.515043][ T7461] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.586746][ T7461] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.659957][ T7461] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.676982][ T12] kworker/u8:0: attempt to access beyond end of device [ 129.676982][ T12] loop3: rw=1, sector=337, nr_sectors = 704 limit=128 [ 129.701156][ T12] kworker/u8:0: attempt to access beyond end of device [ 129.701156][ T12] loop3: rw=1, sector=329, nr_sectors = 8 limit=128 [ 129.722830][ T51] kworker/u8:3: attempt to access beyond end of device [ 129.722830][ T51] loop2: rw=1, sector=233, nr_sectors = 808 limit=128 [ 129.751874][ T7461] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.770582][ T51] kworker/u8:3: attempt to access beyond end of device [ 129.770582][ T51] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 129.817712][ T7461] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.829866][ T7461] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.841631][ T7461] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.853749][ T7461] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.164527][ T7501] loop1: detected capacity change from 0 to 1024 [ 130.184994][ T7501] EXT4-fs: Ignoring removed orlov option [ 130.244244][ T7501] netlink: '¬í': attribute type 21 has an invalid length. [ 130.430679][ T7522] lo speed is unknown, defaulting to 1000 [ 130.493978][ T7527] loop1: detected capacity change from 0 to 128 [ 130.715097][ T7533] IPVS: Error joining to the multicast group [ 131.226011][ T7545] siw: device registration error -23 [ 131.242942][ T7545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1365'. [ 131.345327][ T3337] kworker/u8:6: attempt to access beyond end of device [ 131.345327][ T3337] loop1: rw=1, sector=169, nr_sectors = 824 limit=128 [ 131.372880][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 131.396850][ T7562] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1371'. [ 131.656883][ T7582] lo speed is unknown, defaulting to 1000 [ 131.737726][ T7584] FAULT_INJECTION: forcing a failure. [ 131.737726][ T7584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.750927][ T7584] CPU: 0 UID: 0 PID: 7584 Comm: syz.1.1375 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 131.750957][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.750972][ T7584] Call Trace: [ 131.750980][ T7584] [ 131.750989][ T7584] __dump_stack+0x1d/0x30 [ 131.751009][ T7584] dump_stack_lvl+0xe8/0x140 [ 131.751112][ T7584] dump_stack+0x15/0x1b [ 131.751134][ T7584] should_fail_ex+0x265/0x280 [ 131.751166][ T7584] should_fail+0xb/0x20 [ 131.751195][ T7584] should_fail_usercopy+0x1a/0x20 [ 131.751257][ T7584] _copy_from_user+0x1c/0xb0 [ 131.751298][ T7584] ___sys_sendmsg+0xc1/0x1d0 [ 131.751332][ T7584] __x64_sys_sendmsg+0xd4/0x160 [ 131.751358][ T7584] x64_sys_call+0x2999/0x2fb0 [ 131.751497][ T7584] do_syscall_64+0xd2/0x200 [ 131.751522][ T7584] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.751552][ T7584] ? clear_bhb_loop+0x40/0x90 [ 131.751572][ T7584] ? clear_bhb_loop+0x40/0x90 [ 131.751626][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.751646][ T7584] RIP: 0033:0x7fd1e2e6e9a9 [ 131.751660][ T7584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.751680][ T7584] RSP: 002b:00007fd1e14d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.751724][ T7584] RAX: ffffffffffffffda RBX: 00007fd1e3095fa0 RCX: 00007fd1e2e6e9a9 [ 131.751740][ T7584] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 131.751751][ T7584] RBP: 00007fd1e14d7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.751763][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.751778][ T7584] R13: 0000000000000000 R14: 00007fd1e3095fa0 R15: 00007ffe6f73f6b8 [ 131.751802][ T7584] [ 131.960748][ T7590] siw: device registration error -23 [ 131.968353][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1378'. [ 132.029937][ T7600] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1382'. [ 132.046628][ T7602] loop0: detected capacity change from 0 to 1024 [ 132.054269][ T7602] EXT4-fs: Ignoring removed orlov option [ 132.073144][ T7602] EXT4-fs mount: 12 callbacks suppressed [ 132.073162][ T7602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.176270][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.311972][ T7630] siw: device registration error -23 [ 132.320012][ T7630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1392'. [ 132.363749][ T7633] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1394'. [ 132.435249][ T7642] loop0: detected capacity change from 0 to 1024 [ 132.456766][ T7642] EXT4-fs: Ignoring removed orlov option [ 132.484379][ T7642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.578068][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.615210][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 133.002725][ T7660] siw: device registration error -23 [ 133.017235][ T7660] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1404'. [ 133.224577][ T7673] loop3: detected capacity change from 0 to 764 [ 133.233211][ T7671] loop1: detected capacity change from 0 to 764 [ 133.242202][ T7673] Symlink component flag not implemented [ 133.248346][ T7673] Symlink component flag not implemented (7) [ 133.260930][ T7671] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.291975][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1408'. [ 133.334196][ T7671] SELinux: ebitmap: truncated map [ 133.344858][ T7671] SELinux: failed to load policy [ 133.497620][ T7695] FAULT_INJECTION: forcing a failure. [ 133.497620][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.510912][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.0.1419 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 133.510939][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.510951][ T7695] Call Trace: [ 133.510959][ T7695] [ 133.510967][ T7695] __dump_stack+0x1d/0x30 [ 133.510992][ T7695] dump_stack_lvl+0xe8/0x140 [ 133.511011][ T7695] dump_stack+0x15/0x1b [ 133.511026][ T7695] should_fail_ex+0x265/0x280 [ 133.511074][ T7695] should_fail+0xb/0x20 [ 133.511124][ T7695] should_fail_usercopy+0x1a/0x20 [ 133.511218][ T7695] _copy_from_user+0x1c/0xb0 [ 133.511240][ T7695] ___sys_sendmsg+0xc1/0x1d0 [ 133.511277][ T7695] __x64_sys_sendmsg+0xd4/0x160 [ 133.511306][ T7695] x64_sys_call+0x2999/0x2fb0 [ 133.511418][ T7695] do_syscall_64+0xd2/0x200 [ 133.511441][ T7695] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.511470][ T7695] ? clear_bhb_loop+0x40/0x90 [ 133.511490][ T7695] ? clear_bhb_loop+0x40/0x90 [ 133.511513][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.511553][ T7695] RIP: 0033:0x7fbbab85e9a9 [ 133.511567][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.511590][ T7695] RSP: 002b:00007fbba9ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.511614][ T7695] RAX: ffffffffffffffda RBX: 00007fbbaba85fa0 RCX: 00007fbbab85e9a9 [ 133.511629][ T7695] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 133.511641][ T7695] RBP: 00007fbba9ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.511652][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.511669][ T7695] R13: 0000000000000000 R14: 00007fbbaba85fa0 R15: 00007fff49db4a88 [ 133.511690][ T7695] [ 133.765053][ T7701] loop1: detected capacity change from 0 to 1024 [ 133.906359][ T7701] EXT4-fs: Ignoring removed orlov option [ 133.940990][ T7701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.025523][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.316048][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 134.316066][ T29] audit: type=1400 audit(1754039230.844:8877): avc: denied { read write } for pid=7719 comm="syz.1.1427" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.318031][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.322476][ T29] audit: type=1400 audit(1754039230.844:8878): avc: denied { open } for pid=7719 comm="syz.1.1427" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.383981][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.394928][ T7722] siw: device registration error -23 [ 134.526047][ T29] audit: type=1400 audit(1754039231.054:8879): avc: denied { create } for pid=7719 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.545792][ T29] audit: type=1400 audit(1754039231.054:8880): avc: denied { connect } for pid=7719 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.565353][ T29] audit: type=1400 audit(1754039231.054:8881): avc: denied { ioctl } for pid=7719 comm="syz.1.1427" path="/dev/hidraw0" dev="devtmpfs" ino=1072 ioctlcmd=0x4801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.595049][ T7728] netlink: 'syz.5.1430': attribute type 27 has an invalid length. [ 134.678470][ T7728] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.687955][ T7728] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.696944][ T7728] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.706012][ T7728] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.771104][ T7732] lo speed is unknown, defaulting to 1000 [ 134.804971][ T7734] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 134.806825][ T29] audit: type=1400 audit(1754039231.334:8882): avc: denied { mac_admin } for pid=7733 comm="syz.0.1433" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.820112][ T7734] loop0: detected capacity change from 0 to 512 [ 134.842934][ T29] audit: type=1400 audit(1754039231.344:8883): avc: denied { relabelto } for pid=7733 comm="syz.0.1433" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 134.869226][ T29] audit: type=1400 audit(1754039231.344:8884): avc: denied { associate } for pid=7733 comm="syz.0.1433" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 134.896565][ T29] audit: type=1400 audit(1754039231.364:8885): avc: denied { mounton } for pid=7733 comm="syz.0.1433" path="/316/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 134.923581][ T7734] EXT4-fs (loop0): #clusters per group too big: 393216 [ 134.943041][ T29] audit: type=1400 audit(1754039231.474:8886): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 135.061542][ T7738] loop0: detected capacity change from 0 to 8192 [ 135.073089][ T7740] can: request_module (can-proto-5) failed. [ 135.089392][ T7738] tipc: Enabled bearer , priority 0 [ 135.106769][ T7738] syzkaller0: entered promiscuous mode [ 135.112348][ T7738] syzkaller0: entered allmulticast mode [ 135.146112][ T7732] loop1: detected capacity change from 0 to 128 [ 135.265901][ T7738] tipc: Resetting bearer [ 135.506644][ T7752] lo speed is unknown, defaulting to 1000 [ 135.853042][ T7737] tipc: Resetting bearer [ 135.860873][ T7737] tipc: Disabling bearer [ 135.953169][ T7764] netlink: 'syz.5.1441': attribute type 4 has an invalid length. [ 135.991580][ T7764] netlink: 'syz.5.1441': attribute type 4 has an invalid length. [ 136.046821][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.067901][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.100002][ T7779] loop3: detected capacity change from 0 to 1024 [ 136.107161][ T7779] EXT4-fs: Ignoring removed orlov option [ 136.129119][ T7779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.204590][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.353790][ T7798] loop0: detected capacity change from 0 to 512 [ 136.360806][ T7798] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 136.370234][ T7798] EXT4-fs (loop0): orphan cleanup on readonly fs [ 136.377314][ T7798] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 136.392297][ T7798] EXT4-fs (loop0): Remounting filesystem read-only [ 136.399134][ T7798] EXT4-fs (loop0): 1 truncate cleaned up [ 136.406090][ T7798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.453622][ T7800] lo speed is unknown, defaulting to 1000 [ 136.873393][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.993580][ T7808] loop0: detected capacity change from 0 to 8192 [ 137.033035][ T7808] tipc: Enabled bearer , priority 0 [ 137.042065][ T7808] syzkaller0: entered promiscuous mode [ 137.047634][ T7808] syzkaller0: entered allmulticast mode [ 137.070820][ T7808] tipc: Resetting bearer [ 137.167683][ T7816] lo speed is unknown, defaulting to 1000 [ 137.464588][ T7807] tipc: Resetting bearer [ 137.483644][ T7807] tipc: Disabling bearer [ 137.881296][ T7854] loop1: detected capacity change from 0 to 128 [ 137.994926][ T7859] IPVS: Error joining to the multicast group [ 138.281893][ T7870] loop5: detected capacity change from 0 to 128 [ 138.408450][ T7872] lo speed is unknown, defaulting to 1000 [ 138.539464][ T7876] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 