last executing test programs: 20.242383503s ago: executing program 3 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 20.03672536s ago: executing program 3 (id=147): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) 19.986810354s ago: executing program 3 (id=149): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/34, 0x22}, 0x6e1}], 0x1, 0x20, 0x0) 19.025693331s ago: executing program 3 (id=171): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x456, &(0x7f00000016c0)="$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") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x22, 0x4, 0x1101, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000000000000037fe8000000000000000000000000000aa010590780200005c5c45bcd8793c997392006fc897df0101330100000000000000000000000000000001fe802200000000000000000000000037040000000000"], 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004600)=@newtaction={0x1dc4, 0x30, 0xb, 0x0, 0x0, {}, [{0x1db0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1d64, 0x2, 0x0, 0x0, {{0xa}, {0x1d38, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x1}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x40000004, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa7, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x4, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0xf6, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x400, 0x78, 0x7, 0xa, 0x5dec4cac, 0x4}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0xfff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x3, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x799, 0x425b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x8, 0x3, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcc, 0x9}, {0x201, 0x0, 0xe8, 0x21, 0x800000d4, 0xffff0001}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x800, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1a8a}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x401, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x200039d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0xd, 0x2, 0x8, 0x3, 0xe01, 0xfb33271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x1002, 0x0, 0x3, 0x9, 0xffffffff}, 0xd, 0xb, [{0x400, 0x6, 0x40000, 0x9, 0x0, 0x8}, {0x1, 0x5, 0xffff6517, 0x6, 0x7ff, 0x5d3}, {0x1, 0x57, 0x0, 0x2, 0x7ff, 0x101}, {0xfbd8fc0, 0x1, 0x9c, 0x2, 0x8000, 0x2a}, {0x7f, 0x6, 0x7, 0xfffffffb, 0x319, 0xb4ee}, {0xffff, 0xd, 0xe0, 0x6, 0x6a210e4, 0x7}, {0x3, 0x3, 0x4, 0xa9, 0x307, 0x7}]}, [{0xfffffffd, 0x8, 0x1, 0x7, 0x1000}, {0x3, 0x6, 0x5, 0x8000, 0x8001, 0x6}, {0x362d, 0x7fffffff, 0x7, 0x9, 0x4, 0xfffffffa}, {0x4, 0x96, 0xc746, 0x9b34, 0x1, 0x7}, {0xbc, 0x2, 0x5389, 0x6, 0x80, 0x2}, {0xb, 0x3ff, 0x5a, 0xb, 0x5, 0x81}, {0x4, 0x674, 0x10, 0x8000, 0xfffffff7}, {0x5, 0xfffffffe, 0x0, 0x7, 0x8, 0xddf}, {0x7ff, 0x80, 0x2, 0x3db7, 0xfffffffa, 0x5}, {0xae12, 0xa, 0xe7a, 0xf, 0x101, 0x5}, {0xc000000, 0x7b9, 0x101, 0x1, 0x8c, 0x9}, {0x6, 0x1, 0x8, 0x6, 0x2}, {0x8000, 0x80000001, 0x1, 0x988, 0x7}, {0x3, 0x10000, 0xec, 0x4, 0x77df22b6, 0xffffffff}, {0x8, 0xfffffffb, 0x46, 0xfffffff9, 0xb, 0xf9}, {0x7, 0xfff, 0x784, 0x101, 0x80, 0xff}, {0x1, 0x2, 0x8, 0x4, 0x9, 0x7}, {0x8, 0x40, 0x7f, 0x1, 0x5, 0x10000}, {0xd, 0x7, 0x7, 0x1, 0x2, 0x2}, {0x4, 0x400, 0x5, 0x2, 0x8, 0xe}, {0x9, 0xfffff2c2, 0xffffffff, 0x6, 0x5, 0x1}, {0x1, 0x4, 0x9, 0x5, 0x0, 0x5}, {0x3, 0xf, 0x31, 0x6, 0x9, 0xfffff6f3}, {0x2, 0x0, 0x4, 0xe1, 0x8000, 0x4}, {0xffff, 0xf, 0x2, 0x92c2, 0x1000, 0x6}, {0x2, 0x0, 0x9, 0x0, 0x8, 0xe8f5}, {0x8000, 0x1, 0x2, 0x8, 0x3ff, 0x9}, {0x2dfa31b9, 0x7fffffff, 0x872, 0x2, 0x3, 0x4}, {0xe000, 0xa, 0x6, 0x65, 0x9, 0x10}, {0xfffffffd, 0x8, 0x6, 0x5, 0x38d, 0x1}, {0x5bf6, 0x9, 0x80, 0x4, 0x4, 0x3}, {0xff, 0xfffffff7, 0x3ce15d11, 0x2, 0x8, 0x4}, {0xc7, 0x5, 0x7f, 0xffffffff, 0xfffffce8, 0x7}, {0x5, 0xf2, 0x101, 0x5, 0x10000, 0x7b6b}, {0xffff, 0x5, 0x4a, 0x4, 0x7a5e, 0xfff}, {0x8, 0x8, 0x2, 0x6, 0x3fa, 0x160}, {0x10000, 0x6, 0x3, 0xc, 0xec52, 0x45d}, {0x9, 0xba3d, 0x9, 0x95, 0x10000, 0x8}, {0x81, 0x6, 0x92, 0x8000, 0x2, 0x40}, {0x800, 0x3ff, 0x3, 0xffffff4a, 0xcb, 0x1}, {0xffffffff, 0x9, 0x5, 0x7, 0x2, 0x10}, {0x80000001, 0x6, 0x0, 0xffffffff, 0x3, 0x7}, {0x8, 0x0, 0x8, 0x2fcc, 0x4, 0x9}, {0x5, 0x6, 0x6, 0xc, 0x3ec, 0x8}, {0x0, 0xc, 0xfffff4b9, 0x8, 0x1, 0x8}, {0x5, 0x0, 0xaa6, 0x5, 0x5, 0x1}, {0x60000000, 0x8, 0x81, 0xfffffff9, 0x1, 0x4}, {0x7fff, 0x6, 0x4, 0x66a, 0x3, 0x78f}, {0x7f, 0x0, 0x7f, 0x9, 0x9}, {0x1, 0x1ff, 0x4, 0x7f, 0x9dc, 0x7}, {0xf6, 0x9, 0x0, 0x5, 0x10001, 0x8}, {0x5, 0x6, 0x6, 0x3, 0x6, 0x1}, {0x8, 0x3, 0x2, 0x3fc00000, 0x3, 0xe639}, {0xfffffffc, 0x5, 0xfffffffc, 0x9, 0xff, 0x7}, {0xffff70c5, 0x4, 0x9, 0x6, 0x80000000, 0x3}, {0xc8b1, 0xf, 0x7fffffff, 0x8001, 0x3db, 0x1}, {0x40, 0xfffffff9, 0x0, 0xfffffff5, 0x3, 0x86d}, {0x2, 0x7, 0x1000, 0x6, 0x0, 0x3}, {0x81, 0x8, 0x8, 0x6, 0x1000, 0x2}, {0x1, 0xc, 0x6, 0x0, 0x0, 0x7}, {0x0, 0xfff, 0x7b, 0x7, 0x3f0940c8, 0x7}, {0x0, 0x7fffffff, 0x4, 0x9, 0x4, 0x3}, {0x7, 0x7, 0x9, 0x4, 0x7fff, 0x5}, {0x7fffffff, 0xfffffff9, 0x6, 0x2, 0x8d6, 0x4}, {0x3, 0xc38a000, 0x94a, 0x8, 0x6, 0x10}, {0x9, 0xfffffff7, 0x7fff, 0x3b, 0x9, 0x8165}, {0x2, 0x7, 0x700, 0x4, 0x200, 0xedea}, {0x7, 0x0, 0x1000, 0xfa, 0x0, 0x2}, {0x2, 0x1, 0x80000000, 0x0, 0x3, 0xe2e5}, {0x5, 0x8, 0x1, 0xf606, 0x6, 0x5}, {0x1, 0x2, 0x9, 0x2143, 0x6, 0x401}, {0x5, 0x5, 0x909e, 0xb, 0x80000000, 0x8db}, {0x7, 0x7f, 0x9, 0x0, 0xfffffffa, 0x728}, {0x1, 0x9, 0x7, 0x93, 0x91d1, 0x5}, {0x2, 0x6, 0xd77d, 0x5, 0x7, 0x8001}, {0xaed, 0x0, 0x2, 0x4, 0x5, 0xbd1}, {0x86e8, 0x100, 0x10100000, 0x7, 0x4c29, 0x1}, {0x4, 0x1, 0x81, 0x3, 0x2, 0xfffffffd}, {0x8030, 0x9, 0xe, 0xd, 0xfffffffe, 0x9}, {0x0, 0x5, 0x38, 0x4, 0xffff8001, 0xb08}, {0x2, 0x5, 0xdc, 0x9, 0x2, 0x2}, {0x6, 0x3, 0x5, 0x17, 0xf69, 0x6c29500d}, {0x0, 0x0, 0x22, 0x3, 0x7, 0x5}, {0x80, 0x4, 0x1, 0x7f, 0x20, 0x3}, {0x2e, 0x100, 0xe, 0x5, 0x3, 0x18}, {0x3, 0x2, 0x7, 0xffffd464, 0x400, 0x6}, {0x4, 0x9, 0x5, 0x11da, 0xc12f, 0x6}, {0x0, 0x7fff, 0xffffffff, 0x0, 0x9, 0xffffffff}, {0xffffffff, 0x9, 0x8000, 0x8, 0xd, 0x5}, {0x4, 0x6e6, 0x5, 0x1, 0x1ff, 0x7fffffff}, {0x2, 0xfffffffe, 0x7, 0x3, 0x9, 0x1}, {0x7, 0xab, 0x9, 0x8, 0x7ff, 0x7fff}, {0x44bb1eb0, 0xb0f7, 0x7f, 0x5cf7e5e7, 0x5, 0x7}, {0x9, 0xb67a, 0x9, 0x9, 0x10000, 0x6}, {0x0, 0x8, 0x9, 0x2, 0x7fff, 0x1000}, {0x8, 0x2, 0x7, 0x1, 0x3, 0x2}, {0x87, 0x11, 0x7fff, 0x0, 0x6, 0x1f}, {0x7, 0x9, 0xf, 0x2, 0xd, 0x9}, {0xffffffb6, 0x8b, 0xc1, 0x40, 0x7, 0x4}, {0x6, 0xe8, 0xfffffff7, 0x4, 0x9, 0x6}, {0xf224e81f, 0x5, 0x4, 0x2, 0x7, 0x6}, {0x6, 0x10, 0x7, 0x7fff, 0x1ff, 0x4}, {0x5, 0x9, 0x4, 0xd72, 0xa4, 0x5}, {0xb, 0x8, 0x1, 0x4, 0x0, 0x407}, {0xb, 0xb, 0xfffffffe, 0x0, 0x1, 0x10000}, {0xfffffff9, 0x8, 0x3, 0x8f79, 0x200, 0x2}, {0x300, 0x400, 0x7, 0x7fffffff, 0x5, 0x7f}, {0xfffffffb, 0x1ff, 0xff000000, 0x0, 0x1, 0x8}, {0x4, 0x5, 0x4, 0x21, 0x7, 0xffff}, {0x1, 0x80, 0x5f, 0x4, 0x1d, 0xe6}, {0xc69, 0x3, 0x8, 0x5, 0x4, 0xa}, {0xaa000000, 0x3, 0x15, 0x5, 0x7fffffff, 0x1}, {0x42, 0x2, 0xe, 0x0, 0xe4, 0x1}, {0x3, 0x8, 0x400, 0x5, 0x7, 0x4}, {0x9, 0x5, 0x24056ee8, 0x312, 0x0, 0x1}, {0x6, 0x7, 0x5, 0x2, 0x318b, 0x5}, {0x49d, 0xd8, 0x9, 0x73dc, 0x7, 0x214cc5d2}, {0x22c, 0x61bb, 0x6, 0x8, 0xfff, 0xf}, {0x5, 0x5, 0x1, 0x1, 0x3, 0xf7}, {0x8, 0x1000, 0x9, 0xe, 0x3, 0x624b}, {0x4, 0x2, 0x3, 0xbe8, 0x6, 0x3}, {0xfffffff8, 0x4, 0x3ff, 0x80000000, 0x0, 0x8001}, {0x1, 0x2, 0x2, 0x7ff, 0x5, 0x81}, {0x6, 0x4, 0x5, 0x3ff, 0x3, 0x400}, {0xffffffff, 0xcb39, 0xfff, 0x5, 0x3a, 0x6c00}, {0x200, 0x1000, 0x1, 0x4, 0x1, 0x10000}, {0xfffffffc, 0x5b, 0x8001, 0x6, 0x10001, 0x3}, {0x2, 0x4, 0x7, 0x2aa, 0x8, 0xffffffff}], [{}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x3}, {}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {}, {0xe, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x6323521e0363b171}, {0x3}, {0x1}, {}, {0x2, 0x1}, {0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x6, 0xe068b1d154dd66ce}, {0x3}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x4}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {}, {0x5, 0x2}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1dc4}}, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0xe) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00 \x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="00000000f8ff00000000bfa200000000000007020000f8ffffffb70300651b0e71a0960f52f090acc9b87bf0b20008000000b70400000000000185000000030000009500000000000000ba546fc1fbc7f39cb8bb7bf47eef88d08cadae913c49b7110170cc4cad8d66cbf16e98306fb7ff55fcefd011fc62cbb8e3a9ce372ff45d89321c4c3732c84ffc4ba9c1acdfde8188d7a1388a339a65a9e23a03a542d8fead7ed18138f0d10b1c87a76bf3d2a5ba529821015c0f38e3ac2bee2e033c349634a5918e9a153059e363cea3eda301c8de053cd3ede6f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.856011095s ago: executing program 3 (id=179): ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000000)) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}, {0xa, 0x4, 0x3, @empty, 0x1}, r1, 0xa4c0}}, 0x48) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) (async) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r2, 0x6, 0x18) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) getpgid(r2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, {0xa, 0x1, 0x3, @loopback, 0x3ff}, r1, 0x7}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x89e}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x89e}}, './file0\x00'}) getsockname$l2tp(r4, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10) sendmsg$802154_dgram(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000400)={&(0x7f00000003c0)='3', 0x1}, 0x1, 0x0, 0x0, 0x24000000}, 0x8f8dc86c15e3b036) (async) sendmsg$802154_dgram(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000400)={&(0x7f00000003c0)='3', 0x1}, 0x1, 0x0, 0x0, 0x24000000}, 0x8f8dc86c15e3b036) ioctl$TIOCEXCL(r0, 0x540c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x1, 'team_slave_1\x00', {}, 0x4}) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000001, 0x7, 0x800) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x3, {0xfffffff7, 0x10, "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", 0x2, 0xae, 0x7, 0x9, 0x6, 0x7, 0x1}, r1}}, 0x128) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000640)={0x1d, r6, 0x1, {0x1, 0xff, 0x2}, 0xff}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000680)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3ff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xbb}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000880)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffff8000, @remote, 0xffffff7f}, {0xa, 0x0, 0x196, @remote, 0x80000001}, r1, 0x400}}, 0x48) r8 = signalfd4(r4, &(0x7f0000000940)={[0x4c9]}, 0x8, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000980)={0x0, 0x9, 0x323a, 0x5, 0x1, 0x8}, &(0x7f00000009c0)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000980)={0x0, 0x9, 0x323a, 0x5, 0x1, 0x8}, &(0x7f00000009c0)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000a00)={r9, 0x101}, &(0x7f0000000a40)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000a00)={r9, 0x101}, &(0x7f0000000a40)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000a80)={0x0, @aes256, 0x0, @desc2}) 17.710055308s ago: executing program 3 (id=198): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 17.693146489s ago: executing program 32 (id=198): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 1.194451354s ago: executing program 4 (id=908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.151034997s ago: executing program 4 (id=909): syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x20000000) 1.082383533s ago: executing program 4 (id=911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000005640), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x24040080) 1.082021043s ago: executing program 4 (id=912): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10120, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x370, 0x1a0, 0x2d8, 0xffffffff, 0x2d8, 0x1a0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3b}, 0xffffffff, 0xffffff00, 'team_slave_1\x00', 'vlan0\x00', {}, {}, 0x5e, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x64, @gre_key=0xffff}}}}, {{@ip={@multicast2, @remote, 0xff000000, 0xffffff00, 'ip6tnl0\x00', 'xfrm0\x00', {}, {0xff}, 0x5c, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "0e75", 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast2, @icmp_id=0x66, @icmp_id=0x65}}}}, {{@ip={@remote, @multicast1, 0xff, 0xff000000, 'bridge0\x00', 'caif0\x00', {}, {}, 0x21, 0x1, 0x56}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @remote, @gre_key=0x4, @gre_key=0xd346}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32], 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, 0x0, 0x4004890) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) 836.223523ms ago: executing program 0 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") 822.204754ms ago: executing program 0 (id=921): syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x20000000) 806.323925ms ago: executing program 0 (id=922): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) 789.832026ms ago: executing program 0 (id=923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) 642.752938ms ago: executing program 1 (id=927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) 604.013552ms ago: executing program 1 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xd4}}, 0x0) 590.892612ms ago: executing program 1 (id=929): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 541.765506ms ago: executing program 0 (id=930): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74c74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x4001, 0xc8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r8 = gettid() r9 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xe}, 0x106c10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = timerfd_create(0x0, 0x0) readv(r10, &(0x7f0000000380)=[{&(0x7f0000000d00)=""/157, 0x40}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r11}, 0x20) r12 = memfd_create(&(0x7f0000001940)='[\v\xdbX\xae[d\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v\x05\x00\x00\x00\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\a\xc4\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xa0yqE\xf3\x1c\bF\xef\x16\xf2\xe7{q\x9f{\x00\xfa\xe5y\xd8s\xa5vL\xb5\xae\xf5\b\xc3\x9a\xfei\xf0\xda\xacA\x86\xd3\x8c\x9d\r\xc6\xd1\x06\xaa\xc2\x1c\xeb\xf9\xd2KQ\xfb\xa7\x05l\xc4v\x9b\x9c\xce{j\x11\xde\xc1AC\xe0\x88H\xe8\xa3P\x87\xeb`\xd8,\x96\xb9{\xd2\xbc\xe3\xd0tO\v\xca0N\xb6\xfby\x1fN\xfdW\x19\xc4\x04m\xfb\xdaTf-\x8e\x01\xd6\x80\v\xb1V\xcf\x9d3\\\xfd\xaa\x82\xf8\x99\xb8\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r12, &(0x7f0000000180)="e502", 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") execveat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x100) 444.142524ms ago: executing program 5 (id=932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") 426.615596ms ago: executing program 2 (id=934): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r2, @ANYBLOB="ed"], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000034be273d04000000000013880992629eb6d6916c77d6539b11b4433eb6d8347f9e5df34813d01c30b46814c0488da60cc6283195e663987b7628ccdee6cb653cf1693fca1104f86d1cf7e74cdcd6a528231a521c12f145559eaa6506b7cc3c43663c004bf1d91237ae8c5dde8cfd8db14537730a57ec76763e8d7fce4ac632ac6d11512c21f371378423a8df496db42653e0270e7656", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) syz_clone(0x49208000, 0x0, 