last executing test programs: 2.240472695s ago: executing program 1 (id=806): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf, 0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1.867730721s ago: executing program 1 (id=814): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0x9, 0x10000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x11, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x404, &(0x7f00000014c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@smackfsdef={'smackfsdef', 0x3d, 'GPL\x00'}}, {@uid_lt}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r8, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000000000000000000008000000000000044ff63b5dc2c9e70620397d2cd0ddc735cb6bd33d66bfd01c4c0961483f8fc4910966b31", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='xen_mmu_set_p4d\x00', r9}, 0xfffffffffffffeeb) 1.2767793s ago: executing program 2 (id=833): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$TOKEN_CREATE(0x24, &(0x7f00000014c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000004c0)='GPL\x00'}, 0x94) rename(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x48}, &(0x7f0000000040)=0x8) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0xff, 0x7, 0x59, @remote, @remote, 0x20, 0x7800, 0xffffffff, 0x7fff}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1806000000be5ec2a8e33a167f34f0540000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffd502000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r7}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.218517991s ago: executing program 2 (id=835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x38, 0x1, 0x10, 0x2, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x2cd2736c8215532c, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5800000002060300000000000000000000dfff0011000300686173683a69702c706f7274000000000900020073797a31000000000c000780080012400ffffffc050005000a00000005000400010000000500010007000000bc1201f425b7ef4f2c0b252da90be3a45a7a3b8b0af3a9769edea3068eaa41f87d3263bb8e9480131ba92d10971b713104cd66c91dde900000009f5336f62bd528baa0642ee2ba167b85d3df5770e2be1058712a6aaf191900ed39b947fb2874f7296f3a6e"], 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000dc0)=@ethtool_dump={0x3f, 0x2, 0x2, 0xb8, "7aaed7481ece26fe4ce44821edfa095a03d20ae0abb786fbedef8f3aa5bdc714470105539b1ab4f5a7d0044bac5ec3c473f814ceb8b9060bbcf72bafe0d9eb63e8eabec78a349a251006dbbe10f8ae09720ca06d1469ff69012ef2edb995b9575838d162ca2fd3c10b3e2059b5e899fa728b1a74153e13cb2b956577b728c77782ab37fc0617484bd3b0fa9aa304dae33a660e7643ef91aac445e3733f695a631dc3eafd7b74b06f57c9c5f39472fb6de377c0973cb8ab46"}}) socket(0x1, 0x1, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7002ffdbdf254e000000080001007063690011000200303030303a30303a31302e30000000000800ab000300000008000b00a760080006001100020000005dcf8586c4981681bd7f3410b1275f460c88f17b646eb6dc82d2ee7f4dcd"], 0x48}}, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000500)={{}, {r7, r8/1000+10000}}, &(0x7f0000000580)) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', r10, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.172187122s ago: executing program 2 (id=839): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xf6272000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_gettime(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000096af1facf4a95e120e0bd55817af3db5f634fd020c66a42b4491d11d564f70bca4bbbf1daa2747e2df5e88ed65bceef4180fec434da8c17e8e72aeedf1a0c106576d630ece3c20414cd1a6990975fb27ce30e173dad26c942e8550e252fdc15113bd6421540cb7628767", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x8, 0x9, 0x9, 0x0, 0x51ee, 0x10, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1c}, 0x84108, 0x9cb, 0x9, 0x8, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x2) 1.076688263s ago: executing program 0 (id=843): syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001"], 0xb0}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 1.041140524s ago: executing program 1 (id=844): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f00000007c0)="f8079ee7", 0x4}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x5, 0x1}, {0xfd, 0xfb}, {0x7, 0x3d}, @raw32={[0x2, 0x7c, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x395, {0xa}, {0x3}, @note={0x81, 0x0, 0x0, 0x8}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2001, {0x10, 0x5}, {0xd, 0x2}, @addr={0x40, 0x1}}], 0x54) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x6, 0x9}, {}, {}, @result}], 0x1c) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0xe4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x44}}, 0x8094) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x80, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x38, 0x2, 0x5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 1.005278304s ago: executing program 0 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 1.003391164s ago: executing program 4 (id=849): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000010000000b7030000000400008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="183f000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 944.910935ms ago: executing program 1 (id=850): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (fail_nth: 6) 943.525505ms ago: executing program 4 (id=851): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) lremovexattr(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x400000, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="549cbb95c7f5bd4c4a061b99d4f7adbf0cc7213c53451429676e2ff6d8aae3d6fb8bbac378ce48102b4b768956bb487360651ea49053236ee53a5e50458c5d680e9a641c9c4e473c1d6f87e14b8de081358e62329965fca0d525de7986acb74c39552fa463e5b394994aae16bfe9a24cd00a9fccdab9d1471d45e70641f0b4c28c10d46c6baa0476a94201c68ca52e59bd91a035de1c505012c02cb3a790257c0601b92da742d2671eb2df1c2d4647a038234a1b25f707ee5d163dc92af06b483784b84180cfebf3e26cbfecc0d714"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbe8251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2a) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) r8 = syz_open_dev$rtc(&(0x7f0000000200), 0x0, 0x200) ioctl$RTC_AIE_OFF(r8, 0x7002) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000007018000f8ffffffb7020000000000006dbb9ad1dca4d18a66b703000000006c59850000002d00000095c868aa18f2912efbd83cc02512020b355240d7d6456367fec28546265858012d0c3bce35922a6474e748eef6fb5b548393214e4defdd7eb06d89a94b8f06f991dd1b6ea42dea18ade5f62160a7fe9f7f0ccf3eed94a2c6883803669bf3b35324868ee37f86423d929154a570345d9d5c5a40c809d16400"/208, @ANYRES32=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 942.426715ms ago: executing program 0 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r1, 0x0, 0x80000000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff080045000028006400000402907800000000e000f50211009078e0000c02000100010000056800000000"], 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x81) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001840)={{r2}, "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"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1403, 0x4, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x54, r8, 0xfe12482fe0801d67, 0x70bd2b, 0x25dfdbfa, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) setitimer(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r9, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x1}}, 