138.547460][ T7876] netlink: 'syz.2.1479': attribute type 4 has an invalid length. [ 138.555366][ T7876] __nla_validate_parse: 6 callbacks suppressed [ 138.555380][ T7876] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1479'. [ 138.608123][ T7877] IPVS: Error joining to the multicast group [ 138.637907][ T51] kworker/u8:3: attempt to access beyond end of device [ 138.637907][ T51] loop1: rw=1, sector=497, nr_sectors = 544 limit=128 [ 138.899850][ T51] kworker/u8:3: attempt to access beyond end of device [ 138.899850][ T51] loop1: rw=1, sector=489, nr_sectors = 8 limit=128 [ 138.935821][ T7880] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1481'. [ 138.960504][ T7876] FAULT_INJECTION: forcing a failure. [ 138.960504][ T7876] name failslab, interval 1, probability 0, space 0, times 0 [ 138.973226][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: syz.2.1479 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 138.973253][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.973265][ T7876] Call Trace: [ 138.973271][ T7876] [ 138.973279][ T7876] __dump_stack+0x1d/0x30 [ 138.973303][ T7876] dump_stack_lvl+0xe8/0x140 [ 138.973368][ T7876] dump_stack+0x15/0x1b [ 138.973397][ T7876] should_fail_ex+0x265/0x280 [ 138.973434][ T7876] should_failslab+0x8c/0xb0 [ 138.973494][ T7876] kmem_cache_alloc_node_noprof+0x57/0x320 [ 138.973524][ T7876] ? __alloc_skb+0x101/0x320 [ 138.973555][ T7876] __alloc_skb+0x101/0x320 [ 138.973653][ T7876] netlink_ack+0xfd/0x500 [ 138.973700][ T7876] netlink_rcv_skb+0x192/0x220 [ 138.973737][ T7876] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.973781][ T7876] rtnetlink_rcv+0x1c/0x30 [ 138.973800][ T7876] netlink_unicast+0x5a8/0x680 [ 138.973852][ T7876] netlink_sendmsg+0x58b/0x6b0 [ 138.973873][ T7876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.973892][ T7876] __sock_sendmsg+0x142/0x180 [ 138.973924][ T7876] sock_write_iter+0x165/0x1b0 [ 138.973952][ T7876] ? __pfx_sock_write_iter+0x10/0x10 [ 138.974043][ T7876] vfs_write+0x4a0/0x8e0 [ 138.974086][ T7876] ksys_write+0xda/0x1a0 [ 138.974127][ T7876] __x64_sys_write+0x40/0x50 [ 138.974239][ T7876] x64_sys_call+0x2cdd/0x2fb0 [ 138.974266][ T7876] do_syscall_64+0xd2/0x200 [ 138.974290][ T7876] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.974320][ T7876] ? clear_bhb_loop+0x40/0x90 [ 138.974395][ T7876] ? clear_bhb_loop+0x40/0x90 [ 138.974422][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.974447][ T7876] RIP: 0033:0x7f01cff9e9a9 [ 138.974461][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.974555][ T7876] RSP: 002b:00007f01ce607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.974578][ T7876] RAX: ffffffffffffffda RBX: 00007f01d01c5fa0 RCX: 00007f01cff9e9a9 [ 138.974590][ T7876] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 138.974601][ T7876] RBP: 00007f01ce607090 R08: 0000000000000000 R09: 0000000000000000 [ 138.974612][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.974633][ T7876] R13: 0000000000000000 R14: 00007f01d01c5fa0 R15: 00007ffd450da8b8 [ 138.974658][ T7876] [ 139.287792][ T7882] loop3: detected capacity change from 0 to 1024 [ 139.335320][ T7882] EXT4-fs: Ignoring removed orlov option [ 139.342463][ T51] kworker/u8:3: attempt to access beyond end of device [ 139.342463][ T51] loop5: rw=1, sector=289, nr_sectors = 232 limit=128 [ 139.373740][ T7882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.536654][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 139.536671][ T29] audit: type=1326 audit(1754039236.061:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.639029][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.655886][ T29] audit: type=1326 audit(1754039236.101:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.679454][ T29] audit: type=1326 audit(1754039236.101:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.703009][ T29] audit: type=1326 audit(1754039236.101:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.726460][ T29] audit: type=1326 audit(1754039236.101:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.728093][ T7903] lo speed is unknown, defaulting to 1000 [ 139.749953][ T29] audit: type=1326 audit(1754039236.101:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.779082][ T29] audit: type=1326 audit(1754039236.101:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.802542][ T29] audit: type=1326 audit(1754039236.101:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.825975][ T29] audit: type=1326 audit(1754039236.101:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.5.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 139.870258][ T7908] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1492'. [ 139.970615][ T7917] loop5: detected capacity change from 0 to 1024 [ 139.983037][ T7917] EXT4-fs: Ignoring removed orlov option [ 140.178585][ T29] audit: type=1326 audit(1754039236.521:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.3.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 140.317312][ T7917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.399882][ T7917] netlink: '¬í': attribute type 21 has an invalid length. [ 140.554209][ T5769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.650371][ T7937] loop1: detected capacity change from 0 to 1024 [ 140.683120][ T7937] EXT4-fs: Ignoring removed orlov option [ 140.698412][ T7939] loop2: detected capacity change from 0 to 128 [ 140.714793][ T7937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.809228][ T7950] IPVS: Error joining to the multicast group [ 140.942622][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.003220][ T7959] Illegal XDP return value 4294967274 on prog (id 1064) dev syz_tun, expect packet loss! [ 141.015413][ T7960] bond0: (slave sit0): Error: Device can not be enslaved while up [ 141.023699][ T7960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65529 sclass=netlink_route_socket pid=7960 comm=syz.0.1507 [ 141.053250][ T12] kworker/u8:0: attempt to access beyond end of device [ 141.053250][ T12] loop2: rw=1, sector=257, nr_sectors = 784 limit=128 [ 141.081397][ T12] kworker/u8:0: attempt to access beyond end of device [ 141.081397][ T12] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 141.172637][ T7975] loop2: detected capacity change from 0 to 512 [ 141.193087][ T7978] loop0: detected capacity change from 0 to 1024 [ 141.201899][ T7978] EXT4-fs: Ignoring removed orlov option [ 141.211242][ T7975] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1515: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 141.230379][ T7975] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1515: Bad quota inode: 3, type: 0 [ 141.245900][ T7978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.269547][ T7975] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 141.287064][ T7978] netlink: '¬í': attribute type 21 has an invalid length. [ 141.294778][ T7975] EXT4-fs (loop2): mount failed [ 141.335991][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.457701][ T7997] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1520'. [ 141.467389][ T7997] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1520'. [ 141.499565][ T8000] siw: device registration error -23 [ 141.507558][ T8000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1522'. [ 141.653021][ T8018] loop5: detected capacity change from 0 to 1024 [ 141.665874][ T8018] EXT4-fs: Ignoring removed orlov option [ 141.681904][ T8018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.708637][ T8018] netlink: '¬í': attribute type 21 has an invalid length. [ 141.736289][ T5769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.823524][ T8034] syz.5.1534 uses obsolete (PF_INET,SOCK_PACKET) [ 141.840269][ T8036] siw: device registration error -23 [ 141.848751][ T8036] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1535'. [ 141.876423][ T8038] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1536'. [ 141.920886][ T8040] FAULT_INJECTION: forcing a failure. [ 141.920886][ T8040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.934103][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.5.1537 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 141.934230][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.934246][ T8040] Call Trace: [ 141.934254][ T8040] [ 141.934263][ T8040] __dump_stack+0x1d/0x30 [ 141.934321][ T8040] dump_stack_lvl+0xe8/0x140 [ 141.934347][ T8040] dump_stack+0x15/0x1b [ 141.934368][ T8040] should_fail_ex+0x265/0x280 [ 141.934410][ T8040] should_fail+0xb/0x20 [ 141.934444][ T8040] should_fail_usercopy+0x1a/0x20 [ 141.934625][ T8040] _copy_from_iter+0xcf/0xe40 [ 141.934668][ T8040] ? mntput+0x4b/0x80 [ 141.934697][ T8040] ? terminate_walk+0x27f/0x2a0 [ 141.934723][ T8040] tun_get_user+0x144/0x2500 [ 141.934818][ T8040] ? ref_tracker_alloc+0x1f2/0x2f0 [ 141.934861][ T8040] ? selinux_file_permission+0x1e4/0x320 [ 141.934892][ T8040] tun_chr_write_iter+0x15e/0x210 [ 141.934927][ T8040] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 141.935034][ T8040] vfs_write+0x4a0/0x8e0 [ 141.935081][ T8040] ksys_write+0xda/0x1a0 [ 141.935111][ T8040] __x64_sys_write+0x40/0x50 [ 141.935220][ T8040] x64_sys_call+0x2cdd/0x2fb0 [ 141.935273][ T8040] do_syscall_64+0xd2/0x200 [ 141.935424][ T8040] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.935464][ T8040] ? clear_bhb_loop+0x40/0x90 [ 141.935531][ T8040] ? clear_bhb_loop+0x40/0x90 [ 141.935555][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.935575][ T8040] RIP: 0033:0x7f4efd0ce9a9 [ 141.935590][ T8040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.935609][ T8040] RSP: 002b:00007f4efb72f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.935692][ T8040] RAX: ffffffffffffffda RBX: 00007f4efd2f5fa0 RCX: 00007f4efd0ce9a9 [ 141.935705][ T8040] RDX: 0000000000000ffe RSI: 0000200000000380 RDI: 0000000000000003 [ 141.935720][ T8040] RBP: 00007f4efb72f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.935735][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.935750][ T8040] R13: 0000000000000000 R14: 00007f4efd2f5fa0 R15: 00007ffe4bdcd428 [ 141.935775][ T8040] [ 141.941532][ T8044] loop0: detected capacity change from 0 to 1024 [ 142.160274][ T8044] EXT4-fs: Ignoring removed nobh option [ 142.165873][ T8044] EXT4-fs: inline encryption not supported [ 142.178488][ T8044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.199251][ T8044] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1539: Allocating blocks 385-513 which overlap fs metadata [ 142.215638][ T8044] EXT4-fs (loop0): pa ffff8881069823f0: logic 16, phys. 129, len 24 [ 142.223826][ T8044] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 142.238490][ T8044] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 142.250868][ T8044] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.250868][ T8044] [ 142.260634][ T8044] EXT4-fs (loop0): Total free blocks count 0 [ 142.266655][ T8044] EXT4-fs (loop0): Free/Dirty block details [ 142.272583][ T8044] EXT4-fs (loop0): free_blocks=128 [ 142.277740][ T8044] EXT4-fs (loop0): dirty_blocks=0 [ 142.282838][ T8044] EXT4-fs (loop0): Block reservation details [ 142.288866][ T8044] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 142.352256][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1546'. [ 142.625414][ T8088] SELinux: syz.1.1554 (8088) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 142.764874][ T8098] loop2: detected capacity change from 0 to 1024 [ 142.787434][ T8098] EXT4-fs: Ignoring removed orlov option [ 142.870762][ T8098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.891872][ T8098] netlink: '¬í': attribute type 21 has an invalid length. [ 142.933851][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.005973][ T8103] FAULT_INJECTION: forcing a failure. [ 143.005973][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 143.018839][ T8103] CPU: 1 UID: 0 PID: 8103 Comm: /selinux/commit Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 143.018879][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.018896][ T8103] Call Trace: [ 143.018931][ T8103] [ 143.018940][ T8103] __dump_stack+0x1d/0x30 [ 143.018966][ T8103] dump_stack_lvl+0xe8/0x140 [ 143.018990][ T8103] dump_stack+0x15/0x1b [ 143.019005][ T8103] should_fail_ex+0x265/0x280 [ 143.019098][ T8103] should_failslab+0x8c/0xb0 [ 143.019126][ T8103] __kmalloc_noprof+0xa5/0x3e0 [ 143.019151][ T8103] ? cond_policydb_dup+0xa3/0x4e0 [ 143.019180][ T8103] cond_policydb_dup+0xa3/0x4e0 [ 143.019266][ T8103] security_set_bools+0xa0/0x340 [ 