0x0, 0x0, 0x0, 0x0) 334.690953ms ago: executing program 0 (id=935): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) move_mount(r0, &(0x7f0000000100)='./bus\x00', r1, &(0x7f00000000c0)='./bus\x00', 0x14) sendfile(r1, r0, 0x0, 0x7ffff000) 320.213024ms ago: executing program 2 (id=936): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 283.802087ms ago: executing program 5 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0x3}, {0xffff, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 231.575872ms ago: executing program 1 (id=938): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r1, r0, 0x4}, 0x10) 226.690722ms ago: executing program 2 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) 226.471862ms ago: executing program 4 (id=940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) 156.754508ms ago: executing program 1 (id=941): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 156.200097ms ago: executing program 1 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/31, 0x1f}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r8, r8, 0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000008c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@bh}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 148.233548ms ago: executing program 2 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x4) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x3f00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getpid() 104.386752ms ago: executing program 5 (id=944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 89.638233ms ago: executing program 5 (id=945): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xaa, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x64, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x65, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x6, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 59.090895ms ago: executing program 5 (id=946): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x6}, {0x1, 0xf0, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0xfe}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r0, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 6.238759ms ago: executing program 5 (id=947): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x8001, 0x3, 0x8, 0x41d7, 0x40, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x4, 0xffffffffffffffff, r5}) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r4, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x18, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 6.04484ms ago: executing program 2 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10) 5.86769ms ago: executing program 2 (id=949): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 0s ago: executing program 4 (id=950): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000140)=""/154) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x7fffffff, 0x7ec, 0x2000010000, 0x2000000000002, 0x3, 0x0, 0x7ffc}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x25}}, 0x0, 0x4, 0x4, 0x9, 0x69, 0x6, 0x1f}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r3, 0x14}, &(0x7f0000000280)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x9b, 0x80, 0x2c, @mcast2, @local, 0x40, 0x20, 0x9, 0x101}}) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x804e8bda1a5df17a) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r5, @fallback=0x24, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r8, 0x3, 0x0) getdents(r8, 0x0, 0x58) kernel console output (not intermixed with test programs): (loop3): dirty_blocks=96 [ 30.146710][ T3483] EXT4-fs (loop3): Block reservation details [ 30.152718][ T3483] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 30.173172][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.182975][ T3486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.200800][ T3486] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 30.218364][ T3489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.253235][ T3486] System zones: 0-2, 18-18, 34-34 [ 30.259543][ T3493] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.262774][ T29] audit: type=1400 audit(1754706850.564:115): avc: denied { read } for pid=3492 comm="syz.1.2" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 30.291710][ T29] audit: type=1400 audit(1754706850.564:116): avc: denied { open } for pid=3492 comm="syz.1.2" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 30.292247][ T3475] +}[@ (3475) used greatest stack depth: 10232 bytes left [ 30.325574][ T3486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.344818][ T1388] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 30.357949][ T3486] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.383152][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.422091][ T29] audit: type=1400 audit(1754706850.734:117): avc: denied { create } for pid=3494 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.549827][ T29] audit: type=1400 audit(1754706850.734:118): avc: denied { write } for pid=3494 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.570438][ C0] hrtimer: interrupt took 52492 ns [ 30.597400][ T29] audit: type=1326 audit(1754706850.904:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36a23ebe9 code=0x7ffc0000 [ 30.702373][ T3505] bridge: RTM_NEWNEIGH with invalid ether address [ 30.736377][ T3511] lo speed is unknown, defaulting to 1000 [ 30.786271][ T3511] lo speed is unknown, defaulting to 1000 [ 30.824409][ T3511] lo speed is unknown, defaulting to 1000 [ 30.865505][ T3497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 30.899034][ T3511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 30.916447][ T3515] loop0: detected capacity change from 0 to 2048 [ 30.967896][ T3515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.974460][ T3497] netlink: 'syz.3.8': attribute type 21 has an invalid length. [ 31.088592][ T3511] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 31.134881][ T3524] loop1: detected capacity change from 0 to 512 [ 31.171086][ T3511] lo speed is unknown, defaulting to 1000 [ 31.200345][ T3511] lo speed is unknown, defaulting to 1000 [ 31.231580][ T3511] lo speed is unknown, defaulting to 1000 [ 31.268024][ T3511] lo speed is unknown, defaulting to 1000 [ 31.276890][ T3524] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.15: iget: bad extended attribute block 1 [ 31.318775][ T3528] loop3: detected capacity change from 0 to 512 [ 31.340485][ T3511] lo speed is unknown, defaulting to 1000 [ 31.358389][ T3524] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.15: couldn't read orphan inode 15 (err -117) [ 31.375991][ T3528] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.16: error while reading EA inode 32 err=-116 [ 31.433836][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.465252][ T3530] loop4: detected capacity change from 0 to 512 [ 31.473350][ T3528] EXT4-fs (loop3): 1 orphan inode deleted [ 31.479452][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.511305][ T3511] lo speed is unknown, defaulting to 1000 [ 31.525319][ T3530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.569332][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.597494][ T3530] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.702743][ T3530] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.17: corrupted inode contents [ 31.722267][ T3530] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.17: mark_inode_dirty error [ 31.740121][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.742615][ T3536] capability: warning: `syz.1.18' uses deprecated v2 capabilities in a way that may be insecure [ 31.772775][ T3530] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.17: corrupted inode contents [ 31.790028][ T3480] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 31.802582][ T3536] loop1: detected capacity change from 0 to 2048 [ 31.854739][ T3532] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.17: corrupted inode contents [ 31.866859][ T3532] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.17: mark_inode_dirty error [ 31.902464][ T3532] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.17: corrupted inode contents [ 31.928979][ T3292] loop1: p1 < > p4 [ 31.942532][ T3292] loop1: p4 size 8388608 extends beyond EOD, truncated [ 31.964797][ T3536] loop1: p1 < > p4 [ 31.969445][ T3536] loop1: p4 size 8388608 extends beyond EOD, truncated [ 31.971812][ T3532] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.17: mark_inode_dirty error [ 31.995652][ T2992] loop1: p1 < > p4 [ 32.000815][ T2992] loop1: p4 size 8388608 extends beyond EOD, truncated [ 32.013674][ T3532] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.17: corrupted inode contents [ 32.046136][ T3532] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.17: mark_inode_dirty error [ 32.090896][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 32.103907][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.117524][ T3542] process 'syz.1.20' launched './file0' with NULL argv: empty string added [ 32.174005][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.191875][ T3546] Zero length message leads to an empty skb [ 32.244630][ T3552] loop4: detected capacity change from 0 to 512 [ 32.257218][ T3552] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 32.257259][ T3552] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.25: iget: bad i_size value: 12154757448730 [ 32.257549][ T3552] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.25: couldn't read orphan inode 13 (err -117) [ 32.258724][ T3552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.260991][ T3552] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 32.367587][ T3556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26'. [ 32.385514][ T3559] FAULT_INJECTION: forcing a failure. [ 32.385514][ T3559] name failslab, interval 1, probability 0, space 0, times 1 [ 32.398339][ T3559] CPU: 0 UID: 0 PID: 3559 Comm: syz.1.27 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 32.398414][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.398428][ T3559] Call Trace: [ 32.398436][ T3559] [ 32.398444][ T3559] __dump_stack+0x1d/0x30 [ 32.398471][ T3559] dump_stack_lvl+0xe8/0x140 [ 32.398492][ T3559] dump_stack+0x15/0x1b [ 32.398524][ T3559] should_fail_ex+0x265/0x280 [ 32.398555][ T3559] should_failslab+0x8c/0xb0 [ 32.398578][ T3559] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 32.398607][ T3559] ? make_vfsuid+0x49/0xa0 [ 32.398755][ T3559] ? v9fs_session_init+0x4b/0xde0 [ 32.398779][ T3559] kstrdup+0x3e/0xd0 [ 32.398807][ T3559] v9fs_session_init+0x4b/0xde0 [ 32.398855][ T3559] ? __rcu_read_unlock+0x4f/0x70 [ 32.398879][ T3559] ? avc_has_perm_noaudit+0x1b1/0x200 [ 32.398903][ T3559] ? should_fail_ex+0xdb/0x280 [ 32.398940][ T3559] ? v9fs_mount+0x51/0x5c0 [ 32.399028][ T3559] ? should_failslab+0x8c/0xb0 [ 32.399057][ T3559] ? __kmalloc_cache_noprof+0x189/0x320 [ 32.399165][ T3559] v9fs_mount+0x67/0x5c0 [ 32.399224][ T3559] ? selinux_capable+0x31/0x40 [ 32.399250][ T3559] ? __pfx_v9fs_mount+0x10/0x10 [ 32.399277][ T3559] legacy_get_tree+0x75/0xd0 [ 32.399354][ T3559] vfs_get_tree+0x54/0x1d0 [ 32.399431][ T3559] do_new_mount+0x207/0x5e0 [ 32.399451][ T3559] ? security_capable+0x83/0x90 [ 32.399476][ T3559] path_mount+0x4a4/0xb20 [ 32.399500][ T3559] ? user_path_at+0x109/0x130 [ 32.399534][ T3559] __se_sys_mount+0x28f/0x2e0 [ 32.399596][ T3559] ? fput+0x8f/0xc0 [ 32.399627][ T3559] __x64_sys_mount+0x67/0x80 [ 32.399654][ T3559] x64_sys_call+0x2b4d/0x2ff0 [ 32.399726][ T3559] do_syscall_64+0xd2/0x200 [ 32.399800][ T3559] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.399824][ T3559] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.399848][ T3559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.399987][ T3559] RIP: 0033:0x7f260267ebe9 [ 32.400005][ T3559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.400023][ T3559] RSP: 002b:00007f26010e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.400051][ T3559] RAX: ffffffffffffffda RBX: 00007f26028a5fa0 RCX: 00007f260267ebe9 [ 32.400074][ T3559] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 32.400088][ T3559] RBP: 00007f26010e7090 R08: 0000200000000180 R09: 0000000000000000 [ 32.400103][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 32.400117][ T3559] R13: 00007f26028a6038 R14: 00007f26028a5fa0 R15: 00007ffdd92ccc88 [ 32.400138][ T3559] [ 32.681414][ T3556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 32.699713][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.707114][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.720912][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.728304][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.883283][ T3566] netlink: 27 bytes leftover after parsing attributes in process `syz.3.29'. [ 32.908091][ T3557] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.992567][ T3575] program syz.3.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.058946][ T3577] loop1: detected capacity change from 0 to 512 [ 33.101175][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.112289][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.129931][ T3577] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.153300][ T3577] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.34: corrupted inode contents [ 33.166046][ T3577] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.34: mark_inode_dirty error [ 33.178341][ T3577] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.34: corrupted inode contents [ 33.192901][ T3577] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.34: corrupted inode contents [ 33.205271][ T3577] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.34: mark_inode_dirty error [ 33.219249][ T3577] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.34: corrupted inode contents [ 33.232949][ T3577] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.34: mark_inode_dirty error [ 33.281406][ T3577] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.34: corrupted inode contents [ 33.293749][ T3577] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.34: mark_inode_dirty error [ 33.294787][ T3584] Invalid ELF header type: 3 != 1 [ 33.314810][ T3584] loop4: detected capacity change from 0 to 128 [ 33.331322][ T3584] FAT-fs (loop4): Directory bread(block 162) failed [ 33.338441][ T3584] FAT-fs (loop4): Directory bread(block 163) failed [ 33.345497][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.347021][ T3584] FAT-fs (loop4): Directory bread(block 164) failed [ 33.362581][ T3584] FAT-fs (loop4): Directory bread(block 165) failed [ 33.369267][ T3584] FAT-fs (loop4): Directory bread(block 166) failed [ 33.376366][ T3584] FAT-fs (loop4): Directory bread(block 167) failed [ 33.383155][ T3584] FAT-fs (loop4): Directory bread(block 168) failed [ 33.389930][ T3584] FAT-fs (loop4): Directory bread(block 169) failed [ 33.401343][ T3584] FAT-fs (loop4): Directory bread(block 162) failed [ 33.432722][ T3584] FAT-fs (loop4): Directory bread(block 163) failed [ 33.442688][ T3584] syz.4.37: attempt to access beyond end of device [ 33.442688][ T3584] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 33.458911][ T3584] syz.4.37: attempt to access beyond end of device [ 33.458911][ T3584] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 33.522093][ T3592] loop1: detected capacity change from 0 to 512 [ 33.531870][ T3599] program syz.4.40 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.583480][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.596777][ T3592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.614866][ T3592] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.669201][ T3592] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.38: corrupted inode contents [ 33.725391][ T3592] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.38: mark_inode_dirty error [ 33.752502][ T3592] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.38: corrupted inode contents [ 33.771321][ T3610] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.38: corrupted inode contents [ 33.791974][ T3621] netlink: 27 bytes leftover after parsing attributes in process `syz.3.46'. [ 33.807121][ T3610] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.38: mark_inode_dirty error [ 33.819861][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.828836][ T3610] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.38: corrupted inode contents [ 33.847971][ T3610] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.38: mark_inode_dirty error [ 33.859432][ T3610] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.38: corrupted inode contents [ 33.872652][ T3610] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.38: mark_inode_dirty error [ 33.931827][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.937749][ T3630] lo speed is unknown, defaulting to 1000 [ 34.012446][ T3638] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 34.020223][ T3638] netlink: 'syz.2.53': attribute type 2 has an invalid length. [ 34.029902][ T3635] program syz.1.