0x10) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe070066ec", 0xff3b}], 0x4e, 0x1) unshare(0x2a060400) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r10, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r10, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xdeff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 895.367276ms ago: executing program 0 (id=854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250900000038000380080001000100000008000300040000001400020076657468315f746f5f687372000000000600040002000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) 894.910296ms ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) (fail_nth: 4) 844.630497ms ago: executing program 1 (id=856): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r4, &(0x7f0000000000)=""/132, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = open$dir(0x0, 0x20400, 0x74) r6 = open(&(0x7f0000000200)='./file1\x00', 0x54927e, 0xb0) fallocate(r6, 0x0, 0x0, 0x1001f0) getdents64(r5, &(0x7f00000002c0)=""/4088, 0xfffffec4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0xffffffff80000000, 0x0, 0x5b) preadv(0xffffffffffffffff, &(0x7f0000002500)=[{&(0x7f0000002400)=""/24, 0x18}, {0x0}], 0x2, 0x1000, 0x42e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xff00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00f33b0ac10100000400140008001b"], 0x2c}}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x9, 0x8}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @broadcast}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r9, 0x2d, 0x6, 0x0, 0x8b8, 0x2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x80000001, 0x6}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095", @ANYBLOB="37e2850c61245e3924709af48aa8f8ddbc87ceed7c89ac9c0d34b4453ba3e096d9a3fda9124308328f8a941afe6c0b402766c0fd2d105047ce5601f893eee656721d9ea90ef65df7fbc9ce4fe48bfc3d32a8cb9cd60c1e343eefa14c783b46866ce492b786d0f0148233a66f730924a3db48751cfd757369eeb825eb7f9846ad7e06a2485bdbb61472927951f3d3a520b7b9cf08dda8d3dadd03a259cfc15aa1f6cc6c6c5b", @ANYRES16=r2, @ANYRESDEC=r9], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000001300)={&(0x7f00000012c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="df00"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="03000000000000000100"/28], 0x50) 821.205017ms ago: executing program 2 (id=857): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r6, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1], 0xfce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./bus\x00') renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r9, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) 820.732107ms ago: executing program 4 (id=858): syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001"], 0xb0}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 807.134457ms ago: executing program 0 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='\x00\x00\x00\x00\xa7\xe5\xca\x8c\x8d\x00\x00\x9f2\xce\x86\x82\x02\x1c\xc8;O2\x1b\xc2\x12\xcf\x00\xf0\xa19\xa4\v0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r3, @ANYBLOB="000000070000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r3], 0x48}}, 0x0) 760.690428ms ago: executing program 3 (id=860): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xffffff42}, 0x28) socket$kcm(0x2, 0x5, 0x84) r0 = io_uring_setup(0x3a07, &(0x7f0000000000)={0x0, 0xc9f5, 0x1, 0x3, 0x1bf}) r1 = io_uring_setup(0x6dd3, &(0x7f00000006c0)={0x0, 0x100c44a, 0x0, 0x3, 0x29f, 0x0, r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000540)="0be5e9e7d00d2edfcee82e17e782dd5f553a46a3e874ad4fb93bfe11229b468723993cda284020658be767a262573897735ecde7999ef5b9dcec465fcc72a00b177b83ad068fa311e3e66e9943a6a264c5fc2bee7c9f3c01ff3099d5480228eb183ea7aac1978e7b93dba064f414e257ef0b", 0x72}, {&(0x7f0000000740)="96eae1a224f180d9b3e1ba00affedf688e0b431c8a1fd3d0ce07d5fa464629145450d88e14edd01b3ac9294aeb606e9658227fdbde983cb50df0b9f09fe16dcbbdc5bcfd32a6c6", 0x47}, {&(0x7f0000000880)="272b21537b7eceb49fa499b455abe598d14c129bf2f38791621a127c79a2b8f59e4be600831b2c7f9a2f6b990b66c0d7303c91efff51027e1013af4139a5d62f18b4e740e0d8e996045e98ecaa8a54ed481bfd2fde7cf0e5301b2e85a08ab89dded996520e7f1273d57699944be046b0b4e35ce1030791d9d8653eb4316ff02dbe8c6dcad2f77d5d925480bd0f876aa0064bc63096473fdec6cf559ce21740a4ce747fbfac7204ccf797e648bb25d3b0f5e72dbb9fa4", 0xb6}, {&(0x7f0000000f40)="b9fdcce6ae30d08ff89fcb34cece082f0c05ef5bf3f1de23b5bd0c4ebeb04bcf4f0d5be261e066f4d715be3ca69b8547a91b06220655bf366c6472848c039ba9f71b4ee221d5d0704f31f6e18c4e71ad5aa599e40b7e89ce41afdeb3a5402229f9c8e4c7099bb56505880d89af73d234ff9b9174b84e556eaf541ef5c9369daa3e6b711bbc4879517d2bb95bbf479e759e10680424670da3dc93116ef4e940e6278b1ccd23e17d9f1fc7a8c79e87ac8369b314ea39154f2f33a341", 0xbb}, {&(0x7f0000001000)="61dd86365acac68a42ba3be73b92747f65a59166d9859114d48445a488a0f7cecf467bc11ad9dab1dcabeb34ad01a4761eadaefe6d8465f49ffa09ba23a8201f54863396f76b576c5ad48e2307e4e0c41dc8a2219f2e3de6c843edc68765d3c488e51c5264bccd94fdf69e386b12dd61c12eb6bea79e8903452cf103033bdbe39c847742f04f252f40d875140e341b1a7f2f85987f42f7032dbf7c47ef3e78773013d24c267398ec388a7d3f8f4742b0843eb4189cb5961071b0ab4bb121deff4b6049ec6cadae", 0xc7}, {&(0x7f00000016c0)}, {&(0x7f0000001780)="987fe23057dc65d962eb266e9a48bccecfb252bb28918452a1bede2dd2b9abb0b07640a8db346ac0fe1622d624280530b4b2ec58d6382c517f2d72c792255f487cbe0c81a73c19c2a71964770fee478a8e4df78d80d34c0ffafe95fd0548c66a8758bd6346f47b500f73036eb8e503cc934eb8e994ad94d7b8c9fcf81d529be84125d38a325e414129e25e5caad0e9a3e2b3d05fd282ad64a3ea636821b853bf43690f2164e861275ae505f89d63ef3529ef937fe9a0fbba", 0xb8}], 0x7}, 0x24000900) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)}, 0x6010) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) r4 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711016000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x0, @private=0xa010104}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0, 0x1, 0x10000, 0x2, 0xffffffffffffffff}}], 0x58}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000600), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x50, 0x46]}, 0x34) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 759.531548ms ago: executing program 4 (id=861): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = epoll_create1(0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x1000000003}) timer_create(0x3, 0x0, &(0x7f0000000300)) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='kfree\x00'}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000180)={0x65f5, 0x0, 0xff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x80000000}) 624.68111ms ago: executing program 2 (id=862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x7}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r3, 0x0, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, 0x0, 0x0) sendmmsg$sock(r8, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x4}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r10, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 613.16337ms ago: executing program 4 (id=863): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=',$:\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000100)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb\r+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\xbe\n\xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd8s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|y\xc6\f\x1e\x8fJw\xdc\r\xa7\n}Uc\x05<\xe9\x9f\x87\v\xbcLWk\fcC\xf5\x02z\x1e\xb2a\x18\xaaJ\x14=\bP\xc5e\x9d\xaf;\x8f\x87\xbe\x7f\x84\xdf\x05I:\xe66\x1c:\xe2\xe3\v\x8e\x04\xda\xc5U\xd4\x96\xf2\xc3x\x17\xd2\x98uMB0x0, &(0x7f0000000300)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000600"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, &(0x7f0000000280), &(0x7f00000002c0)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000000)={@loopback, @multicast1, 0x3, "fbd070a5779fcc75d1f60081a68ee5fe8d4f6ce839c74961e65586cddc48d658", 0x57f5c04, 0x1, 0x4, 0x4}, 0x3c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 241.829476ms ago: executing program 3 (id=864): readv(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000300f07020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x19, 0xbb12, 0xc, 0x70480, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 156.099497ms ago: executing program 3 (id=865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001fff5000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 87.041918ms ago: executing program 3 (id=866): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x800000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c00000600048036"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 85.556598ms ago: executing program 3 (id=867): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x800000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c00000600048036"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 78.603549ms ago: executing program 1 (id=868): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffff54}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x44010) 52.537759ms ago: executing program 3 (id=869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$pagemap(r3, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x620100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)=',:/.}&\x00') r5 = socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRES32=r5, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="c4657bccabe31f50fabe5c0286acba6c3a0cb22ff93f96a9fa7a5b3c4891329797383a836579ad58bbdfbfd4b2cd6d3b26f20ff953472ff575a7e704ed97bc65d757506716500c61d0dc9d7b5cd59a33ced4cc8bc65725b292cd502231fb389c6e4b25c59c", @ANYRESHEX, @ANYBLOB="b558941b7fd7c2efce26fa27200dfa954446ca7d17f698872d34d4f2111fe929b739e1012ef55bad5d6d16a0d728d23306b32b36ccb69f6fa3c03b8e964a911f31e4e4f0360cec4b40806f5bea9edac1e49d2b09186226c3351487b20765b7b01381f8c45fc38d6b4acb4e104985878a48de4f27f77ffc644b16fe544263b31f422baa41f9cdfb4a8ede7983c3956947c3540aa9a13ea2"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000400)=r7}, 0x20) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000780), 0x0, 0x24000005) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYRESOCT=r9], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x18) getrusage(0x1000000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f0000000080)) 758.689µs ago: executing program 4 (id=870): socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x484b1e3341a13be1, 0x0) chmod(&(0x7f0000000100)='./bus\x00', 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002030101000000000000000003000008"], 0x30}, 0x1, 0x0, 0x0, 0x40400a1}, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x10b042, 0x0) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000000)=""/32) 0s ago: executing program 0 (id=871): r0 = openat$sysfs(0xffffff9c, 0x0, 0x1e280, 0x120) r1 = syz_open_procfs(0x0, 0x0) read$eventfd(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'xfrm0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x16, 0x4}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf09000000000000550901000000000095000000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRESOCT=r3, @ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r10, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) kernel console output (not intermixed with test programs): 820747][ T4722] System zones: 0-2, 18-18, 34-35 [ 48.890645][ T4734] sock: sock_timestamping_bind_phc: sock not bind to device [ 48.909119][ T4737] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 48.916827][ T4737] netlink: 224 bytes leftover after parsing attributes in process `syz.2.394'. [ 48.936375][ T4739] netlink: 'syz.0.393': attribute type 27 has an invalid length. [ 49.013516][ T4745] FAULT_INJECTION: forcing a failure. [ 49.013516][ T4745] name failslab, interval 1, probability 0, space 0, times 0 [ 49.026239][ T4745] CPU: 1 UID: 0 PID: 4745 Comm: syz.3.395 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 49.026284][ T4745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.026296][ T4745] Call Trace: [ 49.026303][ T4745] [ 49.026311][ T4745] __dump_stack+0x1d/0x30 [ 49.026360][ T4745] dump_stack_lvl+0xe8/0x140 [ 49.026486][ T4745] dump_stack+0x15/0x1b [ 49.026503][ T4745] should_fail_ex+0x265/0x280 [ 49.026536][ T4745] ? netdevice_event+0x2ae/0x610 [ 49.026629][ T4745] should_failslab+0x8c/0xb0 [ 49.026652][ T4745] __kmalloc_cache_noprof+0x4c/0x320 [ 49.026702][ T4745] ? __pfx_netdevice_event+0x10/0x10 [ 49.026736][ T4745] netdevice_event+0x2ae/0x610 [ 49.026840][ T4745] ? __pfx_del_netdev_ips+0x10/0x10 [ 49.026868][ T4745] ? __pfx_pass_all_filter+0x10/0x10 [ 49.026895][ T4745] ? __pfx_netdevice_event+0x10/0x10 [ 49.026937][ T4745] raw_notifier_call_chain+0x6c/0x1b0 [ 49.026955][ T4745] ? call_netdevice_notifiers_info+0x9c/0x100 [ 49.027017][ T4745] call_netdevice_notifiers_info+0xae/0x100 [ 49.027042][ T4745] unregister_netdevice_many_notify+0xd9d/0x1690 [ 49.027108][ T4745] unregister_netdevice_queue+0x1f5/0x220 [ 49.027237][ T4745] __tun_detach+0x7db/0xad0 [ 49.027267][ T4745] ? __pfx_tun_chr_close+0x10/0x10 [ 49.027396][ T4745] tun_chr_close+0x5a/0x100 [ 49.027419][ T4745] __fput+0x298/0x650 [ 49.027458][ T4745] fput_close_sync+0x6e/0x120 [ 49.027533][ T4745] __x64_sys_close+0x56/0xf0 [ 49.027561][ T4745] x64_sys_call+0x2747/0x2fb0 [ 49.027623][ T4745] do_syscall_64+0xd2/0x200 [ 49.027656][ T4745] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.027682][ T4745] ? clear_bhb_loop+0x40/0x90 [ 49.027710][ T4745] ? clear_bhb_loop+0x40/0x90 [ 49.027769][ T4745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.027792][ T4745] RIP: 0033:0x7f343110e9a9 [ 49.027869][ T4745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.027885][ T4745] RSP: 002b:00007f342f74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.027901][ T4745] RAX: ffffffffffffffda RBX: 00007f3431336080 RCX: 00007f343110e9a9 [ 49.027912][ T4745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 49.027923][ T4745] RBP: 00007f342f74e090 R08: 0000000000000000 R09: 0000000000000000 [ 49.027999][ T4745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.028010][ T4745] R13: 0000000000000000 R14: 00007f3431336080 R15: 00007fffc9ff00f8 [ 49.028025][ T4745] [ 49.311956][ T4748] xt_hashlimit: max too large, truncated to 1048576 [ 49.325619][ T4748] loop0: detected capacity change from 0 to 512 [ 49.335935][ T4748] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.342922][ T4748] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.396: bad orphan inode 13 [ 49.353563][ T4748] ext4_test_bit(bit=12, block=18) = 