143.019374][ T8103] sel_commit_bools_write+0x1ea/0x270 [ 143.019412][ T8103] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 143.019467][ T8103] vfs_write+0x266/0x8e0 [ 143.019498][ T8103] ? __rcu_read_unlock+0x4f/0x70 [ 143.019524][ T8103] ? __fget_files+0x184/0x1c0 [ 143.019544][ T8103] __x64_sys_pwrite64+0xfd/0x150 [ 143.019629][ T8103] x64_sys_call+0xe45/0x2fb0 [ 143.019653][ T8103] do_syscall_64+0xd2/0x200 [ 143.019671][ T8103] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.019723][ T8103] ? clear_bhb_loop+0x40/0x90 [ 143.019823][ T8103] ? clear_bhb_loop+0x40/0x90 [ 143.019852][ T8103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.019877][ T8103] RIP: 0033:0x7fec0ee7e9a9 [ 143.019891][ T8103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.019909][ T8103] RSP: 002b:00007fec0d4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 143.019966][ T8103] RAX: ffffffffffffffda RBX: 00007fec0f0a5fa0 RCX: 00007fec0ee7e9a9 [ 143.019982][ T8103] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 143.019994][ T8103] RBP: 00007fec0d4df090 R08: 0000000000000000 R09: 0000000000000000 [ 143.020005][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.020016][ T8103] R13: 0000000000000000 R14: 00007fec0f0a5fa0 R15: 00007ffdb6616408 [ 143.020111][ T8103] [ 143.352507][ T8106] loop2: detected capacity change from 0 to 1024 [ 143.364642][ T8106] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 143.376365][ T8106] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 143.387499][ T8106] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.1558: inode #100663328: comm syz.2.1558: iget: illegal inode # [ 143.404201][ T8106] EXT4-fs (loop2): Remounting filesystem read-only [ 143.411971][ T8106] EXT4-fs (loop2): no journal found [ 143.413557][ T8111] siw: device registration error -23 [ 143.418449][ T8106] EXT4-fs (loop2): can't get journal size [ 143.452176][ T8106] EXT4-fs (loop2): failed to initialize system zone (-22) [ 143.460380][ T8106] EXT4-fs (loop2): mount failed [ 143.485837][ T8111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1561'. [ 143.513268][ T8105] loop9: detected capacity change from 0 to 7 [ 143.533529][ T8105] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.570015][ T8105] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.579238][ T8105] loop9: unable to read partition table [ 143.588044][ T8105] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 143.588044][ T8105] ) failed (rc=-5) [ 143.622255][ T8121] loop0: detected capacity change from 0 to 1024 [ 143.629319][ T8121] EXT4-fs: Ignoring removed nobh option [ 143.635046][ T8121] EXT4-fs: inline encryption not supported [ 143.645345][ T8126] loop3: detected capacity change from 0 to 764 [ 143.646359][ T8125] smc: net device bond0 applied user defined pnetid SYZ2 [ 143.666185][ T8126] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.696845][ T8126] SELinux: failed to load policy [ 143.718214][ T8121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.731088][ T8125] IPVS: Error connecting to the multicast addr [ 143.740915][ T8121] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1564: Allocating blocks 385-513 which overlap fs metadata [ 143.755472][ T8125] binfmt_misc: register: failed to install interpreter file ./file2 [ 143.771377][ T8132] loop5: detected capacity change from 0 to 1024 [ 143.781107][ T8121] EXT4-fs (loop0): pa ffff888106ac69a0: logic 16, phys. 129, len 24 [ 143.789305][ T8121] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 143.802761][ T8121] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 143.815061][ T8121] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.815061][ T8121] [ 143.824825][ T8121] EXT4-fs (loop0): Total free blocks count 0 [ 143.830861][ T8121] EXT4-fs (loop0): Free/Dirty block details [ 143.836861][ T8121] EXT4-fs (loop0): free_blocks=128 [ 143.842165][ T8121] EXT4-fs (loop0): dirty_blocks=0 [ 143.847278][ T8121] EXT4-fs (loop0): Block reservation details [ 143.853285][ T8121] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 143.860115][ T8132] EXT4-fs: Ignoring removed orlov option [ 143.892746][ T8132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.924706][ T8132] netlink: '¬í': attribute type 21 has an invalid length. [ 143.945383][ T8143] loop3: detected capacity change from 0 to 512 [ 143.972137][ T5769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.988959][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.008679][ T8143] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.104906][ T8164] binfmt_misc: register: failed to install interpreter file ./file2 [ 144.148527][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.159001][ T8166] SELinux: syz.5.1579 (8166) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 144.211675][ T8172] loop2: detected capacity change from 0 to 764 [ 144.231326][ T8174] FAULT_INJECTION: forcing a failure. [ 144.231326][ T8174] name failslab, interval 1, probability 0, space 0, times 0 [ 144.244222][ T8174] CPU: 1 UID: 0 PID: 8174 Comm: syz.5.1582 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 144.244257][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.244270][ T8174] Call Trace: [ 144.244276][ T8174] [ 144.244283][ T8174] __dump_stack+0x1d/0x30 [ 144.244304][ T8174] dump_stack_lvl+0xe8/0x140 [ 144.244327][ T8174] dump_stack+0x15/0x1b [ 144.244401][ T8174] should_fail_ex+0x265/0x280 [ 144.244487][ T8174] should_failslab+0x8c/0xb0 [ 144.244512][ T8174] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 144.244546][ T8174] ? sidtab_sid2str_get+0xa0/0x130 [ 144.244574][ T8174] kmemdup_noprof+0x2b/0x70 [ 144.244617][ T8174] sidtab_sid2str_get+0xa0/0x130 [ 144.244690][ T8174] security_sid_to_context_core+0x1eb/0x2e0 [ 144.244713][ T8174] security_sid_to_context+0x27/0x40 [ 144.244734][ T8174] selinux_lsmprop_to_secctx+0x67/0xf0 [ 144.244805][ T8174] security_lsmprop_to_secctx+0x43/0x80 [ 144.244984][ T8174] audit_log_task_context+0x77/0x190 [ 144.245022][ T8174] audit_log_task+0xf4/0x250 [ 144.245050][ T8174] audit_seccomp+0x61/0x100 [ 144.245075][ T8174] ? __seccomp_filter+0x68c/0x10d0 [ 144.245104][ T8174] __seccomp_filter+0x69d/0x10d0 [ 144.245128][ T8174] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.245163][ T8174] ? vfs_write+0x75e/0x8e0 [ 144.245262][ T8174] ? __rcu_read_unlock+0x4f/0x70 [ 144.245284][ T8174] ? __fget_files+0x184/0x1c0 [ 144.245343][ T8174] __secure_computing+0x82/0x150 [ 144.245364][ T8174] syscall_trace_enter+0xcf/0x1e0 [ 144.245421][ T8174] do_syscall_64+0xac/0x200 [ 144.245444][ T8174] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.245468][ T8174] ? clear_bhb_loop+0x40/0x90 [ 144.245550][ T8174] ? clear_bhb_loop+0x40/0x90 [ 144.245571][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.245591][ T8174] RIP: 0033:0x7f4efd0ce9a9 [ 144.245605][ T8174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.245639][ T8174] RSP: 002b:00007f4efb72f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 144.245660][ T8174] RAX: ffffffffffffffda RBX: 00007f4efd2f5fa0 RCX: 00007f4efd0ce9a9 [ 144.245672][ T8174] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 144.245685][ T8174] RBP: 00007f4efb72f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.245700][ T8174] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 144.245712][ T8174] R13: 0000000000000000 R14: 00007f4efd2f5fa0 R15: 00007ffe4bdcd428 [ 144.245730][ T8174] [ 144.529811][ T8172] SELinux: ebitmap: truncated map [ 144.535563][ T8172] SELinux: failed to load policy [ 144.540621][ T8178] loop5: detected capacity change from 0 to 1024 [ 144.541275][ T8178] EXT4-fs: Ignoring removed orlov option [ 144.593550][ T8184] loop3: detected capacity change from 0 to 128 [ 144.601223][ T8178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.628674][ T8178] netlink: '¬í': attribute type 21 has an invalid length. [ 144.708652][ T5769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.720492][ T8188] IPVS: Error joining to the multicast group [ 144.859446][ T8199] loop1: detected capacity change from 0 to 512 [ 144.867274][ T8199] EXT4-fs: Ignoring removed orlov option [ 144.876757][ T8203] FAULT_INJECTION: forcing a failure. [ 144.876757][ T8203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.889984][ T8203] CPU: 1 UID: 0 PID: 8203 Comm: syz.2.1593 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 144.890016][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.890055][ T8203] Call Trace: [ 144.890063][ T8203] [ 144.890072][ T8203] __dump_stack+0x1d/0x30 [ 144.890096][ T8203] dump_stack_lvl+0xe8/0x140 [ 144.890126][ T8203] dump_stack+0x15/0x1b [ 144.890156][ T8203] should_fail_ex+0x265/0x280 [ 144.890221][ T8203] should_fail+0xb/0x20 [ 144.890255][ T8203] should_fail_usercopy+0x1a/0x20 [ 144.890294][ T8203] _copy_from_user+0x1c/0xb0 [ 144.890317][ T8203] __se_sys_mount+0x10d/0x2e0 [ 144.890361][ T8203] ? fput+0x8f/0xc0 [ 144.890382][ T8203] ? ksys_write+0x192/0x1a0 [ 144.890419][ T8203] __x64_sys_mount+0x67/0x80 [ 144.890538][ T8203] x64_sys_call+0xd36/0x2fb0 [ 144.890598][ T8203] do_syscall_64+0xd2/0x200 [ 144.890675][ T8203] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.890706][ T8203] ? clear_bhb_loop+0x40/0x90 [ 144.890726][ T8203] ? clear_bhb_loop+0x40/0x90 [ 144.890747][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.890822][ T8203] RIP: 0033:0x7f01cff9e9a9 [ 144.890841][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.890860][ T8203] RSP: 002b:00007f01ce607038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.890880][ T8203] RAX: ffffffffffffffda RBX: 00007f01d01c5fa0 RCX: 00007f01cff9e9a9 [ 144.890892][ T8203] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 144.890903][ T8203] RBP: 00007f01ce607090 R08: 0000200000000140 R09: 0000000000000000 [ 144.890914][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.890994][ T8203] R13: 0000000000000000 R14: 00007f01d01c5fa0 R15: 00007ffd450da8b8 [ 144.891012][ T8203] [ 145.107758][ T8199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.119246][ T8199] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.128984][ T8199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1592: bg 0: block 248: padding at end of block bitmap is not set [ 145.143766][ T8199] __quota_error: 236 callbacks suppressed [ 145.143860][ T8199] Quota error (device loop1): write_blk: dquota write failed [ 145.145854][ T29] audit: type=1326 audit(1754039241.659:9159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbab85e9a9 code=0x7ffc0000 [ 145.149596][ T8199] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 145.149620][ T8199] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1592: Failed to acquire dquot type 1 [ 145.195126][ T29] audit: type=1326 audit(1754039241.679:9160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbab85e9a9 code=0x7ffc0000 [ 145.225322][ T29] audit: type=1326 audit(1754039241.679:9161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbab85e9a9 code=0x7ffc0000 [ 145.225772][ T8199] EXT4-fs (loop1): 1 truncate cleaned up [ 145.248847][ T29] audit: type=1326 audit(1754039241.679:9162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbab85e9a9 code=0x7ffc0000 [ 145.278012][ T29] audit: type=1326 audit(1754039241.679:9163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbab85e9a9 code=0x7ffc0000 [ 145.301579][ T29] audit: type=1326 audit(1754039241.679:9164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbab85e9a9 code=0x7ffc0000 [ 145.325098][ T29] audit: type=1326 audit(1754039241.679:9165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbab85e9a9 code=0x7ffc0000 [ 145.348703][ T29] audit: type=1326 audit(1754039241.679:9166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbbab85e9a9 code=0x7ffc0000 [ 145.372979][ T8199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.399747][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.401477][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.401477][ T12] loop3: rw=1, sector=385, nr_sectors = 656 limit=128 [ 145.423083][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.423083][ T12] loop3: rw=1, sector=377, nr_sectors = 8 limit=128 [ 145.485797][ T8226] loop3: detected capacity change from 0 to 764 [ 145.497148][ T8226] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.499578][ T8228] loop0: detected capacity change from 0 to 764 [ 145.513303][ T8228] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.531359][ T8226] FAULT_INJECTION: forcing a failure. [ 145.531359][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 