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.045482][ T3638] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 34.053249][ T3638] netlink: 'syz.2.53': attribute type 2 has an invalid length. [ 34.126211][ T3646] 9pnet_fd: Insufficient options for proto=fd [ 34.136483][ T3650] loop2: detected capacity change from 0 to 512 [ 34.136694][ T3652] program syz.0.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.153659][ T3650] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 34.162500][ T3650] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.57: iget: bad i_size value: 12154757448730 [ 34.175395][ T3650] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.57: couldn't read orphan inode 13 (err -117) [ 34.191433][ T3650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.207948][ T3650] EXT4-fs warning (device loop2): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 34.226592][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.325332][ T3666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 34.336398][ T3666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 34.345942][ T3668] loop4: detected capacity change from 0 to 512 [ 34.355906][ T3666] bond0: (slave bond_slave_1): Releasing backup interface [ 34.392314][ T3668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.410443][ T3668] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.460353][ T3668] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.65: corrupted inode contents [ 34.477674][ T3668] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.65: mark_inode_dirty error [ 34.491176][ T3668] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.65: corrupted inode contents [ 34.513640][ T3668] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.65: corrupted inode contents [ 34.529960][ T3668] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.65: mark_inode_dirty error [ 34.550462][ T3668] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.65: corrupted inode contents [ 34.576818][ T3668] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.65: mark_inode_dirty error [ 34.588119][ T3668] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.65: corrupted inode contents [ 34.604878][ T3668] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.65: mark_inode_dirty error [ 34.631684][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.697199][ T3703] program syz.4.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.715984][ T3707] loop1: detected capacity change from 0 to 512 [ 34.725706][ T3707] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.78: iget: bad extended attribute block 1 [ 34.739897][ T3707] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.78: couldn't read orphan inode 15 (err -117) [ 34.761119][ T3707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.792709][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.806938][ T3712] loop3: detected capacity change from 0 to 512 [ 34.815883][ T3712] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.81: iget: bad extended attribute block 1 [ 34.833346][ T3712] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.81: couldn't read orphan inode 15 (err -117) [ 34.835630][ T3715] loop1: detected capacity change from 0 to 764 [ 34.850744][ T3712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.865101][ T3715] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 34.873745][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 34.873758][ T29] audit: type=1400 audit(1754706855.184:441): avc: denied { mount } for pid=3714 comm="syz.1.80" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 34.919051][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.974792][ T29] audit: type=1400 audit(1754706855.284:442): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 35.012405][ T29] audit: type=1326 audit(1754706855.314:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 35.015299][ T3722] loop4: detected capacity change from 0 to 512 [ 35.035663][ T29] audit: type=1326 audit(1754706855.314:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 35.035695][ T29] audit: type=1326 audit(1754706855.314:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 35.082792][ T3722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.088579][ T29] audit: type=1326 audit(1754706855.314:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 35.101930][ T3722] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.124137][ T29] audit: type=1326 audit(1754706855.314:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 35.157426][ T29] audit: type=1326 audit(1754706855.314:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 35.168027][ T3722] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.84: corrupted inode contents [ 35.180600][ T29] audit: type=1326 audit(1754706855.314:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 35.193461][ T3722] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.84: mark_inode_dirty error [ 35.215318][ T29] audit: type=1326 audit(1754706855.314:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 35.251082][ T3722] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.84: corrupted inode contents [ 35.266814][ T3727] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.84: corrupted inode contents [ 35.279184][ T3727] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.84: mark_inode_dirty error [ 35.293180][ T3727] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.84: corrupted inode contents [ 35.305210][ T3727] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.84: mark_inode_dirty error [ 35.321428][ T3727] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.84: corrupted inode contents [ 35.333678][ T3727] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.84: mark_inode_dirty error [ 35.372650][ T3738] loop1: detected capacity change from 0 to 512 [ 35.384075][ T3738] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.89: iget: bad extended attribute block 1 [ 35.399082][ T3738] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.89: couldn't read orphan inode 15 (err -117) [ 35.417886][ T3738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.440473][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.462497][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.507361][ T3743] lo speed is unknown, defaulting to 1000 [ 35.539471][ T3751] program syz.1.94 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.555125][ T3745] loop0: detected capacity change from 0 to 8192 [ 35.623366][ T3759] FAULT_INJECTION: forcing a failure. [ 35.623366][ T3759] name failslab, interval 1, probability 0, space 0, times 0 [ 35.636088][ T3759] CPU: 1 UID: 0 PID: 3759 Comm: syz.0.97 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 35.636135][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.636148][ T3759] Call Trace: [ 35.636155][ T3759] [ 35.636184][ T3759] __dump_stack+0x1d/0x30 [ 35.636208][ T3759] dump_stack_lvl+0xe8/0x140 [ 35.636230][ T3759] dump_stack+0x15/0x1b [ 35.636248][ T3759] should_fail_ex+0x265/0x280 [ 35.636303][ T3759] should_failslab+0x8c/0xb0 [ 35.636328][ T3759] kmem_cache_alloc_noprof+0x50/0x310 [ 35.636392][ T3759] ? skb_clone+0x151/0x1f0 [ 35.636414][ T3759] skb_clone+0x151/0x1f0 [ 35.636435][ T3759] nfnetlink_rcv+0x305/0x1690 [ 35.636461][ T3759] ? nlmon_xmit+0x4f/0x60 [ 35.636499][ T3759] ? consume_skb+0x49/0x150 [ 35.636532][ T3759] ? nlmon_xmit+0x4f/0x60 [ 35.636557][ T3759] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 35.636637][ T3759] ? __dev_queue_xmit+0x1200/0x2000 [ 35.636729][ T3759] ? __dev_queue_xmit+0x182/0x2000 [ 35.636763][ T3759] ? ref_tracker_free+0x37d/0x3e0 [ 35.636809][ T3759] netlink_unicast+0x5c0/0x690 [ 35.636855][ T3759] netlink_sendmsg+0x58b/0x6b0 [ 35.636892][ T3759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.636928][ T3759] __sock_sendmsg+0x142/0x180 [ 35.636952][ T3759] ____sys_sendmsg+0x31e/0x4e0 [ 35.636986][ T3759] ___sys_sendmsg+0x17b/0x1d0 [ 35.637013][ T3759] __x64_sys_sendmsg+0xd4/0x160 [ 35.637034][ T3759] x64_sys_call+0x191e/0x2ff0 [ 35.637084][ T3759] do_syscall_64+0xd2/0x200 [ 35.637167][ T3759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.637181][ T3759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.637197][ T3759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.637220][ T3759] RIP: 0033:0x7f451e39ebe9 [ 35.637237][ T3759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.637321][ T3759] RSP: 002b:00007f451ce07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.637333][ T3759] RAX: ffffffffffffffda RBX: 00007f451e5c5fa0 RCX: 00007f451e39ebe9 [ 35.637341][ T3759] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 35.637348][ T3759] RBP: 00007f451ce07090 R08: 0000000000000000 R09: 0000000000000000 [ 35.637355][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.637362][ T3759] R13: 00007f451e5c6038 R14: 00007f451e5c5fa0 R15: 00007ffc70322c58 [ 35.637373][ T3759] [ 35.907996][ T3764] lo speed is unknown, defaulting to 1000 [ 36.044175][ T3768] FAULT_INJECTION: forcing a failure. [ 36.044175][ T3768] name failslab, interval 1, probability 0, space 0, times 0 [ 36.056887][ T3768] CPU: 1 UID: 0 PID: 3768 Comm: syz.1.100 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 36.056924][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.056934][ T3768] Call Trace: [ 36.056941][ T3768] [ 36.056947][ T3768] __dump_stack+0x1d/0x30 [ 36.056969][ T3768] dump_stack_lvl+0xe8/0x140 [ 36.056989][ T3768] dump_stack+0x15/0x1b [ 36.057007][ T3768] should_fail_ex+0x265/0x280 [ 36.057121][ T3768] should_failslab+0x8c/0xb0 [ 36.057149][ T3768] kmem_cache_alloc_noprof+0x50/0x310 [ 36.057178][ T3768] ? security_inode_alloc+0x37/0x100 [ 36.057243][ T3768] security_inode_alloc+0x37/0x100 [ 36.057265][ T3768] inode_init_always_gfp+0x4b7/0x500 [ 36.057303][ T3768] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 36.057331][ T3768] alloc_inode+0x58/0x170 [ 36.057355][ T3768] new_inode+0x1d/0xe0 [ 36.057447][ T3768] __debugfs_create_file+0x109/0x330 [ 36.057475][ T3768] debugfs_create_file_full+0x3f/0x60 [ 36.057501][ T3768] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 36.057535][ T3768] ref_tracker_dir_debugfs+0x100/0x1e0 [ 36.057617][ T3768] alloc_netdev_mqs+0x1a2/0xa20 [ 36.057714][ T3768] rtnl_create_link+0x239/0x710 [ 36.057748][ T3768] rtnl_newlink_create+0x14c/0x620 [ 36.057778][ T3768] ? security_capable+0x83/0x90 [ 36.057944][ T3768] ? netlink_ns_capable+0x86/0xa0 [ 36.057974][ T3768] rtnl_newlink+0xf29/0x12d0 [ 36.058006][ T3768] ? bpf_trace_run3+0x12c/0x1d0 [ 36.058105][ T3768] ? __kfree_skb+0x109/0x150 [ 36.058135][ T3768] ? xa_load+0xb1/0xe0 [ 36.058160][ T3768] ? __rcu_read_unlock+0x4f/0x70 [ 36.058183][ T3768] ? avc_has_perm_noaudit+0x1b1/0x200 [ 36.058209][ T3768] ? cred_has_capability+0x210/0x280 [ 36.058325][ T3768] ? selinux_capable+0x31/0x40 [ 36.058352][ T3768] ? security_capable+0x83/0x90 [ 36.058407][ T3768] ? ns_capable+0x7d/0xb0 [ 36.058426][ T3768] ? __pfx_rtnl_newlink+0x10/0x10 [ 36.058488][ T3768] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 36.058516][ T3768] netlink_rcv_skb+0x120/0x220 [ 36.058546][ T3768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 36.058637][ T3768] rtnetlink_rcv+0x1c/0x30 [ 36.058657][ T3768] netlink_unicast+0x5c0/0x690 [ 36.058689][ T3768] netlink_sendmsg+0x58b/0x6b0 [ 36.058724][ T3768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.058757][ T3768] __sock_sendmsg+0x142/0x180 [ 36.058856][ T3768] ____sys_sendmsg+0x31e/0x4e0 [ 36.058897][ T3768] ___sys_sendmsg+0x17b/0x1d0 [ 36.058943][ T3768] __x64_sys_sendmsg+0xd4/0x160 [ 36.059036][ T3768] x64_sys_call+0x191e/0x2ff0 [ 36.059060][ T3768] do_syscall_64+0xd2/0x200 [ 36.059086][ T3768] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.059124][ T3768] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.059160][ T3768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.059183][ T3768] RIP: 0033:0x7f260267ebe9 [ 36.059200][ T3768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.059219][ T3768] RSP: 002b:00007f26010e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.059240][ T3768] RAX: ffffffffffffffda RBX: 00007f26028a5fa0 RCX: 00007f260267ebe9 [ 36.059255][ T3768] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 36.059268][ T3768] RBP: 00007f26010e7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.059282][ T3768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.059295][ T3768] R13: 00007f26028a6038 R14: 00007f26028a5fa0 R15: 00007ffdd92ccc88 [ 36.059316][ T3768] [ 36.059328][ T3768] debugfs: out of free dentries, can not create file 'netdev@ffff888119a49550' [ 36.095743][ T3770] loop3: detected capacity change from 0 to 512 [ 36.435912][ T3770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.444868][ T3781] FAULT_INJECTION: forcing a failure. [ 36.444868][ T3781] name failslab, interval 1, probability 0, space 0, times 0 [ 36.456298][ T3770] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.461070][ T3781] CPU: 0 UID: 0 PID: 3781 Comm: syz.2.103 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 36.461164][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.461178][ T3781] Call Trace: [ 36.461184][ T3781] [ 36.461192][ T3781] __dump_stack+0x1d/0x30 [ 36.461291][ T3781] dump_stack_lvl+0xe8/0x140 [ 36.461312][ T3781] dump_stack+0x15/0x1b [ 36.461381][ T3781] should_fail_ex+0x265/0x280 [ 36.461416][ T3781] should_failslab+0x8c/0xb0 [ 36.461484][ T3781] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 36.461517][ T3781] ? make_vfsuid+0x49/0xa0 [ 36.461543][ T3781] ? v9fs_session_init+0x4b/0xde0 [ 36.461597][ T3781] kstrdup+0x3e/0xd0 [ 36.461623][ T3781] v9fs_session_init+0x4b/0xde0 [ 36.461644][ T3781] ? __rcu_read_unlock+0x4f/0x70 [ 36.461703][ T3781] ? avc_has_perm_noaudit+0x1b1/0x200 [ 36.461727][ T3781] ? should_fail_ex+0xdb/0x280 [ 36.461760][ T3781] ? v9fs_mount+0x51/0x5c0 [ 36.461785][ T3781] ? should_failslab+0x8c/0xb0 [ 36.461869][ T3781] ? __kmalloc_cache_noprof+0x189/0x320 [ 36.461910][ T3781] v9fs_mount+0x67/0x5c0 [ 36.461934][ T3781] ? selinux_capable+0x31/0x40 [ 36.461960][ T3781] ? __pfx_v9fs_mount+0x10/0x10 [ 36.461986][ T3781] legacy_get_tree+0x75/0xd0 [ 36.462070][ T3781] vfs_get_tree+0x54/0x1d0 [ 36.462094][ T3781] do_new_mount+0x207/0x5e0 [ 36.462152][ T3781] ? security_capable+0x83/0x90 [ 36.462175][ T3781] path_mount+0x4a4/0xb20 [ 36.462198][ T3781] ? user_path_at+0x109/0x130 [ 36.462240][ T3781] __se_sys_mount+0x28f/0x2e0 [ 36.462410][ T3781] ? fput+0x8f/0xc0 [ 36.462470][ T3781] __x64_sys_mount+0x67/0x80 [ 36.462495][ T3781] x64_sys_call+0x2b4d/0x2ff0 [ 36.462518][ T3781] do_syscall_64+0xd2/0x200 [ 36.462543][ T3781] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.462569][ T3781] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.462610][ T3781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.462632][ T3781] RIP: 0033:0x7fa44d3debe9 [ 36.462648][ T3781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.462667][ T3781] RSP: 002b:00007fa44be3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.462686][ T3781] RAX: ffffffffffffffda RBX: 00007fa44d605fa0 RCX: 00007fa44d3debe9 [ 36.462739][ T3781] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 36.462753][ T3781] RBP: 00007fa44be3f090 R08: 0000200000000180 R09: 0000000000000000 [ 36.462795][ T3781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.462814][ T3781] R13: 00007fa44d606038 R14: 00007fa44d605fa0 R15: 00007fff4932d1e8 [ 36.462834][ T3781] [ 36.610508][ T3768] syz.1.100 (3768) used greatest stack depth: 10008 bytes left [ 36.619144][ T3787] loop2: detected capacity change from 0 to 512 [ 36.686619][ T3770] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.101: corrupted inode contents [ 36.695972][ T3787] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.757275][ T3770] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.101: mark_inode_dirty error [ 36.759038][ T3787] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.795069][ T3770] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.101: corrupted inode contents [ 36.820541][ T3799] lo speed is unknown, defaulting to 1000 [ 36.832107][ T3797] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.101: corrupted inode contents [ 36.849704][ T3787] EXT4-fs (loop2): 1 truncate cleaned up [ 36.854729][ T3797] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.101: mark_inode_dirty error [ 36.866878][ T3797] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.101: corrupted inode contents [ 36.866944][ T3787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.882248][ T3797] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.101: mark_inode_dirty error [ 36.914235][ T3797] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.101: corrupted inode contents [ 36.927886][ T3797] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.101: mark_inode_dirty error [ 36.952873][ T3808] loop0: detected capacity change from 0 to 1024 [ 36.956532][ T3787] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.104: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=4294574082, rec_len=65535, size=1024 fake=1 [ 36.959804][ T3808] EXT4-fs: Ignoring removed orlov option [ 36.986769][ T3810] program syz.1.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.005046][ T3787] EXT4-fs (loop2): Remounting filesystem read-only [ 37.016116][ T3787] netlink: 44 bytes leftover after parsing attributes in process `syz.2.104'. [ 37.026365][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.051794][ T3808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.075743][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.102873][ T3808] FAULT_INJECTION: forcing a failure. [ 37.102873][ T3808] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 37.116260][ T3808] CPU: 0 UID: 0 PID: 3808 Comm: syz.0.109 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 37.116289][ T3808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.116301][ T3808] Call Trace: [ 37.116307][ T3808] [ 37.116314][ T3808] __dump_stack+0x1d/0x30 [ 37.116334][ T3808] dump_stack_lvl+0xe8/0x140 [ 37.116358][ T3808] dump_stack+0x15/0x1b [ 37.116374][ T3808] should_fail_ex+0x265/0x280 [ 37.116405][ T3808] should_fail_alloc_page+0xf2/0x100 [ 37.116429][ T3808] alloc_pages_bulk_noprof+0xef/0x540 [ 37.116514][ T3808] copy_splice_read+0xf3/0x5f0 [ 37.116549][ T3808] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 37.116598][ T3808] splice_direct_to_actor+0x290/0x680 [ 37.116618][ T3808] ? __pfx_direct_splice_actor+0x10/0x10 [ 37.116655][ T3808] do_splice_direct+0xda/0x150 [ 37.116673][ T3808] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 37.116710][ T3808] do_sendfile+0x380/0x650 [ 37.116739][ T3808] __x64_sys_sendfile64+0x105/0x150 [ 37.116766][ T3808] x64_sys_call+0x2bb0/0x2ff0 [ 37.116786][ T3808] do_syscall_64+0xd2/0x200 [ 37.116869][ T3808] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.116934][ T3808] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.116955][ T3808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.116975][ T3808] RIP: 0033:0x7f451e39ebe9 [ 37.116989][ T3808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.117006][ T3808] RSP: 002b:00007f451ce07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 37.117031][ T3808] RAX: ffffffffffffffda RBX: 00007f451e5c5fa0 RCX: 00007f451e39ebe9 [ 37.117051][ T3808] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 37.117063][ T3808] RBP: 00007f451ce07090 R08: 0000000000000000 R09: 0000000000000000 [ 37.117074][ T3808] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 37.117086][ T3808] R13: 00007f451e5c6038 R14: 00007f451e5c5fa0 R15: 00007ffc70322c58 [ 37.117103][ T3808] [ 37.324619][ T3819] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET) [ 37.352116][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.355429][ T3818] lo speed is unknown, defaulting to 1000 [ 37.493074][ T3833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=3833 comm=syz.4.114 [ 37.506279][ T3833] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 37.521588][ T3834] bridge_slave_1: left allmulticast mode [ 37.527251][ T3834] bridge_slave_1: left promiscuous mode [ 37.533386][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.541870][ T3834] bridge_slave_0: left allmulticast mode [ 37.547971][ T3834] bridge_slave_0: left promiscuous mode [ 37.554092][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.607388][ T3847] loop0: detected capacity change from 0 to 512 [ 37.614181][ T3847] EXT4-fs: Ignoring removed i_version option [ 37.621442][ T3847] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.637010][ T3847] EXT4-fs (loop0): 1 truncate cleaned up [ 37.643944][ T3847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.656977][ T3847] FAULT_INJECTION: forcing a failure. [ 37.656977][ T3847] name failslab, interval 1, probability 0, space 0, times 0 [ 37.669703][ T3847] CPU: 0 UID: 0 PID: 3847 Comm: syz.0.122 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 37.669732][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.669782][ T3847] Call Trace: [ 37.669789][ T3847] [ 37.669797][ T3847] __dump_stack+0x1d/0x30 [ 37.669820][ T3847] dump_stack_lvl+0xe8/0x140 [ 37.669846][ T3847] dump_stack+0x15/0x1b [ 37.669861][ T3847] should_fail_ex+0x265/0x280 [ 37.669939][ T3847] should_failslab+0x8c/0xb0 [ 37.669961][ T3847] kmem_cache_alloc_noprof+0x50/0x310 [ 37.669987][ T3847] ? ext4_mb_new_blocks+0x2ce/0x2080 [ 37.670064][ T3847] ? __mark_inode_dirty+0x43c/0x760 [ 37.670242][ T3847] ext4_mb_new_blocks+0x2ce/0x2080 [ 37.670270][ T3847] ? iput+0x1ca/0x5b0 [ 37.670291][ T3847] ? find_get_block_common+0x736/0x960 [ 37.670317][ T3847] ext4_new_meta_blocks+0xc3/0x1b0 [ 37.670401][ T3847] ext4_xattr_block_set+0x10ff/0x1a30 [ 37.670428][ T3847] ? folio_mark_accessed+0x240/0x3d0 [ 37.670473][ T3847] ext4_expand_extra_isize_ea+0xc65/0x11f0 [ 37.670537][ T3847] __ext4_expand_extra_isize+0x246/0x280 [ 37.670623][ T3847] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 37.670691][ T3847] ext4_dirty_inode+0x92/0xc0 [ 37.670708][ T3847] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 37.670725][ T3847] __mark_inode_dirty+0x15c/0x760 [ 37.670809][ T3847] ? file_modified_flags+0x30f/0x350 [ 37.670855][ T3847] file_modified_flags+0x324/0x350 [ 37.670886][ T3847] file_modified+0x17/0x20 [ 37.670911][ T3847] ext4_buffered_write_iter+0x1d0/0x3c0 [ 37.671014][ T3847] ext4_file_write_iter+0x383/0xf00 [ 37.671090][ T3847] ? kstrtouint_from_user+0x9f/0xf0 [ 37.671110][ T3847] ? avc_policy_seqno+0x15/0x30 [ 37.671129][ T3847] ? selinux_file_permission+0x1e4/0x320 [ 37.671241][ T3847] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 37.671318][ T3847] vfs_write+0x4a0/0x8e0 [ 37.671377][ T3847] ksys_write+0xda/0x1a0 [ 37.671401][ T3847] __x64_sys_write+0x40/0x50 [ 37.671471][ T3847] x64_sys_call+0x27fe/0x2ff0 [ 37.671491][ T3847] do_syscall_64+0xd2/0x200 [ 37.671513][ T3847] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.671562][ T3847] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.671587][ T3847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.671655][ T3847] RIP: 0033:0x7f451e39ebe9 [ 37.671672][ T3847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.671690][ T3847] RSP: 002b:00007f451ce07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 37.671708][ T3847] RAX: ffffffffffffffda RBX: 00007f451e5c5fa0 RCX: 00007f451e39ebe9 [ 37.671719][ T3847] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000008 [ 37.671732][ T3847] RBP: 00007f451ce07090 R08: 0000000000000000 R09: 0000000000000000 [ 37.671743][ T3847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.671757][ T3847] R13: 00007f451e5c6038 R14: 00007f451e5c5fa0 R15: 00007ffc70322c58 [ 37.671810][ T3847] [ 37.693995][ T3854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 37.985524][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.004009][ T3856] program syz.0.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.047864][ T3862] loop4: detected capacity change from 0 to 1024 [ 38.071383][ T3862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.096212][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.134506][ T3869] loop4: detected capacity change from 0 to 2048 [ 38.161773][ T3869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.186371][ T3869] netlink: 'syz.4.129': attribute type 4 has an invalid length. [ 38.194050][ T3869] netlink: 152 bytes leftover after parsing attributes in process `syz.4.129'. [ 38.205075][ T3869] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 38.333008][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.357267][ T3886] lo speed is unknown, defaulting to 1000 [ 38.412808][ T3892] netlink: 36 bytes leftover after parsing attributes in process `syz.4.140'. [ 38.419318][ T3894] loop1: detected capacity change from 0 to 512 [ 38.451474][ T3894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.493641][ T3894] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.514814][ T3908] program syz.0.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.558107][ T3894] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.141: corrupted inode contents [ 38.560764][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 38.611398][ T3894] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.141: mark_inode_dirty error [ 38.616604][ T3919] loop4: detected capacity change from 0 to 512 [ 38.639134][ T3894] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.141: corrupted inode contents [ 38.651653][ T3919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.658770][ T3919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.667256][ T3919] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.678776][ T3920] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.141: corrupted inode contents [ 38.689480][ T3913] mmap: syz.2.146 (3913) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.692119][ T3920] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.141: mark_inode_dirty error [ 38.714958][ T3920] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.141: corrupted inode contents [ 38.727526][ T3920] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.141: mark_inode_dirty error [ 38.739812][ T3919] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8042c018, mo2=0102] [ 38.748483][ T3919] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.148: Allocating blocks 41-42 which overlap fs metadata [ 38.753252][ T3928] loop2: detected capacity change from 0 to 512 [ 38.763116][ T3920] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.141: corrupted inode contents [ 38.781224][ T3919] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.148: Failed to acquire dquot type 1 [ 38.781404][ T3920] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.141: mark_inode_dirty error [ 38.804998][ T3919] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 38.820052][ T3919] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.148: corrupted inode contents [ 38.835736][ T3919] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.148: mark_inode_dirty error [ 38.859736][ T3919] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.148: corrupted inode contents [ 38.882111][ T3919] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.148: mark_inode_dirty error [ 38.903772][ T3919] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.148: corrupted inode contents [ 38.916374][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.931002][ T3919] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 38.940129][ T3919] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.148: corrupted inode contents [ 38.957181][ T3919] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.148: mark_inode_dirty error [ 38.971107][ T3941] loop1: detected capacity change from 0 to 512 [ 38.978377][ T3919] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 38.978659][ T3941] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 38.989359][ T3919] EXT4-fs (loop4): 1 truncate cleaned up [ 38.996074][ T3941] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.155: iget: bad i_size value: 12154757448730 [ 39.001894][ T3919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.016496][ T3941] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.155: couldn't read orphan inode 13 (err -117) [ 39.038969][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.090363][ T3919] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.148: iget: bad i_size value: 360287970189639690 [ 39.100221][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.104536][ T3919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 39.159050][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 39.195198][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.222646][ T3964] netlink: 27 bytes leftover after parsing attributes in process `syz.4.164'. [ 39.246620][ T3965] loop0: detected capacity change from 0 to 128 [ 39.262400][ T3966] lo speed is unknown, defaulting to 1000 [ 39.367212][ T3972] loop4: detected capacity change from 0 to 512 [ 39.390640][ T3972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.409951][ T3972] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.423902][ T3972] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.168: corrupted inode contents [ 39.437107][ T3972] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.168: mark_inode_dirty error [ 39.448774][ T3972] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.168: corrupted inode contents [ 39.468660][ T3972] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.168: corrupted inode contents [ 39.481489][ T3972] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.168: mark_inode_dirty error [ 39.493301][ T3972] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.168: corrupted inode contents [ 39.520538][ T3972] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.168: mark_inode_dirty error [ 39.533603][ T3981] vxcan1: tx drop: invalid da for name 0x00000000000006f9 [ 39.567321][ T3983] loop3: detected capacity change from 0 to 512 [ 39.575970][ T3972] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.168: corrupted inode contents [ 39.589850][ T3983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.600056][ T3972] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.168: mark_inode_dirty error [ 39.623464][ T3983] EXT4-fs (loop3): 1 truncate cleaned up [ 39.636773][ T3983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.667111][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.679923][ T3994] FAULT_INJECTION: forcing a failure. [ 39.679923][ T3994] name failslab, interval 1, probability 0, space 0, times 0 [ 39.692648][ T3994] CPU: 0 UID: 0 PID: 3994 Comm: syz.2.177 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 39.692680][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.692694][ T3994] Call Trace: [ 39.692779][ T3994] [ 39.692787][ T3994] __dump_stack+0x1d/0x30 [ 39.692811][ T3994] dump_stack_lvl+0xe8/0x140 [ 39.692840][ T3994] dump_stack+0x15/0x1b [ 39.692919][ T3994] should_fail_ex+0x265/0x280 [ 39.692998][ T3994] should_failslab+0x8c/0xb0 [ 39.693027][ T3994] __kvmalloc_node_noprof+0x123/0x4e0 [ 39.693133][ T3994] ? seq_read_iter+0x13e/0x940 [ 39.693167][ T3994] seq_read_iter+0x13e/0x940 [ 39.693239][ T3994] ? _raw_spin_unlock+0x26/0x50 [ 39.693274][ T3994] proc_reg_read_iter+0x110/0x180 [ 39.693309][ T3994] copy_splice_read+0x3c1/0x5f0 [ 39.693351][ T3994] ? __pfx_copy_splice_read+0x10/0x10 [ 39.693424][ T3994] splice_direct_to_actor+0x26f/0x680 [ 39.693447][ T3994] ? __pfx_direct_splice_actor+0x10/0x10 [ 39.693522][ T3994] do_splice_direct+0xda/0x150 [ 39.693544][ T3994] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 39.693571][ T3994] do_sendfile+0x380/0x650 [ 39.693605][ T3994] __x64_sys_sendfile64+0x105/0x150 [ 39.693637][ T3994] x64_sys_call+0x2bb0/0x2ff0 [ 39.693694][ T3994] do_syscall_64+0xd2/0x200 [ 39.693717][ T3994] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.693786][ T3994] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.693811][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.693839][ T3994] RIP: 0033:0x7fa44d3debe9 [ 39.693854][ T3994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.693874][ T3994] RSP: 002b:00007fa44be3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 39.693894][ T3994] RAX: ffffffffffffffda RBX: 00007fa44d605fa0 RCX: 00007fa44d3debe9 [ 39.693919][ T3994] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 39.693932][ T3994] RBP: 00007fa44be3f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.693945][ T3994] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 39.693959][ T3994] R13: 00007fa44d606038 R14: 00007fa44d605fa0 R15: 00007fff4932d1e8 [ 39.693979][ T3994] [ 39.727193][ T3301] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 39.763561][ T3997] netlink: 27 bytes leftover after parsing attributes in process `syz.0.178'. [ 39.778047][ T3301] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 39.837450][ T4001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 39.844604][ T3301] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.001593][ T3301] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 40.022417][ T3301] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.054493][ T4009] FAULT_INJECTION: forcing a failure. [ 40.054493][ T4009] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.067689][ T4009] CPU: 0 UID: 0 PID: 4009 Comm: syz.0.182 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 40.067768][ T4009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.067779][ T4009] Call Trace: [ 40.067809][ T4009] [ 40.067816][ T4009] __dump_stack+0x1d/0x30 [ 40.067840][ T4009] dump_stack_lvl+0xe8/0x140 [ 40.067861][ T4009] dump_stack+0x15/0x1b [ 40.067877][ T4009] should_fail_ex+0x265/0x280 [ 40.067921][ T4009] should_fail+0xb/0x20 [ 40.067953][ T4009] should_fail_usercopy+0x1a/0x20 [ 40.067978][ T4009] _copy_from_user+0x1c/0xb0 [ 40.068007][ T4009] vt_event_wait_ioctl+0x4c/0x310 [ 40.068039][ T4009] vt_ioctl+0x10ef/0x1880 [ 40.068121][ T4009] ? tty_jobctrl_ioctl+0x29e/0x810 [ 40.068142][ T4009] tty_ioctl+0x7de/0xb80 [ 40.068167][ T4009] ? __pfx_tty_ioctl+0x10/0x10 [ 40.068244][ T4009] __se_sys_ioctl+0xcb/0x140 [ 40.068275][ T4009] __x64_sys_ioctl+0x43/0x50 [ 40.068306][ T4009] x64_sys_call+0x1816/0x2ff0 [ 40.068330][ T4009] do_syscall_64+0xd2/0x200 [ 40.068425][ T4009] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.068477][ T4009] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.068498][ T4009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.068521][ T4009] RIP: 0033:0x7f451e39ebe9 [ 40.068537][ T4009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.068541][ T3301] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 40.068579][ T4009] RSP: 002b:00007f451ce07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.068668][ T4009] RAX: ffffffffffffffda RBX: 00007f451e5c5fa0 RCX: 00007f451e39ebe9 [ 40.068681][ T4009] RDX: 0000000000000000 RSI: 000000000000560e RDI: 0000000000000003 [ 40.068695][ T4009] RBP: 00007f451ce07090 R08: 0000000000000000 R09: 0000000000000000 [ 40.068708][ T4009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.068719][ T4009] R13: 00007f451e5c6038 R14: 00007f451e5c5fa0 R15: 00007ffc70322c58 [ 40.068768][ T4009] [ 40.099740][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 40.099755][ T29] audit: type=1400 audit(1754706860.404:895): avc: denied { ioctl } for pid=4010 comm="syz.4.183" path="socket:[6924]" dev="sockfs" ino=6924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.117794][ T3301] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.119048][ T29] audit: type=1400 audit(1754706860.404:896): avc: denied { watch watch_reads } for pid=4010 comm="syz.4.183" path="/43" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.130293][ T3301] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 40.133802][ T29] audit: type=1400 audit(1754706860.404:897): avc: denied { bind } for pid=4010 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.139437][ T3301] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.172024][ T29] audit: type=1400 audit(1754706860.474:898): avc: denied { read } for pid=4013 comm="syz.1.184" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 40.185839][ T3301] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 40.188442][ T29] audit: type=1400 audit(1754706860.474:899): avc: denied { open } for pid=4013 comm="syz.1.184" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 40.344542][ T4022] loop1: detected capacity change from 0 to 512 [ 40.358116][ T29] audit: type=1400 audit(1754706860.474:900): avc: denied { ioctl } for pid=4013 comm="syz.1.184" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 40.454958][ T4022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.460863][ T29] audit: type=1326 audit(1754706860.594:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260267ebe9 code=0x7ffc0000 [ 40.485985][ T4022] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.490205][ T29] audit: type=1326 audit(1754706860.594:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260267ebe9 code=0x7ffc0000 [ 40.521681][ T4022] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 40.527634][ T29] audit: type=1326 audit(1754706860.594:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f260267ebe9 code=0x7ffc0000 [ 40.552575][ T4022] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.187: mark_inode_dirty error [ 40.560955][ T29] audit: type=1326 audit(1754706860.594:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260267ebe9 code=0x7ffc0000 [ 40.585627][ T4022] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 40.680837][ T4030] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 40.696580][ T4030] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.187: mark_inode_dirty error [ 40.718169][ T4030] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 40.738298][ T4030] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.187: mark_inode_dirty error [ 40.752256][ T4030] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 40.766499][ T4030] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.187: mark_inode_dirty error [ 40.810434][ T4047] loop2: detected capacity change from 0 to 512 [ 40.818255][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.818556][ T4047] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.194: iget: bad extended attribute block 1 [ 40.844426][ T4047] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.194: couldn't read orphan inode 15 (err -117) [ 40.857059][ T4047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.871214][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.902728][ T1086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.923141][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.955707][ T1086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.005133][ T1086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.084618][ T1086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.249335][ T1086] bridge_slave_1: left allmulticast mode [ 41.255090][ T1086] bridge_slave_1: left promiscuous mode [ 41.260785][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.288657][ T1086] bridge_slave_0: left allmulticast mode [ 41.294351][ T1086] bridge_slave_0: left promiscuous mode [ 41.299994][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.344951][ T4085] siw: device registration error -23 [ 41.541976][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.579596][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.642130][ T1086] bond0 (unregistering): Released all slaves [ 41.764969][ T4065] lo speed is unknown, defaulting to 1000 [ 41.865862][ T4084] lo speed is unknown, defaulting to 1000 [ 42.019694][ T1086] hsr_slave_0: left promiscuous mode [ 42.047030][ T1086] hsr_slave_1: left promiscuous mode [ 42.121071][ T1086] veth1_macvtap: left promiscuous mode [ 42.148205][ T1086] veth0_macvtap: left promiscuous mode [ 42.164880][ T1086] veth1_vlan: left promiscuous mode [ 42.188300][ T1086] veth0_vlan: left promiscuous mode [ 42.332056][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 42.358078][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 42.393548][ T4108] FAULT_INJECTION: forcing a failure. [ 42.393548][ T4108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.406650][ T4108] CPU: 0 UID: 0 PID: 4108 Comm: syz.0.214 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 42.406736][ T4108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.406747][ T4108] Call Trace: [ 42.406752][ T4108] [ 42.406760][ T4108] __dump_stack+0x1d/0x30 [ 42.406784][ T4108] dump_stack_lvl+0xe8/0x140 [ 42.406804][ T4108] dump_stack+0x15/0x1b [ 42.406822][ T4108] should_fail_ex+0x265/0x280 [ 42.406901][ T4108] should_fail+0xb/0x20 [ 42.406928][ T4108] should_fail_usercopy+0x1a/0x20 [ 42.406949][ T4108] _copy_from_user+0x1c/0xb0 [ 42.406996][ T4108] __ia32_sys_rt_sigreturn+0x128/0x350 [ 42.407025][ T4108] x64_sys_call+0x2d3c/0x2ff0 [ 42.407045][ T4108] do_syscall_64+0xd2/0x200 [ 42.407097][ T4108] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.407120][ T4108] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.407140][ T4108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.407160][ T4108] RIP: 0033:0x7f451e33add9 [ 42.407175][ T4108] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 42.407193][ T4108] RSP: 002b:00007f451ce06a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 42.407212][ T4108] RAX: ffffffffffffffda RBX: 00007f451e5c5fa0 RCX: 00007f451e33add9 [ 42.407247][ T4108] RDX: 00007f451ce06a80 RSI: 00007f451ce06bb0 RDI: 0000000000000021 [ 42.407259][ T4108] RBP: 00007f451ce07090 R08: 0000000000000000 R09: 0000000000000000 [ 42.407273][ T4108] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 42.407287][ T4108] R13: 00007f451e5c6038 R14: 00007f451e5c5fa0 R15: 00007ffc70322c58 [ 42.407307][ T4108] [ 42.512083][ T4065] chnl_net:caif_netlink_parms(): no params data found [ 42.619735][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.619768][ T4065] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.620368][ T4065] bridge_slave_0: entered allmulticast mode [ 42.621213][ T4065] bridge_slave_0: entered promiscuous mode [ 42.622150][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.622182][ T4065] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.622271][ T4065] bridge_slave_1: entered allmulticast mode [ 42.623194][ T4065] bridge_slave_1: entered promiscuous mode [ 42.628579][ T4114] __nla_validate_parse: 6 callbacks suppressed [ 42.628591][ T4114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 42.745429][ T4071] syz.4.203 (4071) used greatest stack depth: 9184 bytes left [ 42.755930][ T4065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.757393][ T4065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.773822][ T4118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 42.814987][ T4065] team0: Port device team_slave_0 added [ 42.815902][ T4065] team0: Port device team_slave_1 added [ 42.833621][ T4122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4122 comm=syz.2.218 [ 42.842367][ T4065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.842381][ T4065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.842464][ T4065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.843865][ T4065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.843876][ T4065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.843920][ T4065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.917428][ T4063] syz.4.203 (4063) used greatest stack depth: 7528 bytes left [ 42.974078][ T4065] hsr_slave_0: entered promiscuous mode [ 42.981520][ T4065] hsr_slave_1: entered promiscuous mode [ 42.987504][ T4065] debugfs: 'hsr0' already exists in 'hsr' [ 42.993302][ T4065] Cannot create hsr debugfs directory [ 43.103006][ T4065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.111742][ T4065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.124665][ T4065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.133890][ T4065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.174310][ T4137] loop0: detected capacity change from 0 to 512 [ 43.183715][ T4137] EXT4-fs: Ignoring removed i_version option [ 43.189088][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.189758][ T4137] EXT4-fs: Ignoring removed bh option [ 43.196763][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.209336][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.211683][ T4137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.216408][ T4065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.235859][ T4137] EXT4-fs (loop0): 1 truncate cleaned up [ 43.252466][ T4137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.272126][ T4065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.288000][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.301903][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.315331][ T4065] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.327258][ T1388] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.334322][ T1388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.350352][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.357404][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.403617][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.471805][ T4178] FAULT_INJECTION: forcing a failure. [ 43.471805][ T4178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.485008][ T4178] CPU: 0 UID: 0 PID: 4178 Comm: syz.0.236 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 43.485091][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.485103][ T4178] Call Trace: [ 43.485110][ T4178] [ 43.485118][ T4178] __dump_stack+0x1d/0x30 [ 43.485141][ T4178] dump_stack_lvl+0xe8/0x140 [ 43.485193][ T4178] dump_stack+0x15/0x1b [ 43.485335][ T4178] should_fail_ex+0x265/0x280 [ 43.485372][ T4178] should_fail+0xb/0x20 [ 43.485432][ T4178] should_fail_usercopy+0x1a/0x20 [ 43.485449][ T4178] _copy_from_user+0x1c/0xb0 [ 43.485500][ T4178] memdup_user+0x5e/0xd0 [ 43.485530][ T4178] con_font_op+0x6c3/0x930 [ 43.485570][ T4178] ? selinux_capable+0x31/0x40 [ 43.485650][ T4178] ? should_fail_ex+0xdb/0x280 [ 43.485682][ T4178] vt_ioctl+0x153c/0x1880 [ 43.485765][ T4178] tty_ioctl+0x7de/0xb80 [ 43.485791][ T4178] ? __pfx_tty_ioctl+0x10/0x10 [ 43.485866][ T4178] __se_sys_ioctl+0xcb/0x140 [ 43.485900][ T4178] __x64_sys_ioctl+0x43/0x50 [ 43.485998][ T4178] x64_sys_call+0x1816/0x2ff0 [ 43.486067][ T4178] do_syscall_64+0xd2/0x200 [ 43.486093][ T4178] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.486116][ T4178] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.486141][ T4178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.486264][ T4178] RIP: 0033:0x7f451e39ebe9 [ 43.486279][ T4178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.486296][ T4178] RSP: 002b:00007f451ce07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.486314][ T4178] RAX: ffffffffffffffda RBX: 00007f451e5c5fa0 RCX: 00007f451e39ebe9 [ 43.486327][ T4178] RDX: 0000200000000540 RSI: 0000000000004b72 RDI: 0000000000000005 [ 43.486339][ T4178] RBP: 00007f451ce07090 R08: 0000000000000000 R09: 0000000000000000 [ 43.486351][ T4178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.486369][ T4178] R13: 00007f451e5c6038 R14: 00007f451e5c5fa0 R15: 00007ffc70322c58 [ 43.486388][ T4178] [ 43.510666][ T4065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.616989][ T4182] netlink: 27 bytes leftover after parsing attributes in process `syz.0.237'. [ 43.746379][ T4065] veth0_vlan: entered promiscuous mode [ 43.755294][ T4065] veth1_vlan: entered promiscuous mode [ 43.761225][ T4203] ref_ctr_offset mismatch. inode: 0x134 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 43.774053][ T4065] veth0_macvtap: entered promiscuous mode [ 43.783181][ T4065] veth1_macvtap: entered promiscuous mode [ 43.796240][ T4207] loop2: detected capacity change from 0 to 2048 [ 43.796374][ T4065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.813898][ T4065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.823926][ T4207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.837939][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.850388][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.868862][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.879018][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.945574][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.969341][ T4218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 43.992772][ T4222] loop0: detected capacity change from 0 to 512 [ 44.001127][ T4222] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 44.127921][ T4229] loop2: detected capacity change from 0 to 8192 [ 44.192372][ T4232] loop0: detected capacity change from 0 to 512 [ 44.198837][ T4236] loop1: detected capacity change from 0 to 1024 [ 44.206074][ T4236] EXT4-fs: quotafile must be on filesystem root [ 44.222137][ T4232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.258367][ T4232] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.273399][ T4232] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.251: corrupted inode contents [ 44.286598][ T4232] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.251: mark_inode_dirty error [ 44.298423][ T4232] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.251: corrupted inode contents [ 44.319364][ T4232] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.251: corrupted inode contents [ 44.332982][ T4232] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.251: mark_inode_dirty error [ 44.346128][ T4232] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.251: corrupted inode contents [ 44.346467][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 44.368610][ T4232] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.251: mark_inode_dirty error [ 44.383419][ T4229] hsr_slave_1 (unregistering): left promiscuous mode [ 44.390678][ T4232] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.251: corrupted inode contents [ 44.404066][ T4232] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.251: mark_inode_dirty error [ 44.437032][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.590444][ T4253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.258'. [ 44.723095][ T4263] loop1: detected capacity change from 0 to 128 [ 44.732872][ T36] Process accounting resumed [ 44.753348][ T4265] 9pnet_fd: Insufficient options for proto=fd [ 44.777717][ T4265] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 44.787613][ T4265] SELinux: failed to load policy [ 44.795729][ T4265] loop5: detected capacity change from 0 to 512 [ 44.802557][ T4265] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 44.817369][ T4265] EXT4-fs (loop5): 1 truncate cleaned up [ 44.824867][ T4265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.837989][ T4265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.895925][ T4270] netlink: 'syz.1.265': attribute type 13 has an invalid length. [ 44.903728][ T4270] netlink: 'syz.1.265': attribute type 27 has an invalid length. [ 44.970565][ T4285] loop5: detected capacity change from 0 to 512 [ 44.978531][ T4285] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 44.986905][ T4285] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.271: invalid indirect mapped block 2683928664 (level 1) [ 44.993006][ T4282] netlink: 'syz.1.270': attribute type 13 has an invalid length. [ 45.002689][ T4285] EXT4-fs (loop5): 1 truncate cleaned up [ 45.008712][ T4282] netlink: 'syz.1.270': attribute type 27 has an invalid length. [ 45.014650][ T4285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.051315][ T4285] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.271: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 45.133921][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 45.133969][ T29] audit: type=1400 audit(1754707121.443:1184): avc: denied { write } for pid=4290 comm="syz.1.273" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.173114][ T29] audit: type=1400 audit(1754707121.483:1185): avc: denied { wake_alarm } for pid=4290 comm="syz.1.273" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.196169][ T4065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.215985][ T29] audit: type=1326 audit(1754707121.523:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.5.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc572d3ebe9 code=0x7ffc0000 [ 45.239935][ T29] audit: type=1326 audit(1754707121.523:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.5.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc572d3ebe9 code=0x7ffc0000 [ 45.263295][ T29] audit: type=1326 audit(1754707121.523:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.5.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc572d3ebe9 code=0x7ffc0000 [ 45.286676][ T29] audit: type=1326 audit(1754707121.523:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.5.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc572d3ebe9 code=0x7ffc0000 [ 45.309982][ T29] audit: type=1326 audit(1754707121.523:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.5.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc572d3ebe9 code=0x7ffc0000 [ 45.333309][ T29] audit: type=1326 audit(1754707121.523:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.5.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc572d3ebe9 code=0x7ffc0000 [ 45.356764][ T29] audit: type=1326 audit(1754707121.523:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.5.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc572d3ebe9 code=0x7ffc0000 [ 45.380174][ T29] audit: type=1326 audit(1754707121.523:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.5.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc572d3ebe9 code=0x7ffc0000 [ 45.412193][ T4293] sctp: [Deprecated]: syz.5.274 (pid 4293) Use of int in maxseg socket option. [ 45.412193][ T4293] Use struct sctp_assoc_value instead [ 45.498488][ T4305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.278'. [ 45.534721][ T4313] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 45.597562][ T4326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.619733][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 45.660983][ T4335] vlan2: entered allmulticast mode [ 45.666215][ T4335] bond0: entered allmulticast mode [ 45.671427][ T4335] bond_slave_0: entered allmulticast mode [ 45.677148][ T4335] bond_slave_1: entered allmulticast mode [ 45.732333][ T4345] bond0: entered promiscuous mode [ 45.737475][ T4345] bond_slave_0: entered promiscuous mode [ 45.744631][ T4345] batadv0: entered promiscuous mode [ 45.751150][ T4345] hsr1: entered allmulticast mode [ 45.756202][ T4345] bond0: entered allmulticast mode [ 45.761392][ T4345] bond_slave_0: entered allmulticast mode [ 45.767219][ T4345] batadv0: entered allmulticast mode [ 45.772809][ T4345] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 45.836362][ T4351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.299'. [ 46.025074][ T4380] tipc: Started in network mode [ 46.030182][ T4380] tipc: Node identity 9e313568599f, cluster identity 4711 [ 46.037377][ T4380] tipc: Enabled bearer , priority 0 [ 46.046001][ T4380] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 46.055125][ T4380] tipc: Resetting bearer [ 46.177584][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 46.248268][ T1086] tipc: Subscription rejected, illegal request [ 46.285506][ T4429] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 46.300179][ T4429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.315881][ T4429] veth3: entered promiscuous mode [ 46.324039][ T4429] bond1: (slave veth3): Enslaving as an active interface with a down link [ 46.336766][ T4429] vlan0: entered allmulticast mode [ 46.341999][ T4429] bond1: entered allmulticast mode [ 46.349510][ T4429] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 46.588948][ T4434] Set syz1 is full, maxelem 65536 reached [ 46.753002][ T4477] netlink: 'syz.1.346': attribute type 4 has an invalid length. [ 46.784215][ T4482] dummy0: entered promiscuous mode [ 46.792515][ T4482] batadv_slave_0: entered promiscuous mode [ 46.798885][ T4482] debugfs: 'hsr1' already exists in 'hsr' [ 46.804623][ T4482] Cannot create hsr debugfs directory [ 47.038236][ T10] tipc: Node number set to 3350082920 [ 47.407695][ T4556] syz_tun: entered allmulticast mode [ 47.421895][ T4555] syz_tun: left allmulticast mode [ 47.681418][ T9] IPVS: starting estimator thread 0... [ 47.721828][ T4619] tipc: Failed to obtain node identity [ 47.727320][ T4619] tipc: Enabling of bearer rejected, failed to enable media [ 47.787893][ T4612] IPVS: using max 2352 ests per chain, 117600 per kthread [ 47.811075][ T4622] __nla_validate_parse: 7 callbacks suppressed [ 47.811090][ T4622] netlink: 72 bytes leftover after parsing attributes in process `syz.1.405'. [ 47.849653][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 47.988625][ T4652] loop0: detected capacity change from 0 to 512 [ 48.009949][ T4652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.030305][ T4669] loop2: detected capacity change from 0 to 512 [ 48.037614][ T4652] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.049934][ T4669] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.424: iget: bad extended attribute block 1 [ 48.064736][ T4669] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.424: couldn't read orphan inode 15 (err -117) [ 48.069342][ T4652] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.416: corrupted inode contents [ 48.090590][ T4674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.425'. [ 48.100281][ T4669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.100735][ T4652] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.416: mark_inode_dirty error [ 48.131304][ T4652] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.416: corrupted inode contents [ 48.146194][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.155622][ T4652] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.416: corrupted inode contents [ 48.168666][ T4652] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.416: mark_inode_dirty error [ 48.180298][ T4652] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.416: corrupted inode contents [ 48.199789][ T4652] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.416: mark_inode_dirty error [ 48.213495][ T4652] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.416: corrupted inode contents [ 48.215400][ T4686] tipc: Failed to obtain node identity [ 48.230752][ T4686] tipc: Enabling of bearer rejected, failed to enable media [ 48.231887][ T4652] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.416: mark_inode_dirty error [ 48.284067][ T4690] siw: device registration error -23 [ 48.311637][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.433890][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 48.580697][ T4738] program syz.2.455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.611807][ T4744] netlink: 48 bytes leftover after parsing attributes in process `syz.4.458'. [ 48.680762][ T4761] loop4: detected capacity change from 0 to 512 [ 48.688915][ T4761] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.466: iget: bad extended attribute block 1 [ 48.702685][ T4761] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.466: couldn't read orphan inode 15 (err -117) [ 48.715262][ T4761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.741655][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.779577][ T4770] netlink: 48 bytes leftover after parsing attributes in process `syz.5.471'. [ 48.823939][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.477'. [ 48.884805][ T4797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4797 comm=syz.0.483 [ 48.898873][ T4794] loop2: detected capacity change from 0 to 512 [ 48.909114][ T4794] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.481: iget: bad extended attribute block 1 [ 48.921858][ T4794] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.481: couldn't read orphan inode 15 (err -117) [ 48.945776][ T4794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.982908][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.037454][ T4821] program syz.2.