last executing test programs: 28.873548228s ago: executing program 1 (id=360): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="bfc628bd7000ffdbdf251a000000050092008000000007002100626200081000228004"], 0x34}, 0x1, 0x0, 0x0, 0x20044044}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='ext4_free_blocks\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000800000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) getpgrp(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) lsm_get_self_attr(0x66, &(0x7f0000000380)={0x0, 0x0, 0x65, 0x45, ""/69}, &(0x7f00000000c0)=0x65, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x10, 0x6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 28.253851227s ago: executing program 1 (id=375): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 28.198127208s ago: executing program 1 (id=378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x700, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 28.117221659s ago: executing program 1 (id=383): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000400, &(0x7f0000000400)={[{@resgid}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r0 = socket$inet(0x2, 0x802, 0x1) close(0x3) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3ff, @empty, 0xfffffff7}, 0x1c) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r3 = syz_io_uring_setup(0x10d6, &(0x7f0000000340)={0x0, 0x6730, 0x80, 0x5, 0xe}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x7, 0x12}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x51, 0x0, 0x0, 0x0, 0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000002480)="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", 0x1001}, {0x0}], 0x2) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x800, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000140)="ba", 0x1}], 0x1) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x201, &(0x7f0000000880)={&(0x7f0000001240)=""/4096, 0x1000}) socket(0x25, 0x6, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 27.828579844s ago: executing program 1 (id=389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) r4 = socket(0x11, 0xa, 0x4) getsockname$packet(r4, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae4000000000000000061ebe430a205000000e0090f020000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) socket$netlink(0x10, 0x3, 0x14) lchown(0x0, 0x0, 0x0) getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x6, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0xc0f85403, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="0e01000000000000000000000000000000005789f47441f80ec97a6f800000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) socket(0x1, 0x803, 0x0) 27.103626445s ago: executing program 1 (id=402): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000340)=0xe) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (fail_nth: 3) 27.083039905s ago: executing program 32 (id=402): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000340)=0xe) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (fail_nth: 3) 1.535008807s ago: executing program 5 (id=1021): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000000)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@nodioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") truncate(&(0x7f0000000800)='./file0\x00', 0x7fffffff) 1.523056927s ago: executing program 3 (id=1022): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast}, {0x11, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.464412398s ago: executing program 3 (id=1025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@dioread_lock}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@grpid}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x410002) 1.396739379s ago: executing program 5 (id=1028): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003040)=@delchain={0x2ec, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x290, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x268, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x1c4, 0x1e, 0x0, 0x0, {{0xb}, {0xe8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe1, 0x3, 'b\x86u\x00\x00=\xe0\x19\xa8\x0f\xebd\xde:\xe7\x19Wu\x8f\x1b\xba?\x7f\x9a\x11\x15H\xb4\xce\x12\x1d47\x7f\xb5\x9c\xa1\f\xe4cD\xe8\xaf\xe5X\xf5#\x12\x96Q\xca\x7f[p\xc8\x86\xef\x0f\x97\\:\x8f\x94u\x8f|\xc1q9\x03t\xc6\xb5\xfb\xe4\xb2\xecY\b\x9f\xc7R\xe0b=\xb2\xe6\xc5\xa2\xde|[!\xdc\xb7\x90\x9e\x86o\xd5d0!\xaf\xc4cH\xc6\x18\xe0\xe3@!JVU\xdc\x13$\xa7E\xdc\xb1,k(\xa9\x9a\xac(\xc9\xe1\x91\x9b<\xfd\xc0!j{\xc6p3\\\xdc?\xbb\xd2\x1d\xc7\xca\xd9x\xc8\x98\a\xb2\xa1\xebR#\xa2\x87\x03t K\xd1\xa5\xde\xf8 [\xf2YKy *\xa7K\x87\xcb\xc1\x86\x92\xef*\x1ej\xe4G\xbd\xe6\r\x80o\n`\xd2Gi\xc2\xc6\x90\x94\xf6\xb3\x9f\x87\xfc5\xa93\xf0\xca3\x98\t\b\x15'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x3c, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "4ac6768e05c6ec90b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x0, 0x0, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffe, 0x1, @perf_bp={0x0, 0xd}, 0x4458, 0x10400, 0xfffffffc, 0x1, 0x88, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095", @ANYRESOCT=r3, @ANYBLOB="1b9d16b9bf8bbd1ae757d86c5d37af1c99403306071b3c0969795dbc27fe2eb4646dbedfe90b90a9c21eed4bb983765ba8853bad33c0434e2e939d1035f6ec61efef2be51329d8586c5146b6413806f0dca94359d06d1efdc298ea83dc091eff298be372d250addec9ed5b93b397bf4553689cfaa90bbe4023bce44d8711448ab89fe69e343ea3866cbb992448"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r5, 0x0, 0x0, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000800), 0x3, 0x44a, &(0x7f0000000bc0)="$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") setfsuid(0xee00) 1.218757742s ago: executing program 3 (id=1035): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) 1.166608772s ago: executing program 4 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4008000) 1.161629363s ago: executing program 3 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$eJzs281vG0UbAPBn7aR9+/UmVOWjaYFAQUR8JE1aSg9cikDiABISHMoxJGkV6jaoCRKtIggIlSOqxB1xROIv4AQXBJyQuMIdVapQLi2cjNbeTRzHdhPHiQP+/aRtZ3bHmnm8M/bMThxAzxpO/0kiDkbEbxExUM2uLTBc/e/u8uLUX8uLU0mUy2/+mVTK3VlenMqL5q87kGf6IgqfJnGsQb3z165fmiyVZq5m+bGFy++NzV+7/tzs5cmLMxdnrkycPXv61PgLZyae70icaVx3hj6cO3701bdvvj51/uY7P32T5PHXxdGmvrr8cKvCT5bLW6xudzlUk07q3wl2rWLWcfsr438gijXdeCBe+aSrjQO2VblcLj/Q/PJSGfgPS6LbLQC6I/+iT9e/+bFDU49d4fa56gIojftudlSv9EUhK9Nft77tpOGIOL/095fpEZ15DgEA0NJ36fzn2Ubzv0LUPhf6f7aHMhgR90XE4Yg4ExFHIuL+iErZByPioU3WX79Jsn7+U7jVVmAblM7/Xsz2ttbO//LZXwwWs9yhSvz9yYXZ0szJ7D0Zif69aX68RR3fv/zr582u1c7/0iOtP58LZu241bd37WumJxcmtxJzrdsfRwz1NYo/WdkJSCLiaEQMtVnH7NNfH2927d7xt9CBfabyVxFPVe//UtTFn0ta70+O/S9KMyfH8l6x3s+/3HijWf1bir8D0vu/v2H/X4l/MKndr53ffB03fv+s6Zqm3f6/J3lrzbkPJhcWro5H7Eleqza69vxEXbmJ1fJp/CMnGo//w7H6ThyLiLQTPxwRj0TEo1nbH4uIxyPiRIv4f3zpiXfbj397pfFPb+r+ryb2RP2ZxonipR++XVPp4GbiT+//6UpqJDuzkc+/jbSrvd4MAAAA/z6FiDgYSWF0JV0ojI5W/4b/SOwvlObmF565MPf+lenqbwQGo7+QP+kaqHkeOp4t6/P8RF3+VPbc+Ivivkp+dGquNN3t4KHHHWgy/lN/FLvdOmDb+b0W9C7jH3qX8Q+9y/iH3tVg/O/rRjuAndfo+/+jLrQD2Hl149+2H/QQ63/oXQ3G/7lutAPYeb7/oSfN74t7/0heQmJdIgq7ohkS25To9icTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wTAAD//+e45xo=") unlink(&(0x7f0000000180)='./file1\x00') 1.045524174s ago: executing program 4 (id=1040): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 1.041355744s ago: executing program 0 (id=1041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 995.766965ms ago: executing program 4 (id=1042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4048010) 942.959706ms ago: executing program 0 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) umount2(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x400000000000000) 878.127757ms ago: executing program 0 (id=1044): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) utimes(&(0x7f0000001ac0)='./file1\x00', 0x0) (fail_nth: 4) 493.538933ms ago: executing program 0 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x40014) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000100)=ANY=[], 0x835, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000c40)={{r1}, 0x0, 0xe, @inherit={0x58, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000020000000000000032000000000000000200f7ff0000000011000000000000000400000000000000929b00000000000000000000000000000300000000000000000000000000a000ff03000000000000"]}, @name="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"}) syz_emit_ethernet(0x6e, &(0x7f0000001840)=ANY=[@ANYBLOB="b931b2d41475aaaaaaaaaa0086dd602e5cea00383c00fc000000000000000000000000000000ff0200000000000000000000000000010c03000000000000c910fe"], 0x0) 478.486983ms ago: executing program 4 (id=1046): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f00000000c0), 0x0, 0x800004, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000f3c6b840f41ff7ce00155da7c9a2dacf054131fa61bda866b78a5ff76e7746780557eba30aaace2c6a3ba978180a713aed07ab7fba8e78a7a1a7acae40630e553b792031367c3196e26615c5531e28b8f7eb69988dc9715e3983cde34a69367fa0702496efd1b73cfd4927506a51cdc7a89c8d26e81e00ca1e466bb421551576fa86c9a561c49f8a6a747fe98fb0c11a4295b81ce672b9a7a603fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000952000000000000004c00700000000000386090001040000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0xb44c2afdb014d878, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) mmap$xdp(&(0x7f0000d07000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r8 = syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0xfc, 0x507, &(0x7f0000000580)="$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") socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) setuid(0xee00) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0xfdf8, [0x5, 0x7]}, 0x10) 478.181333ms ago: executing program 0 (id=1047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) 450.549793ms ago: executing program 3 (id=1049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0xac, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xd}, 0xb008, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xc88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r2, 0x1, 0x2}}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001900010900000000fddbdf25021800000000fd070000000008000100ac14140008001900", @ANYRES32, @ANYBLOB="060015000300000008000b00060000004a135a5a5b0d11b7fdbef321510e9e13c26e2c4cdbd9a2880f7120d45ab6e107b1538c9701a0c9d85aeb7d1668ec38501fe888a73b9c9f005099b3b5d4f9d8786dc60da87e65b6f2f936ac3ebcb170f89715bb23c1aa13c0c758bccf5fdc5cb8145d94da32218890dd540c8fac132e4d3763c639ccfd1797317671187c5437c5b01364884278ef5601b7937ef8b094f78b5eb42f2fe5f0bbcd5e159b2b3de5ab142fc03f2142e4d41f2534651b0188e7e59616e7b457da"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r8 = accept(r0, 0x0, &(0x7f0000000280)) sendfile(r6, r8, 0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@shortname_lower}, {@shortname_mixed}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@showexec}, {@shortname_mixed}, {@shortname_win95}, {@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@fat=@discard}, {@nonumtail}, {@numtail}, {@numtail}, {@shortname_winnt}, {@shortname_win95}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000240)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) write$UHID_INPUT(r5, &(0x7f0000002300)={0x7, {"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", 0xfffffffffffffd25}}, 0x1006) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000080)={r0, r0, 0xa027, 0xdd, &(0x7f0000000340)="100bcb61b4dbb5910d88b4b8f48956e6bcedbf93c357ae781fb109919663ad257feedcf1a2df081c7ee29a9a352b6e200d9628cd181c765462989ee307ed4f7a253b488ae7b2898996342dbc120b92e91b7ac435c8c1873792c10969607c2258a68f9fcd44d832c4d1ccb9f785f8f168a781ad7ac4ce6fa35a1502a739a45c960bc7c9e6763a329851d253a2c827a9f8e2320b1c19d27d350a07de43def3a4c377bce746602c7cdea955c9f5506d510133b9f28d35e69ce3589b09871487338e85546af5c341d9a4911cf017801c7c451cde71c7abebf2ac50318fc30f", 0x9, 0x2, 0x7fff, 0x5, 0x40, 0x3, 0x33839f8f, 'syz0\x00'}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 449.985833ms ago: executing program 5 (id=1050): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@bsdgroups}]}, 0x2, 0x45c, &(0x7f0000000b40)="$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") r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x92000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 313.084965ms ago: executing program 0 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r3 = getpid() r4 = socket$caif_stream(0x25, 0x1, 0x0) sendto(r4, &(0x7f00000005c0)="a3e5e4498520e94de6c0b6b082471d47cb602751f8b90d6a73", 0x19, 0x8490, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r3, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r5, 0x2007ffc) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) read(r6, &(0x7f0000000100)=""/51, 0x33) sendfile(r5, r5, 0x0, 0x800000009) 252.235026ms ago: executing program 2 (id=1053): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 235.101096ms ago: executing program 2 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 155.311777ms ago: executing program 4 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 154.860757ms ago: executing program 2 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 137.784528ms ago: executing program 4 (id=1057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a3200000000"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x700, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 110.093698ms ago: executing program 2 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x40014) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000100)=ANY=[], 0x835, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000c40)={{r1}, 0x0, 0xe, @inherit={0x58, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000020000000000000032000000000000000200f7ff0000000011000000000000000400000000000000929b00000000000000000000000000000300000000000000000000000000a000ff03000000000000"]}, @name="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"}) syz_emit_ethernet(0x6e, &(0x7f0000001840)=ANY=[@ANYBLOB="b931b2d41475aaaaaaaaaa0086dd602e5cea00383c00fc000000000000000000000000000000ff0200000000000000000000000000010c03000000000000c910fe"], 0x0) 109.219918ms ago: executing program 5 (id=1059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 49.496949ms ago: executing program 3 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") unlink(&(0x7f0000000180)='./file1\x00') 49.252929ms ago: executing program 5 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x7) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 48.917809ms ago: executing program 2 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 19.16462ms ago: executing program 5 (id=1063): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='sys_enter\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000900)=@urb_type_iso={0x0, {0x2, 0x1}, 0x6, 0x40, &(0x7f0000000340)="4c8ab21216b7471e04f2d0e2d1e97f5e788055348ee55624d60a8189de7110601bc268425c7903008f2b9c3a892c6349713907fdc28d5137e0f5ca1b77636b1cf492b71df62d9f4226ce282fa5cdb55805beac3ba55190f1e7dac421edc101d2243082806a9ea03adcd2412d1d29408e767a415a45dcef0a49c32846a1d2bb437ea43303f8869158357f", 0x8a, 0x8b12, 0x468, 0x57, 0x7, 0x9, &(0x7f0000000400)="6a4d26dcd836d080bb924272b70a684104d0dda53b1a90e9064b751c6567ae8407699029d20329aef52f8849c0429d3a43568b3e994270f4a4990052374321ae866e6ca35d31c77741d459ebccb282075ac36deccdddca4e6e121e069a27479d8c6564176d8a65231f8ca5deb0b2ced76159e87c5a4636ad2f36c454f393e21185e751464c5fa0313bc741d5397eb4", [{0x1ff, 0x1, 0xd}, {0x9, 0x5, 0x101}, {0x6b52, 0x100, 0x5}, {0x3, 0x2, 0x1}, {0x6, 0x0, 0x8}, {0x9, 0x7f, 0x80}, {0x7, 0x7, 0x1000}, {0xd, 0x2, 