145.537987][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1604'. [ 145.544144][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.3.1603 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 145.544187][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.544206][ T8226] Call Trace: [ 145.544215][ T8226] [ 145.544225][ T8226] __dump_stack+0x1d/0x30 [ 145.544255][ T8226] dump_stack_lvl+0xe8/0x140 [ 145.544301][ T8226] dump_stack+0x15/0x1b [ 145.544324][ T8226] should_fail_ex+0x265/0x280 [ 145.544367][ T8226] should_failslab+0x8c/0xb0 [ 145.544404][ T8226] __kvmalloc_node_noprof+0x123/0x4e0 [ 145.544482][ T8226] ? xt_alloc_entry_offsets+0x48/0x50 [ 145.544593][ T8226] ? __account_obj_stock+0x211/0x350 [ 145.544622][ T8226] xt_alloc_entry_offsets+0x48/0x50 [ 145.544736][ T8226] translate_table+0xa9/0xf90 [ 145.544787][ T8226] ? __rcu_read_unlock+0x4f/0x70 [ 145.544818][ T8226] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 145.544897][ T8226] ? should_fail_ex+0xdb/0x280 [ 145.544982][ T8226] ? _copy_from_user+0x89/0xb0 [ 145.545046][ T8226] do_ipt_set_ctl+0x66f/0x820 [ 145.545116][ T8226] ? _raw_spin_unlock_bh+0x36/0x40 [ 145.545151][ T8226] ? tcp_release_cb+0xf1/0x370 [ 145.545201][ T8226] nf_setsockopt+0x199/0x1b0 [ 145.545265][ T8226] ip_setsockopt+0x102/0x110 [ 145.545307][ T8226] tcp_setsockopt+0x98/0xb0 [ 145.545377][ T8226] sock_common_setsockopt+0x66/0x80 [ 145.545414][ T8226] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 145.545452][ T8226] smc_setsockopt+0x180/0x750 [ 145.545533][ T8226] ? __pfx_smc_setsockopt+0x10/0x10 [ 145.545565][ T8226] __sys_setsockopt+0x181/0x200 [ 145.545683][ T8226] __x64_sys_setsockopt+0x64/0x80 [ 145.545739][ T8226] x64_sys_call+0x2bd5/0x2fb0 [ 145.545769][ T8226] do_syscall_64+0xd2/0x200 [ 145.545829][ T8226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.545865][ T8226] ? clear_bhb_loop+0x40/0x90 [ 145.545901][ T8226] ? clear_bhb_loop+0x40/0x90 [ 145.545931][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.545960][ T8226] RIP: 0033:0x7fec0ee7e9a9 [ 145.545982][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.546086][ T8226] RSP: 002b:00007fec0d4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.546111][ T8226] RAX: ffffffffffffffda RBX: 00007fec0f0a5fa0 RCX: 00007fec0ee7e9a9 [ 145.546129][ T8226] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 145.546145][ T8226] RBP: 00007fec0d4df090 R08: 0000000000000550 R09: 0000000000000000 [ 145.546163][ T8226] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.546178][ T8226] R13: 0000000000000000 R14: 00007fec0f0a5fa0 R15: 00007ffdb6616408 [ 145.546204][ T8226] [ 145.577236][ T8226] SELinux: ebitmap: truncated map [ 145.671916][ T8232] loop1: detected capacity change from 0 to 8192 [ 145.676188][ T8226] SELinux: failed to load policy [ 145.688930][ T8232] tipc: Enabled bearer , priority 0 [ 145.691604][ T8233] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.716666][ T8232] syzkaller0: entered promiscuous mode [ 145.750492][ T8233] SELinux: failed to load policy [ 145.766210][ T8232] syzkaller0: entered allmulticast mode [ 145.888541][ T8232] tipc: Resetting bearer [ 145.921076][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 145.931603][ T8249] 9pnet_fd: Insufficient options for proto=fd [ 146.051191][ T8266] siw: device registration error -23 [ 146.076277][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1618'. [ 146.101479][ T8231] tipc: Resetting bearer [ 146.117300][ T8231] tipc: Disabling bearer [ 146.140420][ T8273] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1621'. [ 146.212985][ T8280] loop3: detected capacity change from 0 to 1024 [ 146.220186][ T8280] EXT4-fs: Ignoring removed orlov option [ 146.230217][ T8283] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1626'. [ 146.242458][ T8280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.256367][ T8287] loop0: detected capacity change from 0 to 128 [ 146.263652][ T8287] FAT-fs (loop0): invalid media value (0x00) [ 146.269786][ T8287] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 146.278980][ T8287] FAT-fs (loop0): Can't find a valid FAT filesystem [ 146.357559][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.440891][ T8318] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1639'. [ 146.489745][ T8325] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 146.549300][ T8330] loop3: detected capacity change from 0 to 512 [ 146.562127][ T8330] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1645: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 146.583472][ T8330] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1645: Bad quota inode: 3, type: 0 [ 146.596071][ T8330] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 146.611706][ T8330] EXT4-fs (loop3): mount failed [ 146.646003][ T8343] siw: device registration error -23 [ 146.662513][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1649'. [ 146.717692][ T8349] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1652'. [ 146.738531][ T8354] tmpfs: Bad value for 'mpol' [ 146.757922][ T8354] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1654'. [ 146.793256][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 146.901126][ T8369] loop1: detected capacity change from 0 to 128 [ 146.914260][ T8368] FAULT_INJECTION: forcing a failure. [ 146.914260][ T8368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.927518][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.5.1660 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 146.927554][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.927571][ T8368] Call Trace: [ 146.927578][ T8368] [ 146.927587][ T8368] __dump_stack+0x1d/0x30 [ 146.927611][ T8368] dump_stack_lvl+0xe8/0x140 [ 146.927651][ T8368] dump_stack+0x15/0x1b [ 146.927673][ T8368] should_fail_ex+0x265/0x280 [ 146.927794][ T8368] should_fail+0xb/0x20 [ 146.927826][ T8368] should_fail_usercopy+0x1a/0x20 [ 146.927909][ T8368] _copy_to_user+0x20/0xa0 [ 146.927936][ T8368] simple_read_from_buffer+0xb5/0x130 [ 146.928014][ T8368] proc_fail_nth_read+0x100/0x140 [ 146.928098][ T8368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.928140][ T8368] vfs_read+0x1a0/0x6f0 [ 146.928248][ T8368] ? __sys_setsockopt+0x18e/0x200 [ 146.928353][ T8368] ? __rcu_read_unlock+0x4f/0x70 [ 146.928381][ T8368] ? __fget_files+0x184/0x1c0 [ 146.928483][ T8368] ksys_read+0xda/0x1a0 [ 146.928520][ T8368] __x64_sys_read+0x40/0x50 [ 146.928559][ T8368] x64_sys_call+0x2d77/0x2fb0 [ 146.928586][ T8368] do_syscall_64+0xd2/0x200 [ 146.928671][ T8368] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 146.928703][ T8368] ? clear_bhb_loop+0x40/0x90 [ 146.928790][ T8368] ? clear_bhb_loop+0x40/0x90 [ 146.928820][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.928919][ T8368] RIP: 0033:0x7f4efd0cd3bc [ 146.928938][ T8368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.928962][ T8368] RSP: 002b:00007f4efb72f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.928986][ T8368] RAX: ffffffffffffffda RBX: 00007f4efd2f5fa0 RCX: 00007f4efd0cd3bc [ 146.929002][ T8368] RDX: 000000000000000f RSI: 00007f4efb72f0a0 RDI: 0000000000000007 [ 146.929017][ T8368] RBP: 00007f4efb72f090 R08: 0000000000000000 R09: 0000000000000000 [ 146.929030][ T8368] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 146.929045][ T8368] R13: 0000000000000000 R14: 00007f4efd2f5fa0 R15: 00007ffe4bdcd428 [ 146.929110][ T8368] [ 147.147162][ T8371] IPVS: Error joining to the multicast group [ 147.282005][ T8387] loop2: detected capacity change from 0 to 1024 [ 147.289221][ T8387] EXT4-fs: Ignoring removed orlov option [ 147.320162][ T8390] loop5: detected capacity change from 0 to 1024 [ 147.327657][ T8387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.340900][ T8390] EXT4-fs: Ignoring removed orlov option [ 147.350962][ T8390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.389933][ T8390] netlink: '¬í': attribute type 21 has an invalid length. [ 147.406334][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.443470][ T5769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.539905][ T8404] loop5: detected capacity change from 0 to 1764 [ 147.589019][ T3449] kworker/u8:7: attempt to access beyond end of device [ 147.589019][ T3449] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 147.604106][ T3449] kworker/u8:7: attempt to access beyond end of device [ 147.604106][ T3449] loop1: rw=1, sector=137, nr_sectors = 8 limit=128 [ 147.605190][ T8404] FAULT_INJECTION: forcing a failure. [ 147.605190][ T8404] name failslab, interval 1, probability 0, space 0, times 0 [ 147.633728][ T8404] CPU: 1 UID: 0 PID: 8404 Comm: syz.5.1672 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 147.633765][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.633778][ T8404] Call Trace: [ 147.633823][ T8404] [ 147.633831][ T8404] __dump_stack+0x1d/0x30 [ 147.633858][ T8404] dump_stack_lvl+0xe8/0x140 [ 147.633884][ T8404] dump_stack+0x15/0x1b [ 147.633960][ T8404] should_fail_ex+0x265/0x280 [ 147.634000][ T8404] should_failslab+0x8c/0xb0 [ 147.634103][ T8404] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 147.634133][ T8404] ? sidtab_sid2str_get+0xa0/0x130 [ 147.634161][ T8404] kmemdup_noprof+0x2b/0x70 [ 147.634234][ T8404] sidtab_sid2str_get+0xa0/0x130 [ 147.634264][ T8404] security_sid_to_context_core+0x1eb/0x2e0 [ 147.634293][ T8404] security_sid_to_context+0x27/0x40 [ 147.634342][ T8404] selinux_lsmprop_to_secctx+0x67/0xf0 [ 147.634368][ T8404] security_lsmprop_to_secctx+0x43/0x80 [ 147.634400][ T8404] audit_log_task_context+0x77/0x190 [ 147.634484][ T8404] audit_log_task+0xf4/0x250 [ 147.634515][ T8404] audit_seccomp+0x61/0x100 [ 147.634540][ T8404] ? __seccomp_filter+0x68c/0x10d0 [ 147.634639][ T8404] __seccomp_filter+0x69d/0x10d0 [ 147.634687][ T8404] ? read_tsc+0x9/0x20 [ 147.634726][ T8404] ? ktime_get+0x1eb/0x210 [ 147.634756][ T8404] ? lapic_next_event+0x11/0x20 [ 147.634817][ T8404] ? clockevents_program_event+0x240/0x4e0 [ 147.634862][ T8404] __secure_computing+0x82/0x150 [ 147.634909][ T8404] syscall_trace_enter+0xcf/0x1e0 [ 147.634948][ T8404] do_syscall_64+0xac/0x200 [ 147.634970][ T8404] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.635000][ T8404] ? clear_bhb_loop+0x40/0x90 [ 147.635091][ T8404] ? clear_bhb_loop+0x40/0x90 [ 147.635120][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.635148][ T8404] RIP: 0033:0x7f4efd0ce9a9 [ 147.635198][ T8404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.635215][ T8404] RSP: 002b:00007f4efb72f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 147.635233][ T8404] RAX: ffffffffffffffda RBX: 00007f4efd2f5fa0 RCX: 00007f4efd0ce9a9 [ 147.635244][ T8404] RDX: 0000000000000020 RSI: 000000000014927e RDI: 00002000000001c0 [ 147.635287][ T8404] RBP: 00007f4efb72f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.635303][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.635318][ T8404] R13: 0000000000000000 R14: 00007f4efd2f5fa0 R15: 00007ffe4bdcd428 [ 147.635403][ T8404] [ 148.045459][ T8423] loop1: detected capacity change from 0 to 1024 [ 148.085649][ T8423] EXT4-fs: Ignoring removed orlov option [ 148.095013][ T8427] loop0: detected capacity change from 0 to 512 [ 148.112528][ T8431] loop5: detected capacity change from 0 to 128 [ 148.119980][ T8427] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1682: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 148.133522][ T8434] loop3: detected capacity change from 0 to 1764 [ 148.139626][ T8431] FAT-fs (loop5): invalid media value (0x00) [ 148.150364][ T8431] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 148.159530][ T8431] FAT-fs (loop5): Can't find a valid FAT filesystem [ 148.177257][ T8427] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1682: Bad quota inode: 3, type: 0 [ 148.191310][ T8423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.207269][ T8427] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 148.270430][ T8427] EXT4-fs (loop0): mount failed [ 148.279126][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.403107][ T8450] loop0: detected capacity change from 0 to 128 [ 148.418010][ T8450] FAT-fs (loop0): invalid media value (0x00) [ 148.424116][ T8450] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 148.433299][ T8450] FAT-fs (loop0): Can't find a valid FAT filesystem [ 148.594867][ T8449] veth1_macvtap: left allmulticast mode [ 148.602510][ T8449] macsec0: left promiscuous mode [ 148.607543][ T8449] macsec0: left allmulticast mode [ 148.643136][ T8449] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.651645][ T8449] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.660196][ T8449] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.668667][ T8449] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.077089][ T8478] loop5: detected capacity change from 0 to 1024 [ 149.107516][ T8478] EXT4-fs: Ignoring removed orlov option [ 149.125531][ T8478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.189467][ T5769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.202426][ T8490] hub 2-0:1.0: USB hub found [ 149.207119][ T8490] hub 2-0:1.0: 8 ports detected [ 149.235756][ T8492] loop3: detected capacity change from 0 to 1024 [ 149.265384][ T8492] EXT4-fs: Ignoring removed orlov option [ 149.299629][ T8492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.301896][ T8501] loop0: detected capacity change from 0 to 1024 [ 149.327397][ T8501] EXT4-fs: Ignoring removed orlov option [ 149.336783][ T8492] netlink: '¬í': attribute type 21 has an invalid length. [ 149.350144][ T8501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.371897][ T8501] netlink: '¬í': attribute type 21 has an invalid length. [ 149.409310][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.422171][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.521691][ T8524] loop3: detected capacity change from 0 to 1024 [ 149.528715][ T8524] EXT4-fs: Ignoring removed nobh option [ 149.534413][ T8524] EXT4-fs: inline encryption not supported [ 149.565894][ T8524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.575734][ T8530] lo speed is unknown, defaulting to 1000 [ 149.593792][ T8524] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1708: Allocating blocks 385-513 which overlap fs metadata [ 149.659183][ T8524] EXT4-fs (loop3): pa ffff888106ac6a10: logic 16, phys. 129, len 24 [ 149.667321][ T8524] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 149.733688][ T8524] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 149.746065][ T8524] EXT4-fs (loop3): This should not happen!! Data will be lost [ 149.746065][ T8524] [ 149.755761][ T8524] EXT4-fs (loop3): Total free blocks count 0 [ 149.761820][ T8524] EXT4-fs (loop3): Free/Dirty block details [ 149.767800][ T8524] EXT4-fs (loop3): free_blocks=128 [ 149.772998][ T8524] EXT4-fs (loop3): dirty_blocks=0 [ 149.778054][ T8524] EXT4-fs (loop3): Block reservation details [ 149.784157][ T8524] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 149.797245][ T8532] loop0: detected capacity change from 0 to 1024 [ 149.814135][ T8532] EXT4-fs: inline encryption not supported [ 149.843343][ T8532] EXT4-fs: Ignoring removed bh option [ 149.890236][ T8532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.925788][ T8530] loop5: detected capacity change from 0 to 128 [ 150.047996][ T8532] FAULT_INJECTION: forcing a failure. [ 150.047996][ T8532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.061181][ T8532] CPU: 0 UID: 0 PID: 8532 Comm: wg1 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 150.061217][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.061289][ T8532] Call Trace: [ 150.061295][ T8532] [ 150.061304][ T8532] __dump_stack+0x1d/0x30 [ 150.061331][ T8532] dump_stack_lvl+0xe8/0x140 [ 150.061356][ T8532] dump_stack+0x15/0x1b [ 150.061437][ T8532] should_fail_ex+0x265/0x280 [ 150.061497][ T8532] should_fail+0xb/0x20 [ 150.061532][ T8532] should_fail_usercopy+0x1a/0x20 [ 150.061578][ T8532] strncpy_from_user+0x25/0x230 [ 150.061611][ T8532] ? kmem_cache_alloc_noprof+0x186/0x310 [ 150.061643][ T8532] ? getname_flags+0x80/0x3b0 [ 150.061670][ T8532] getname_flags+0xae/0x3b0 [ 150.061699][ T8532] user_path_at+0x28/0x130 [ 150.061795][ T8532] __x64_sys_umount+0x85/0xe0 [ 150.061832][ T8532] x64_sys_call+0x2915/0x2fb0 [ 150.061859][ T8532] do_syscall_64+0xd2/0x200 [ 150.061889][ T8532] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.061923][ T8532] ? clear_bhb_loop+0x40/0x90 [ 150.061948][ T8532] ? clear_bhb_loop+0x40/0x90 [ 150.062036][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.062061][ T8532] RIP: 0033:0x7fbbab85e9a9 [ 150.062080][ T8532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.062104][ T8532] RSP: 002b:00007fbba9ebf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 150.062128][ T8532] RAX: ffffffffffffffda RBX: 00007fbbaba85fa0 RCX: 00007fbbab85e9a9 [ 150.062179][ T8532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 150.062194][ T8532] RBP: 00007fbba9ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 150.062210][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.062225][ T8532] R13: 0000000000000000 R14: 00007fbbaba85fa0 R15: 00007fff49db4a88 [ 150.062271][ T8532] [ 150.298721][ T8547] lo speed is unknown, defaulting to 1000 [ 150.352686][ T8549] loop1: detected capacity change from 0 to 8192 [ 150.375702][ T8549] tipc: Enabled bearer , priority 0 [ 150.383011][ T8547] ip6tnl0: entered promiscuous mode [ 150.408428][ T8547] veth1_to_bond: entered allmulticast mode [ 150.414999][ T8549] syzkaller0: entered promiscuous mode [ 150.420534][ T8549] syzkaller0: entered allmulticast mode [ 150.430306][ T29] kauditd_printk_skb: 883 callbacks suppressed [ 150.430323][ T29] audit: type=1400 audit(1754039246.957:10049): avc: denied { remove_name } for pid=3306 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.460129][ T29] audit: type=1400 audit(1754039246.957:10050): avc: denied { rmdir } for pid=3306 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.490565][ T8547] veth1_to_bond: left allmulticast mode [ 150.496191][ T8547] ip6tnl0: left promiscuous mode [ 150.502437][ T8549] tipc: Resetting bearer [ 150.511591][ T29] audit: type=1400 audit(1754039247.037:10051): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.546342][ T29] audit: type=1400 audit(1754039247.057:10052): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 150.569805][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.660585][ T8566] 9pnet_fd: Insufficient options for proto=fd [ 150.719284][ T29] audit: type=1326 audit(1754039247.237:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 150.750500][ T29] audit: type=1326 audit(1754039247.237:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 150.774151][ T29] audit: type=1326 audit(1754039247.267:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 150.797574][ T29] audit: type=1326 audit(1754039247.267:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 150.821146][ T29] audit: type=1326 audit(1754039247.267:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 150.844723][ T29] audit: type=1326 audit(1754039247.267:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4efd0ce9a9 code=0x7ffc0000 [ 150.870064][ T8578] loop5: detected capacity change from 0 to 128 [ 150.878797][ T8578] FAT-fs (loop5): invalid media value (0x00) [ 150.884904][ T8578] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 150.894071][ T8578] FAT-fs (loop5): Can't find a valid FAT filesystem [ 150.906703][ T8580] loop3: detected capacity change from 0 to 764 [ 150.915448][ T8580] rock: directory entry would overflow storage [ 150.921653][ T8580] rock: sig=0x5850, size=36, remaining=7 [ 150.990254][ T8584] netlink: 'syz.2.1727': attribute type 26 has an invalid length. [ 150.998935][ T8548] tipc: Resetting bearer [ 151.006062][ T8548] tipc: Disabling bearer [ 151.061674][ T8590] siw: device registration error -23 [ 151.072131][ T8590] __nla_validate_parse: 11 callbacks suppressed [ 151.072147][ T8590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1729'. [ 151.121496][ T8594] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1731'. [ 151.253185][ T8609] lo speed is unknown, defaulting to 1000 [ 151.343848][ T8611] rock: directory entry would overflow storage [ 151.350098][ T8611] rock: sig=0x5850, size=36, remaining=7 [ 151.464776][ T8620] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1740'. [ 151.548090][ T8622] loop2: detected capacity change from 0 to 8192 [ 151.589789][ T8622] tipc: Enabled bearer , priority 0 [ 151.597266][ T8622] syzkaller0: entered promiscuous mode [ 151.602869][ T8622] syzkaller0: entered allmulticast mode [ 151.619324][ T8622] tipc: Resetting bearer [ 151.665662][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1742'. [ 151.750750][ T8621] tipc: Resetting bearer [ 151.757237][ T8621] tipc: Disabling bearer [ 151.838624][ T8629] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1744'. [ 151.942611][ T8641] loop2: detected capacity change from 0 to 512 [ 151.954440][ T8639] lo speed is unknown, defaulting to 1000 [ 151.955176][ T8643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1751'. [ 151.961291][ T8641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.983990][ T8641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.040361][ T8641] EXT4-fs (loop2): 1 truncate cleaned up [ 152.062542][ T8641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.077679][ T8659] loop3: detected capacity change from 0 to 512 [ 152.094564][ T8659] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 152.120128][ T8659] EXT4-fs (loop3): orphan cleanup on readonly fs [ 152.132557][ T8659] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1752: Block bitmap for bg 0 marked uninitialized [ 152.155748][ T8666] netlink: 'syz.5.1758': attribute type 4 has an invalid length. [ 152.162823][ T8659] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 152.176610][ T8670] loop1: detected capacity change from 0 to 128 [ 152.185774][ T8668] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 152.199103][ T8670] FAT-fs (loop1): invalid media value (0x00) [ 152.205288][ T8670] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 152.214498][ T8670] FAT-fs (loop1): Can't find a valid FAT filesystem [ 152.228151][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.235095][ T8659] EXT4-fs (loop3): 1 orphan inode deleted [ 152.258954][ T8659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.277012][ T8679] siw: device registration error -23 [ 152.286852][ T8679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1761'. [ 152.331700][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.355212][ T8685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1764'. [ 152.385266][ T8689] syzkaller0: entered promiscuous mode [ 152.390961][ T8689] syzkaller0: entered allmulticast mode [ 152.455148][ T8688] lo speed is unknown, defaulting to 1000 [ 152.504454][ T8706] loop0: detected capacity change from 0 to 512 [ 152.512240][ T8706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.523821][ T8706] EXT4-fs (loop0): 1 truncate cleaned up [ 152.530906][ T8706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.613558][ T8711] IPv6: addrconf: prefix option has invalid lifetime [ 152.783700][ T8721] siw: device registration error -23 [ 152.792324][ T8721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1774'. [ 152.908151][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.978781][ T8728] loop1: detected capacity change from 0 to 128 [ 152.989030][ T8730] loop3: detected capacity change from 0 to 1024 [ 153.060226][ T8730] ext4: Unknown parameter './file0' [ 153.231369][ T8737] FAULT_INJECTION: forcing a failure. [ 153.231369][ T8737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.244603][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.5.1780 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 153.244637][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.244652][ T8737] Call Trace: [ 153.244660][ T8737] [ 153.244669][ T8737] __dump_stack+0x1d/0x30 [ 153.244763][ T8737] dump_stack_lvl+0xe8/0x140 [ 153.244786][ T8737] dump_stack+0x15/0x1b [ 153.244806][ T8737] should_fail_ex+0x265/0x280 [ 153.244842][ T8737] should_fail+0xb/0x20 [ 153.244951][ T8737] should_fail_usercopy+0x1a/0x20 [ 153.245049][ T8737] _copy_to_user+0x20/0xa0 [ 153.245073][ T8737] simple_read_from_buffer+0xb5/0x130 [ 153.245169][ T8737] proc_fail_nth_read+0x100/0x140 [ 153.245210][ T8737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.245327][ T8737] vfs_read+0x1a0/0x6f0 [ 153.245433][ T8737] ? __rcu_read_unlock+0x4f/0x70 [ 153.245455][ T8737] ? __fget_files+0x184/0x1c0 [ 153.245475][ T8737] ksys_read+0xda/0x1a0 [ 153.245587][ T8737] __x64_sys_read+0x40/0x50 [ 153.245624][ T8737] x64_sys_call+0x2d77/0x2fb0 [ 153.245650][ T8737] do_syscall_64+0xd2/0x200 [ 153.245673][ T8737] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.245769][ T8737] ? clear_bhb_loop+0x40/0x90 [ 153.245794][ T8737] ? clear_bhb_loop+0x40/0x90 [ 153.245842][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.245897][ T8737] RIP: 0033:0x7f4efd0cd3bc [ 153.245915][ T8737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.245936][ T8737] RSP: 002b:00007f4efb72f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.245957][ T8737] RAX: ffffffffffffffda RBX: 00007f4efd2f5fa0 RCX: 00007f4efd0cd3bc [ 153.246057][ T8737] RDX: 000000000000000f RSI: 00007f4efb72f0a0 RDI: 0000000000000004 [ 153.246068][ T8737] RBP: 00007f4efb72f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.246080][ T8737] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 153.246091][ T8737] R13: 0000000000000000 R14: 00007f4efd2f5fa0 R15: 00007ffe4bdcd428 [ 153.246110][ T8737] [ 153.364625][ T8706] syz.0.1769 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 153.469236][ T8706] CPU: 0 UID: 0 PID: 8706 Comm: syz.0.1769 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 153.469274][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.469287][ T8706] Call Trace: [ 153.469294][ T8706] [ 153.469301][ T8706] __dump_stack+0x1d/0x30 [ 153.469323][ T8706] dump_stack_lvl+0xe8/0x140 [ 153.469353][ T8706] dump_stack+0x15/0x1b [ 153.469376][ T8706] dump_header+0x81/0x220 [ 153.469420][ T8706] oom_kill_process+0x334/0x3f0 [ 153.469458][ T8706] out_of_memory+0x979/0xb80 [ 153.469488][ T8706] try_charge_memcg+0x5e6/0x9e0 [ 153.469559][ T8706] obj_cgroup_charge_pages+0xa6/0x150 [ 153.469589][ T8706] __memcg_kmem_charge_page+0x9f/0x170 [ 153.469620][ T8706] __alloc_frozen_pages_noprof+0x188/0x360 [ 153.469651][ T51] kworker/u8:3: attempt to access beyond end of device [ 153.469651][ T51] loop1: rw=1, sector=393, nr_sectors = 648 limit=128 [ 153.469738][ T8706] alloc_pages_mpol+0xb3/0x250 [ 153.469786][ T8706] alloc_pages_noprof+0x90/0x130 [ 153.469837][ T8706] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 153.469898][ T8706] __kvmalloc_node_noprof+0x30f/0x4e0 [ 153.470059][ T8706] ? ip_set_alloc+0x1f/0x30 [ 153.470099][ T8706] ? ip_set_alloc+0x1f/0x30 [ 153.470138][ T8706] ? __kmalloc_cache_noprof+0x189/0x320 [ 153.470226][ T8706] ip_set_alloc+0x1f/0x30 [ 153.470357][ T8706] hash_netiface_create+0x282/0x740 [ 153.470468][ T8706] ? __pfx_hash_netiface_create+0x10/0x10 [ 153.470554][ T8706] ip_set_create+0x3c9/0x960 [ 153.470611][ T8706] ? __nla_parse+0x40/0x60 [ 153.470629][ T8706] nfnetlink_rcv_msg+0x4c6/0x590 [ 153.470693][ T8706] ? selinux_capable+0x1f9/0x270 [ 153.470738][ T8706] netlink_rcv_skb+0x123/0x220 [ 153.470787][ T8706] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 153.470833][ T8706] nfnetlink_rcv+0x16b/0x1690 [ 153.470870][ T8706] ? __kfree_skb+0x109/0x150 [ 153.470955][ T8706] ? nlmon_xmit+0x4f/0x60 [ 153.470986][ T8706] ? consume_skb+0x49/0x150 [ 153.471027][ T8706] ? nlmon_xmit+0x4f/0x60 [ 153.471057][ T8706] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 153.471122][ T8706] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 153.471147][ T8706] ? __dev_queue_xmit+0x182/0x1fb0 [ 153.471175][ T8706] ? rb_commit+0x3e9/0x420 [ 153.471206][ T8706] ? ref_tracker_free+0x37d/0x3e0 [ 153.471296][ T8706] ? __netlink_deliver_tap+0x4dc/0x500 [ 153.471329][ T8706] netlink_unicast+0x5a8/0x680 [ 153.471383][ T8706] netlink_sendmsg+0x58b/0x6b0 [ 153.471504][ T8706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.471535][ T8706] __sock_sendmsg+0x142/0x180 [ 153.471593][ T8706] ____sys_sendmsg+0x31e/0x4e0 [ 153.471623][ T8706] ___sys_sendmsg+0x17b/0x1d0 [ 153.471648][ T8706] ? arch_irq_work_raise+0x46/0x50 [ 153.471777][ T8706] __x64_sys_sendmsg+0xd4/0x160 [ 153.471811][ T8706] x64_sys_call+0x2999/0x2fb0 [ 153.471878][ T8706] do_syscall_64+0xd2/0x200 [ 153.471904][ T8706] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.471940][ T8706] ? clear_bhb_loop+0x40/0x90 [ 153.471971][ T8706] ? clear_bhb_loop+0x40/0x90 [ 153.472026][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.472058][ T8706] RIP: 0033:0x7fbbab85e9a9 [ 153.472079][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.472104][ T8706] RSP: 002b:00007fbba9ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.472147][ T8706] RAX: ffffffffffffffda RBX: 00007fbbaba85fa0 RCX: 00007fbbab85e9a9 [ 153.472165][ T8706] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 153.472182][ T8706] RBP: 00007fbbab8e0d69 R08: 0000000000000000 R09: 0000000000000000 [ 153.472200][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.472216][ T8706] R13: 0000000000000000 R14: 00007fbbaba85fa0 R15: 00007fff49db4a88 [ 153.472242][ T8706] [ 153.472326][ T8706] memory: usage 307100kB, limit 307200kB, failcnt 237 [ 153.482855][ T51] kworker/u8:3: attempt to access beyond end of device [ 153.482855][ T51] loop1: rw=1, sector=385, nr_sectors = 8 limit=128 [ 153.492243][ T8706] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 153.492261][ T8706] kmem: usage 306988kB, limit 9007199254740988kB, failcnt 0 [ 153.492273][ T8706] Memory cgroup stats for /syz0: [ 153.504070][ T8706] cache 139264 [ 153.884999][ T8706] rss 8192 [ 153.888046][ T8706] shmem 0 [ 153.891069][ T8706] mapped_file 4096 [ 153.894821][ T8706] dirty 0 [ 153.897851][ T8706] writeback 0 [ 153.901273][ T8706] workingset_refault_anon 39 [ 153.905901][ T8706] workingset_refault_file 95 [ 153.910586][ T8706] swap 462848 [ 153.913936][ T8706] swapcached 16384 [ 153.917676][ T8706] pgpgin 120119 [ 153.921234][ T8706] pgpgout 120079 [ 153.924813][ T8706] pgfault 122449 [ 153.928381][ T8706] pgmajfault 31 [ 153.931947][ T8706] inactive_anon 16384 [ 153.935949][ T8706] active_anon 0 [ 153.939575][ T8706] inactive_file 94208 [ 153.943624][ T8706] active_file 4096 [ 153.947420][ T8706] unevictable 0 [ 153.950987][ T8706] hierarchical_memory_limit 314572800 [ 153.956389][ T8706] hierarchical_memsw_limit 9223372036854771712 [ 153.962646][ T8706] total_cache 139264 [ 153.966571][ T8706] total_rss 8192 [ 153.970184][ T8706] total_shmem 0 [ 153.973745][ T8706] total_mapped_file 4096 [ 153.978019][ T8706] total_dirty 0 [ 153.981540][ T8706] total_writeback 0 [ 153.985450][ T8706] total_workingset_refault_anon 39 [ 153.990638][ T8706] total_workingset_refault_file 95 [ 153.995772][ T8706] total_swap 462848 [ 153.999626][ T8706] total_swapcached 16384 [ 154.003933][ T8706] total_pgpgin 120119 [ 154.008012][ T8706] total_pgpgout 120079 [ 154.012143][ T8706] total_pgfault 122449 [ 154.016281][ T8706] total_pgmajfault 31 [ 154.020364][ T8706] total_inactive_anon 16384 [ 154.024946][ T8706] total_active_anon 0 [ 154.028956][ T8706] total_inactive_file 94208 [ 154.033517][ T8706] total_active_file 4096 [ 154.037852][ T8706] total_unevictable 0 [ 154.040367][ T8744] loop2: detected capacity change from 0 to 8192 [ 154.041868][ T8706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1769,pid=8705,uid=0 [ 154.062893][ T8706] Memory cgroup out of memory: Killed process 8705 (syz.0.1769) total-vm:95928kB, anon-rss:1076kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 154.102446][ T8744] tipc: Enabled bearer , priority 0 [ 154.119288][ T8744] syzkaller0: entered promiscuous mode [ 154.124870][ T8744] syzkaller0: entered allmulticast mode [ 154.178862][ T8755] tipc: Resetting bearer [ 154.275794][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.397700][ T8743] tipc: Resetting bearer [ 154.404502][ T8743] tipc: Disabling bearer [ 154.549553][ T8776] loop1: detected capacity change from 0 to 512 [ 154.572073][ T8776] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 154.580407][ T8776] EXT4-fs (loop1): orphan cleanup on readonly fs [ 154.589192][ T8776] EXT4-fs (loop1): 1 orphan inode deleted [ 154.747806][ T8781] loop2: detected capacity change from 0 to 128 [ 154.830390][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 154.844124][ T8776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.188547][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.440774][ T29] kauditd_printk_skb: 1106 callbacks suppressed [ 155.447128][ T29] audit: type=1326 audit(1754039251.956:11164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec0ee1ab89 code=0x7ffc0000 [ 155.494723][ T29] audit: type=1326 audit(1754039251.996:11165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0ee7e9a9 code=0x7ffc0000 [ 155.518371][ T29] audit: type=1326 audit(1754039251.996:11166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec0ee75967 code=0x7ffc0000 [ 155.541947][ T29] audit: type=1326 audit(1754039251.996:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec0ee1ab89 code=0x7ffc0000 [ 155.565484][ T29] audit: type=1326 audit(1754039251.996:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec0ee75967 code=0x7ffc0000 [ 155.589007][ T29] audit: type=1326 audit(1754039251.996:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec0ee1ab89 code=0x7ffc0000 [ 155.612495][ T29] audit: type=1326 audit(1754039251.996:11170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec0ee75967 code=0x7ffc0000 [ 155.635930][ T29] audit: type=1326 audit(1754039251.996:11171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec0ee1ab89 code=0x7ffc0000 [ 155.659390][ T29] audit: type=1326 audit(1754039251.996:11172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec0ee75967 code=0x7ffc0000 [ 155.682856][ T29] audit: type=1326 audit(1754039251.996:11173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec0ee1ab89 code=0x7ffc0000 [ 155.873199][ T3337] kworker/u8:6: attempt to access beyond end of device [ 155.873199][ T3337] loop2: rw=1, sector=177, nr_sectors = 224 limit=128 [ 155.893759][ T8787] hsr_slave_0: left promiscuous mode [ 155.906404][ T8787] hsr_slave_1: left promiscuous mode [ 156.309108][ T8812] loop0: detected capacity change from 0 to 128 [ 156.345517][ T8812] FAT-fs (loop0): invalid media value (0x00) [ 156.351858][ T8812] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 156.361050][ T8812] FAT-fs (loop0): Can't find a valid FAT filesystem [ 156.423326][ T3337] bond0 (unregistering): Released all slaves [ 156.444124][ T8813] lo speed is unknown, defaulting to 1000 [ 156.694877][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 156.732167][ T8834] loop1: detected capacity change from 0 to 128 [ 156.759033][ T8834] FAT-fs (loop1): invalid media value (0x00) [ 156.765298][ T8834] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 156.774760][ T8834] FAT-fs (loop1): Can't find a valid FAT filesystem [ 156.812413][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.819614][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.833565][ T8813] bridge_slave_0: entered allmulticast mode [ 156.840930][ T8813] bridge_slave_0: entered promiscuous mode [ 156.867650][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.874833][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.898923][ T8813] bridge_slave_1: entered allmulticast mode [ 156.925731][ T8813] bridge_slave_1: entered promiscuous mode [ 156.960012][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.972053][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.002887][ T8813] team0: Port device team_slave_0 added [ 157.021606][ T8813] team0: Port device team_slave_1 added [ 157.051017][ T8852] FAULT_INJECTION: forcing a failure. [ 157.051017][ T8852] name failslab, interval 1, probability 0, space 0, times 0 [ 157.063851][ T8852] CPU: 0 UID: 0 PID: 8852 Comm: syz.0.1816 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 157.063958][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.063970][ T8852] Call Trace: [ 157.063975][ T8852] [ 157.063982][ T8852] __dump_stack+0x1d/0x30 [ 157.064003][ T8852] dump_stack_lvl+0xe8/0x140 [ 157.064021][ T8852] dump_stack+0x15/0x1b [ 157.064036][ T8852] should_fail_ex+0x265/0x280 [ 157.064074][ T8852] should_failslab+0x8c/0xb0 [ 157.064096][ T8852] kmem_cache_alloc_noprof+0x50/0x310 [ 157.064124][ T8852] ? security_inode_alloc+0x37/0x100 [ 157.064158][ T8852] security_inode_alloc+0x37/0x100 [ 157.064288][ T8852] inode_init_always_gfp+0x4b7/0x500 [ 157.064361][ T8852] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 157.064406][ T8852] alloc_inode+0x58/0x170 [ 157.064441][ T8852] new_inode+0x1d/0xe0 [ 157.064467][ T8852] shmem_get_inode+0x244/0x750 [ 157.064522][ T8852] __shmem_file_setup+0x113/0x210 [ 157.064556][ T8852] shmem_file_setup+0x3b/0x50 [ 157.064644][ T8852] __se_sys_memfd_create+0x2c3/0x590 [ 157.064685][ T8852] __x64_sys_memfd_create+0x31/0x40 [ 157.064715][ T8852] x64_sys_call+0x122f/0x2fb0 [ 157.064785][ T8852] do_syscall_64+0xd2/0x200 [ 157.064809][ T8852] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.064858][ T8852] ? clear_bhb_loop+0x40/0x90 [ 157.064885][ T8852] ? clear_bhb_loop+0x40/0x90 [ 