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.101998][ T4836] siw: device registration error -23 [ 49.141884][ T4845] loop4: detected capacity change from 0 to 1024 [ 49.148869][ T4845] EXT4-fs: Ignoring removed orlov option [ 49.155509][ T4847] program syz.0.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.157639][ T4845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.184997][ T4852] netlink: 48 bytes leftover after parsing attributes in process `syz.5.508'. [ 49.347693][ T4875] siw: device registration error -23 [ 49.371886][ T4877] loop5: detected capacity change from 0 to 512 [ 49.405512][ T4880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 49.435215][ T4877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.454132][ T4877] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.454293][ T4886] loop2: detected capacity change from 0 to 512 [ 49.472898][ T4877] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.519: corrupted inode contents [ 49.474033][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 49.497762][ T4877] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.519: mark_inode_dirty error [ 49.498338][ T4886] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.523: iget: bad extended attribute block 1 [ 49.523414][ T4877] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.519: corrupted inode contents [ 49.523411][ T4886] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.523: couldn't read orphan inode 15 (err -117) [ 49.524040][ T4886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.564035][ T4892] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.519: corrupted inode contents [ 49.583250][ T4892] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.519: mark_inode_dirty error [ 49.594843][ T4892] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.519: corrupted inode contents [ 49.609236][ T4892] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.519: mark_inode_dirty error [ 49.630653][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.631843][ T4892] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.519: corrupted inode contents [ 49.653036][ T4892] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.519: mark_inode_dirty error [ 49.688817][ T4065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.935267][ T4940] loop2: detected capacity change from 0 to 256 [ 49.942673][ T4940] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 49.989444][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.221583][ T4977] random: crng reseeded on system resumption [ 50.227689][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 50.227705][ T29] audit: type=1400 audit(1754707126.526:1425): avc: denied { append } for pid=4974 comm="+}[@" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.256619][ T29] audit: type=1400 audit(1754707126.526:1426): avc: denied { open } for pid=4974 comm="+}[@" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.328764][ T4977] lo speed is unknown, defaulting to 1000 [ 50.337008][ T4993] program syz.5.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.577876][ T5004] siw: device registration error -23 [ 50.625716][ T29] audit: type=1326 audit(1754707126.926:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5012 comm="syz.1.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f260267ebe9 code=0x0 [ 50.761589][ T5019] random: crng reseeded on system resumption [ 50.781560][ T5019] lo speed is unknown, defaulting to 1000 [ 50.833701][ C1] vcan0: j1939_session_tx_dat: 0xffff888119711400: queue data error: -100 [ 50.848838][ T5030] program syz.0.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.122517][ T5036] loop0: detected capacity change from 0 to 512 [ 51.129291][ T5036] EXT4-fs: Ignoring removed i_version option [ 51.135271][ T5036] EXT4-fs: Ignoring removed bh option [ 51.140963][ T5036] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.152147][ T5036] EXT4-fs (loop0): 1 truncate cleaned up [ 51.158277][ T5036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.171697][ T29] audit: type=1400 audit(1754707127.476:1428): avc: denied { read write } for pid=5035 comm="syz.0.592" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.194607][ T29] audit: type=1400 audit(1754707127.476:1429): avc: denied { open } for pid=5035 comm="syz.0.592" path="/151/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.227474][ T29] audit: type=1400 audit(1754707127.536:1430): avc: denied { bind } for pid=5012 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.246748][ T29] audit: type=1400 audit(1754707127.536:1431): avc: denied { name_bind } for pid=5012 comm="syz.1.581" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.268436][ T29] audit: type=1400 audit(1754707127.536:1432): avc: denied { node_bind } for pid=5012 comm="syz.1.581" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 51.297084][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.374308][ T5050] random: crng reseeded on system resumption [ 51.382723][ T5054] program syz.4.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.400777][ T5050] lo speed is unknown, defaulting to 1000 [ 51.471683][ T29] audit: type=1326 audit(1754707127.776:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260267ebe9 code=0x7ffc0000 [ 51.503771][ T5063] loop1: detected capacity change from 0 to 512 [ 51.513375][ T29] audit: type=1326 audit(1754707127.776:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f260267ebe9 code=0x7ffc0000 [ 51.548300][ T5063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.562452][ T5063] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.577305][ T5063] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.604: corrupted inode contents [ 51.595494][ T5063] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.604: mark_inode_dirty error [ 51.607312][ T5063] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.604: corrupted inode contents [ 51.609381][ T5064] lo speed is unknown, defaulting to 1000 [ 51.622728][ T5063] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.604: corrupted inode contents [ 51.645920][ T5063] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.604: mark_inode_dirty error [ 51.659178][ T5063] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.604: corrupted inode contents [ 51.677403][ T5063] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.604: mark_inode_dirty error [ 51.689152][ T5063] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.604: corrupted inode contents [ 51.714687][ T5063] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.604: mark_inode_dirty error [ 51.729925][ T5073] tipc: Failed to obtain node identity [ 51.735402][ T5073] tipc: Enabling of bearer rejected, failed to enable media [ 51.757650][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.853260][ T5095] program syz.0.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.886941][ T5099] loop1: detected capacity change from 0 to 512 [ 51.901270][ T5099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.913915][ T5099] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.926477][ T5099] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.619: corrupted inode contents [ 51.938712][ T5099] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.619: mark_inode_dirty error [ 51.951527][ T5099] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.619: corrupted inode contents [ 51.964487][ T5099] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.619: corrupted inode contents [ 51.977344][ T5099] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.619: mark_inode_dirty error [ 51.989101][ T5099] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.619: corrupted inode contents [ 52.001852][ T5099] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.619: mark_inode_dirty error [ 52.014016][ T5099] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.619: corrupted inode contents [ 52.027688][ T5099] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.619: mark_inode_dirty error [ 52.067570][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.223867][ T5147] loop1: detected capacity change from 0 to 512 [ 52.253458][ T5147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.268323][ T5158] program syz.4.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.277890][ T5147] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.289935][ T5147] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.639: corrupted inode contents [ 52.302761][ T5147] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.639: mark_inode_dirty error [ 52.316882][ T5147] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.639: corrupted inode contents [ 52.345299][ T5165] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.639: corrupted inode contents [ 52.369563][ T5165] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.639: mark_inode_dirty error [ 52.409824][ T5165] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.639: corrupted inode contents [ 52.417369][ T5179] loop0: detected capacity change from 0 to 512 [ 52.423125][ T5165] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.639: mark_inode_dirty error [ 52.429448][ T5179] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.652: iget: bad extended attribute block 1 [ 52.443190][ T5165] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.639: corrupted inode contents [ 52.451783][ T5179] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.652: couldn't read orphan inode 15 (err -117) [ 52.464457][ T5165] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.639: mark_inode_dirty error [ 52.476387][ T5179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.509766][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.522297][ T5183] tipc: Started in network mode [ 52.527295][ T5183] tipc: Node identity e0000002, cluster identity 4711 [ 52.534127][ T5183] tipc: Enabling of bearer rejected, failed to enable media [ 52.548073][ T5183] loop2: detected capacity change from 0 to 512 [ 52.553884][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.568536][ T5185] loop1: detected capacity change from 0 to 512 [ 52.583898][ T5183] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.654: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 52.593291][ T5185] EXT4-fs: Ignoring removed i_version option [ 52.607877][ T5185] EXT4-fs: Ignoring removed bh option [ 52.632242][ T5185] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.632275][ T5183] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.654: Bad quota inode: 3, type: 0 [ 52.661948][ T5183] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 52.690622][ T5183] EXT4-fs (loop2): mount failed [ 52.692376][ T5185] EXT4-fs (loop1): 1 truncate cleaned up [ 52.707804][ T5185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.838345][ T5218] program syz.2.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.856517][ T5220] loop0: detected capacity change from 0 to 512 [ 52.864499][ T5220] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.667: iget: bad extended attribute block 1 [ 52.877385][ T5220] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.667: couldn't read orphan inode 15 (err -117) [ 52.918297][ T5226] __nla_validate_parse: 9 callbacks suppressed [ 52.918313][ T5226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.668'. [ 52.969554][ T5233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 52.990511][ T5233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 53.006278][ T5242] netlink: 'syz.5.676': attribute type 20 has an invalid length. [ 53.037174][ T5245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.677'. [ 53.058623][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.677'. [ 53.078527][ T5249] loop1: detected capacity change from 0 to 512 [ 53.094184][ T5249] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.679: iget: bad extended attribute block 1 [ 53.109197][ T5249] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.679: couldn't read orphan inode 15 (err -117) [ 53.121963][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 53.231404][ T5281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'. [ 53.253636][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 53.267789][ T5287] netlink: 'syz.1.695': attribute type 20 has an invalid length. [ 53.324127][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 53.422595][ T5316] loop5: detected capacity change from 0 to 512 [ 53.436764][ T5320] netlink: 'syz.1.709': attribute type 20 has an invalid length. [ 53.446072][ T5316] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.458165][ T5316] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.705: corrupted inode contents [ 53.478865][ T5316] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.705: mark_inode_dirty error [ 53.502399][ T5326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'. [ 53.512524][ T5316] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.705: corrupted inode contents [ 53.528750][ T5331] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.705: corrupted inode contents [ 53.540674][ T5331] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.705: mark_inode_dirty error [ 53.553354][ T5331] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.705: corrupted inode contents [ 53.568036][ T5331] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.705: mark_inode_dirty error [ 53.583601][ T5338] tipc: Failed to obtain node identity [ 53.589116][ T5338] tipc: Enabling of bearer rejected, failed to enable media [ 53.598943][ T5331] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.705: corrupted inode contents [ 53.614785][ T5331] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.705: mark_inode_dirty error [ 53.699798][ T5358] siw: device registration error -23 [ 53.836510][ T5383] loop1: detected capacity change from 0 to 512 [ 53.856443][ T5383] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.882832][ T5383] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.731: corrupted inode contents [ 53.895998][ T5383] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.731: mark_inode_dirty error [ 53.907720][ T5383] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.731: corrupted inode contents [ 53.922513][ T5383] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.731: corrupted inode contents [ 53.934317][ T5383] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.731: mark_inode_dirty error [ 53.948488][ T5405] program syz.4.741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.959839][ T5383] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.731: corrupted inode contents [ 53.971870][ T5383] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.731: mark_inode_dirty error [ 53.984155][ T5383] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.731: corrupted inode contents [ 53.997116][ T5383] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.731: mark_inode_dirty error [ 54.011629][ T5409] siw: device registration error -23 [ 54.218630][ T5439] loop2: detected capacity change from 0 to 512 [ 54.236197][ T5442] netlink: 'syz.1.756': attribute type 13 has an invalid length. [ 54.247646][ T5439] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.267205][ T5439] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.754: corrupted inode contents [ 54.287435][ T5439] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.754: mark_inode_dirty error [ 54.312787][ T5439] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.754: corrupted inode contents [ 54.319771][ T5458] program syz.4.