0xd4}, {0x9, 0x0, 0xfffffffd}, {0x4, 0x3, 0x1}, {0x1, 0xd2, 0xf}, {0x6, 0x0, 0x16ee}, {0x6, 0x0, 0x9}, {0x5e, 0x0, 0x3}, {0x5, 0x7, 0x401}, {0x2, 0xd6, 0x5}, {0x1, 0x7, 0x2}, {0x1, 0x3, 0xa}, {0x5, 0x5, 0x4}, {0x8001, 0xbbb9, 0x4}, {0x4, 0x2, 0x9}, {0x9, 0x6, 0x6c}, {0x7, 0x101, 0x6}, {0x4a, 0x5, 0x7}, {0x9, 0x7}, {0x8, 0x3, 0x8}, {0x7, 0x2, 0x1}, {0x80000000, 0xb, 0x6}, {0x9, 0x8347, 0x8}, {0x0, 0x888}, {0x31d1bafd, 0x7, 0x56}, {0x9, 0x5, 0x8}, {0x74e, 0xca, 0x8000}, {0x1ff, 0x1, 0x7fb}, {0x1ff, 0x80000001, 0x3}, {0x69ef, 0xc75, 0x9}, {0x7fffffff, 0x8, 0x4}, {0x80000001, 0x3, 0x1ff}, {0xffffffff, 0x0, 0x1b}, {0x12, 0x7fffffff}, {0xced7, 0xfff, 0x80}, {0x9, 0x0, 0x9}, {0x0, 0xbffa, 0xa92}, {0x90, 0xffff, 0x7}, {0x6, 0x1000, 0x5}, {0x4, 0x2, 0x880}, {0x4, 0x6, 0x8000}, {0x5, 0x2, 0x400}, {0xf, 0x3ff, 0x4}, {0x4, 0x1, 0x9}, {0x2, 0x2, 0x6}, {0x7, 0x7fffffff}, {0x6, 0xfff, 0xdcde}, {0x373, 0x7fffffff, 0xf}, {0x9, 0xf, 0x4}, {0x1000, 0x5, 0xfff}, {0x8001, 0x10e, 0xfffff1a8}, {0x6, 0xd, 0xe}, {0x3, 0x7, 0x2}, {0x2, 0x80000000, 0x20f3824b}, {0x400ffff, 0x4, 0x9}, {0xdb5, 0x4, 0x1}, {0x8001, 0x20000003, 0xa}, {0x2, 0x3, 0x7}, {0x3, 0x3ff, 0x8}, {0x5, 0x6, 0x624b3b25}, {0x2, 0x0, 0x5}, {0x2, 0xa, 0xffffffff}, {0xe, 0x4, 0x800}, {0x4, 0x2, 0x7}, {0x1b8, 0x8, 0x685}, {0x8, 0xa76, 0x3d8a}, {0x3b51, 0x4}, {0x1, 0x5, 0x3}, {0x100, 0x7, 0x3ff}, {0x10000, 0x8, 0x5}, {0x800, 0x1, 0x4}, {0x800, 0x0, 0xfffffff8}, {0x6, 0x7, 0x5}, {0x5, 0x8, 0x80000001}, {0xf65, 0x7b, 0x9}, {0x80000000, 0xa0000000, 0x7f}, {0x1, 0xc, 0x7ff}, {0x0, 0xfffffffe, 0x8}, {0x400, 0x7, 0xb267}, {0x0, 0x5, 0x9}, {0x8, 0x6, 0x9}]}) rt_sigprocmask(0x1, &(0x7f0000000600), &(0x7f00000006c0), 0x8) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8041) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mknodat$null(r3, &(0x7f00000005c0)='./file0/file0\x00', 0x8000, 0x103) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r9, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) lseek(r4, 0x0, 0x4) sendfile(r4, r4, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 0s ago: executing program 2 (id=1064): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') kernel console output (not intermixed with test programs): =0x7f6ff486e9a9 code=0x7ffc0000 [ 37.568171][ T3897] nfs4: Bad value for 'source' [ 37.691476][ T3919] loop0: detected capacity change from 0 to 256 [ 37.698031][ T3917] syz.3.162 uses obsolete (PF_INET,SOCK_PACKET) [ 37.713269][ T3917] program syz.3.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.730156][ T3919] atomic_op ffff8881195c3128 conn xmit_atomic 0000000000000000 [ 37.741266][ T3919] __nla_validate_parse: 11 callbacks suppressed [ 37.741355][ T3919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.163'. [ 37.930234][ T3950] nfs4: Bad value for 'source' [ 38.000207][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 38.036200][ T3960] loop2: detected capacity change from 0 to 512 [ 38.075353][ T3960] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c0a8, mo2=0002] [ 38.085976][ T3960] System zones: 0-2, 18-18, 34-35 [ 38.103245][ T3960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.136566][ T3960] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.177630][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 38.238677][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.329749][ T3991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2833 sclass=netlink_route_socket pid=3991 comm=syz.4.189 [ 38.425148][ T3991] usb usb8: usbfs: process 3991 (syz.4.189) did not claim interface 3 before use [ 38.445719][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 38.466254][ T4008] SELinux: syz.3.197 (4008) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 38.474187][ T4004] loop1: detected capacity change from 0 to 1024 [ 38.557996][ T4013] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 38.569946][ T4018] program syz.2.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.589783][ T4016] xt_connbytes: Forcing CT accounting to be enabled [ 38.596644][ T4016] Cannot find set identified by id 0 to match [ 38.607205][ T4016] validate_nla: 1 callbacks suppressed [ 38.607220][ T4016] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 38.620487][ T4016] netlink: 224 bytes leftover after parsing attributes in process `syz.1.200'. [ 38.740896][ T4036] loop0: detected capacity change from 0 to 128 [ 38.759698][ T4036] syz.0.208: attempt to access beyond end of device [ 38.759698][ T4036] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 38.825605][ T4046] capability: warning: `syz.1.213' uses deprecated v2 capabilities in a way that may be insecure [ 38.844746][ T4049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 38.910827][ T4055] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.918783][ T4055] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 38.922878][ T4058] netlink: 14 bytes leftover after parsing attributes in process `syz.1.215'. [ 39.020680][ T4067] wireguard0: entered promiscuous mode [ 39.026474][ T4067] wireguard0: entered allmulticast mode [ 39.059424][ T4073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 39.110719][ T4075] netlink: 9 bytes leftover after parsing attributes in process `syz.4.225'. [ 39.119931][ T4075] 1·: renamed from 70· (while UP) [ 39.122508][ T4081] netlink: 14 bytes leftover after parsing attributes in process `syz.0.227'. [ 39.125911][ T4075] FAULT_INJECTION: forcing a failure. [ 39.125911][ T4075] name failslab, interval 1, probability 0, space 0, times 0 [ 39.147162][ T4075] CPU: 0 UID: 0 PID: 4075 Comm: syz.4.225 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 39.147200][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.147236][ T4075] Call Trace: [ 39.147245][ T4075] [ 39.147254][ T4075] __dump_stack+0x1d/0x30 [ 39.147281][ T4075] dump_stack_lvl+0xe8/0x140 [ 39.147303][ T4075] dump_stack+0x15/0x1b [ 39.147323][ T4075] should_fail_ex+0x265/0x280 [ 39.147433][ T4075] should_failslab+0x8c/0xb0 [ 39.147459][ T4075] kmem_cache_alloc_noprof+0x50/0x310 [ 39.147488][ T4075] ? __kernfs_new_node+0x6d/0x350 [ 39.147587][ T4075] __kernfs_new_node+0x6d/0x350 [ 39.147617][ T4075] ? string+0x202/0x220 [ 39.147642][ T4075] ? vsnprintf+0x829/0x890 [ 39.147724][ T4075] kernfs_new_node+0xd0/0x140 [ 39.147758][ T4075] kernfs_create_link+0x70/0x130 [ 39.147783][ T4075] sysfs_do_create_link_sd+0x6a/0x100 [ 39.147876][ T4075] sysfs_create_link+0x51/0x70 [ 39.147909][ T4075] netdev_adjacent_rename_links+0x263/0x2c0 [ 39.148002][ T4075] ? device_rename+0x16e/0x180 [ 39.148034][ T4075] ? device_rename+0x16e/0x180 [ 39.148068][ T4075] netif_change_name+0x24c/0x6b0 [ 39.148179][ T4075] ? irq_work_queue+0x93/0x100 [ 39.148218][ T4075] ? nla_strscpy+0xec/0x120 [ 39.148251][ T4075] do_setlink+0x80b/0x2810 [ 39.148322][ T4075] ? update_curr+0x16e/0x320 [ 39.148349][ T4075] ? pick_task_fair+0xd0/0x130 [ 39.148370][ T4075] ? pick_next_task_fair+0x20/0x2b0 [ 39.148393][ T4075] ? _raw_spin_unlock+0x26/0x50 [ 39.148451][ T4075] ? __schedule+0x804/0xb30 [ 39.148475][ T4075] ? ns_capable+0x7d/0xb0 [ 39.148536][ T4075] rtnl_newlink+0xe75/0x12d0 [ 39.148560][ T4075] ? xas_load+0x413/0x430 [ 39.148593][ T4075] ? xas_load+0x413/0x430 [ 39.148653][ T4075] ? perf_swevent_event+0x22f/0x450 [ 39.148679][ T4075] ? __memcg_slab_free_hook+0x135/0x230 [ 39.148715][ T4075] ? __kfree_skb+0x109/0x150 [ 39.148750][ T4075] ? __rcu_read_unlock+0x4f/0x70 [ 39.148841][ T4075] ? avc_has_perm_noaudit+0x1b1/0x200 [ 39.148872][ T4075] ? selinux_capable+0x1f9/0x270 [ 39.148933][ T4075] ? security_capable+0x83/0x90 [ 39.148963][ T4075] ? ns_capable+0x7d/0xb0 [ 39.148981][ T4075] ? __pfx_rtnl_newlink+0x10/0x10 [ 39.149006][ T4075] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 39.149034][ T4075] netlink_rcv_skb+0x120/0x220 [ 39.149129][ T4075] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 39.149156][ T4075] rtnetlink_rcv+0x1c/0x30 [ 39.149174][ T4075] netlink_unicast+0x5a8/0x680 [ 39.149232][ T4075] netlink_sendmsg+0x58b/0x6b0 [ 39.149253][ T4075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.149273][ T4075] __sock_sendmsg+0x145/0x180 [ 39.149299][ T4075] sock_write_iter+0x165/0x1b0 [ 39.149328][ T4075] do_iter_readv_writev+0x421/0x4c0 [ 39.149366][ T4075] vfs_writev+0x2df/0x8b0 [ 39.149399][ T4075] do_writev+0xe7/0x210 [ 39.149443][ T4075] __x64_sys_writev+0x45/0x50 [ 39.149461][ T4075] x64_sys_call+0x2006/0x2fb0 [ 39.149486][ T4075] do_syscall_64+0xd2/0x200 [ 39.149503][ T4075] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.149567][ T4075] ? clear_bhb_loop+0x40/0x90 [ 39.149593][ T4075] ? clear_bhb_loop+0x40/0x90 [ 39.149617][ T4075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.149651][ T4075] RIP: 0033:0x7fcdb37ae9a9 [ 39.149714][ T4075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.149735][ T4075] RSP: 002b:00007fcdb1e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 39.149763][ T4075] RAX: ffffffffffffffda RBX: 00007fcdb39d5fa0 RCX: 00007fcdb37ae9a9 [ 39.149776][ T4075] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000006 [ 39.149790][ T4075] RBP: 00007fcdb1e17090 R08: 0000000000000000 R09: 0000000000000000 [ 39.149805][ T4075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.149871][ T4075] R13: 0000000000000000 R14: 00007fcdb39d5fa0 R15: 00007ffeeca92bb8 [ 39.149891][ T4075] [ 39.541732][ T4075] 1·: entered allmulticast mode [ 39.546717][ T4075] hsr_slave_0: entered allmulticast mode [ 39.552387][ T4075] hsr_slave_1: entered allmulticast mode [ 39.558888][ T4075] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 39.574983][ T4081] hsr_slave_0: left promiscuous mode [ 39.581021][ T4081] hsr_slave_1: left promiscuous mode [ 39.608422][ T4075] syz.4.225 (4075) used greatest stack depth: 9928 bytes left [ 39.887579][ T4121] loop2: detected capacity change from 0 to 1024 [ 39.920353][ T4121] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.920384][ T4128] loop1: detected capacity change from 0 to 256 [ 39.931409][ T4121] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.961323][ T4121] JBD2: no valid journal superblock found [ 39.967167][ T4121] EXT4-fs (loop2): Could not load journal inode [ 39.999821][ T4128] atomic_op ffff888119c51928 conn xmit_atomic 0000000000000000 [ 40.030454][ T4132] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.037744][ T4132] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.075583][ T4132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.087358][ T4132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.112877][ T4132] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.121882][ T4132] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.131129][ T4132] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.140266][ T4132] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.182210][ T4144] nfs4: Bad value for 'source' [ 40.233806][ T4150] loop4: detected capacity change from 0 to 1024 [ 40.242248][ T4150] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.253586][ T4150] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.276795][ T4150] JBD2: no valid journal superblock found [ 40.282622][ T4150] EXT4-fs (loop4): Could not load journal inode [ 40.354615][ T4160] nfs4: Bad value for 'source' [ 40.455157][ T4167] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 40.529876][ T4150] loop4: detected capacity change from 0 to 1024 [ 40.573593][ T4176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 40.599421][ T4174] loop0: detected capacity change from 0 to 2048 [ 40.640158][ T4172] loop2: detected capacity change from 0 to 1024 [ 40.651373][ T4172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.679325][ T3640] loop0: p2 < > p3 < > [ 40.683686][ T3640] loop0: partition table partially beyond EOD, truncated [ 40.705581][ T4150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.730258][ T3640] loop0: p2 start 4278190080 is beyond EOD, truncated [ 40.787454][ T4150] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.256: Allocating blocks 449-513 which overlap fs metadata [ 40.882727][ T4150] infiniband syz2: set down [ 40.887454][ T4150] infiniband syz2: added veth0_to_bond [ 40.898769][ T4172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.937789][ T4150] RDS/IB: syz2: added [ 40.943524][ T4150] smc: adding ib device syz2 with port count 1 [ 40.951011][ T4150] smc: ib device syz2 port 1 has pnetid [ 40.971705][ T4191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.112039][ T4149] EXT4-fs (loop4): pa ffff888105334070: logic 48, phys. 177, len 21 [ 41.120422][ T4149] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 41.198296][ T4174] loop0: p2 < > p3 < > [ 41.202686][ T4174] loop0: partition table partially beyond EOD, truncated [ 41.230867][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.255429][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.294120][ T4174] loop0: p2 start 4278190080 is beyond EOD, truncated [ 41.315510][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.462912][ T4206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.474029][ T4206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.495804][ T4206] bond0 (unregistering): Released all slaves [ 41.517304][ T3386] srz1: Port: 1 Link DOWN [ 41.582345][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.651905][ T4215] netlink: 'syz.4.276': attribute type 5 has an invalid length. [ 41.711363][ T4229] loop4: detected capacity change from 0 to 256 [ 41.719164][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 41.719180][ T29] audit: type=1400 audit(1752860866.315:470): avc: denied { create } for pid=4221 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.725734][ T4222] loop3: detected capacity change from 0 to 128 [ 41.750736][ T29] audit: type=1326 audit(1752860866.315:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c000de9a9 code=0x7ffc0000 [ 41.774586][ T29] audit: type=1326 audit(1752860866.315:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c000de9a9 code=0x7ffc0000 [ 41.780909][ T4232] loop1: detected capacity change from 0 to 1024 [ 41.798098][ T29] audit: type=1326 audit(1752860866.315:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3c000de9a9 code=0x7ffc0000 [ 41.827777][ T29] audit: type=1326 audit(1752860866.315:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c000de9e3 code=0x7ffc0000 [ 41.851115][ T29] audit: type=1326 audit(1752860866.315:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3c000dd45f code=0x7ffc0000 [ 41.874531][ T29] audit: type=1326 audit(1752860866.315:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3c000dea37 code=0x7ffc0000 [ 41.898148][ T29] audit: type=1326 audit(1752860866.325:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c000dd310 code=0x7ffc0000 [ 41.921692][ T29] audit: type=1326 audit(1752860866.325:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c000de5ab code=0x7ffc0000 [ 41.948752][ T29] audit: type=1326 audit(1752860866.405:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c000dd60a code=0x7ffc0000 [ 41.974734][ T4229] atomic_op ffff888119e7a128 conn xmit_atomic 0000000000000000 [ 42.002611][ T4232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.053586][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.055414][ T4248] loop2: detected capacity change from 0 to 256 [ 42.076799][ T4248] atomic_op ffff888119c6c928 conn xmit_atomic 0000000000000000 [ 42.361347][ T4278] blktrace: Concurrent blktraces are not allowed on loop9 [ 42.658566][ T4298] 9pnet_fd: Insufficient options for proto=fd [ 42.760757][ T4305] loop2: detected capacity change from 0 to 1024 [ 42.807364][ T4305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.881031][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.973332][ T4317] loop0: detected capacity change from 0 to 512 [ 42.993509][ T4317] EXT4-fs: Mount option(s) incompatible with ext2 [ 43.058643][ T4321] loop2: detected capacity change from 0 to 512 [ 43.084533][ T4321] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.115154][ T4321] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.323: bg 0: block 248: padding at end of block bitmap is not set [ 43.149135][ T4321] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.323: Failed to acquire dquot type 1 [ 43.175746][ T4321] EXT4-fs (loop2): 1 truncate cleaned up [ 43.185446][ T4321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.239762][ T4258] syz.3.296 (4258) used greatest stack depth: 6952 bytes left [ 43.248411][ T4321] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 43.285968][ T4321] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.288796][ T4331] loop3: detected capacity change from 0 to 256 [ 43.337919][ T4331] atomic_op ffff8881040cc128 conn xmit_atomic 0000000000000000 [ 43.365046][ T4331] __nla_validate_parse: 19 callbacks suppressed [ 43.365065][ T4331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.327'. [ 43.391933][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.410108][ T4338] nfs4: Bad value for 'source' [ 43.478508][ T4345] loop3: detected capacity change from 0 to 512 [ 43.483552][ T4340] mmap: syz.2.330 (4340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.507275][ T4345] EXT4-fs: Ignoring removed nobh option [ 43.547026][ T4345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.560091][ T4345] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.575656][ T4345] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 43.603796][ T4345] FAULT_INJECTION: forcing a failure. [ 43.603796][ T4345] name failslab, interval 1, probability 0, space 0, times 0 [ 43.616492][ T4345] CPU: 0 UID: 0 PID: 4345 Comm: syz.3.334 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 43.616529][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.616564][ T4345] Call Trace: [ 43.616573][ T4345] [ 43.616582][ T4345] __dump_stack+0x1d/0x30 [ 43.616610][ T4345] dump_stack_lvl+0xe8/0x140 [ 43.616684][ T4345] dump_stack+0x15/0x1b [ 43.616705][ T4345] should_fail_ex+0x265/0x280 [ 43.616775][ T4345] should_failslab+0x8c/0xb0 [ 43.616865][ T4345] __kmalloc_noprof+0xa5/0x3e0 [ 43.616898][ T4345] ? ext4_xattr_block_set+0x24f/0x1a30 [ 43.617019][ T4345] ext4_xattr_block_set+0x24f/0x1a30 [ 43.617158][ T4345] ? errseq_check+0x2c/0x50 [ 43.617253][ T4345] ext4_xattr_set_handle+0xa4f/0xe70 [ 43.617295][ T4345] ext4_initxattrs+0x62/0xc0 [ 43.617323][ T4345] security_inode_init_security+0x259/0x330 [ 43.617355][ T4345] ? __pfx_ext4_initxattrs+0x10/0x10 [ 43.617455][ T4345] ext4_init_security+0x34/0x50 [ 43.617482][ T4345] __ext4_new_inode+0x20fb/0x22e0 [ 43.617513][ T4345] ext4_create+0x16e/0x2f0 [ 43.617580][ T4345] ? __pfx_ext4_create+0x10/0x10 [ 43.617610][ T4345] path_openat+0x1102/0x2170 [ 43.617647][ T4345] do_filp_open+0x109/0x230 [ 43.617716][ T4345] do_sys_openat2+0xa6/0x110 [ 43.617825][ T4345] __x64_sys_creat+0x65/0x90 [ 43.617958][ T4345] x64_sys_call+0x114d/0x2fb0 [ 43.618025][ T4345] do_syscall_64+0xd2/0x200 [ 43.618046][ T4345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.618117][ T4345] ? clear_bhb_loop+0x40/0x90 [ 43.618227][ T4345] ? clear_bhb_loop+0x40/0x90 [ 43.618248][ T4345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.618270][ T4345] RIP: 0033:0x7f3c000de9a9 [ 43.618293][ T4345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.618359][ T4345] RSP: 002b:00007f3bfe73f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 43.618378][ T4345] RAX: ffffffffffffffda RBX: 00007f3c00305fa0 RCX: 00007f3c000de9a9 [ 43.618391][ T4345] RDX: 0000000000000000 RSI: 0000000000000180 RDI: 0000200000000280 [ 43.618403][ T4345] RBP: 00007f3bfe73f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.618416][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.618430][ T4345] R13: 0000000000000000 R14: 00007f3c00305fa0 R15: 00007ffc90e31ae8 [ 43.618480][ T4345] [ 43.626288][ T4352] loop2: detected capacity change from 0 to 1024 [ 43.873102][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.910212][ T4352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.938947][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.162932][ T4377] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.216921][ T4377] loop0: detected capacity change from 0 to 1024 [ 44.246810][ T4377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.258127][ T4387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4387 comm=syz.3.351 [ 44.310806][ T4377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.466130][ T4404] loop2: detected capacity change from 0 to 2048 [ 44.497040][ T4404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.577906][ T4404] tmpfs: Unknown parameter 'grpquota' [ 44.597409][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.630395][ T4415] nfs4: Bad value for 'source' [ 44.665880][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.677205][ T4417] loop3: detected capacity change from 0 to 164 [ 44.695676][ T4417] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.734307][ T4417] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.769799][ T4417] rock: directory entry would overflow storage [ 44.776197][ T4417] rock: sig=0x4f50, size=4, remaining=3 [ 44.781900][ T4417] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 44.788929][ T4425] loop2: detected capacity change from 0 to 1024 [ 44.809321][ T4428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 44.822710][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 44.833714][ T4425] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.844681][ T4425] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.875844][ T4425] JBD2: no valid journal superblock found [ 44.881853][ T4425] EXT4-fs (loop2): Could not load journal inode [ 44.915049][ T4434] loop3: detected capacity change from 0 to 256 [ 44.950475][ T4434] FAT-fs (loop3): Directory bread(block 64) failed [ 44.957427][ T4434] FAT-fs (loop3): Directory bread(block 65) failed [ 44.964199][ T4434] FAT-fs (loop3): Directory bread(block 66) failed [ 44.975813][ T4434] FAT-fs (loop3): Directory bread(block 67) failed [ 44.983042][ T4437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4437 comm=syz.2.372 [ 44.996689][ T4434] FAT-fs (loop3): Directory bread(block 68) failed [ 45.003512][ T4434] FAT-fs (loop3): Directory bread(block 69) failed [ 45.010447][ T4434] FAT-fs (loop3): Directory bread(block 70) failed [ 45.037555][ T4434] FAT-fs (loop3): Directory bread(block 71) failed [ 45.045292][ T4434] FAT-fs (loop3): Directory bread(block 72) failed [ 45.053260][ T4434] FAT-fs (loop3): Directory bread(block 73) failed [ 45.101557][ T4449] nfs4: Bad value for 'source' [ 45.159932][ T4458] loop2: detected capacity change from 0 to 1024 [ 45.179761][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.230841][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.242339][ T4467] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 45.251289][ T4466] loop1: detected capacity change from 0 to 2048 [ 45.275582][ T4469] loop2: detected capacity change from 0 to 256 [ 45.278447][ T4466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 45.308401][ T4469] atomic_op ffff888119c6e928 conn xmit_atomic 0000000000000000 [ 45.493773][ T3310] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 45.525390][ T4486] loop2: detected capacity change from 0 to 256 [ 45.528084][ T3310] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 45.544117][ T4488] nfs4: Bad value for 'source' [ 45.567601][ T4486] atomic_op ffff888122336928 conn xmit_atomic 0000000000000000 [ 45.797454][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 45.798478][ T4500] atomic_op ffff888122336d28 conn xmit_atomic 0000000000000000 [ 45.821757][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 46.072489][ T4513] loop3: detected capacity change from 0 to 1024 [ 46.111556][ T4513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.184004][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 46.187451][ T4482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 46.207969][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.247734][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.309452][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.359394][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.450968][ T48] bridge_slave_1: left allmulticast mode [ 46.456705][ T48] bridge_slave_1: left promiscuous mode [ 46.462853][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.471392][ T48] bridge_slave_0: left allmulticast mode [ 46.477222][ T48] bridge_slave_0: left promiscuous mode [ 46.482849][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.541522][ T4536] FAULT_INJECTION: forcing a failure. [ 46.541522][ T4536] name failslab, interval 1, probability 0, space 0, times 0 [ 46.554589][ T4536] CPU: 0 UID: 0 PID: 4536 Comm: syz.2.407 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 46.554617][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.554752][ T4536] Call Trace: [ 46.554772][ T4536] [ 46.554780][ T4536] __dump_stack+0x1d/0x30 [ 46.554806][ T4536] dump_stack_lvl+0xe8/0x140 [ 46.554826][ T4536] dump_stack+0x15/0x1b [ 46.554843][ T4536] should_fail_ex+0x265/0x280 [ 46.554932][ T4536] should_failslab+0x8c/0xb0 [ 46.554957][ T4536] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 46.554997][ T4536] ? __d_alloc+0x3d/0x350 [ 46.555022][ T4536] __d_alloc+0x3d/0x350 [ 46.555095][ T4536] ? __rcu_read_unlock+0x4f/0x70 [ 46.555123][ T4536] d_alloc_parallel+0x53/0xc40 [ 46.555160][ T4536] ? selinux_inode_permission+0x532/0x620 [ 46.555186][ T4536] ? make_vfsuid+0x49/0xa0 [ 46.555210][ T4536] ? lockref_get_not_dead+0x120/0x1c0 [ 46.555236][ T4536] ? __rcu_read_unlock+0x4f/0x70 [ 46.555321][ T4536] __lookup_slow+0x8c/0x250 [ 46.555352][ T4536] lookup_slow+0x3c/0x60 [ 46.555401][ T4536] walk_component+0x1ec/0x220 [ 46.555427][ T4536] path_lookupat+0xfe/0x2a0 [ 46.555454][ T4536] filename_lookup+0x147/0x340 [ 46.555624][ T4536] kern_path+0x3b/0x130 [ 46.555651][ T4536] do_move_mount_old+0x62/0xe0 [ 46.555691][ T4536] path_mount+0x54c/0xb20 [ 46.555728][ T4536] ? user_path_at+0x109/0x130 [ 46.555810][ T4536] __se_sys_mount+0x28f/0x2e0 [ 46.555843][ T4536] ? fput+0x8f/0xc0 [ 46.555874][ T4536] __x64_sys_mount+0x67/0x80 [ 46.555939][ T4536] x64_sys_call+0xd36/0x2fb0 [ 46.555953][ T4536] do_syscall_64+0xd2/0x200 [ 46.555966][ T4536] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.555983][ T4536] ? clear_bhb_loop+0x40/0x90 [ 46.555997][ T4536] ? clear_bhb_loop+0x40/0x90 [ 46.556011][ T4536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.556047][ T4536] RIP: 0033:0x7fea5c9be9a9 [ 46.556057][ T4536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.556068][ T4536] RSP: 002b:00007fea5b01f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 46.556081][ T4536] RAX: ffffffffffffffda RBX: 00007fea5cbe5fa0 RCX: 00007fea5c9be9a9 [ 46.556088][ T4536] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 46.556096][ T4536] RBP: 00007fea5b01f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.556164][ T4536] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 46.556239][ T4536] R13: 0000000000000000 R14: 00007fea5cbe5fa0 R15: 00007ffcfda8f758 [ 46.556250][ T4536] [ 46.833270][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.909132][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 46.909147][ T29] audit: type=1400 audit(1752860871.505:776): avc: denied { search } for pid=3034 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.937193][ T29] audit: type=1400 audit(1752860871.505:777): avc: denied { search } for pid=3034 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.959128][ T29] audit: type=1400 audit(1752860871.505:778): avc: denied { search } for pid=3034 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.964968][ T4546] FAULT_INJECTION: forcing a failure. [ 46.964968][ T4546] name failslab, interval 1, probability 0, space 0, times 0 [ 46.980875][ T29] audit: type=1400 audit(1752860871.505:779): avc: denied { read } for pid=3034 comm="dhcpcd" name="n27" dev="tmpfs" ino=2571 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.980955][ T29] audit: type=1400 audit(1752860871.505:780): avc: denied { open } for pid=3034 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=2571 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.018298][ T29] audit: type=1400 audit(1752860871.615:781): avc: denied { getattr } for pid=3034 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=2571 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.066296][ T4546] CPU: 0 UID: 0 PID: 4546 Comm: syz.4.411 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 47.066329][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.066344][ T4546] Call Trace: [ 47.066350][ T4546] [ 47.066357][ T4546] __dump_stack+0x1d/0x30 [ 47.066440][ T4546] dump_stack_lvl+0xe8/0x140 [ 47.066463][ T4546] dump_stack+0x15/0x1b [ 47.066480][ T4546] should_fail_ex+0x265/0x280 [ 47.066511][ T4546] should_failslab+0x8c/0xb0 [ 47.066585][ T4546] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 47.066669][ T4546] ? sock_alloc_inode+0x34/0xa0 [ 47.066695][ T4546] ? __pfx_sock_alloc_inode+0x10/0x10 [ 47.066763][ T4546] sock_alloc_inode+0x34/0xa0 [ 47.066796][ T4546] alloc_inode+0x40/0x170 [ 47.066897][ T4546] do_accept+0xa0/0x3a0 [ 47.066933][ T4546] io_accept+0x1b9/0x450 [ 47.066972][ T4546] __io_issue_sqe+0xfb/0x2e0 [ 47.067000][ T4546] ? io_assign_file+0x12d/0x200 [ 47.067086][ T4546] io_issue_sqe+0x53/0x970 [ 47.067117][ T4546] ? io_accept_prep+0x27b/0x2a0 [ 47.067150][ T4546] io_submit_sqes+0x667/0xfd0 [ 47.067182][ T4546] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 47.067276][ T4546] ? 