1 [ 49.358970][ T4748] is_bad_inode(inode)=0 [ 49.363186][ T4748] NEXT_ORPHAN(inode)=2130706432 [ 49.368118][ T4748] max_ino=32 [ 49.371350][ T4748] i_nlink=1 [ 49.376744][ T4748] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.390587][ T4748] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.396: bg 0: block 248: padding at end of block bitmap is not set [ 49.408054][ T4748] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.396: Failed to acquire dquot type 1 [ 49.420678][ T4748] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.463736][ T4754] loop3: detected capacity change from 0 to 512 [ 49.494616][ T4754] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.397: Failed to acquire dquot type 1 [ 49.512857][ T4754] EXT4-fs (loop3): 1 truncate cleaned up [ 49.518979][ T4754] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.809324][ T4779] mmap: syz.2.405 (4779) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.283758][ T4791] netlink: 44 bytes leftover after parsing attributes in process `syz.3.409'. [ 50.292850][ T4791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 50.340463][ T4791] loop3: detected capacity change from 0 to 2048 [ 50.484276][ T3299] loop3: unable to read partition table [ 50.490365][ T3299] loop3: partition table beyond EOD, truncated [ 50.611424][ T4791] loop3: unable to read partition table [ 50.627447][ T4791] loop3: partition table beyond EOD, truncated [ 50.633772][ T4791] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 50.672175][ T4804] netlink: 'syz.0.415': attribute type 1 has an invalid length. [ 50.679888][ T4804] netlink: 224 bytes leftover after parsing attributes in process `syz.0.415'. [ 50.745576][ T4809] loop4: detected capacity change from 0 to 128 [ 50.760698][ T2997] loop3: unable to read partition table [ 50.778257][ T2997] loop3: partition table beyond EOD, truncated [ 50.842459][ T4816] loop4: detected capacity change from 0 to 128 [ 50.858246][ T4816] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.079614][ T4829] netlink: 'syz.4.423': attribute type 27 has an invalid length. [ 51.129737][ T4837] xt_hashlimit: max too large, truncated to 1048576 [ 51.140441][ T4835] loop1: detected capacity change from 0 to 512 [ 51.142098][ T4837] loop2: detected capacity change from 0 to 512 [ 51.165731][ T4837] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.172529][ T4837] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.427: bad orphan inode 13 [ 51.184113][ T4837] ext4_test_bit(bit=12, block=18) = 1 [ 51.189624][ T4837] is_bad_inode(inode)=0 [ 51.193773][ T4837] NEXT_ORPHAN(inode)=2130706432 [ 51.198616][ T4837] max_ino=32 [ 51.201914][ T4837] i_nlink=1 [ 51.211930][ T4835] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.426: Failed to acquire dquot type 1 [ 51.225970][ T4835] EXT4-fs (loop1): 1 truncate cleaned up [ 51.232213][ T4837] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 51.239975][ T4835] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.252475][ T4837] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.427: bg 0: block 248: padding at end of block bitmap is not set [ 51.276786][ T4837] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.427: Failed to acquire dquot type 1 [ 51.290343][ T4837] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.328712][ T4849] loop1: detected capacity change from 0 to 1024 [ 51.340647][ T4849] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.430: Failed to acquire dquot type 0 [ 51.400042][ T4849] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 51.429494][ T4849] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.430: corrupted inode contents [ 51.441797][ T4849] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #13: comm syz.1.430: mark_inode_dirty error [ 51.453596][ T4849] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.430: corrupted inode contents [ 51.472658][ T4849] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.430: mark_inode_dirty error [ 51.484893][ T4849] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.430: corrupted inode contents [ 51.498343][ T4849] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 51.507111][ T4849] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.430: corrupted inode contents [ 51.524774][ T4849] EXT4-fs error (device loop1): ext4_truncate:4597: inode #13: comm syz.1.430: mark_inode_dirty error [ 51.536123][ T4855] loop0: detected capacity change from 0 to 512 [ 51.536532][ T4849] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 51.574542][ T4849] EXT4-fs (loop1): 1 truncate cleaned up [ 51.581630][ T4855] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.610583][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 51.726484][ T4855] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.432: corrupted inode contents [ 51.739945][ T4855] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.432: mark_inode_dirty error [ 51.752437][ T4855] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.432: corrupted inode contents [ 51.764764][ T4855] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.432: mark_inode_dirty error [ 51.777197][ T4855] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.432: mark inode dirty (error -117) [ 51.790056][ T4855] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 51.910487][ T4873] netlink: 'syz.3.438': attribute type 27 has an invalid length. [ 51.991983][ T4875] loop0: detected capacity change from 0 to 512 [ 51.998848][ T4875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.012336][ T4875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.085388][ T4879] loop2: detected capacity change from 0 to 512 [ 52.093714][ T4875] EXT4-fs (loop0): 1 truncate cleaned up [ 52.162583][ T4879] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.441: Failed to acquire dquot type 1 [ 52.181048][ T4879] EXT4-fs (loop2): 1 truncate cleaned up [ 52.185178][ T4882] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 52.187636][ T4879] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.194364][ T4882] netlink: 224 bytes leftover after parsing attributes in process `syz.3.442'. [ 52.253478][ T4889] loop4: detected capacity change from 0 to 1024 [ 52.273107][ T4889] EXT4-fs: dax option not supported [ 52.593593][ T4910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 52.623704][ T4912] loop2: detected capacity change from 0 to 1024 [ 52.642625][ T4915] netlink: 'syz.4.452': attribute type 27 has an invalid length. [ 52.650688][ T4912] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.661600][ T4912] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.683319][ T4912] JBD2: no valid journal superblock found [ 52.689118][ T4912] EXT4-fs (loop2): Could not load journal inode [ 52.723340][ T4912] loop2: detected capacity change from 0 to 1024 [ 52.774387][ T4923] loop0: detected capacity change from 0 to 512 [ 52.781843][ T4912] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.451: Allocating blocks 449-513 which overlap fs metadata [ 52.808130][ T4925] FAULT_INJECTION: forcing a failure. [ 52.808130][ T4925] name failslab, interval 1, probability 0, space 0, times 0 [ 52.820805][ T4925] CPU: 1 UID: 0 PID: 4925 Comm: syz.4.456 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 52.820915][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.820929][ T4925] Call Trace: [ 52.820936][ T4925] [ 52.820944][ T4925] __dump_stack+0x1d/0x30 [ 52.820970][ T4925] dump_stack_lvl+0xe8/0x140 [ 52.820993][ T4925] dump_stack+0x15/0x1b [ 52.821011][ T4925] should_fail_ex+0x265/0x280 [ 52.821101][ T4925] should_failslab+0x8c/0xb0 [ 52.821125][ T4925] kmem_cache_alloc_noprof+0x50/0x310 [ 52.821213][ T4925] ? skb_clone+0x151/0x1f0 [ 52.821234][ T4925] skb_clone+0x151/0x1f0 [ 52.821255][ T4925] nfnetlink_rcv+0x305/0x1690 [ 52.821284][ T4925] ? unwind_next_frame+0xada/0xc80 [ 52.821383][ T4925] ? path_openat+0x1de/0x2170 [ 52.821416][ T4925] ? __kernel_text_address+0xd/0x40 [ 52.821470][ T4925] ? _find_next_bit+0x29/0x90 [ 52.821495][ T4925] ? __pcpu_freelist_pop+0x3da/0x4c0 [ 52.821525][ T4925] ? xas_load+0x413/0x430 [ 52.821563][ T4925] ? xas_load+0x413/0x430 [ 52.821689][ T4925] ? __rcu_read_unlock+0x4f/0x70 [ 52.821787][ T4925] ? xa_load+0xb1/0xe0 [ 52.821889][ T4925] ? __account_obj_stock+0x211/0x350 [ 52.821984][ T4925] ? obj_cgroup_charge_account+0x122/0x1a0 [ 52.822036][ T4925] ? should_fail_ex+0x30/0x280 [ 52.822071][ T4925] ? __rcu_read_unlock+0x4f/0x70 [ 52.822151][ T4925] ? should_fail_ex+0xdb/0x280 [ 52.822241][ T4925] netlink_unicast+0x5a8/0x680 [ 52.822317][ T4925] netlink_sendmsg+0x58b/0x6b0 [ 52.822337][ T4925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.822357][ T4925] __sock_sendmsg+0x145/0x180 [ 52.822432][ T4925] ____sys_sendmsg+0x31e/0x4e0 [ 52.822474][ T4925] ___sys_sendmsg+0x17b/0x1d0 [ 52.822525][ T4925] __x64_sys_sendmsg+0xd4/0x160 [ 52.822603][ T4925] x64_sys_call+0x2999/0x2fb0 [ 52.822628][ T4925] do_syscall_64+0xd2/0x200 [ 52.822650][ T4925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.822692][ T4925] ? clear_bhb_loop+0x40/0x90 [ 52.822752][ T4925] ? clear_bhb_loop+0x40/0x90 [ 52.822780][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.822806][ T4925] RIP: 0033:0x7f9f77a8e9a9 [ 52.822881][ T4925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.822901][ T4925] RSP: 002b:00007f9f760f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.822923][ T4925] RAX: ffffffffffffffda RBX: 00007f9f77cb5fa0 RCX: 00007f9f77a8e9a9 [ 52.822938][ T4925] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 52.822950][ T4925] RBP: 00007f9f760f7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.822962][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.822974][ T4925] R13: 0000000000000000 R14: 00007f9f77cb5fa0 R15: 00007ffe81d6da38 [ 52.823026][ T4925] [ 52.873566][ T4923] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.455: Failed to acquire dquot type 1 [ 52.874194][ T4923] EXT4-fs (loop0): 1 truncate cleaned up [ 52.874593][ T4923] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.897693][ T4926] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 53.002671][ T4948] loop4: detected capacity change from 0 to 128 [ 53.185202][ T4948] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 53.238785][ T4911] EXT4-fs (loop2): pa ffff8881057552a0: logic 48, phys. 177, len 21 [ 53.239011][ T4957] hugetlbfs: syz.3.474 (4957): Using mlock ulimits for SHM_HUGETLB is obsolete [ 53.246935][ T4911] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 53.381747][ T4964] netlink: 'syz.3.466': attribute type 27 has an invalid length. [ 53.412151][ T4963] loop0: detected capacity change from 0 to 512 [ 53.423001][ T4963] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.432436][ T4963] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.468: error while reading EA inode 32 err=-116 [ 53.489677][ T4963] EXT4-fs (loop0): Remounting filesystem read-only [ 53.496299][ T4963] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.509320][ T4963] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 53.512348][ T4968] loop2: detected capacity change from 0 to 128 [ 53.520555][ T4963] EXT4-fs (loop0): 1 orphan inode deleted [ 53.652141][ T4968] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 53.660798][ T4968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.710837][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 53.710852][ T29] audit: type=1400 audit(1752849035.272:698): avc: denied { append } for pid=4967 comm="syz.2.469" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.776204][ T29] audit: type=1400 audit(1752849035.372:699): avc: denied { name_bind } for pid=4972 comm="syz.3.472" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 53.811908][ T4974] loop0: detected capacity change from 0 to 512 [ 53.838163][ T29] audit: type=1400 audit(1752849035.442:700): avc: denied { ioctl } for pid=4976 comm="syz.4.471" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.893841][ T4974] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 53.903990][ T4974] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 53.913928][ T4974] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.470: Failed to acquire dquot type 1 [ 53.941715][ T29] audit: type=1400 audit(1752849035.552:701): avc: denied { write } for pid=4989 comm="syz.2.477" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.964548][ T29] audit: type=1326 audit(1752849035.552:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19f465e9a9 code=0x0 [ 54.017152][ T4974] EXT4-fs (loop0): 1 truncate cleaned up [ 54.017872][ T4974] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.064771][ T29] audit: type=1400 audit(1752849035.682:703): avc: denied { watch watch_reads } for pid=4993 comm="syz.4.479" path="/94" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.113369][ T4996] loop0: detected capacity change from 0 to 1024 [ 54.122788][ T4996] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.133759][ T4996] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.152111][ T4996] JBD2: no valid journal superblock found [ 54.157868][ T4996] EXT4-fs (loop0): Could not load journal inode [ 54.158029][ T4994] loop4: detected capacity change from 0 to 1024 [ 54.177226][ T4994] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.188199][ T4994] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 54.199574][ T4994] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 54.210341][ T4994] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #17: comm syz.4.479: iget: bad i_size value: 4398046511204 [ 54.224476][ T4994] EXT4-fs (loop4): Remounting filesystem read-only [ 54.231081][ T4994] EXT4-fs (loop4): no journal found [ 54.240963][ T4996] loop0: detected capacity change from 0 to 1024 [ 54.282823][ T4996] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.480: Allocating blocks 449-513 which overlap fs metadata [ 54.324527][ T4996] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 54.331768][ T4995] EXT4-fs (loop0): pa ffff888105755230: logic 48, phys. 177, len 21 [ 54.339897][ T4995] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 54.356208][ T5005] loop1: detected capacity change from 0 to 8192 [ 54.362941][ T5005] vfat: Unknown parameter './file2' [ 54.409301][ T5005] loop1: detected capacity change from 0 to 8192 [ 54.416359][ T5005] vfat: Unknown parameter './file2' [ 54.474315][ T5005] loop1: detected capacity change from 0 to 8192 [ 54.482072][ T5005] vfat: Unknown parameter './file2' [ 54.536608][ T5005] loop1: detected capacity change from 0 to 8192 [ 54.543340][ T5005] vfat: Unknown parameter './file2' [ 