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.333821][ T5457] loop1: detected capacity change from 0 to 512 [ 54.335341][ T5459] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.754: corrupted inode contents [ 54.341407][ T5457] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.761: iget: bad extended attribute block 1 [ 54.366136][ T5457] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.761: couldn't read orphan inode 15 (err -117) [ 54.377947][ T5459] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.754: mark_inode_dirty error [ 54.389800][ T5459] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.754: corrupted inode contents [ 54.402442][ T5459] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.754: mark_inode_dirty error [ 54.413818][ T5459] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.754: corrupted inode contents [ 54.425730][ T5459] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.754: mark_inode_dirty error [ 54.504903][ T5480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5480 comm=syz.2.770 [ 54.590997][ T5494] loop4: detected capacity change from 0 to 512 [ 54.618931][ T5494] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.645503][ T5494] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.778: corrupted inode contents [ 54.681506][ T5494] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.778: mark_inode_dirty error [ 54.693281][ T5494] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.778: corrupted inode contents [ 54.707106][ T5513] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.778: corrupted inode contents [ 54.724661][ T5513] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.778: mark_inode_dirty error [ 54.737162][ T5513] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.778: corrupted inode contents [ 54.749201][ T5513] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.778: mark_inode_dirty error [ 54.761032][ T5513] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.778: corrupted inode contents [ 54.773691][ T5513] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.778: mark_inode_dirty error [ 54.805423][ T5522] program syz.2.790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.825160][ T5516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5516 comm=syz.1.788 [ 54.906311][ T5526] loop0: detected capacity change from 0 to 512 [ 54.913376][ T5526] EXT4-fs: Ignoring removed i_version option [ 54.919489][ T5526] EXT4-fs: Ignoring removed bh option [ 54.925329][ T5526] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.958321][ T5526] EXT4-fs (loop0): 1 truncate cleaned up [ 55.072982][ T5562] siw: device registration error -23 [ 55.210193][ T5588] program syz.0.820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.267423][ T5576] loop4: detected capacity change from 0 to 512 [ 55.274411][ T5576] EXT4-fs: Ignoring removed i_version option [ 55.276236][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 55.276249][ T29] audit: type=1326 audit(1754707131.568:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 55.280427][ T5576] EXT4-fs: Ignoring removed bh option [ 55.286597][ T29] audit: type=1326 audit(1754707131.568:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 55.286636][ T29] audit: type=1326 audit(1754707131.578:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 55.345477][ T5576] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.362511][ T29] audit: type=1326 audit(1754707131.578:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 55.395649][ T29] audit: type=1326 audit(1754707131.578:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 55.399778][ T5599] FAULT_INJECTION: forcing a failure. [ 55.399778][ T5599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.419091][ T29] audit: type=1326 audit(1754707131.578:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 55.432082][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: syz.5.823 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 55.432156][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.432170][ T5599] Call Trace: [ 55.432178][ T5599] [ 55.432187][ T5599] __dump_stack+0x1d/0x30 [ 55.432209][ T5599] dump_stack_lvl+0xe8/0x140 [ 55.432289][ T5599] dump_stack+0x15/0x1b [ 55.432306][ T5599] should_fail_ex+0x265/0x280 [ 55.432341][ T5599] should_fail+0xb/0x20 [ 55.432372][ T5599] should_fail_usercopy+0x1a/0x20 [ 55.432401][ T5599] _copy_to_user+0x20/0xa0 [ 55.432428][ T5599] simple_read_from_buffer+0xb5/0x130 [ 55.432453][ T5599] proc_fail_nth_read+0x10e/0x150 [ 55.432482][ T5599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.432532][ T5599] vfs_read+0x1a0/0x6f0 [ 55.432554][ T5599] ? __rcu_read_unlock+0x4f/0x70 [ 55.432577][ T5599] ? __fget_files+0x184/0x1c0 [ 55.432641][ T5599] ksys_read+0xda/0x1a0 [ 55.432664][ T5599] __x64_sys_read+0x40/0x50 [ 55.432687][ T5599] x64_sys_call+0x27bc/0x2ff0 [ 55.432776][ T5599] do_syscall_64+0xd2/0x200 [ 55.432803][ T5599] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.432828][ T5599] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.432852][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.432925][ T5599] RIP: 0033:0x7fc572d3d5fc [ 55.433032][ T5599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.433051][ T5599] RSP: 002b:00007fc5717a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.433081][ T5599] RAX: ffffffffffffffda RBX: 00007fc572f65fa0 RCX: 00007fc572d3d5fc [ 55.433095][ T5599] RDX: 000000000000000f RSI: 00007fc5717a70a0 RDI: 0000000000000007 [ 55.433186][ T5599] RBP: 00007fc5717a7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.433252][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.433265][ T5599] R13: 00007fc572f66038 R14: 00007fc572f65fa0 R15: 00007ffe4e2d9338 [ 55.433284][ T5599] [ 55.435990][ T5576] EXT4-fs (loop4): 1 truncate cleaned up [ 55.455348][ T29] audit: type=1326 audit(1754707131.578:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b0ea5ebe9 code=0x7ffc0000 [ 55.685000][ T29] audit: type=1326 audit(1754707131.578:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b0ea5ec23 code=0x7ffc0000 [ 55.708216][ T29] audit: type=1326 audit(1754707131.578:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b0ea5d69f code=0x7ffc0000 [ 55.731550][ T29] audit: type=1326 audit(1754707131.578:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1b0ea5ec77 code=0x7ffc0000 [ 55.843471][ T5631] loop1: detected capacity change from 0 to 1024 [ 55.854132][ T5631] EXT4-fs: Ignoring removed orlov option [ 55.882817][ T5637] loop5: detected capacity change from 0 to 1024 [ 55.889886][ T5637] EXT4-fs: Ignoring removed orlov option [ 56.163058][ T5671] program syz.0.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.382166][ T5706] program syz.1.869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.757979][ T5743] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 56.811157][ T5732] loop5: detected capacity change from 0 to 512 [ 56.891988][ T5763] FAULT_INJECTION: forcing a failure. [ 56.891988][ T5763] name failslab, interval 1, probability 0, space 0, times 0 [ 56.904734][ T5763] CPU: 1 UID: 0 PID: 5763 Comm: syz.4.886 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 56.904781][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.904848][ T5763] Call Trace: [ 56.904856][ T5763] [ 56.904938][ T5763] __dump_stack+0x1d/0x30 [ 56.904957][ T5763] dump_stack_lvl+0xe8/0x140 [ 56.904975][ T5763] dump_stack+0x15/0x1b [ 56.904990][ T5763] should_fail_ex+0x265/0x280 [ 56.905025][ T5763] should_failslab+0x8c/0xb0 [ 56.905097][ T5763] kmem_cache_alloc_noprof+0x50/0x310 [ 56.905123][ T5763] ? getname_kernel+0x3c/0x1f0 [ 56.905206][ T5763] ? kmem_cache_alloc_node_noprof+0x18c/0x320 [ 56.905235][ T5763] getname_kernel+0x3c/0x1f0 [ 56.905339][ T5763] kern_path+0x23/0x130 [ 56.905391][ T5763] unix_find_other+0xe9/0x760 [ 56.905412][ T5763] ? skb_set_owner_w+0x16a/0x1c0 [ 56.905489][ T5763] unix_stream_connect+0x31b/0xa00 [ 56.905592][ T5763] ? __pfx_unix_stream_connect+0x10/0x10 [ 56.905633][ T5763] __sys_connect+0x1f2/0x2b0 [ 56.905686][ T5763] __x64_sys_connect+0x3f/0x50 [ 56.905755][ T5763] x64_sys_call+0x2c08/0x2ff0 [ 56.905820][ T5763] do_syscall_64+0xd2/0x200 [ 56.905843][ T5763] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.905870][ T5763] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.905893][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.905916][ T5763] RIP: 0033:0x7f1b0ea5ebe9 [ 56.905933][ T5763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.905951][ T5763] RSP: 002b:00007f1b0d4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 56.905973][ T5763] RAX: ffffffffffffffda RBX: 00007f1b0ec85fa0 RCX: 00007f1b0ea5ebe9 [ 56.905986][ T5763] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000005 [ 56.906001][ T5763] RBP: 00007f1b0d4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.906015][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.906068][ T5763] R13: 00007f1b0ec86038 R14: 00007f1b0ec85fa0 R15: 00007ffff7b84928 [ 56.906085][ T5763] [ 57.150411][ T5774] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 57.244777][ T5755] loop1: detected capacity change from 0 to 512 [ 57.381283][ T5816] loop0: detected capacity change from 0 to 512 [ 57.394547][ T5816] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.409218][ T5816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.906: corrupted inode contents [ 57.424998][ T5812] random: crng reseeded on system resumption [ 57.435997][ T5816] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.906: mark_inode_dirty error [ 57.443714][ T5812] lo speed is unknown, defaulting to 1000 [ 57.448507][ T5816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.906: corrupted inode contents [ 57.480816][ T5816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.906: corrupted inode contents [ 57.498020][ T5816] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.906: mark_inode_dirty error [ 57.518159][ T5816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.906: corrupted inode contents [ 57.531203][ T5816] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.906: mark_inode_dirty error [ 57.548716][ T5816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.906: corrupted inode contents [ 57.560888][ T5816] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.906: mark_inode_dirty error [ 57.690707][ T5846] syz.1.918 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.753969][ T5849] loop0: detected capacity change from 0 to 512 [ 57.761713][ T5849] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.919: iget: bad extended attribute block 1 [ 57.774665][ T5849] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.919: couldn't read orphan inode 15 (err -117) [ 57.839959][ T5858] program syz.0.923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.842855][ T5852] random: crng reseeded on system resumption [ 57.866229][ T5852] lo speed is unknown, defaulting to 1000 [ 57.938759][ T5866] __nla_validate_parse: 52 callbacks suppressed [ 57.938774][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 58.040053][ T5874] loop1: detected capacity change from 0 to 1024 [ 58.046862][ T5874] EXT4-fs: Ignoring removed orlov option [ 58.148174][ T5883] loop0: detected capacity change from 0 to 164 [ 58.190368][ T5882] loop5: detected capacity change from 0 to 512 [ 58.220816][ T5882] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.932: iget: bad extended attribute block 1 [ 58.236161][ T5887] random: crng reseeded on system resumption [ 58.254876][ T5887] lo speed is unknown, defaulting to 1000 [ 58.267393][ T5882] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.932: couldn't read orphan inode 15 (err -117) [ 58.307770][ T5891] loop0: detected capacity change from 0 to 1024 [ 58.334029][ T5891] EXT4-fs: Ignoring removed orlov option [ 58.362888][ T5895] netlink: 24 bytes leftover after parsing attributes in process `syz.5.937'. [ 58.416995][ T5902] program syz.4.940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.430445][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.937'. [ 58.559330][ T5907] loop1: detected capacity change from 0 to 512 [ 58.566788][ T5907] EXT4-fs: Ignoring removed i_version option [ 58.572920][ T5907] EXT4-fs: Ignoring removed bh option [ 58.621517][ T5907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.645640][ T5891] ================================================================== [ 58.653758][ T5891] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 58.661757][ T5891] [ 58.664163][ T5891] write to 0xffff888108d5dbb0 of 4 bytes by task 5905 on cpu 1: [ 58.671783][ T5891] writeback_single_inode+0x14a/0x3e0 [ 58.677162][ T5891] sync_inode_metadata+0x5b/0x90 [ 58.682110][ T5891] generic_buffers_fsync_noflush+0xd9/0x120 [ 58.688001][ T5891] ext4_sync_file+0x1ab/0x690 [ 58.692695][ T5891] vfs_fsync_range+0x10d/0x130 [ 58.697470][ T5891] ext4_buffered_write_iter+0x34f/0x3c0 [ 58.703043][ T5891] ext4_file_write_iter+0x383/0xf00 [ 58.708238][ T5891] iter_file_splice_write+0x5f2/0x970 [ 58.713603][ T5891] direct_splice_actor+0x153/0x2a0 [ 58.718700][ T5891] splice_direct_to_actor+0x30f/0x680 [ 58.724062][ T5891] do_splice_direct+0xda/0x150 [ 58.728813][ T5891] do_sendfile+0x380/0x650 [ 58.733224][ T5891] __x64_sys_sendfile64+0x105/0x150 [ 58.738421][ T5891] x64_sys_call+0x2bb0/0x2ff0 [ 58.743087][ T5891] do_syscall_64+0xd2/0x200 [ 58.747582][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.753463][ T5891] [ 58.755771][ T5891] read to 0xffff888108d5dbb0 of 4 bytes by task 5891 on cpu 0: [ 58.763300][ T5891] vfs_fsync_range+0x9b/0x130 [ 58.767969][ T5891] ext4_buffered_write_iter+0x34f/0x3c0 [ 58.773512][ T5891] ext4_file_write_iter+0x383/0xf00 [ 58.778713][ T5891] iter_file_splice_write+0x5f2/0x970 [ 58.784072][ T5891] direct_splice_actor+0x153/0x2a0 [ 58.789168][ T5891] splice_direct_to_actor+0x30f/0x680 [ 58.794524][ T5891] do_splice_direct+0xda/0x150 [ 58.799278][ T5891] do_sendfile+0x380/0x650 [ 58.803712][ T5891] __x64_sys_sendfile64+0x105/0x150 [ 58.808905][ T5891] x64_sys_call+0x2bb0/0x2ff0 [ 58.813573][ T5891] do_syscall_64+0xd2/0x200 [ 58.818072][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.824046][ T5891] [ 58.826356][ T5891] value changed: 0x00000038 -> 0x00000002 [ 58.832055][ T5891] [ 58.834366][ T5891] Reported by Kernel Concurrency Sanitizer on: [ 58.840509][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: syz.0.935 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 58.852475][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.862521][ T5891] ================================================================== [ 58.880277][ T5928] loop4: detected capacity change from 0 to 1024 [ 58.887498][ T5928] EXT4-fs: Ignoring removed nobh option [ 58.894257][ T5928] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.925903][ T5907] EXT4-fs (loop1): 1 truncate cleaned up [ 58.958570][ T5928] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.950: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 59.002104][ T5928] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.950: couldn't read orphan inode 11 (err -117) [ 59.027382][ T5928] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.950: Invalid block bitmap block 0 in block_group 0 [ 59.041853][ T5928] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.950: Failed to acquire dquot type 0 [ 59.089135][ T12] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:0: Invalid inode table block 8589934593 in block_group 0