0xffffffff81000000 [ 47.067291][ T4546] ? __rcu_read_unlock+0x4f/0x70 [ 47.067318][ T4546] ? get_pid_task+0x96/0xd0 [ 47.067346][ T4546] ? proc_fail_nth_write+0x12d/0x160 [ 47.067381][ T4546] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 47.067487][ T4546] ? vfs_write+0x75e/0x8e0 [ 47.067519][ T4546] ? __rcu_read_unlock+0x4f/0x70 [ 47.067543][ T4546] ? __fget_files+0x184/0x1c0 [ 47.067644][ T4546] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 47.067676][ T4546] __x64_sys_io_uring_enter+0x78/0x90 [ 47.067763][ T4546] x64_sys_call+0x28c8/0x2fb0 [ 47.067796][ T4546] do_syscall_64+0xd2/0x200 [ 47.067829][ T4546] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.067909][ T4546] ? clear_bhb_loop+0x40/0x90 [ 47.067933][ T4546] ? clear_bhb_loop+0x40/0x90 [ 47.067966][ T4546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.068053][ T4546] RIP: 0033:0x7fcdb37ae9a9 [ 47.068138][ T4546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.068158][ T4546] RSP: 002b:00007fcdb1e17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 47.068180][ T4546] RAX: ffffffffffffffda RBX: 00007fcdb39d5fa0 RCX: 00007fcdb37ae9a9 [ 47.068193][ T4546] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000008 [ 47.068208][ T4546] RBP: 00007fcdb1e17090 R08: 0000000000000000 R09: 0000000000000000 [ 47.068222][ T4546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.068277][ T4546] R13: 0000000000000000 R14: 00007fcdb39d5fa0 R15: 00007ffeeca92bb8 [ 47.068296][ T4546] [ 47.083870][ T4521] chnl_net:caif_netlink_parms(): no params data found [ 47.123978][ T29] audit: type=1400 audit(1752860871.695:782): avc: denied { read open } for pid=4555 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.381146][ T29] audit: type=1400 audit(1752860871.695:783): avc: denied { getattr } for pid=4555 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.420623][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 47.446703][ T29] audit: type=1400 audit(1752860871.745:784): avc: denied { accept } for pid=4544 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.466157][ T29] audit: type=1400 audit(1752860871.845:785): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.553010][ T4578] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.571032][ T48] hsr_slave_0: left promiscuous mode [ 47.593585][ T48] hsr_slave_1: left promiscuous mode [ 47.608330][ T4587] loop3: detected capacity change from 0 to 1024 [ 47.622026][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.629729][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.639950][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.647701][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.657583][ T4595] loop2: detected capacity change from 0 to 256 [ 47.674452][ T48] veth1_macvtap: left promiscuous mode [ 47.680239][ T48] veth0_macvtap: left promiscuous mode [ 47.681516][ T4587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.689192][ T48] veth1_vlan: left promiscuous mode [ 47.704008][ T4593] loop4: detected capacity change from 0 to 512 [ 47.712355][ T48] veth0_vlan: left promiscuous mode [ 47.720819][ T4593] EXT4-fs: Ignoring removed oldalloc option [ 47.728808][ T4593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.742542][ T4593] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 47.752997][ T4593] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.423: invalid indirect mapped block 4294967295 (level 1) [ 47.769316][ T4593] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.423: invalid indirect mapped block 4294967295 (level 1) [ 47.786045][ T4593] EXT4-fs (loop4): 2 truncates cleaned up [ 47.792509][ T4593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.844287][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 47.857414][ T48] team0 (unregistering): Port device team_slave_1 removed [ 47.874425][ T48] team0 (unregistering): Port device team_slave_0 removed [ 47.910657][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.917838][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.925470][ T4521] bridge_slave_0: entered allmulticast mode [ 47.927448][ T4610] random: crng reseeded on system resumption [ 47.933057][ T4521] bridge_slave_0: entered promiscuous mode [ 47.953692][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.960985][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.969291][ T4521] bridge_slave_1: entered allmulticast mode [ 47.976178][ T4521] bridge_slave_1: entered promiscuous mode [ 48.003744][ T4521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.018264][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.018908][ T4521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.063615][ T4621] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.432'. [ 48.109088][ T4521] team0: Port device team_slave_0 added [ 48.122252][ T4628] netlink: 'syz.2.433': attribute type 4 has an invalid length. [ 48.146565][ T4521] team0: Port device team_slave_1 added [ 48.176347][ T4628] loop2: detected capacity change from 0 to 2048 [ 48.200043][ T4521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.207147][ T4521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.233407][ T4521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.249275][ T4019] Alternate GPT is invalid, using primary GPT. [ 48.253741][ T4642] loop4: detected capacity change from 0 to 512 [ 48.255917][ T4019] loop2: p1 p2 p3 [ 48.267621][ T4642] EXT4-fs: Ignoring removed oldalloc option [ 48.274223][ T4642] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.276355][ T4521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.287477][ T4642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.294269][ T4521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.330462][ T4521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.352452][ T4642] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 48.367161][ T4628] Alternate GPT is invalid, using primary GPT. [ 48.373589][ T4628] loop2: p1 p2 p3 [ 48.376465][ T4642] EXT4-fs (loop4): 1 truncate cleaned up [ 48.383662][ T4642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.397034][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.460922][ T4521] hsr_slave_0: entered promiscuous mode [ 48.472475][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 48.472468][ T4019] udevd[4019]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 48.487503][ T4521] hsr_slave_1: entered promiscuous mode [ 48.498917][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 48.539423][ T3640] udevd[3640]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 48.555718][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 48.575803][ T4019] udevd[4019]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 48.724242][ T4677] loop2: detected capacity change from 0 to 8192 [ 48.750192][ T4521] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.764093][ T4521] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.774949][ T4521] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.795285][ T4521] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.837647][ T4692] process 'syz.3.444' launched '/dev/fd/5' with NULL argv: empty string added [ 48.906372][ T4521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.938313][ T4521] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.961203][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 48.979887][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.987089][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.002440][ T4709] loop3: detected capacity change from 0 to 1024 [ 49.025755][ T4709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.045625][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.052733][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.073606][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 49.088926][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.197556][ T4723] loop4: detected capacity change from 0 to 1024 [ 49.232797][ T4723] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.244218][ T4723] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.287567][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 49.303495][ T4521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.315682][ T4723] JBD2: no valid journal superblock found [ 49.321465][ T4723] EXT4-fs (loop4): Could not load journal inode [ 49.332340][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 49.447918][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 49.456454][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 49.467780][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 49.760662][ T4521] veth0_vlan: entered promiscuous mode [ 49.772277][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.792270][ T4521] veth1_vlan: entered promiscuous mode [ 49.843284][ T4521] veth0_macvtap: entered promiscuous mode [ 49.850876][ T4521] veth1_macvtap: entered promiscuous mode [ 49.861820][ T4521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.878051][ T4521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.888282][ T4521] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.897052][ T4521] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.905907][ T4521] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.914681][ T4521] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.974175][ T4788] loop3: detected capacity change from 0 to 256 [ 50.025639][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 50.094995][ T4805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 50.104205][ T4810] nfs4: Bad value for 'source' [ 50.211302][ T4830] loop2: detected capacity change from 0 to 256 [ 50.217921][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 50.309361][ T4840] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 50.309361][ T4840] program syz.3.465 not setting count and/or reply_len properly [ 50.927728][ T4879] loop2: detected capacity change from 0 to 512 [ 50.957138][ T4879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.970222][ T4879] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.033273][ T4895] loop5: detected capacity change from 0 to 256 [ 51.036751][ T4893] FAULT_INJECTION: forcing a failure. [ 51.036751][ T4893] name failslab, interval 1, probability 0, space 0, times 0 [ 51.052263][ T4893] CPU: 1 UID: 0 PID: 4893 Comm: syz.3.485 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 51.052298][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.052369][ T4893] Call Trace: [ 51.052377][ T4893] [ 51.052387][ T4893] __dump_stack+0x1d/0x30 [ 51.052413][ T4893] dump_stack_lvl+0xe8/0x140 [ 51.052436][ T4893] dump_stack+0x15/0x1b [ 51.052454][ T4893] should_fail_ex+0x265/0x280 [ 51.052525][ T4893] should_failslab+0x8c/0xb0 [ 51.052548][ T4893] kmem_cache_alloc_noprof+0x50/0x310 [ 51.052606][ T4893] ? alloc_empty_file+0x76/0x200 [ 51.052638][ T4893] alloc_empty_file+0x76/0x200 [ 51.052662][ T4893] alloc_file_pseudo+0xc6/0x160 [ 51.052762][ T4893] __shmem_file_setup+0x1de/0x210 [ 51.052797][ T4893] shmem_file_setup+0x3b/0x50 [ 51.052847][ T4893] __se_sys_memfd_create+0x2c3/0x590 [ 51.052935][ T4893] __x64_sys_memfd_create+0x31/0x40 [ 51.052967][ T4893] x64_sys_call+0x122f/0x2fb0 [ 51.053051][ T4893] do_syscall_64+0xd2/0x200 [ 51.053071][ T4893] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.053150][ T4893] ? clear_bhb_loop+0x40/0x90 [ 51.053172][ T4893] ? clear_bhb_loop+0x40/0x90 [ 51.053194][ T4893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.053215][ T4893] RIP: 0033:0x7f3c000de9a9 [ 51.053232][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.053312][ T4893] RSP: 002b:00007f3bfe73ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 51.053330][ T4893] RAX: ffffffffffffffda RBX: 000000000000046b RCX: 00007f3c000de9a9 [ 51.053345][ T4893] RDX: 00007f3bfe73eef0 RSI: 0000000000000000 RDI: 00007f3c00161634 [ 51.053361][ T4893] RBP: 00002000000009c0 R08: 00007f3bfe73ebb7 R09: 00007f3bfe73ee40 [ 51.053388][ T4893] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 51.053403][ T4893] R13: 00007f3bfe73eef0 R14: 00007f3bfe73eeb0 R15: 0000200000000280 [ 51.053425][ T4893] [ 51.355344][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.408124][ T4900] tmpfs: Unknown parameter 'contextù' [ 51.438840][ T4908] openvswitch: netlink: Message has 6 unknown bytes. [ 51.447971][ T4903] loop5: detected capacity change from 0 to 164 [ 51.451020][ T4908] netlink: 'syz.0.491': attribute type 2 has an invalid length. [ 51.462592][ T4903] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.493370][ T4903] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.529436][ T4903] Symlink component flag not implemented [ 51.535205][ T4903] Symlink component flag not implemented [ 51.577785][ T4903] Symlink component flag not implemented (7) [ 51.584065][ T4903] Symlink component flag not implemented (116) [ 51.764392][ T4948] loop4: detected capacity change from 0 to 2048 [ 51.781578][ T4951] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 51.789526][ T4951] netlink: 'syz.3.502': attribute type 3 has an invalid length. [ 51.798507][ T4953] netlink: 'syz.2.505': attribute type 4 has an invalid length. [ 51.807439][ T4953] netlink: 'syz.2.505': attribute type 4 has an invalid length. [ 51.830549][ T4019] loop4: p2 p3 p7 [ 51.843102][ T4948] loop4: p2 p3 p7 [ 51.854376][ T2995] udevd[2995]: worker [4019] terminated by signal 33 (Unknown signal 33) [ 51.863073][ T2995] udevd[2995]: worker [4019] failed while handling '/devices/virtual/block/loop4' [ 51.891163][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 51.902554][ T3640] udevd[3640]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 51.983256][ T4964] loop4: detected capacity change from 0 to 256 [ 52.013220][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 52.013236][ T29] audit: type=1326 audit(1752860876.605:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4965 comm="syz.4.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdb37ae9a9 code=0x0 [ 52.251128][ T29] audit: type=1326 audit(1752860876.845:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 52.276757][ T29] audit: type=1326 audit(1752860876.845:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 52.300392][ T29] audit: type=1326 audit(1752860876.845:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 52.323906][ T29] audit: type=1326 audit(1752860876.845:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe24de05967 code=0x7ffc0000 [ 52.347316][ T29] audit: type=1326 audit(1752860876.845:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24ddaab89 code=0x7ffc0000 [ 52.370734][ T29] audit: type=1326 audit(1752860876.845:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe24de05967 code=0x7ffc0000 [ 52.394575][ T29] audit: type=1326 audit(1752860876.845:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24ddaab89 code=0x7ffc0000 [ 52.417986][ T29] audit: type=1326 audit(1752860876.845:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 52.441393][ T29] audit: type=1326 audit(1752860876.845:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 52.507771][ T4980] nfs4: Bad value for 'source' [ 52.728323][ T5017] FAULT_INJECTION: forcing a failure. [ 52.728323][ T5017] name failslab, interval 1, probability 0, space 0, times 0 [ 52.741054][ T5017] CPU: 1 UID: 0 PID: 5017 Comm: syz.3.529 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 52.741107][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.741155][ T5017] Call Trace: [ 52.741163][ T5017] [ 52.741172][ T5017] __dump_stack+0x1d/0x30 [ 52.741197][ T5017] dump_stack_lvl+0xe8/0x140 [ 52.741221][ T5017] dump_stack+0x15/0x1b [ 52.741243][ T5017] should_fail_ex+0x265/0x280 [ 52.741402][ T5017] should_failslab+0x8c/0xb0 [ 52.741428][ T5017] kmem_cache_alloc_node_noprof+0x57/0x320 [ 52.741455][ T5017] ? __alloc_skb+0x101/0x320 [ 52.741517][ T5017] __alloc_skb+0x101/0x320 [ 52.741551][ T5017] __pskb_copy_fclone+0x6c/0x750 [ 52.741578][ T5017] tipc_sk_mcast_rcv+0x3bb/0x920 [ 52.741680][ T5017] tipc_mcast_xmit+0x769/0xcb0 [ 52.741706][ T5017] ? tipc_msg_build+0x2fd/0x840 [ 52.741735][ T5017] tipc_send_group_bcast+0x5d9/0x6c0 [ 52.741841][ T5017] ? __pfx_woken_wake_function+0x10/0x10 [ 52.741871][ T5017] __tipc_sendmsg+0x186/0x1b00 [ 52.741897][ T5017] ? avc_has_perm+0xd3/0x150 [ 52.741947][ T5017] ? selinux_socket_sendmsg+0x175/0x1b0 [ 52.741979][ T5017] ? _raw_spin_unlock_bh+0x36/0x40 [ 52.742004][ T5017] ? lock_sock_nested+0x112/0x140 [ 52.742029][ T5017] tipc_sendmsg+0x3e/0x60 [ 52.742074][ T5017] ? __pfx_tipc_sendmsg+0x10/0x10 [ 52.742098][ T5017] __sock_sendmsg+0x145/0x180 [ 52.742124][ T5017] ____sys_sendmsg+0x345/0x4e0 [ 52.742229][ T5017] ___sys_sendmsg+0x17b/0x1d0 [ 52.742281][ T5017] __sys_sendmmsg+0x178/0x300 [ 52.742371][ T5017] __x64_sys_sendmmsg+0x57/0x70 [ 52.742405][ T5017] x64_sys_call+0x2f2f/0x2fb0 [ 52.742431][ T5017] do_syscall_64+0xd2/0x200 [ 52.742462][ T5017] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.742489][ T5017] ? clear_bhb_loop+0x40/0x90 [ 52.742512][ T5017] ? clear_bhb_loop+0x40/0x90 [ 52.742581][ T5017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.742606][ T5017] RIP: 0033:0x7f3c000de9a9 [ 52.742624][ T5017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.742654][ T5017] RSP: 002b:00007f3bfe73f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 