54.549058][ T29] audit: type=1400 audit(1752849036.162:704): avc: denied { create } for pid=5016 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 54.589134][ T29] audit: type=1400 audit(1752849036.202:705): avc: denied { ioctl } for pid=5016 comm="syz.0.487" path="socket:[9207]" dev="sockfs" ino=9207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.617469][ T5005] loop1: detected capacity change from 0 to 8192 [ 54.638547][ T5005] vfat: Unknown parameter './file2' [ 54.654679][ T5019] loop0: detected capacity change from 0 to 512 [ 54.693821][ T5019] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.488: corrupted in-inode xattr: invalid ea_ino [ 54.700763][ T5024] netlink: 'syz.4.490': attribute type 13 has an invalid length. [ 54.725996][ T5019] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.488: couldn't read orphan inode 15 (err -117) [ 54.756099][ T5027] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 54.765836][ T5024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.766397][ T5019] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 196 vs 220 free clusters [ 54.790346][ T5024] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.797146][ T5005] loop1: detected capacity change from 0 to 8192 [ 54.803724][ T5005] vfat: Unknown parameter './file2' [ 54.809514][ T5028] netlink: 'syz.3.491': attribute type 10 has an invalid length. [ 54.830231][ T5024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.858660][ T5028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.859362][ T5005] loop1: detected capacity change from 0 to 8192 [ 54.873312][ T5028] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 54.887220][ T5030] FAULT_INJECTION: forcing a failure. [ 54.887220][ T5030] name failslab, interval 1, probability 0, space 0, times 0 [ 54.899958][ T5030] CPU: 0 UID: 0 PID: 5030 Comm: gtp Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 54.899986][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.900045][ T5030] Call Trace: [ 54.900051][ T5030] [ 54.900058][ T5030] __dump_stack+0x1d/0x30 [ 54.900080][ T5030] dump_stack_lvl+0xe8/0x140 [ 54.900099][ T5030] dump_stack+0x15/0x1b [ 54.900115][ T5030] should_fail_ex+0x265/0x280 [ 54.900197][ T5030] should_failslab+0x8c/0xb0 [ 54.900231][ T5030] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.900265][ T5030] ? __alloc_skb+0x101/0x320 [ 54.900319][ T5030] __alloc_skb+0x101/0x320 [ 54.900346][ T5030] ? audit_log_start+0x365/0x6c0 [ 54.900385][ T5030] audit_log_start+0x380/0x6c0 [ 54.900444][ T5030] ? __rcu_read_unlock+0x4f/0x70 [ 54.900537][ T5030] audit_seccomp+0x48/0x100 [ 54.900567][ T5030] ? __seccomp_filter+0x68c/0x10d0 [ 54.900612][ T5030] __seccomp_filter+0x69d/0x10d0 [ 54.900640][ T5030] ? vt_ioctl+0xe91/0x1880 [ 54.900665][ T5030] ? tty_jobctrl_ioctl+0x29e/0x810 [ 54.900766][ T5030] __secure_computing+0x82/0x150 [ 54.900791][ T5030] syscall_trace_enter+0xcf/0x1e0 [ 54.900819][ T5030] do_syscall_64+0xac/0x200 [ 54.900838][ T5030] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.900865][ T5030] ? clear_bhb_loop+0x40/0x90 [ 54.900934][ T5030] ? clear_bhb_loop+0x40/0x90 [ 54.900958][ T5030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.900985][ T5030] RIP: 0033:0x7f19f465d3bc [ 54.901003][ T5030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.901050][ T5030] RSP: 002b:00007f19f2cbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.901071][ T5030] RAX: ffffffffffffffda RBX: 00007f19f4885fa0 RCX: 00007f19f465d3bc [ 54.901086][ T5030] RDX: 000000000000000f RSI: 00007f19f2cbf0a0 RDI: 000000000000000c [ 54.901101][ T5030] RBP: 00007f19f2cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 54.901115][ T5030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.901137][ T5030] R13: 0000000000000000 R14: 00007f19f4885fa0 R15: 00007ffe88408f28 [ 54.901158][ T5030] [ 54.912132][ T5005] vfat: Unknown parameter './file2' [ 54.931212][ T5030] loop2: detected capacity change from 0 to 2048 [ 55.024935][ T5028] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5028 comm=syz.3.491 [ 55.122822][ T5005] loop1: detected capacity change from 0 to 8192 [ 55.157600][ T5005] vfat: Unknown parameter './file2' [ 55.191777][ T5037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 55.200742][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 55.220306][ T3497] Alternate GPT is invalid, using primary GPT. [ 55.226633][ T3497] loop2: p2 p3 p7 [ 55.317368][ T5039] loop1: detected capacity change from 0 to 128 [ 55.324545][ T5026] loop3: detected capacity change from 0 to 256 [ 55.332106][ T5039] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 55.371472][ T5030] Alternate GPT is invalid, using primary GPT. [ 55.377956][ T5030] loop2: p2 p3 p7 [ 55.427348][ T5026] FAT-fs (loop3): Directory bread(block 64) failed [ 55.462917][ T5026] FAT-fs (loop3): Directory bread(block 65) failed [ 55.505839][ T5026] FAT-fs (loop3): Directory bread(block 66) failed [ 55.538061][ T5026] FAT-fs (loop3): Directory bread(block 67) failed [ 55.556051][ T5026] FAT-fs (loop3): Directory bread(block 68) failed [ 55.562731][ T5026] FAT-fs (loop3): Directory bread(block 69) failed [ 55.569330][ T5026] FAT-fs (loop3): Directory bread(block 70) failed [ 55.656001][ T5026] FAT-fs (loop3): Directory bread(block 71) failed [ 55.755165][ T5026] FAT-fs (loop3): Directory bread(block 72) failed [ 55.761827][ T5026] FAT-fs (loop3): Directory bread(block 73) failed [ 55.866736][ T5051] can0: slcan on ttyS3. [ 55.904736][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.919649][ T5050] can0 (unregistered): slcan off ttyS3. [ 55.921721][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.002632][ T5053] can0: slcan on ttyS3. [ 56.126451][ T5052] can0 (unregistered): slcan off ttyS3. [ 56.201550][ T5076] loop4: detected capacity change from 0 to 512 [ 56.208042][ T5076] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.216326][ T5076] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.236782][ T5076] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.255763][ T5080] xt_hashlimit: max too large, truncated to 1048576 [ 56.274002][ T5076] EXT4-fs (loop4): 1 truncate cleaned up [ 56.280271][ T5080] loop2: detected capacity change from 0 to 512 [ 56.302263][ T5080] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.319694][ T5080] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.504: bad orphan inode 13 [ 56.339006][ T5080] ext4_test_bit(bit=12, block=18) = 1 [ 56.344531][ T5080] is_bad_inode(inode)=0 [ 56.348746][ T5080] NEXT_ORPHAN(inode)=2130706432 [ 56.353628][ T5080] max_ino=32 [ 56.356821][ T5080] i_nlink=1 [ 56.365895][ T5075] Process accounting resumed [ 56.408466][ T5080] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 56.460475][ T5080] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.504: bg 0: block 248: padding at end of block bitmap is not set [ 56.498316][ T5080] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.504: Failed to acquire dquot type 1 [ 56.514510][ T5080] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.591512][ T5110] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 56.599200][ T5110] netlink: 224 bytes leftover after parsing attributes in process `syz.2.509'. [ 56.614230][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 56.623565][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 