157.064920][ T8852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.064943][ T8852] RIP: 0033:0x7fbbab85e9a9 [ 157.064987][ T8852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.065004][ T8852] RSP: 002b:00007fbba9ebee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 157.065026][ T8852] RAX: ffffffffffffffda RBX: 0000000000000784 RCX: 00007fbbab85e9a9 [ 157.065042][ T8852] RDX: 00007fbba9ebeef0 RSI: 0000000000000000 RDI: 00007fbbab8e16fc [ 157.065125][ T8852] RBP: 0000200000001900 R08: 00007fbba9ebebb7 R09: 00007fbba9ebee40 [ 157.065137][ T8852] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000007c0 [ 157.065149][ T8852] R13: 00007fbba9ebeef0 R14: 00007fbba9ebeeb0 R15: 0000200000000340 [ 157.065167][ T8852] [ 157.067043][ T8850] loop5: detected capacity change from 0 to 1764 [ 157.298676][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.305731][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.331795][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.362650][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.369729][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.395883][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.432856][ T8813] hsr_slave_0: entered promiscuous mode [ 157.510909][ T8813] hsr_slave_1: entered promiscuous mode [ 157.522989][ T8863] loop5: detected capacity change from 0 to 512 [ 157.532599][ T8813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.540244][ T8813] Cannot create hsr debugfs directory [ 157.551866][ T8863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.562333][ T8863] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.626641][ T8863] EXT4-fs (loop5): 1 truncate cleaned up [ 157.635494][ T8863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.794539][ T5769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.989133][ T8813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.007217][ T8813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.017147][ T8880] loop2: detected capacity change from 0 to 8192 [ 158.031054][ T8813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.039927][ T8813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.049186][ T8880] tipc: Enabled bearer , priority 0 [ 158.056743][ T8880] syzkaller0: entered promiscuous mode [ 158.062364][ T8880] syzkaller0: entered allmulticast mode [ 158.074873][ T8880] tipc: Resetting bearer [ 158.110188][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.122057][ T8813] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.138486][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.145648][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.156126][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.163248][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.313962][ T8813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.348261][ T8879] tipc: Resetting bearer [ 158.355136][ T8879] tipc: Disabling bearer [ 158.394800][ T8896] loop5: detected capacity change from 0 to 2048 [ 158.463184][ T8896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.505614][ T8813] veth0_vlan: entered promiscuous mode [ 158.551751][ T8813] veth1_vlan: entered promiscuous mode [ 158.615166][ T8813] veth0_macvtap: entered promiscuous mode [ 158.646398][ T8813] veth1_macvtap: entered promiscuous mode [ 158.660216][ T8914] loop1: detected capacity change from 0 to 8192 [ 158.680449][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.692802][ T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 234: padding at end of block bitmap is not set [ 158.723933][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.733758][ T8919] __nla_validate_parse: 2 callbacks suppressed [ 158.733772][ T8919] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1834'. [ 158.740894][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 118 with error 117 [ 158.758166][ T8813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.761408][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 158.761408][ T12] [ 158.770080][ T8813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.788547][ T8813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.797573][ T8813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.820884][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 118 with max blocks 2 with error 28 [ 158.833311][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 158.833311][ T12] [ 158.843047][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 158.849062][ T12] EXT4-fs (loop5): Free/Dirty block details [ 158.855019][ T12] EXT4-fs (loop5): free_blocks=0 [ 158.860036][ T12] EXT4-fs (loop5): dirty_blocks=16 [ 158.865196][ T12] EXT4-fs (loop5): Block reservation details [ 158.878554][ T8914] tipc: Enabled bearer , priority 0 [ 158.891168][ T8921] syzkaller0: entered promiscuous mode [ 158.896745][ T8921] syzkaller0: entered allmulticast mode [ 158.952148][ T8914] tipc: Resetting bearer [ 158.995935][ T8928] loop3: detected capacity change from 0 to 1024 [ 159.094411][ T8927] loop5: detected capacity change from 0 to 8192 [ 159.138740][ T8927] tipc: Enabled bearer , priority 0 [ 159.161299][ T8927] syzkaller0: entered promiscuous mode [ 159.166821][ T8927] syzkaller0: entered allmulticast mode [ 159.213771][ T8913] tipc: Resetting bearer [ 159.222060][ T8913] tipc: Disabling bearer [ 159.231959][ T8927] tipc: Resetting bearer [ 159.329572][ T8937] loop1: detected capacity change from 0 to 1024 [ 159.353044][ T8937] EXT4-fs: Ignoring removed orlov option [ 159.431084][ T8926] tipc: Resetting bearer [ 159.443227][ T8926] tipc: Disabling bearer [ 159.483172][ T8937] netlink: '¬í': attribute type 21 has an invalid length. [ 159.570806][ T8943] loop1: detected capacity change from 0 to 1024 [ 159.605081][ T8943] EXT4-fs: Ignoring removed nobh option [ 159.610713][ T8943] EXT4-fs: inline encryption not supported [ 159.673277][ T8943] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1840: Allocating blocks 385-513 which overlap fs metadata [ 159.712098][ T8943] EXT4-fs (loop1): pa ffff888106ac69a0: logic 16, phys. 129, len 24 [ 159.720276][ T8943] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 159.760421][ T8943] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 159.772865][ T8943] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.772865][ T8943] [ 159.782555][ T8943] EXT4-fs (loop1): Total free blocks count 0 [ 159.788652][ T8943] EXT4-fs (loop1): Free/Dirty block details [ 159.794702][ T8943] EXT4-fs (loop1): free_blocks=128 [ 159.799840][ T8943] EXT4-fs (loop1): dirty_blocks=0 [ 159.804981][ T8943] EXT4-fs (loop1): Block reservation details [ 159.811089][ T8943] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 160.014783][ T8969] siw: device registration error -23 [ 160.073873][ T8972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1849'. [ 160.098427][ T8966] FAULT_INJECTION: forcing a failure. [ 160.098427][ T8966] name failslab, interval 1, probability 0, space 0, times 0 [ 160.111204][ T8966] CPU: 1 UID: 0 PID: 8966 Comm: syz.3.1847 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 160.111239][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.111255][ T8966] Call Trace: [ 160.111264][ T8966] [ 160.111274][ T8966] __dump_stack+0x1d/0x30 [ 160.111296][ T8966] dump_stack_lvl+0xe8/0x140 [ 160.111342][ T8966] dump_stack+0x15/0x1b [ 160.111362][ T8966] should_fail_ex+0x265/0x280 [ 160.111392][ T8966] should_failslab+0x8c/0xb0 [ 160.111516][ T8966] kmem_cache_alloc_noprof+0x50/0x310 [ 160.111550][ T8966] ? security_file_alloc+0x32/0x100 [ 160.111571][ T8966] security_file_alloc+0x32/0x100 [ 160.111728][ T8966] init_file+0x5c/0x1d0 [ 160.111752][ T8966] alloc_empty_file+0x8b/0x200 [ 160.111776][ T8966] path_openat+0x68/0x2170 [ 160.111802][ T8966] ? sysvec_irq_work+0xe/0x80 [ 160.111863][ T8966] ? native_apic_msr_write+0x3d/0x60 [ 160.111894][ T8966] ? x2apic_send_IPI_self+0x10/0x20 [ 160.111976][ T8966] ? arch_irq_work_raise+0x46/0x50 [ 160.112011][ T8966] ? __irq_work_queue_local+0x10f/0x2c0 [ 160.112102][ T8966] do_filp_open+0x109/0x230 [ 160.112139][ T8966] do_sys_openat2+0xa6/0x110 [ 160.112166][ T8966] __x64_sys_openat+0xf2/0x120 [ 160.112193][ T8966] x64_sys_call+0x1af/0x2fb0 [ 160.112264][ T8966] do_syscall_64+0xd2/0x200 [ 160.112282][ T8966] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.112309][ T8966] ? clear_bhb_loop+0x40/0x90 [ 160.112330][ T8966] ? clear_bhb_loop+0x40/0x90 [ 160.112391][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.112412][ T8966] RIP: 0033:0x7fa016d0e9a9 [ 160.112426][ T8966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.112522][ T8966] RSP: 002b:00007fa015377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 160.112540][ T8966] RAX: ffffffffffffffda RBX: 00007fa016f35fa0 RCX: 00007fa016d0e9a9 [ 160.112556][ T8966] RDX: 0000000000002182 RSI: 0000200000001840 RDI: ffffffffffffff9c [ 160.112568][ T8966] RBP: 00007fa015377090 R08: 0000000000000000 R09: 0000000000000000 [ 160.112581][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.112593][ T8966] R13: 0000000000000000 R14: 00007fa016f35fa0 R15: 00007ffd7d438c08 [ 160.112611][ T8966] [ 160.455678][ T8977] SELinux: Context Ü is not valid (left unmapped). [ 160.621943][ T8973] lo speed is unknown, defaulting to 1000 [ 160.779362][ T8987] loop3: detected capacity change from 0 to 1024 [ 160.806215][ T8987] EXT4-fs: Ignoring removed nobh option [ 160.811970][ T8987] EXT4-fs: inline encryption not supported [ 160.865625][ T8987] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1854: Allocating blocks 385-513 which overlap fs metadata [ 160.932639][ T8987] EXT4-fs (loop3): pa ffff8881069823f0: logic 16, phys. 129, len 24 [ 160.940824][ T8987] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 160.985057][ T8987] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 160.997340][ T8987] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.997340][ T8987] [ 161.007123][ T8987] EXT4-fs (loop3): Total free blocks count 0 [ 161.013228][ T8987] EXT4-fs (loop3): Free/Dirty block details [ 161.019146][ T8987] EXT4-fs (loop3): free_blocks=128 [ 161.024309][ T8987] EXT4-fs (loop3): dirty_blocks=0 [ 161.029442][ T8987] EXT4-fs (loop3): Block reservation details [ 161.035568][ T8987] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 161.252861][ T8994] loop3: detected capacity change from 0 to 1024 [ 161.342944][ T9004] siw: device registration error -23 [ 161.351033][ T9004] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1860'. [ 161.390482][ T9007] loop3: detected capacity change from 0 to 1024 [ 161.401030][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 161.401045][ T29] audit: type=1400 audit(1754039257.905:11740): avc: denied { ioctl } for pid=9005 comm="syz.0.1862" path="socket:[23320]" dev="sockfs" ino=23320 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.459672][ T29] audit: type=1400 audit(1754039257.975:11741): avc: denied { read } for pid=9011 comm="syz.0.