52.742675][ T5017] RAX: ffffffffffffffda RBX: 00007f3c00305fa0 RCX: 00007f3c000de9a9 [ 52.742689][ T5017] RDX: 0000000000000001 RSI: 00002000000030c0 RDI: 0000000000000007 [ 52.742704][ T5017] RBP: 00007f3bfe73f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.742719][ T5017] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.742732][ T5017] R13: 0000000000000000 R14: 00007f3c00305fa0 R15: 00007ffc90e31ae8 [ 52.742771][ T5017] [ 52.742780][ T5017] tipc: Failed to clone mcast rcv buffer [ 53.115569][ T5041] loop4: detected capacity change from 0 to 256 [ 53.228795][ T5058] loop3: detected capacity change from 0 to 128 [ 53.249914][ T5058] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.287060][ T5058] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.395097][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.673384][ T5113] openvswitch: netlink: Message has 6 unknown bytes. [ 53.809083][ T5119] netlink: 'syz.4.563': attribute type 1 has an invalid length. [ 53.850402][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.941520][ T5119] bond0: (slave veth3): Enslaving as an active interface with a down link [ 54.150930][ T5129] loop3: detected capacity change from 0 to 1024 [ 54.228382][ T5133] __nla_validate_parse: 18 callbacks suppressed [ 54.228399][ T5133] netlink: 76 bytes leftover after parsing attributes in process `syz.2.569'. [ 54.259625][ T5129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.360287][ T5151] loop5: detected capacity change from 0 to 164 [ 54.372358][ T5151] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.455394][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.462708][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.470386][ T5156] bridge0: entered allmulticast mode [ 54.480352][ T5156] bridge_slave_1: left allmulticast mode [ 54.486092][ T5156] bridge_slave_1: left promiscuous mode [ 54.492150][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.506301][ T5156] bridge_slave_0: left allmulticast mode [ 54.512031][ T5156] bridge_slave_0: left promiscuous mode [ 54.517726][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.604411][ T5174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 54.613653][ T5177] loop2: detected capacity change from 0 to 256 [ 54.650496][ T5181] nfs4: Bad value for 'source' [ 54.651550][ T5182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 54.655915][ T5174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 54.668640][ T5182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 54.874800][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 54.900034][ T5207] loop5: detected capacity change from 0 to 1024 [ 54.906520][ T5211] loop4: detected capacity change from 0 to 256 [ 54.913805][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.935055][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 55.327212][ T5251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.609'. [ 55.420811][ T5258] netlink: 'syz.5.612': attribute type 4 has an invalid length. [ 55.428662][ T5258] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.612'. [ 55.480214][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.615'. [ 55.638067][ T5283] FAULT_INJECTION: forcing a failure. [ 55.638067][ T5283] name failslab, interval 1, probability 0, space 0, times 0 [ 55.650828][ T5283] CPU: 0 UID: 0 PID: 5283 Comm: syz.0.621 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 55.650906][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.650987][ T5283] Call Trace: [ 55.650994][ T5283] [ 55.651003][ T5283] __dump_stack+0x1d/0x30 [ 55.651027][ T5283] dump_stack_lvl+0xe8/0x140 [ 55.651046][ T5283] dump_stack+0x15/0x1b [ 55.651063][ T5283] should_fail_ex+0x265/0x280 [ 55.651165][ T5283] ? copy_ipcs+0xf5/0x3b0 [ 55.651266][ T5283] should_failslab+0x8c/0xb0 [ 55.651304][ T5283] __kmalloc_cache_noprof+0x4c/0x320 [ 55.651370][ T5283] ? inc_ucount+0xcb/0x140 [ 55.651474][ T5283] copy_ipcs+0xf5/0x3b0 [ 55.651501][ T5283] create_new_namespaces+0x12a/0x3d0 [ 55.651534][ T5283] unshare_nsproxy_namespaces+0xe8/0x120 [ 55.651567][ T5283] ksys_unshare+0x3d0/0x6d0 [ 55.651664][ T5283] ? ksys_write+0x192/0x1a0 [ 55.651693][ T5283] __x64_sys_unshare+0x1f/0x30 [ 55.651724][ T5283] x64_sys_call+0x2d4b/0x2fb0 [ 55.651755][ T5283] do_syscall_64+0xd2/0x200 [ 55.651854][ T5283] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.651880][ T5283] ? clear_bhb_loop+0x40/0x90 [ 55.652036][ T5283] ? clear_bhb_loop+0x40/0x90 [ 55.652061][ T5283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.652121][ T5283] RIP: 0033:0x7f6ff486e9a9 [ 55.652136][ T5283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.652155][ T5283] RSP: 002b:00007f6ff2ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 55.652177][ T5283] RAX: ffffffffffffffda RBX: 00007f6ff4a95fa0 RCX: 00007f6ff486e9a9 [ 55.652191][ T5283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 55.652205][ T5283] RBP: 00007f6ff2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.652278][ T5283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.652291][ T5283] R13: 0000000000000000 R14: 00007f6ff4a95fa0 R15: 00007ffcad43d7e8 [ 55.652310][ T5283] [ 55.978844][ T5306] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 56.040475][ T2995] udevd[2995]: worker [5222] terminated by signal 33 (Unknown signal 33) [ 56.062416][ T5320] nfs4: Bad value for 'source' [ 56.102593][ T3295] printk: udevd: 6 output lines suppressed due to ratelimiting [ 56.273770][ T5348] FAULT_INJECTION: forcing a failure. [ 56.273770][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 56.286622][ T5348] CPU: 1 UID: 0 PID: 5348 Comm: syz.3.646 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 56.286661][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.286675][ T5348] Call Trace: [ 56.286681][ T5348] [ 56.286734][ T5348] __dump_stack+0x1d/0x30 [ 56.286758][ T5348] dump_stack_lvl+0xe8/0x140 [ 56.286777][ T5348] dump_stack+0x15/0x1b [ 56.286794][ T5348] should_fail_ex+0x265/0x280 [ 56.286871][ T5348] ? find_get_pmu_context+0x58/0x450 [ 56.286904][ T5348] should_failslab+0x8c/0xb0 [ 56.286931][ T5348] __kmalloc_cache_noprof+0x4c/0x320 [ 56.286974][ T5348] find_get_pmu_context+0x58/0x450 [ 56.287034][ T5348] __se_sys_perf_event_open+0x93c/0x11c0 [ 56.287082][ T5348] __x64_sys_perf_event_open+0x67/0x80 [ 56.287111][ T5348] x64_sys_call+0x27ec/0x2fb0 [ 56.287138][ T5348] do_syscall_64+0xd2/0x200 [ 56.287159][ T5348] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.287226][ T5348] ? clear_bhb_loop+0x40/0x90 [ 56.287252][ T5348] ? clear_bhb_loop+0x40/0x90 [ 56.287278][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.287334][ T5348] RIP: 0033:0x7f3c000de9a9 [ 56.287349][ T5348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.287366][ T5348] RSP: 002b:00007f3bfe73f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 56.287477][ T5348] RAX: ffffffffffffffda RBX: 00007f3c00305fa0 RCX: 00007f3c000de9a9 [ 56.287490][ T5348] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000200000000180 [ 56.287502][ T5348] RBP: 00007f3bfe73f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.287514][ T5348] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 56.287526][ T5348] R13: 0000000000000000 R14: 00007f3c00305fa0 R15: 00007ffc90e31ae8 [ 56.287546][ T5348] [ 56.615847][ T5365] loop5: detected capacity change from 0 to 1024 [ 56.631393][ T5365] EXT4-fs: Ignoring removed bh option [ 56.653757][ T5365] ext4: Unknown parameter 'norecover' [ 56.702026][ T5376] loop4: detected capacity change from 0 to 4096 [ 56.743970][ T5376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.862844][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.960681][ T5411] tap0: tun_chr_ioctl cmd 1074025676 [ 56.966202][ T5411] tap0: owner set to 60928 [ 57.020683][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 57.020699][ T29] audit: type=1400 audit(1752860881.615:1217): avc: denied { sys_module } for pid=5410 comm="syz.4.665" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.054221][ T29] audit: type=1400 audit(1752860881.645:1218): avc: denied { bind } for pid=5410 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.073749][ T29] audit: type=1400 audit(1752860881.645:1219): avc: denied { setopt } for pid=5410 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.093254][ T29] audit: type=1400 audit(1752860881.645:1220): avc: denied { write } for pid=5410 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.121857][ T5436] loop2: detected capacity change from 0 to 256 [ 57.135609][ T5437] netlink: 'syz.5.675': attribute type 13 has an invalid length. [ 57.190483][ T29] audit: type=1400 audit(1752860881.695:1221): avc: denied { create } for pid=5427 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.210018][ T29] audit: type=1400 audit(1752860881.715:1222): avc: denied { write } for pid=5427 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.229468][ T29] audit: type=1400 audit(1752860881.725:1223): avc: denied { create } for pid=5427 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.249754][ T29] audit: type=1400 audit(1752860881.725:1224): avc: denied { write } for pid=5427 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.270073][ T29] audit: type=1400 audit(1752860881.725:1225): avc: denied { nlmsg_write } for pid=5427 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.290816][ T29] audit: type=1400 audit(1752860881.725:1226): avc: denied { bind } for pid=5427 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.312257][ T5447] FAULT_INJECTION: forcing a failure. [ 57.312257][ T5447] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.325655][ T5447] CPU: 1 UID: 0 PID: 5447 Comm: syz.3.681 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 57.325687][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.325699][ T5447] Call Trace: [ 57.325706][ T5447] [ 57.325771][ T5447] __dump_stack+0x1d/0x30 [ 57.325794][ T5447] dump_stack_lvl+0xe8/0x140 [ 57.325813][ T5447] dump_stack+0x15/0x1b [ 57.325830][ T5447] should_fail_ex+0x265/0x280 [ 57.325862][ T5447] should_fail+0xb/0x20 [ 57.325967][ T5447] should_fail_usercopy+0x1a/0x20 [ 57.326032][ T5447] _copy_from_user+0x1c/0xb0 [ 57.326052][ T5447] ___sys_sendmsg+0xc1/0x1d0 [ 57.326138][ T5447] __x64_sys_sendmsg+0xd4/0x160 [ 57.326174][ T5447] x64_sys_call+0x2999/0x2fb0 [ 57.326195][ T5447] do_syscall_64+0xd2/0x200 [ 57.326247][ T5447] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.326316][ T5447] ? clear_bhb_loop+0x40/0x90 [ 57.326400][ T5447] ? clear_bhb_loop+0x40/0x90 [ 57.326424][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.326451][ T5447] RIP: 0033:0x7f3c000de9a9 [ 57.326470][ T5447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.326507][ T5447] RSP: 002b:00007f3bfe73f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.326527][ T5447] RAX: ffffffffffffffda RBX: 00007f3c00305fa0 RCX: 00007f3c000de9a9 [ 57.326543][ T5447] RDX: 00000000240088c0 RSI: 0000200000000540 RDI: 0000000000000007 [ 57.326558][ T5447] RBP: 00007f3bfe73f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.326572][ T5447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.326594][ T5447] R13: 0000000000000000 R14: 00007f3c00305fa0 R15: 00007ffc90e31ae8 [ 57.326612][ T5447] [ 57.512327][ T5437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.562322][ T5457] loop4: detected capacity change from 0 to 512 [ 57.569572][ T5457] EXT4-fs: Ignoring removed nobh option [ 57.575583][ T5457] ext4: Bad value for 'auto_da_alloc' [ 57.648222][ T5470] openvswitch: netlink: Message has 6 unknown bytes. [ 57.761596][ T5485] loop5: detected capacity change from 0 to 1024 [ 57.783119][ T5489] loop3: detected capacity change from 0 to 512 [ 57.790754][ T5489] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 57.800315][ T5485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.842611][ T5489] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 57.863653][ T4521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.094236][ T5524] FAULT_INJECTION: forcing a failure. [ 58.094236][ T5524] name failslab, interval 1, probability 0, space 0, times 0 [ 58.106998][ T5524] CPU: 1 UID: 0 PID: 5524 Comm: syz.5.707 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 58.107031][ T5524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.107085][ T5524] Call Trace: [ 58.107093][ T5524] [ 58.107101][ T5524] __dump_stack+0x1d/0x30 [ 58.107138][ T5524] dump_stack_lvl+0xe8/0x140 [ 58.107161][ T5524] dump_stack+0x15/0x1b [ 58.107185][ T5524] should_fail_ex+0x265/0x280 [ 58.107223][ T5524] should_failslab+0x8c/0xb0 [ 58.107327][ T5524] kmem_cache_alloc_noprof+0x50/0x310 [ 58.107358][ T5524] ? skb_clone+0x151/0x1f0 [ 58.107378][ T5524] skb_clone+0x151/0x1f0 [ 58.107397][ T5524] __netlink_deliver_tap+0x2c9/0x500 [ 58.107493][ T5524] ? netlink_attachskb+0x2d1/0x610 [ 58.107525][ T5524] netlink_sendskb+0x126/0x150 [ 58.107558][ T5524] netlink_unicast+0x28a/0x680 [ 58.107600][ T5524] netlink_ack+0x4c8/0x500 [ 58.107640][ T5524] netlink_rcv_skb+0x192/0x220 [ 58.107754][ T5524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.107839][ T5524] genl_rcv+0x28/0x40 [ 58.107861][ T5524] netlink_unicast+0x5a8/0x680 [ 58.107956][ T5524] netlink_sendmsg+0x58b/0x6b0 [ 58.107980][ T5524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.108004][ T5524] __sock_sendmsg+0x145/0x180 [ 58.108081][ T5524] __sys_sendto+0x268/0x330 [ 58.108121][ T5524] __x64_sys_sendto+0x76/0x90 [ 58.108151][ T5524] x64_sys_call+0x2eb6/0x2fb0 [ 58.108174][ T5524] do_syscall_64+0xd2/0x200 [ 58.108200][ T5524] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.108277][ T5524] ? clear_bhb_loop+0x40/0x90 [ 58.108304][ T5524] ? clear_bhb_loop+0x40/0x90 [ 58.108413][ T5524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.108435][ T5524] RIP: 0033:0x7fe24de1083c [ 58.108450][ T5524] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 58.108505][ T5524] RSP: 002b:00007fe24c475ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 58.108524][ T5524] RAX: ffffffffffffffda RBX: 00007fe24c475fc0 RCX: 00007fe24de1083c [ 58.108537][ T5524] RDX: 0000000000000020 RSI: 00007fe24c476010 RDI: 0000000000000005 [ 58.108550][ T5524] RBP: 0000000000000000 R08: 00007fe24c475f14 R09: 000000000000000c [ 58.108562][ T5524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 58.108574][ T5524] R13: 00007fe24c475f68 R14: 00007fe24c476010 R15: 0000000000000000 [ 58.108592][ T5524] [ 58.109262][ T5520] loop2: detected capacity change from 0 to 2048 [ 58.346336][ T5526] loop3: detected capacity change from 0 to 512 [ 58.350160][ T5520] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.371246][ T5526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.382387][ T5520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.413649][ T5526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.427265][ T5526] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.441120][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.518113][ T5550] loop2: detected capacity change from 0 to 256 [ 58.780907][ T5581] 9pnet_fd: Insufficient options for proto=fd [ 58.953154][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.045265][ T5607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.054022][ T5607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.062850][ T5607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.071606][ T5607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.080671][ T5607] geneve2: entered promiscuous mode [ 59.085906][ T5607] geneve2: entered allmulticast mode [ 59.105260][ T5605] xt_hashlimit: size too large, truncated to 1048576 [ 59.227136][ T5607] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.236539][ T5607] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.245636][ T5607] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.254672][ T5607] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.276056][ T5609] –: renamed from vxcan1 (while UP) [ 59.507283][ T5631] SELinux: syz.5.745 (5631) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 59.509476][ T5633] loop2: detected capacity change from 0 to 128 [ 59.557969][ T5637] openvswitch: netlink: Message has 6 unknown bytes. [ 59.670821][ T5647] SELinux: Context system_u:object is not valid (left unmapped). [ 59.739553][ T5649] loop2: detected capacity change from 0 to 512 [ 59.776120][ T5649] EXT4-fs: Ignoring removed orlov option [ 59.781985][ T5649] EXT4-fs: inline encryption not supported [ 59.803219][ T5649] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.826732][ T5658] __nla_validate_parse: 16 callbacks suppressed [ 59.826829][ T5658] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.757'. [ 59.845513][ T5649] EXT4-fs (loop2): 1 truncate cleaned up [ 59.851509][ T5649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.886555][ T3399] hid (null): unknown global tag 0xe [ 59.891892][ T3399] hid (null): invalid report_count 1360582955 [ 59.898321][ T3399] hid (null): unknown global tag 0xd [ 59.903812][ T3399] hid (null): unknown global tag 0xc [ 59.909292][ T3399] hid (null): unknown global tag 0xc [ 59.914714][ T3399] hid (null): unknown global tag 0x30 [ 59.920265][ T3399] hid (null): unknown global tag 0xc [ 59.925756][ T3399] hid (null): invalid report_size -1272734170 [ 59.931947][ T3399] hid (null): unknown global tag 0xe [ 59.937432][ T3399] hid (null): unknown global tag 0xce [ 59.942957][ T3399] hid (null): global environment stack underflow [ 59.949448][ T3399] hid (null): bogus close delimiter [ 59.954733][ T3399] hid (null): global environment stack overflow [ 59.961050][ T3399] hid (null): unknown global tag 0xd [ 59.966479][ T3399] hid (null): bogus close delimiter [ 59.971777][ T3399] hid (null): nested delimiters [ 59.981052][ T3399] hid (null): global environment stack overflow [ 59.992210][ T3399] hid (null): unknown global tag 0xe7 [ 59.997688][ T3399] hid (null): invalid report_size -302911015 [ 60.003726][ T3399] hid (null): invalid report_size 41322 [ 60.009354][ T3399] hid (null): report_id 3438458030 is invalid [ 60.015593][ T3399] hid (null): invalid report_count 31505 [ 60.021267][ T3399] hid (null): unknown global tag 0xd [ 60.026852][ T3399] hid (null): unknown global tag 0xe [ 60.032679][ T3399] hid (null): invalid report_size 37656 [ 60.038307][ T3399] hid (null): unknown global tag 0xd [ 60.043687][ T3399] hid (null): unknown global tag 0xd [ 60.053043][ T3399] hid (null): invalid report_size 2058257317 [ 60.059274][ T3399] hid (null): bogus close delimiter [ 60.064724][ T3399] hid (null): unknown global tag 0xc [ 60.070189][ T3399] hid (null): unknown global tag 0xd [ 60.115534][ T3399] hid-generic 0006:FFFFFFF8:FFFFFF7F.0001: unknown main item tag 0x2 [ 60.123906][ T3399] hid-generic 0006:FFFFFFF8:FFFFFF7F.0001: unknown global tag 0xe [ 60.131927][ T3399] hid-generic 0006:FFFFFFF8:FFFFFF7F.0001: item 0 0 1 14 parsing failed [ 60.227457][ T3399] hid-generic 0006:FFFFFFF8:FFFFFF7F.0001: probe with driver hid-generic failed with error -22 [ 60.316372][ T5710] loop5: detected capacity change from 0 to 128 [ 60.368422][ T5710] EXT4-fs: Ignoring removed nobh option [ 60.423610][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.455560][ T5710] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.489001][ T5710] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.521299][ T5748] openvswitch: netlink: Message has 6 unknown bytes. [ 60.539430][ T5751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.559091][ T5751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.628341][ T5758] FAULT_INJECTION: forcing a failure. [ 60.628341][ T5758] name failslab, interval 1, probability 0, space 0, times 0 [ 60.641338][ T5758] CPU: 1 UID: 0 PID: 5758 Comm: syz.2.771 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 60.641369][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.641381][ T5758] Call Trace: [ 60.641387][ T5758] [ 60.641395][ T5758] __dump_stack+0x1d/0x30 [ 60.641417][ T5758] dump_stack_lvl+0xe8/0x140 [ 60.641465][ T5758] dump_stack+0x15/0x1b [ 60.641483][ T5758] should_fail_ex+0x265/0x280 [ 60.641516][ T5758] should_failslab+0x8c/0xb0 [ 60.641542][ T5758] kmem_cache_alloc_noprof+0x50/0x310 [ 60.641608][ T5758] ? security_file_alloc+0x32/0x100 [ 60.641717][ T5758] security_file_alloc+0x32/0x100 [ 60.641756][ T5758] init_file+0x5c/0x1d0 [ 60.641843][ T5758] alloc_empty_file+0x8b/0x200 [ 60.641905][ T5758] alloc_file_pseudo+0xc6/0x160 [ 60.641942][ T5758] anon_inode_getfile_fmode+0xa5/0x140 [ 60.641973][ T5758] do_eventfd+0x116/0x1b0 [ 60.642003][ T5758] __x64_sys_eventfd+0x20/0x30 [ 60.642033][ T5758] x64_sys_call+0x2069/0x2fb0 [ 60.642121][ T5758] do_syscall_64+0xd2/0x200 [ 60.642139][ T5758] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.642193][ T5758] ? clear_bhb_loop+0x40/0x90 [ 60.642218][ T5758] ? clear_bhb_loop+0x40/0x90 [ 60.642243][ T5758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.642314][ T5758] RIP: 0033:0x7fea5c9be9a9 [ 60.642331][ T5758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.642352][ T5758] RSP: 002b:00007fea5b01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 60.642374][ T5758] RAX: ffffffffffffffda RBX: 00007fea5cbe5fa0 RCX: 00007fea5c9be9a9 [ 60.642441][ T5758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.642453][ T5758] RBP: 00007fea5b01f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.642465][ T5758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.642477][ T5758] R13: 0000000000000000 R14: 00007fea5cbe5fa0 R15: 00007ffcfda8f758 [ 60.642494][ T5758] [ 60.675050][ T4521] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.707762][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 60.864732][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 60.939244][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 60.946681][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.785'. [ 61.003997][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 61.013363][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.785'. [ 61.086397][ T5786] loop3: detected capacity change from 0 to 2048 [ 61.096917][ T5786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.247205][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.333953][ T5811] syzkaller1: entered promiscuous mode [ 61.339773][ T5811] syzkaller1: entered allmulticast mode [ 61.427684][ T5828] FAULT_INJECTION: forcing a failure. [ 61.427684][ T5828] name failslab, interval 1, probability 0, space 0, times 0 [ 61.440451][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.3.796 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 61.440530][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.440546][ T5828] Call Trace: [ 61.440553][ T5828] [ 61.440559][ T5828] __dump_stack+0x1d/0x30 [ 61.440582][ T5828] dump_stack_lvl+0xe8/0x140 [ 61.440606][ T5828] dump_stack+0x15/0x1b [ 61.440624][ T5828] should_fail_ex+0x265/0x280 [ 61.440731][ T5828] should_failslab+0x8c/0xb0 [ 61.440756][ T5828] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 61.440792][ T5828] ? sidtab_sid2str_get+0xa0/0x130 [ 61.440819][ T5828] kmemdup_noprof+0x2b/0x70 [ 61.440920][ T5828] sidtab_sid2str_get+0xa0/0x130 [ 61.440948][ T5828] security_sid_to_context_core+0x1eb/0x2e0 [ 61.440972][ T5828] security_sid_to_context+0x27/0x40 [ 61.440997][ T5828] avc_audit_post_callback+0x10f/0x520 [ 61.441082][ T5828] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 61.441113][ T5828] common_lsm_audit+0x1bb/0x230 [ 61.441218][ T5828] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 61.441245][ T5828] ? avc_denied+0xe4/0x100 [ 61.441324][ T5828] slow_avc_audit+0x104/0x140 [ 61.441391][ T5828] avc_has_perm+0x128/0x150 [ 61.441470][ T5828] selinux_lsm_setattr+0x121/0x660 [ 61.441502][ T5828] selinux_setprocattr+0x4f/0x70 [ 61.441545][ T5828] security_setprocattr+0x1a7/0x1d0 [ 61.441584][ T5828] proc_pid_attr_write+0x1eb/0x220 [ 61.441624][ T5828] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 61.441737][ T5828] vfs_write+0x266/0x8e0 [ 61.441773][ T5828] ? __rcu_read_unlock+0x4f/0x70 [ 61.441800][ T5828] ? __fget_files+0x184/0x1c0 [ 61.441824][ T5828] ksys_write+0xda/0x1a0 [ 61.441901][ T5828] __x64_sys_write+0x40/0x50 [ 61.442065][ T5828] x64_sys_call+0x2cdd/0x2fb0 [ 61.442091][ T5828] do_syscall_64+0xd2/0x200 [ 61.442147][ T5828] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.442229][ T5828] ? clear_bhb_loop+0x40/0x90 [ 61.442256][ T5828] ? clear_bhb_loop+0x40/0x90 [ 61.442282][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.442306][ T5828] RIP: 0033:0x7f3c000de9a9 [ 61.442372][ T5828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.442392][ T5828] RSP: 002b:00007f3bfe73f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.442476][ T5828] RAX: ffffffffffffffda RBX: 00007f3c00305fa0 RCX: 00007f3c000de9a9 [ 61.442489][ T5828] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000005 [ 61.442502][ T5828] RBP: 00007f3bfe73f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.442514][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.442526][ T5828] R13: 0000000000000000 R14: 00007f3c00305fa0 R15: 00007ffc90e31ae8 [ 61.442547][ T5828] [ 61.739226][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 61.756702][ T5838] netlink: 14 bytes leftover after parsing attributes in process `syz.5.800'. [ 61.768277][ T5838] hsr_slave_0: left promiscuous mode [ 61.774054][ T5838] hsr_slave_1: left promiscuous mode [ 61.800914][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 61.827642][ T5844] loop5: detected capacity change from 0 to 1024 [ 61.856047][ T5848] loop4: detected capacity change from 0 to 512 [ 61.856183][ T5844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.881989][ T5838] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #14: comm syz.5.800: attempt to clear invalid blocks 1886221359 len 1 [ 61.886109][ T5848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.908419][ T5848] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.908611][ T5838] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #14: comm syz.5.800: invalid indirect mapped block 262147 (level 1) [ 61.943209][ T5838] EXT4-fs error (device loop5): ext4_mb_clear_bb:6420: comm syz.5.800: Freeing blocks in system zone - Block = 0, count = 16 [ 61.959319][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.983488][ T4521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.085314][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.092580][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.101604][ T5869] bridge0: entered allmulticast mode [ 62.108860][ T29] kauditd_printk_skb: 1043 callbacks suppressed [ 62.108876][ T29] audit: type=1400 audit(1752860886.705:2270): avc: denied { sys_module } for pid=5860 comm="syz.5.807" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.142765][ T5869] bridge_slave_1: left allmulticast mode [ 62.148615][ T5869] bridge_slave_1: left promiscuous mode [ 62.154334][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.188467][ T5869] bridge_slave_0: left allmulticast mode [ 62.194279][ T5869] bridge_slave_0: left promiscuous mode [ 62.200232][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.508827][ T29] audit: type=1400 audit(1752860887.105:2271): avc: denied { create } for pid=5879 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.560930][ T5880] FAULT_INJECTION: forcing a failure. [ 62.560930][ T5880] name failslab, interval 1, probability 0, space 0, times 0 [ 62.573800][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: syz.0.811 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 62.573900][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.573914][ T5880] Call Trace: [ 62.573922][ T5880] [ 62.573931][ T5880] __dump_stack+0x1d/0x30 [ 62.573954][ T5880] dump_stack_lvl+0xe8/0x140 [ 62.573974][ T5880] dump_stack+0x15/0x1b [ 62.573995][ T5880] should_fail_ex+0x265/0x280 [ 62.574159][ T5880] ? flow_indr_dev_setup_offload+0x190/0x3f0 [ 62.574196][ T5880] should_failslab+0x8c/0xb0 [ 62.574350][ T5880] __kmalloc_cache_noprof+0x4c/0x320 [ 62.574386][ T5880] flow_indr_dev_setup_offload+0x190/0x3f0 [ 62.574460][ T5880] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 62.574499][ T5880] tcf_block_offload_cmd+0x164/0x1f0 [ 62.574683][ T5880] tcf_block_get_ext+0x865/0xb30 [ 62.574750][ T5880] ? ___sys_sendmsg+0x17b/0x1d0 [ 62.574785][ T5880] ? __sys_sendmmsg+0x178/0x300 [ 62.574877][ T5880] ? __pfx_drr_init_qdisc+0x10/0x10 [ 62.574919][ T5880] tcf_block_get+0x67/0xa0 [ 62.574968][ T5880] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 62.575015][ T5880] drr_init_qdisc+0x2c/0xb0 [ 62.575042][ T5880] qdisc_create+0x58e/0x9e0 [ 62.575074][ T5880] tc_modify_qdisc+0xf2e/0x1420 [ 62.575106][ T5880] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 62.575169][ T5880] rtnetlink_rcv_msg+0x657/0x6d0 [ 62.575208][ T5880] netlink_rcv_skb+0x120/0x220 [ 62.575244][ T5880] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.575277][ T5880] rtnetlink_rcv+0x1c/0x30 [ 62.575297][ T5880] netlink_unicast+0x5a8/0x680 [ 62.575329][ T5880] netlink_sendmsg+0x58b/0x6b0 [ 62.575431][ T5880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.575453][ T5880] __sock_sendmsg+0x145/0x180 [ 62.575508][ T5880] ____sys_sendmsg+0x345/0x4e0 [ 62.575552][ T5880] ___sys_sendmsg+0x17b/0x1d0 [ 62.575602][ T5880] __sys_sendmmsg+0x178/0x300 [ 62.575647][ T5880] __x64_sys_sendmmsg+0x57/0x70 [ 62.575681][ T5880] x64_sys_call+0x2f2f/0x2fb0 [ 62.575762][ T5880] do_syscall_64+0xd2/0x200 [ 62.575782][ T5880] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.575814][ T5880] ? clear_bhb_loop+0x40/0x90 [ 62.575988][ T5880] ? clear_bhb_loop+0x40/0x90 [ 62.576010][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.576043][ T5880] RIP: 0033:0x7f6ff486e9a9 [ 62.576058][ T5880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.576080][ T5880] RSP: 002b:00007f6ff2ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.576103][ T5880] RAX: ffffffffffffffda RBX: 00007f6ff4a95fa0 RCX: 00007f6ff486e9a9 [ 62.576118][ T5880] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 62.576132][ T5880] RBP: 00007f6ff2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.576145][ T5880] R10: 00000000000000e4 R11: 0000000000000246 R12: 0000000000000002 [ 62.576157][ T5880] R13: 0000000000000000 R14: 00007f6ff4a95fa0 R15: 00007ffcad43d7e8 [ 62.576218][ T5880] [ 62.952859][ T29] audit: type=1400 audit(1752860887.545:2272): avc: denied { create } for pid=5881 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.973217][ T29] audit: type=1400 audit(1752860887.545:2273): avc: denied { write } for pid=5883 comm="syz.4.813" name="kcm" dev="proc" ino=4026532618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.021613][ T29] audit: type=1400 audit(1752860887.595:2274): avc: denied { write } for pid=5881 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.042273][ T29] audit: type=1400 audit(1752860887.595:2275): avc: denied { nlmsg_write } for pid=5881 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.063212][ T29] audit: type=1400 audit(1752860887.595:2276): avc: denied { read } for pid=5881 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.098094][ T5891] loop4: detected capacity change from 0 to 512 [ 63.104799][ T5891] EXT4-fs: Ignoring removed bh option [ 63.111416][ T5891] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.120877][ T5891] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 63.131645][ T5891] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 63.141962][ T5891] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 63.166525][ T5891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.179985][ T5891] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 63.206584][ T5884] bridge0: entered promiscuous mode [ 63.213337][ T5884] macsec1: entered promiscuous mode [ 63.242840][ T5884] bridge0: port 3(macsec1) entered blocking state [ 63.249550][ T5884] bridge0: port 3(macsec1) entered disabled state [ 63.264180][ T5896] loop2: detected capacity change from 0 to 1024 [ 63.296420][ T5884] macsec1: entered allmulticast mode [ 63.302035][ T5884] bridge0: entered allmulticast mode [ 63.314247][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.333321][ T29] audit: type=1400 audit(1752860887.925:2277): avc: denied { write } for pid=5905 comm="syz.0.820" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.366013][ T5884] macsec1: left allmulticast mode [ 63.371115][ T5884] bridge0: left allmulticast mode [ 63.385600][ T5884] bridge0: left promiscuous mode [ 63.415533][ T29] audit: type=1400 audit(1752860888.005:2278): avc: denied { write } for pid=5911 comm="syz.2.821" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.566000][ T5924] nfs4: Bad value for 'source' [ 63.624966][ T29] audit: type=1400 audit(1752860888.215:2279): avc: denied { write } for pid=5929 comm="syz.4.827" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.675985][ T5926] loop2: detected capacity change from 0 to 512 [ 63.693465][ T5926] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.844970][ T5951] FAULT_INJECTION: forcing a failure. [ 63.844970][ T5951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.858129][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: syz.5.835 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 63.858162][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.858177][ T5951] Call Trace: [ 63.858183][ T5951] [ 63.858190][ T5951] __dump_stack+0x1d/0x30 [ 63.858262][ T5951] dump_stack_lvl+0xe8/0x140 [ 63.858283][ T5951] dump_stack+0x15/0x1b [ 63.858303][ T5951] should_fail_ex+0x265/0x280 [ 63.858357][ T5951] should_fail+0xb/0x20 [ 63.858459][ T5951] should_fail_usercopy+0x1a/0x20 [ 63.858494][ T5951] strncpy_from_user+0x25/0x230 [ 63.858520][ T5951] ? css_rstat_updated+0xcd/0x5b0 [ 63.858618][ T5951] ? avc_has_perm_noaudit+0x1b1/0x200 [ 63.858651][ T5951] strncpy_from_user_nofault+0x68/0xf0 [ 63.858694][ T5951] bpf_probe_read_user_str+0x2a/0x70 [ 63.858777][ T5951] bpf_prog_78f9c3f13797e2ae+0x3e/0x44 [ 63.858794][ T5951] bpf_trace_run3+0x10c/0x1d0 [ 63.858819][ T5951] ? __kfree_skb+0x109/0x150 [ 63.858857][ T5951] ? skb_free_head+0xb8/0x150 [ 63.858878][ T5951] ? __kfree_skb+0x109/0x150 [ 63.858948][ T5951] kmem_cache_free+0x257/0x300 [ 63.858980][ T5951] ? tun_do_read+0xdd1/0x1090 [ 63.859010][ T5951] __kfree_skb+0x109/0x150 [ 63.859044][ T5951] sk_skb_reason_drop+0xbd/0x270 [ 63.859189][ T5951] tun_do_read+0xdd1/0x1090 [ 63.859219][ T5951] ? __pfx_default_wake_function+0x10/0x10 [ 63.859249][ T5951] tun_chr_read_iter+0x176/0x250 [ 63.859317][ T5951] do_iter_readv_writev+0x421/0x4c0 [ 63.859362][ T5951] vfs_readv+0x1ea/0x690 [ 63.859394][ T5951] __x64_sys_preadv+0xfd/0x1c0 [ 63.859417][ T5951] x64_sys_call+0x1503/0x2fb0 [ 63.859476][ T5951] do_syscall_64+0xd2/0x200 [ 63.859498][ T5951] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.859583][ T5951] ? clear_bhb_loop+0x40/0x90 [ 63.859608][ T5951] ? clear_bhb_loop+0x40/0x90 [ 63.859634][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.859759][ T5951] RIP: 0033:0x7fe24de0e9a9 [ 63.859774][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.859796][ T5951] RSP: 002b:00007fe24c477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 63.859819][ T5951] RAX: ffffffffffffffda RBX: 00007fe24e035fa0 RCX: 00007fe24de0e9a9 [ 63.859834][ T5951] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 63.859849][ T5951] RBP: 00007fe24c477090 R08: 0000000000000000 R09: 0000000000000000 [ 63.859869][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.859884][ T5951] R13: 0000000000000000 R14: 00007fe24e035fa0 R15: 00007ffeeb6039d8 [ 63.859932][ T5951] [ 64.126502][ T5967] loop2: detected capacity change from 0 to 1024 [ 64.314663][ T5980] openvswitch: netlink: Message has 6 unknown bytes. [ 64.453063][ T5997] loop3: detected capacity change from 0 to 1024 [ 64.504447][ T6006] loop2: detected capacity change from 0 to 512 [ 64.512801][ T6006] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.519814][ T6006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.540989][ T6006] EXT4-fs (loop2): 1 truncate cleaned up [ 64.570418][ T6006] C: renamed from team_slave_0 [ 64.648507][ T6017] openvswitch: netlink: Message has 6 unknown bytes. [ 64.769105][ T6030] loop4: detected capacity change from 0 to 1024 [ 64.796328][ T6030] EXT4-fs: Mount option(s) incompatible with ext3 [ 64.841532][ T6030] Cannot find add_set index 0 as target [ 64.879333][ T6030] __nla_validate_parse: 5 callbacks suppressed [ 64.879352][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 65.130306][ T6068] FAULT_INJECTION: forcing a failure. [ 65.130306][ T6068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.143549][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.3.880 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 65.143580][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.143593][ T6068] Call Trace: [ 65.143599][ T6068] [ 65.143606][ T6068] __dump_stack+0x1d/0x30 [ 65.143628][ T6068] dump_stack_lvl+0xe8/0x140 [ 65.143650][ T6068] dump_stack+0x15/0x1b [ 65.143723][ T6068] should_fail_ex+0x265/0x280 [ 65.143776][ T6068] should_fail+0xb/0x20 [ 65.143870][ T6068] should_fail_usercopy+0x1a/0x20 [ 65.143903][ T6068] _copy_from_user+0x1c/0xb0 [ 65.143981][ T6068] copy_from_sockptr_offset+0x66/0xa0 [ 65.144012][ T6068] do_ip6t_set_ctl+0x5d1/0x840 [ 65.144076][ T6068] nf_setsockopt+0x196/0x1b0 [ 65.144152][ T6068] ipv6_setsockopt+0x11a/0x130 [ 65.144177][ T6068] udpv6_setsockopt+0x99/0xb0 [ 65.144212][ T6068] sock_common_setsockopt+0x69/0x80 [ 65.144297][ T6068] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 65.144324][ T6068] __sys_setsockopt+0x184/0x200 [ 65.144359][ T6068] __x64_sys_setsockopt+0x64/0x80 [ 65.144390][ T6068] x64_sys_call+0x2bd5/0x2fb0 [ 65.144414][ T6068] do_syscall_64+0xd2/0x200 [ 65.144583][ T6068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.144651][ T6068] ? clear_bhb_loop+0x40/0x90 [ 65.144678][ T6068] ? clear_bhb_loop+0x40/0x90 [ 65.144700][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.144724][ T6068] RIP: 0033:0x7f3c000de9a9 [ 65.144769][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.144854][ T6068] RSP: 002b:00007f3bfe73f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.144878][ T6068] RAX: ffffffffffffffda RBX: 00007f3c00305fa0 RCX: 00007f3c000de9a9 [ 65.144894][ T6068] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 65.144962][ T6068] RBP: 00007f3bfe73f090 R08: 0000000000000590 R09: 0000000000000000 [ 65.144976][ T6068] R10: 0000200000001300 R11: 0000000000000246 R12: 0000000000000001 [ 65.144991][ T6068] R13: 0000000000000000 R14: 00007f3c00305fa0 R15: 00007ffc90e31ae8 [ 65.145013][ T6068] [ 65.458867][ T6076] loop3: detected capacity change from 0 to 1024 [ 65.766891][ T6099] FAULT_INJECTION: forcing a failure. [ 65.766891][ T6099] name failslab, interval 1, probability 0, space 0, times 0 [ 65.780301][ T6099] CPU: 0 UID: 0 PID: 6099 Comm: syz.0.889 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 65.780361][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.780375][ T6099] Call Trace: [ 65.780384][ T6099] [ 65.780394][ T6099] __dump_stack+0x1d/0x30 [ 65.780420][ T6099] dump_stack_lvl+0xe8/0x140 [ 65.780439][ T6099] dump_stack+0x15/0x1b [ 65.780474][ T6099] should_fail_ex+0x265/0x280 [ 65.780547][ T6099] should_failslab+0x8c/0xb0 [ 65.780571][ T6099] kmem_cache_alloc_noprof+0x50/0x310 [ 65.780598][ T6099] ? __anon_vma_prepare+0x70/0x2f0 [ 65.780670][ T6099] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 65.780707][ T6099] __anon_vma_prepare+0x70/0x2f0 [ 65.780739][ T6099] do_wp_page+0x1838/0x2400 [ 65.780766][ T6099] ? __rcu_read_lock+0x37/0x50 [ 65.780848][ T6099] handle_mm_fault+0x77d/0x2be0 [ 65.780870][ T6099] ? mas_walk+0xf2/0x120 [ 65.780912][ T6099] do_user_addr_fault+0x636/0x1090 [ 65.781016][ T6099] ? fpregs_restore_userregs+0xad/0x1d0 [ 65.781147][ T6099] ? switch_fpu_return+0xe/0x20 [ 65.781179][ T6099] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 65.781253][ T6099] exc_page_fault+0x62/0xa0 [ 65.781284][ T6099] asm_exc_page_fault+0x26/0x30 [ 65.781307][ T6099] RIP: 0033:0x7f6ff4730ca3 [ 65.781326][ T6099] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 65.781413][ T6099] RSP: 002b:00007f6ff2e944a0 EFLAGS: 00010202 [ 65.781429][ T6099] RAX: 0000000000000400 RBX: 00007f6ff2e94540 RCX: 00007f6feaa75000 [ 65.781442][ T6099] RDX: 00007f6ff2e946e0 RSI: 0000000000000001 RDI: 00007f6ff2e945e0 [ 65.781454][ T6099] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001bd [ 65.781467][ T6099] R10: 00000000000001d4 R11: 00007f6ff2e94540 R12: 0000000000000001 [ 65.781482][ T6099] R13: 00007f6ff490c6c0 R14: 0000000000000020 R15: 00007f6ff2e945e0 [ 65.781504][ T6099] [ 65.781517][ T6099] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 66.052265][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.059553][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.102062][ T6103] bridge0: entered allmulticast mode [ 66.144503][ T6105] bridge_slave_1: left allmulticast mode [ 66.150283][ T6105] bridge_slave_1: left promiscuous mode [ 66.156175][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.203789][ T6105] bridge_slave_0: left allmulticast mode [ 66.209552][ T6105] bridge_slave_0: left promiscuous mode [ 66.215379][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.754520][ T6113] bridge0: entered allmulticast mode [ 66.789051][ T6113] bridge_slave_1: left allmulticast mode [ 66.795617][ T6113] bridge_slave_1: left promiscuous mode [ 66.801324][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.857020][ T6113] bridge_slave_0: left allmulticast mode [ 66.862734][ T6113] bridge_slave_0: left promiscuous mode [ 66.868499][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.903481][ T6118] loop4: detected capacity change from 0 to 8192 [ 66.954440][ T6118] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 67.057745][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 67.149267][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 67.149284][ T29] audit: type=1400 audit(1752860891.745:2664): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 67.313650][ T29] audit: type=1400 audit(1752860891.905:2665): avc: denied { read } for pid=6126 comm="syz.4.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.508420][ T29] audit: type=1400 audit(1752860892.105:2666): avc: denied { read } for pid=6143 comm="syz.4.908" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.570547][ T29] audit: type=1400 audit(1752860892.105:2667): avc: denied { open } for pid=6143 comm="syz.4.908" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.594219][ T29] audit: type=1400 audit(1752860892.135:2668): avc: denied { name_connect } for pid=6139 comm="syz.2.906" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.615922][ T29] audit: type=1400 audit(1752860892.145:2669): avc: denied { write } for pid=6145 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.635279][ T29] audit: type=1400 audit(1752860892.165:2670): avc: denied { create } for pid=6150 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.738164][ T6161] loop3: detected capacity change from 0 to 1024 [ 67.786510][ T6161] EXT4-fs mount: 12 callbacks suppressed [ 67.786533][ T6161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.850581][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.101016][ T29] audit: type=1400 audit(1752860892.695:2671): avc: denied { create } for pid=6185 comm="syz.5.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.123227][ T29] audit: type=1400 audit(1752860892.695:2672): avc: denied { bind } for pid=6185 comm="syz.5.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.142784][ T29] audit: type=1400 audit(1752860892.705:2673): avc: denied { setopt } for pid=6185 comm="syz.5.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.162970][ T6187] can: request_module (can-proto-0) failed. [ 68.227971][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 68.239798][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 68.329170][ T6207] loop2: detected capacity change from 0 to 8192 [ 68.335851][ T6207] vfat: Unknown parameter '@' [ 68.350721][ T6207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6207 comm=syz.2.932 [ 68.363942][ T6207] dummy0: entered promiscuous mode [ 68.436945][ T6212] netlink: 464 bytes leftover after parsing attributes in process `syz.4.934'. [ 68.456163][ T6212] smc: net device bond0 applied user defined pnetid SYZ2 [ 68.466592][ T6212] netlink: 14 bytes leftover after parsing attributes in process `syz.4.934'. [ 68.530828][ T6223] loop4: detected capacity change from 0 to 1024 [ 68.556188][ T6223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.590249][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.633166][ T6241] loop2: detected capacity change from 0 to 1024 [ 68.641163][ T6241] EXT4-fs: Ignoring removed orlov option [ 68.651519][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.946'. [ 68.681500][ T6241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.696715][ T6241] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.741604][ T6251] loop4: detected capacity change from 0 to 1024 [ 68.761665][ T6241] loop2: detected capacity change from 0 to 128 [ 68.768479][ T6241] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777 ' [ 68.783087][ T6251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.795628][ T6251] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.823700][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.753268][ T6284] FAULT_INJECTION: forcing a failure. [ 69.753268][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.766564][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.0.960 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 69.766598][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.766675][ T6284] Call Trace: [ 69.766681][ T6284] [ 69.766694][ T6284] __dump_stack+0x1d/0x30 [ 69.766722][ T6284] dump_stack_lvl+0xe8/0x140 [ 69.766746][ T6284] dump_stack+0x15/0x1b [ 69.766833][ T6284] should_fail_ex+0x265/0x280 [ 69.766869][ T6284] should_fail+0xb/0x20 [ 69.766901][ T6284] should_fail_usercopy+0x1a/0x20 [ 69.766996][ T6284] strncpy_from_user+0x25/0x230 [ 69.767028][ T6284] strncpy_from_user_nofault+0x68/0xf0 [ 69.767134][ T6284] bpf_probe_read_user_str+0x2a/0x70 [ 69.767178][ T6284] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 69.767197][ T6284] bpf_trace_run2+0x107/0x1c0 [ 69.767225][ T6284] ? ___sys_sendmsg+0x191/0x1d0 [ 69.767261][ T6284] ? ____sys_sendmsg+0x433/0x4e0 [ 69.767326][ T6284] ? ___sys_sendmsg+0x191/0x1d0 [ 69.767417][ T6284] kfree+0x27b/0x320 [ 69.767446][ T6284] ___sys_sendmsg+0x191/0x1d0 [ 69.767497][ T6284] __sys_sendmmsg+0x178/0x300 [ 69.767557][ T6284] __x64_sys_sendmmsg+0x57/0x70 [ 69.767594][ T6284] x64_sys_call+0x2f2f/0x2fb0 [ 69.767619][ T6284] do_syscall_64+0xd2/0x200 [ 69.767640][ T6284] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.767718][ T6284] ? clear_bhb_loop+0x40/0x90 [ 69.767743][ T6284] ? clear_bhb_loop+0x40/0x90 [ 69.767765][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.767787][ T6284] RIP: 0033:0x7f6ff486e9a9 [ 69.767802][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.767857][ T6284] RSP: 002b:00007f6ff2ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.767878][ T6284] RAX: ffffffffffffffda RBX: 00007f6ff4a95fa0 RCX: 00007f6ff486e9a9 [ 69.767893][ T6284] RDX: 04000000000001ce RSI: 0000200000005f80 RDI: 0000000000000007 [ 69.767931][ T6284] RBP: 00007f6ff2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.767943][ T6284] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000002 [ 69.767957][ T6284] R13: 0000000000000000 R14: 00007f6ff4a95fa0 R15: 00007ffcad43d7e8 [ 69.767979][ T6284] [ 69.768511][ T6269] loop3: detected capacity change from 0 to 1024 [ 70.159462][ T6269] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 70.214539][ T6269] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 70.232376][ T6269] EXT4-fs (loop3): invalid journal inode [ 70.383545][ T6308] loop5: detected capacity change from 0 to 2048 [ 70.426149][ T6308] EXT4-fs (loop5): failed to initialize system zone (-117) [ 70.440764][ T6308] EXT4-fs (loop5): mount failed [ 70.507585][ T6333] loop5: detected capacity change from 0 to 512 [ 70.520274][ T6333] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.532006][ T6333] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.553124][ T6333] EXT4-fs (loop5): 1 truncate cleaned up [ 70.563862][ T6333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.602939][ T6344] loop3: detected capacity change from 0 to 8192 [ 70.610323][ T6344] vfat: Unknown parameter '' [ 70.637926][ T4521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.671140][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 70.686240][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 70.711020][ T6358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.984'. [ 70.720172][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.984'. [ 70.733221][ T6358] bond0: entered promiscuous mode [ 70.738598][ T6358] bond_slave_0: entered promiscuous mode [ 70.744424][ T6358] bond_slave_1: entered promiscuous mode [ 70.752250][ T6358] bond0: left promiscuous mode [ 70.757792][ T6358] bond_slave_0: left promiscuous mode [ 70.763615][ T6358] bond_slave_1: left promiscuous mode [ 70.864188][ T10] kernel write not supported for file /437/loginuid (pid: 10 comm: kworker/0:1) [ 70.918858][ T6386] netlink: zone id is out of range [ 70.924486][ T6386] netlink: set zone limit has 4 unknown bytes [ 70.939179][ T6386] FAULT_INJECTION: forcing a failure. [ 70.939179][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 70.951981][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.4.997 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 70.952016][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.952031][ T6386] Call Trace: [ 70.952038][ T6386] [ 70.952047][ T6386] __dump_stack+0x1d/0x30 [ 70.952074][ T6386] dump_stack_lvl+0xe8/0x140 [ 70.952167][ T6386] dump_stack+0x15/0x1b [ 70.952185][ T6386] should_fail_ex+0x265/0x280 [ 70.952218][ T6386] should_failslab+0x8c/0xb0 [ 70.952242][ T6386] kmem_cache_alloc_noprof+0x50/0x310 [ 70.952271][ T6386] ? skb_clone+0x151/0x1f0 [ 70.952311][ T6386] skb_clone+0x151/0x1f0 [ 70.952329][ T6386] __netlink_deliver_tap+0x2c9/0x500 [ 70.952431][ T6386] ? netlink_attachskb+0x2d1/0x610 [ 70.952541][ T6386] netlink_sendskb+0x126/0x150 [ 70.952577][ T6386] netlink_unicast+0x28a/0x680 [ 70.952615][ T6386] netlink_ack+0x4c8/0x500 [ 70.952654][ T6386] netlink_rcv_skb+0x192/0x220 [ 70.952730][ T6386] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.952759][ T6386] genl_rcv+0x28/0x40 [ 70.952806][ T6386] netlink_unicast+0x5a8/0x680 [ 70.952839][ T6386] netlink_sendmsg+0x58b/0x6b0 [ 70.952862][ T6386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.952883][ T6386] __sock_sendmsg+0x145/0x180 [ 70.952949][ T6386] ____sys_sendmsg+0x31e/0x4e0 [ 70.953054][ T6386] ___sys_sendmsg+0x17b/0x1d0 [ 70.953097][ T6386] __x64_sys_sendmsg+0xd4/0x160 [ 70.953219][ T6386] x64_sys_call+0x2999/0x2fb0 [ 70.953241][ T6386] do_syscall_64+0xd2/0x200 [ 70.953260][ T6386] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.953288][ T6386] ? clear_bhb_loop+0x40/0x90 [ 70.953326][ T6386] ? clear_bhb_loop+0x40/0x90 [ 70.953347][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.953369][ T6386] RIP: 0033:0x7fcdb37ae9a9 [ 70.953384][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.953432][ T6386] RSP: 002b:00007fcdb1e17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.953452][ T6386] RAX: ffffffffffffffda RBX: 00007fcdb39d5fa0 RCX: 00007fcdb37ae9a9 [ 70.953464][ T6386] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 70.953553][ T6386] RBP: 00007fcdb1e17090 R08: 0000000000000000 R09: 0000000000000000 [ 70.953576][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.953588][ T6386] R13: 0000000000000000 R14: 00007fcdb39d5fa0 R15: 00007ffeeca92bb8 [ 70.953606][ T6386] [ 71.307431][ T6394] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 71.315457][ T6394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1001'. [ 71.361161][ T6394] loop2: detected capacity change from 0 to 4096 [ 71.370754][ T6394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.400506][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.549072][ T6424] loop4: detected capacity change from 0 to 512 [ 71.558846][ T6424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.580476][ T6424] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1011: bad orphan inode 16 [ 71.602915][ T6424] ext4_test_bit(bit=15, block=4) = 0 [ 71.608383][ T6424] EXT4-fs (loop4): 1 orphan inode deleted [ 71.633271][ T6424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.688851][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'. [ 71.723009][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.746643][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'. [ 71.758239][ T6443] loop5: detected capacity change from 0 to 512 [ 71.772939][ T6443] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1021: Invalid inode bitmap blk 4 in block_group 0 [ 71.809740][ T6443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.905975][ T6454] loop3: detected capacity change from 0 to 1024 [ 71.925236][ T4521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.946319][ T6454] EXT4-fs: Ignoring removed nobh option [ 71.964790][ T6454] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.975861][ T6454] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.998274][ T6454] JBD2: no valid journal superblock found [ 72.004053][ T6454] EXT4-fs (loop3): Could not load journal inode [ 72.121419][ T6484] loop5: detected capacity change from 0 to 512 [ 72.131711][ T6484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.167774][ T6484] EXT4-fs (loop5): 1 truncate cleaned up [ 72.173845][ T6484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.190595][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 72.203285][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 72.213213][ T6490] loop3: detected capacity change from 0 to 512 [ 72.219687][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 72.219700][ T29] audit: type=1326 audit(1752860896.815:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6472 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 72.251169][ T6490] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.265656][ T6490] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.287211][ T6490] EXT4-fs (loop3): 1 truncate cleaned up [ 72.293456][ T6490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.306211][ T29] audit: type=1326 audit(1752860896.825:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 72.329639][ T29] audit: type=1326 audit(1752860896.825:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe24de05967 code=0x7ffc0000 [ 72.353282][ T29] audit: type=1326 audit(1752860896.825:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24ddaab89 code=0x7ffc0000 [ 72.376719][ T29] audit: type=1326 audit(1752860896.825:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 72.400209][ T29] audit: type=1326 audit(1752860896.825:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe24de05967 code=0x7ffc0000 [ 72.423668][ T29] audit: type=1326 audit(1752860896.825:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24ddaab89 code=0x7ffc0000 [ 72.447229][ T29] audit: type=1326 audit(1752860896.825:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24de0e9a9 code=0x7ffc0000 [ 72.470754][ T29] audit: type=1326 audit(1752860896.825:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe24de05967 code=0x7ffc0000 [ 72.494192][ T29] audit: type=1326 audit(1752860896.825:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24ddaab89 code=0x7ffc0000 [ 72.535076][ T6504] FAULT_INJECTION: forcing a failure. [ 72.535076][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 72.548560][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.0.1044 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 72.548609][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.548694][ T6504] Call Trace: [ 72.548699][ T6504] [ 72.548705][ T6504] __dump_stack+0x1d/0x30 [ 72.548728][ T6504] dump_stack_lvl+0xe8/0x140 [ 72.548750][ T6504] dump_stack+0x15/0x1b [ 72.548770][ T6504] should_fail_ex+0x265/0x280 [ 72.548835][ T6504] should_failslab+0x8c/0xb0 [ 72.548858][ T6504] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 72.548887][ T6504] ? sidtab_sid2str_get+0xa0/0x130 [ 72.548951][ T6504] kmemdup_noprof+0x2b/0x70 [ 72.548978][ T6504] sidtab_sid2str_get+0xa0/0x130 [ 72.549001][ T6504] security_sid_to_context_core+0x1eb/0x2e0 [ 72.549034][ T6504] security_sid_to_context+0x27/0x40 [ 72.549071][ T6504] selinux_lsmprop_to_secctx+0x67/0xf0 [ 72.549100][ T6504] security_lsmprop_to_secctx+0x43/0x80 [ 72.549135][ T6504] audit_log_task_context+0x77/0x190 [ 72.549175][ T6504] audit_log_task+0xf4/0x250 [ 72.549216][ T6504] audit_seccomp+0x61/0x100 [ 72.549242][ T6504] ? __seccomp_filter+0x68c/0x10d0 [ 72.549266][ T6504] __seccomp_filter+0x69d/0x10d0 [ 72.549292][ T6504] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.549392][ T6504] ? vfs_write+0x75e/0x8e0 [ 72.549425][ T6504] ? __rcu_read_unlock+0x4f/0x70 [ 72.549446][ T6504] ? __fget_files+0x184/0x1c0 [ 72.549467][ T6504] __secure_computing+0x82/0x150 [ 72.549556][ T6504] syscall_trace_enter+0xcf/0x1e0 [ 72.549581][ T6504] do_syscall_64+0xac/0x200 [ 72.549641][ T6504] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.549670][ T6504] ? clear_bhb_loop+0x40/0x90 [ 72.549692][ T6504] ? clear_bhb_loop+0x40/0x90 [ 72.549775][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.549801][ T6504] RIP: 0033:0x7f6ff486e9a9 [ 72.549819][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.549872][ T6504] RSP: 002b:00007f6ff2ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 72.549966][ T6504] RAX: ffffffffffffffda RBX: 00007f6ff4a95fa0 RCX: 00007f6ff486e9a9 [ 72.549979][ T6504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001ac0 [ 72.549991][ T6504] RBP: 00007f6ff2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.550003][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.550015][ T6504] R13: 0000000000000000 R14: 00007f6ff4a95fa0 R15: 00007ffcad43d7e8 [ 72.550135][ T6504] [ 72.870718][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.874558][ T6511] loop4: detected capacity change from 0 to 512 [ 72.886909][ T4521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.916747][ T6511] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 72.930071][ T6521] loop5: detected capacity change from 0 to 512 [ 72.940978][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 72.945825][ T6526] loop3: detected capacity change from 0 to 512 [ 72.957382][ T6521] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.970807][ T6511] loop4: detected capacity change from 0 to 512 [ 72.977475][ T6511] journal_path: Non-blockdev passed as './bus' [ 72.983667][ T6511] EXT4-fs: error: could not find journal device path [ 72.992007][ T6526] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.015396][ T6521] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1050: bad orphan inode 16 [ 73.050614][ T6521] ext4_test_bit(bit=15, block=4) = 0 [ 73.056141][ T6521] EXT4-fs (loop5): 1 orphan inode deleted [ 73.086773][ T6526] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 73.095584][ T6526] FAT-fs (loop3): Filesystem has been set read-only [ 73.105616][ T6521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.132861][ T6526] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 73.211976][ T4521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.277962][ T6546] loop3: detected capacity change from 0 to 512 [ 73.285038][ T6546] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.291638][ T6546] ================================================================== [ 73.299728][ T6546] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 73.307473][ T6546] [ 73.309801][ T6546] write to 0xffffffff86a21178 of 8 bytes by task 6528 on cpu 0: [ 73.317446][ T6546] console_flush_all+0x35a/0x730 [ 73.322410][ T6546] console_unlock+0xa1/0x330 [ 73.327024][ T6546] vprintk_emit+0x388/0x650 [ 73.331545][ T6546] vprintk_default+0x26/0x30 [ 73.336148][ T6546] vprintk+0x1d/0x30 [ 73.340066][ T6546] _printk+0x79/0xa0 [ 73.343983][ T6546] caif_disconnect_client+0x13d/0x150 [ 73.349377][ T6546] caif_release+0xec/0x230 [ 73.353822][ T6546] sock_close+0x68/0x150 [ 73.358094][ T6546] __fput+0x298/0x650 [ 73.362097][ T6546] ____fput+0x1c/0x30 [ 73.366096][ T6546] task_work_run+0x131/0x1a0 [ 73.370817][ T6546] exit_to_user_mode_loop+0xe4/0x100 [ 73.376190][ T6546] do_syscall_64+0x1d6/0x200 [ 73.380772][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.386676][ T6546] [ 73.388985][ T6546] read to 0xffffffff86a21178 of 8 bytes by task 6546 on cpu 1: [ 73.396600][ T6546] console_flush_all+0x563/0x730 [ 73.401623][ T6546] console_unlock+0xa1/0x330 [ 73.406210][ T6546] vprintk_emit+0x388/0x650 [ 73.410847][ T6546] vprintk_default+0x26/0x30 [ 73.415448][ T6546] vprintk+0x1d/0x30 [ 73.419343][ T6546] _printk+0x79/0xa0 [ 73.423228][ T6546] __ext4_msg+0x135/0x1a0 [ 73.427623][ T6546] ext4_parse_param+0x7c1/0xf10 [ 73.432480][ T6546] vfs_parse_fs_param+0x13f/0x2a0 [ 73.437505][ T6546] vfs_parse_monolithic_sep+0x18a/0x200 [ 73.443063][ T6546] generic_parse_monolithic+0x24/0x30 [ 73.448437][ T6546] parse_monolithic_mount_data+0x46/0x60 [ 73.454071][ T6546] do_new_mount+0x1da/0x680 [ 73.458577][ T6546] path_mount+0x4a4/0xb20 [ 73.462896][ T6546] __se_sys_mount+0x28f/0x2e0 [ 73.467580][ T6546] __x64_sys_mount+0x67/0x80 [ 73.472163][ T6546] x64_sys_call+0xd36/0x2fb0 [ 73.476751][ T6546] do_syscall_64+0xd2/0x200 [ 73.481248][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.487133][ T6546] [ 73.489439][ T6546] value changed: 0x0000000000000d3f -> 0x0000000000000d40 [ 73.496528][ T6546] [ 73.498842][ T6546] Reported by Kernel Concurrency Sanitizer on: [ 73.505015][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.3.1060 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 73.517414][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.527462][ T6546] ================================================================== [ 73.536333][ T6546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.554722][ T6546] EXT4-fs (loop3): 1 truncate cleaned up [ 73.561336][ T6546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.590704][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.