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.461694][ T9007] EXT4-fs: Ignoring removed orlov option [ 161.784770][ T9022] lo speed is unknown, defaulting to 1000 [ 161.993791][ T9029] FAULT_INJECTION: forcing a failure. [ 161.993791][ T9029] name failslab, interval 1, probability 0, space 0, times 0 [ 162.006630][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: syz.2.1869 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 162.006734][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.006746][ T9029] Call Trace: [ 162.006753][ T9029] [ 162.006760][ T9029] __dump_stack+0x1d/0x30 [ 162.006783][ T9029] dump_stack_lvl+0xe8/0x140 [ 162.006808][ T9029] dump_stack+0x15/0x1b [ 162.006829][ T9029] should_fail_ex+0x265/0x280 [ 162.006902][ T9029] should_failslab+0x8c/0xb0 [ 162.006931][ T9029] __kmalloc_noprof+0xa5/0x3e0 [ 162.006964][ T9029] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 162.006992][ T9029] ? selinux_file_permission+0x1e4/0x320 [ 162.007099][ T9029] kernfs_fop_write_iter+0xe1/0x2d0 [ 162.007125][ T9029] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 162.007170][ T9029] vfs_write+0x4a0/0x8e0 [ 162.007215][ T9029] ksys_write+0xda/0x1a0 [ 162.007256][ T9029] __x64_sys_write+0x40/0x50 [ 162.007380][ T9029] x64_sys_call+0x2cdd/0x2fb0 [ 162.007407][ T9029] do_syscall_64+0xd2/0x200 [ 162.007432][ T9029] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.007463][ T9029] ? clear_bhb_loop+0x40/0x90 [ 162.007555][ T9029] ? clear_bhb_loop+0x40/0x90 [ 162.007576][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.007597][ T9029] RIP: 0033:0x7f01cff9e9a9 [ 162.007611][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.007643][ T9029] RSP: 002b:00007f01ce5e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.007667][ T9029] RAX: ffffffffffffffda RBX: 00007f01d01c6080 RCX: 00007f01cff9e9a9 [ 162.007682][ T9029] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000009 [ 162.007694][ T9029] RBP: 00007f01ce5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.007706][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.007717][ T9029] R13: 0000000000000000 R14: 00007f01d01c6080 R15: 00007ffd450da8b8 [ 162.007734][ T9029] [ 162.221388][ T9032] lo speed is unknown, defaulting to 1000 [ 162.253728][ T29] audit: type=1326 audit(1754039258.775:11742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e2e6e9a9 code=0x7ffc0000 [ 162.285634][ T29] audit: type=1326 audit(1754039258.775:11743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e2e6e9a9 code=0x7ffc0000 [ 162.309224][ T29] audit: type=1326 audit(1754039258.795:11744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1e2e6e9a9 code=0x7ffc0000 [ 162.342962][ T29] audit: type=1326 audit(1754039258.815:11745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e2e6e9a9 code=0x7ffc0000 [ 162.366552][ T29] audit: type=1326 audit(1754039258.835:11746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e2e6e9a9 code=0x7ffc0000 [ 162.390303][ T29] audit: type=1326 audit(1754039258.855:11747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1e2e6e9a9 code=0x7ffc0000 [ 162.413953][ T29] audit: type=1326 audit(1754039258.855:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e2e6e9a9 code=0x7ffc0000 [ 162.437924][ T29] audit: type=1326 audit(1754039258.855:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e2e6e9a9 code=0x7ffc0000 [ 162.545681][ T9041] siw: device registration error -23 [ 162.554910][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1873'. [ 162.582912][ T9037] loop1: detected capacity change from 0 to 128 [ 162.589909][ T9037] FAT-fs (loop1): invalid media value (0x00) [ 162.595996][ T9037] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 162.605195][ T9037] FAT-fs (loop1): Can't find a valid FAT filesystem [ 162.680343][ T9049] lo speed is unknown, defaulting to 1000 [ 162.745170][ T9051] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1876'. [ 162.780800][ T9053] loop2: detected capacity change from 0 to 1024 [ 162.796260][ T9053] EXT4-fs: Ignoring removed nobh option [ 162.802291][ T9053] EXT4-fs: inline encryption not supported [ 162.824364][ T9053] EXT4-fs mount: 12 callbacks suppressed [ 162.824384][ T9053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.846187][ T9053] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1877: Allocating blocks 385-513 which overlap fs metadata [ 162.870912][ T9053] EXT4-fs (loop2): pa ffff8881069824d0: logic 16, phys. 129, len 24 [ 162.879039][ T9053] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 162.890384][ T9053] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 162.902687][ T9053] EXT4-fs (loop2): This should not happen!! Data will be lost [ 162.902687][ T9053] [ 162.912363][ T9053] EXT4-fs (loop2): Total free blocks count 0 [ 162.918385][ T9053] EXT4-fs (loop2): Free/Dirty block details [ 162.924321][ T9053] EXT4-fs (loop2): free_blocks=128 [ 162.929468][ T9053] EXT4-fs (loop2): dirty_blocks=0 [ 162.934531][ T9053] EXT4-fs (loop2): Block reservation details [ 162.940595][ T9053] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 163.097934][ T9060] loop2: detected capacity change from 0 to 128 [ 163.106326][ T9060] FAT-fs (loop2): invalid media value (0x00) [ 163.112415][ T9060] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 163.121764][ T9060] FAT-fs (loop2): Can't find a valid FAT filesystem [ 163.143225][ T9069] loop1: detected capacity change from 0 to 512 [ 163.150024][ T9069] EXT4-fs: Ignoring removed i_version option [ 163.156614][ T9069] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 163.168050][ T9069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 163.176181][ T9069] System zones: 1-12 [ 163.180456][ T9069] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.187580][ T9069] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1882: invalid indirect mapped block 12 (level 1) [ 163.202555][ T9069] EXT4-fs (loop1): Remounting filesystem read-only [ 163.209315][ T9069] EXT4-fs (loop1): 1 truncate cleaned up [ 163.215962][ T9069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 163.238392][ T9075] FAULT_INJECTION: forcing a failure. [ 163.238392][ T9075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.251603][ T9075] CPU: 1 UID: 0 PID: 9075 Comm: syz.3.1883 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 163.251634][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.251674][ T9075] Call Trace: [ 163.251681][ T9075] [ 163.251690][ T9075] __dump_stack+0x1d/0x30 [ 163.251716][ T9075] dump_stack_lvl+0xe8/0x140 [ 163.251818][ T9075] dump_stack+0x15/0x1b [ 163.251840][ T9075] should_fail_ex+0x265/0x280 [ 163.251881][ T9075] should_fail+0xb/0x20 [ 163.251915][ T9075] should_fail_usercopy+0x1a/0x20 [ 163.252028][ T9075] _copy_to_user+0x20/0xa0 [ 163.252055][ T9075] simple_read_from_buffer+0xb5/0x130 [ 163.252215][ T9075] proc_fail_nth_read+0x100/0x140 [ 163.252250][ T9075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.252293][ T9075] vfs_read+0x1a0/0x6f0 [ 163.252328][ T9075] ? __rcu_read_unlock+0x4f/0x70 [ 163.252349][ T9075] ? __rcu_read_unlock+0x4f/0x70 [ 163.252369][ T9075] ? __fget_files+0x184/0x1c0 [ 163.252409][ T9075] ksys_read+0xda/0x1a0 [ 163.252523][ T9075] __x64_sys_read+0x40/0x50 [ 163.252561][ T9075] x64_sys_call+0x2d77/0x2fb0 [ 163.252587][ T9075] do_syscall_64+0xd2/0x200 [ 163.252635][ T9075] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.252668][ T9075] ? clear_bhb_loop+0x40/0x90 [ 163.252694][ T9075] ? clear_bhb_loop+0x40/0x90 [ 163.252720][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.252789][ T9075] RIP: 0033:0x7fa016d0d3bc [ 163.252807][ T9075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 163.252831][ T9075] RSP: 002b:00007fa015377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.252854][ T9075] RAX: ffffffffffffffda RBX: 00007fa016f35fa0 RCX: 00007fa016d0d3bc [ 163.252912][ T9075] RDX: 000000000000000f RSI: 00007fa0153770a0 RDI: 0000000000000006 [ 163.252928][ T9075] RBP: 00007fa015377090 R08: 0000000000000000 R09: 0000000000000000 [ 163.252943][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.252990][ T9075] R13: 0000000000000000 R14: 00007fa016f35fa0 R15: 00007ffd7d438c08 [ 163.253016][ T9075] [ 163.254632][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 163.341728][ T9077] siw: device registration error -23 [ 163.449028][ T9078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1885'. [ 163.504515][ T9082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1886'. [ 163.560719][ T9085] loop5: detected capacity change from 0 to 512 [ 163.570073][ T9085] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.584165][ T9085] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.599590][ T9087] loop3: detected capacity change from 0 to 1024 [ 163.613070][ T9087] EXT4-fs: Ignoring removed nobh option [ 163.618753][ T9087] EXT4-fs: inline encryption not supported [ 163.627375][ T9085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 163.641601][ T9085] System zones: 1-12 [ 163.651433][ T9085] EXT4-fs (loop5): 1 truncate cleaned up [ 163.658179][ T9085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.687723][ T9095] loop1: detected capacity change from 0 to 128 [ 163.708093][ T9087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.723748][ T9087] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1889: Allocating blocks 385-513 which overlap fs metadata [ 163.755280][ T9100] lo speed is unknown, defaulting to 1000 [ 163.781980][ T9087] EXT4-fs (loop3): pa ffff8881069823f0: logic 16, phys. 129, len 24 [ 163.790091][ T9087] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 163.810651][ T5769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.811302][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 163.821310][ T9087] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 163.840907][ T9087] EXT4-fs (loop3): This should not happen!! Data will be lost [ 163.840907][ T9087] [ 163.850594][ T9087] EXT4-fs (loop3): Total free blocks count 0 [ 163.856709][ T9087] EXT4-fs (loop3): Free/Dirty block details [ 163.862658][ T9087] EXT4-fs (loop3): free_blocks=128 [ 163.867803][ T9087] EXT4-fs (loop3): dirty_blocks=0 [ 163.873031][ T9087] EXT4-fs (loop3): Block reservation details [ 163.879047][ T9087] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 163.899001][ T9103] loop5: detected capacity change from 0 to 512 [ 163.918393][ T9103] EXT4-fs: Invalid want_extra_isize 7 [ 163.930180][ T9105] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1894'. [ 163.948536][ T9103] loop5: detected capacity change from 0 to 512 [ 163.961935][ T9103] ext4: Unknown parameter 'fsname' [ 164.106217][ T9124] loop2: detected capacity change from 0 to 512 [ 164.144074][ T9124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.163559][ T9124] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.190140][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.213896][ T12] kworker/u8:0: attempt to access beyond end of device [ 164.213896][ T12] loop1: rw=1, sector=289, nr_sectors = 752 limit=128 [ 164.228199][ T12] kworker/u8:0: attempt to access beyond end of device [ 164.228199][ T12] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 164.245471][ T9127] tipc: Started in network mode [ 164.250393][ T9127] tipc: Node identity ae2a976ef488, cluster identity 4711 [ 164.257769][ T9127] tipc: Enabled bearer , priority 0 [ 164.266416][ T9127] tipc: Resetting bearer [ 164.585536][ T9137] loop0: detected capacity change from 0 to 1024 [ 164.592503][ T9137] EXT4-fs: Ignoring removed nobh option [ 164.598218][ T9137] EXT4-fs: inline encryption not supported [ 164.613125][ T9137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.628516][ T9137] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1905: Allocating blocks 385-513 which overlap fs metadata [ 164.645468][ T9137] EXT4-fs (loop0): pa ffff888106ac6a10: logic 16, phys. 129, len 24 [ 164.653636][ T9137] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 164.664194][ T9137] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 164.676583][ T9137] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.676583][ T9137] [ 164.686322][ T9137] EXT4-fs (loop0): Total free blocks count 0 [ 164.692337][ T9137] EXT4-fs (loop0): Free/Dirty block details [ 164.698251][ T9137] EXT4-fs (loop0): free_blocks=128 [ 164.703402][ T9137] EXT4-fs (loop0): dirty_blocks=0 [ 164.708519][ T9137] EXT4-fs (loop0): Block reservation details [ 164.714549][ T9137] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 164.748814][ T9144] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1907'. [ 164.811016][ T9153] ================================================================== [ 164.819157][ T9153] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 164.826561][ T9153] [ 164.828902][ T9153] write to 0xffff8881318db000 of 4096 bytes by task 9152 on cpu 0: [ 164.836815][ T9153] _copy_from_iter+0x130/0xe40 [ 164.841609][ T9153] copy_page_from_iter+0x178/0x2a0 [ 164.847110][ T9153] process_vm_rw+0x659/0x950 [ 164.851725][ T9153] __x64_sys_process_vm_writev+0x78/0x90 [ 164.857385][ T9153] x64_sys_call+0xe80/0x2fb0 [ 164.861999][ T9153] do_syscall_64+0xd2/0x200 [ 164.866523][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.872431][ T9153] [ 164.874764][ T9153] write to 0xffff8881318db000 of 4096 bytes by task 9153 on cpu 1: [ 164.882663][ T9153] _copy_from_iter+0x130/0xe40 [ 164.887454][ T9153] copy_page_from_iter+0x178/0x2a0 [ 164.892591][ T9153] process_vm_rw+0x659/0x950 [ 164.897193][ T9153] __x64_sys_process_vm_writev+0x78/0x90 [ 164.902845][ T9153] x64_sys_call+0xe80/0x2fb0 [ 164.907453][ T9153] do_syscall_64+0xd2/0x200 [ 164.911964][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.917872][ T9153] [ 164.920199][ T9153] Reported by Kernel Concurrency Sanitizer on: [ 164.926363][ T9153] CPU: 1 UID: 0 PID: 9153 Comm: syz.0.1910 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 164.938788][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.948857][ T9153] ================================================================== [ 164.959865][ T9119] tipc: Disabling bearer