56.633206][ T5114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.507'. [ 56.647214][ T5113] netlink: 14 bytes leftover after parsing attributes in process `syz.1.510'. [ 56.658684][ T5113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.680532][ T5113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.698170][ T5113] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 56.708446][ T5113] bond0 (unregistering): Released all slaves [ 56.771465][ T5106] loop3: detected capacity change from 0 to 512 [ 56.794053][ T5106] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.835573][ T5131] syz.1.514 uses obsolete (PF_INET,SOCK_PACKET) [ 56.858759][ T5134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.512'. [ 57.247052][ T5154] can0: slcan on ttyS3. [ 57.299777][ T5153] can0 (unregistered): slcan off ttyS3. [ 57.361757][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 57.464980][ T5182] loop0: detected capacity change from 0 to 1024 [ 57.520813][ T5190] loop3: detected capacity change from 0 to 512 [ 57.536450][ T5185] netlink: 'syz.2.524': attribute type 13 has an invalid length. [ 57.544267][ T5185] netlink: 'syz.2.524': attribute type 27 has an invalid length. [ 57.556655][ T5185] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 57.565531][ T5190] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.525: Failed to acquire dquot type 1 [ 57.601783][ T5190] EXT4-fs (loop3): 1 truncate cleaned up [ 57.608065][ T5190] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.620592][ T5199] netlink: 'syz.1.526': attribute type 10 has an invalid length. [ 57.628422][ T5199] syz_tun: entered promiscuous mode [ 57.677837][ T5204] netlink: 'syz.2.527': attribute type 27 has an invalid length. [ 57.747245][ T5204] tipc: Resetting bearer [ 57.847391][ T5204] vlan0: left promiscuous mode [ 57.865969][ T5204] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.874936][ T5204] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.883982][ T5204] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.892919][ T5204] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.201877][ T5220] can0: slcan on ttyS3. [ 58.265251][ T5223] loop3: detected capacity change from 0 to 1024 [ 58.272317][ T5223] EXT4-fs: Ignoring removed nobh option [ 58.277880][ T5223] EXT4-fs: Ignoring removed bh option [ 58.309849][ T5219] can0 (unregistered): slcan off ttyS3. [ 58.321052][ T5223] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 58.339166][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 58.341643][ T5234] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 58.355924][ T5234] netlink: 224 bytes leftover after parsing attributes in process `syz.2.535'. [ 58.460747][ T5241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 58.469734][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 58.645294][ T5249] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 58.657279][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 58.664057][ T5249] loop1: detected capacity change from 0 to 2048 [ 59.220786][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 59.220802][ T29] audit: type=1400 audit(1752849040.842:897): avc: denied { ioctl } for pid=5263 comm="syz.1.544" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.254256][ T5264] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5264 comm=syz.1.544 [ 59.284629][ T5266] can0: slcan on ttyS3. [ 59.364925][ T5276] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 59.386543][ T5276] syz_tun: entered promiscuous mode [ 59.414409][ T5276] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 59.424884][ T5265] can0 (unregistered): slcan off ttyS3. [ 59.436921][ T29] audit: type=1400 audit(1752849041.052:898): avc: denied { mount } for pid=5277 comm="syz.0.547" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 59.438778][ T5282] loop4: detected capacity change from 0 to 512 [ 59.459042][ T29] audit: type=1400 audit(1752849041.052:899): avc: denied { mounton } for pid=5277 comm="syz.0.547" path="/104/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 59.467368][ T5282] EXT4-fs (loop4): inodes count not valid: 31 vs 32 [ 59.487257][ T29] audit: type=1400 audit(1752849041.052:900): avc: denied { mount } for pid=5277 comm="syz.0.547" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.515671][ T29] audit: type=1400 audit(1752849041.052:901): avc: denied { unmount } for pid=5277 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.545868][ T5278] loop0: detected capacity change from 0 to 1024 [ 59.558215][ T5278] EXT4-fs: Ignoring removed orlov option [ 59.617429][ T5278] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.631075][ T5291] xt_hashlimit: max too large, truncated to 1048576 [ 59.645296][ T5278] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.547: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 59.646211][ T29] audit: type=1400 audit(1752849041.262:902): avc: denied { create } for pid=5277 comm="syz.0.547" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 59.710562][ T5291] loop2: detected capacity change from 0 to 512 [ 59.723322][ T5296] loop4: detected capacity change from 0 to 512 [ 59.724548][ T5291] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.730241][ T5296] ext4: Unknown parameter 'smackfsfloor' [ 59.746753][ T5291] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.551: bad orphan inode 13 [ 59.785034][ T5291] ext4_test_bit(bit=12, block=18) = 1 [ 59.788766][ T29] audit: type=1400 audit(1752849041.392:903): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 59.790457][ T5291] is_bad_inode(inode)=0 [ 59.814627][ T5291] NEXT_ORPHAN(inode)=2130706432 [ 59.819518][ T5291] max_ino=32 [ 59.822728][ T5291] i_nlink=1 [ 59.837162][ T5308] loop0: detected capacity change from 0 to 512 [ 59.848153][ T5291] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 59.873412][ T5291] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.551: bg 0: block 248: padding at end of block bitmap is not set [ 59.890073][ T5308] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 59.900135][ T5308] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 59.910129][ T5308] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.554: Failed to acquire dquot type 1 [ 59.929036][ T5291] Quota error (device loop2): write_blk: dquota write failed [ 59.936645][ T5291] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.551: Failed to acquire dquot type 1 [ 59.966786][ T5291] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.970008][ T5308] EXT4-fs (loop0): 1 truncate cleaned up [ 59.993098][ T5308] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.189720][ T5342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5342 comm=syz.1.561 [ 60.202204][ T5342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5342 comm=syz.1.561 [ 60.243533][ T5347] loop2: detected capacity change from 0 to 128 [ 60.248043][ T5345] FAULT_INJECTION: forcing a failure. [ 60.248043][ T5345] name failslab, interval 1, probability 0, space 0, times 0 [ 60.257598][ T5347] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 60.262507][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.3.564 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 60.262538][ T5345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.262552][ T5345] Call Trace: [ 60.262560][ T5345] [ 60.262568][ T5345] __dump_stack+0x1d/0x30 [ 60.262592][ T5345] dump_stack_lvl+0xe8/0x140 [ 60.262656][ T5345] dump_stack+0x15/0x1b [ 60.262696][ T5345] should_fail_ex+0x265/0x280 [ 60.262729][ T5345] ? legacy_init_fs_context+0x31/0x80 [ 60.262766][ T5345] should_failslab+0x8c/0xb0 [ 60.262791][ T5345] __kmalloc_cache_noprof+0x4c/0x320 [ 60.262860][ T5345] legacy_init_fs_context+0x31/0x80 [ 60.262895][ T5345] alloc_fs_context+0x3ef/0x4e0 [ 60.262930][ T5345] fs_context_for_mount+0x22/0x30 [ 60.262974][ T5345] do_new_mount+0xe9/0x680 [ 60.263010][ T5345] path_mount+0x4a4/0xb20 [ 60.263061][ T5345] ? user_path_at+0x109/0x130 [ 60.263090][ T5345] __se_sys_mount+0x28f/0x2e0 [ 60.263126][ T5345] ? fput+0x8f/0xc0 [ 60.263225][ T5345] __x64_sys_mount+0x67/0x80 [ 60.263307][ T5345] x64_sys_call+0xd36/0x2fb0 [ 60.263331][ T5345] do_syscall_64+0xd2/0x200 [ 60.263351][ T5345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.263381][ T5345] ? clear_bhb_loop+0x40/0x90 [ 60.263440][ T5345] ? clear_bhb_loop+0x40/0x90 [ 60.263464][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.263488][ T5345] RIP: 0033:0x7f343110e9a9 [ 60.263561][ T5345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.263581][ T5345] RSP: 002b:00007f342f76f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.263601][ T5345] RAX: ffffffffffffffda RBX: 00007f3431335fa0 RCX: 00007f343110e9a9 [ 60.263615][ T5345] RDX: 0000200000001400 RSI: 0000200000000300 RDI: 0000200000000240 [ 60.263629][ T5345] RBP: 00007f342f76f090 R08: 0000200000000140 R09: 0000000000000000 [ 60.263642][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.263655][ T5345] R13: 0000000000000000 R14: 00007f3431335fa0 R15: 00007fffc9ff00f8 [ 60.263706][ T5345] [ 60.425509][ T5340] macsec0: entered allmulticast mode [ 60.486858][ T5340] bond0: entered allmulticast mode [ 60.487614][ T5352] loop3: detected capacity change from 0 to 512 [ 60.492005][ T5340] bond_slave_0: entered allmulticast mode [ 60.504001][ T5340] bond_slave_1: entered allmulticast mode [ 60.512274][ T5352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.533742][ T5340] bond0: left allmulticast mode [ 60.538631][ T5340] bond_slave_0: left allmulticast mode [ 60.544257][ T5340] bond_slave_1: left allmulticast mode [ 60.560791][ T5352] EXT4-fs (loop3): 1 truncate cleaned up [ 60.597973][ T5359] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 60.615028][ T5352] sd 0:0:1:0: device reset [ 60.661857][ T5361] loop2: detected capacity change from 0 to 512 [ 60.682050][ T5361] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.570: Failed to acquire dquot type 1 [ 60.721010][ T5361] EXT4-fs (loop2): 1 truncate cleaned up [ 60.727116][ T5361] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.743316][ T5369] loop4: detected capacity change from 0 to 512 [ 60.753758][ T5371] netlink: 'syz.0.574': attribute type 10 has an invalid length. [ 60.761614][ T5371] syz_tun: entered promiscuous mode [ 60.768248][ T5371] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 60.770133][ T5369] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 60.793601][ T5369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 60.802348][ T5369] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.573: corrupted in-inode xattr: e_value size too large [ 60.822233][ T5369] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.573: couldn't read orphan inode 15 (err -117) [ 61.092957][ T5386] loop2: detected capacity change from 0 to 128 [ 61.105107][ T5386] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 61.171962][ T5397] FAULT_INJECTION: forcing a failure. [ 61.171962][ T5397] name failslab, interval 1, probability 0, space 0, times 0 [ 61.184632][ T5397] CPU: 0 UID: 0 PID: 5397 Comm: syz.3.582 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 61.184665][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.184680][ T5397] Call Trace: [ 61.184687][ T5397] [ 61.184753][ T5397] __dump_stack+0x1d/0x30 [ 61.184779][ T5397] dump_stack_lvl+0xe8/0x140 [ 61.184802][ T5397] dump_stack+0x15/0x1b [ 61.184833][ T5397] should_fail_ex+0x265/0x280 [ 61.184870][ T5397] ? percpu_ref_init+0x9c/0x250 [ 61.184906][ T5397] should_failslab+0x8c/0xb0 [ 61.185007][ T5397] ? __pfx_no_op+0x10/0x10 [ 61.185042][ T5397] __kmalloc_cache_noprof+0x4c/0x320 [ 61.185077][ T5397] ? __pfx_no_op+0x10/0x10 [ 61.185110][ T5397] percpu_ref_init+0x9c/0x250 [ 61.185146][ T5397] ? mddev_init+0x3c/0x410 [ 61.185179][ T5397] ? __pfx_md_probe+0x10/0x10 [ 61.185208][ T5397] mddev_init+0x70/0x410 [ 61.185274][ T5397] ? __pfx_md_probe+0x10/0x10 [ 61.185348][ T5397] md_alloc+0x99/0x9c0 [ 61.185369][ T5397] ? __pfx_md_probe+0x10/0x10 [ 61.185398][ T5397] md_alloc_and_put+0x18/0x140 [ 61.185426][ T5397] md_probe+0x68/0x80 [ 61.185530][ T5397] blk_request_module+0x1ba/0x1e0 [ 61.185581][ T5397] blkdev_get_no_open+0x4b/0x100 [ 61.185608][ T5397] bdev_file_open_by_dev+0xa5/0x250 [ 61.185637][ T5397] swsusp_check+0x3f/0x290 [ 61.185671][ T5397] software_resume+0x41/0x2f0 [ 61.185707][ T5397] resume_store+0x2d9/0x3d0 [ 61.185736][ T5397] ? __pfx_resume_store+0x10/0x10 [ 61.185803][ T5397] kobj_attr_store+0x4a/0x70 [ 61.185839][ T5397] ? __pfx_kobj_attr_store+0x10/0x10 [ 61.185868][ T5397] sysfs_kf_write+0xfb/0x120 [ 61.185901][ T5397] ? __pfx_sysfs_kf_write+0x10/0x10 [ 61.185952][ T5397] kernfs_fop_write_iter+0x1be/0x2d0 [ 61.185982][ T5397] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 61.186043][ T5397] vfs_write+0x4a0/0x8e0 [ 61.186086][ T5397] ksys_write+0xda/0x1a0 [ 61.186141][ T5397] __x64_sys_write+0x40/0x50 [ 61.186178][ T5397] x64_sys_call+0x2cdd/0x2fb0 [ 61.186234][ T5397] do_syscall_64+0xd2/0x200 [ 61.186256][ T5397] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.186363][ T5397] ? clear_bhb_loop+0x40/0x90 [ 61.186385][ T5397] ? clear_bhb_loop+0x40/0x90 [ 61.186410][ T5397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.186435][ T5397] RIP: 0033:0x7f343110e9a9 [ 61.186479][ T5397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.186499][ T5397] RSP: 002b:00007f342f76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.186542][ T5397] RAX: ffffffffffffffda RBX: 00007f3431335fa0 RCX: 00007f343110e9a9 [ 61.186555][ T5397] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 61.186568][ T5397] RBP: 00007f342f76f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.186581][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.186650][ T5397] R13: 0000000000000000 R14: 00007f3431335fa0 R15: 00007fffc9ff00f8 [ 61.186667][ T5397] [ 61.592283][ T5414] random: crng reseeded on system resumption [ 61.632298][ T5414] Restarting kernel threads ... [ 61.659961][ T5418] loop0: detected capacity change from 0 to 2048 [ 61.669311][ T5414] Done restarting kernel threads. [ 61.701138][ T3299] loop0: p1 < > p3 p4 [ 61.708522][ T5422] loop4: detected capacity change from 0 to 128 [ 61.715533][ T3299] loop0: p3 start 922746880 is beyond EOD, truncated [ 61.722323][ T3299] loop0: p4 size 8388608 extends beyond EOD, truncated [ 61.741261][ T5422] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 61.758594][ T5418] loop0: p1 < > p3 p4 [ 61.768590][ T5418] loop0: p3 start 922746880 is beyond EOD, truncated [ 61.775337][ T5418] loop0: p4 size 8388608 extends beyond EOD, truncated [ 61.825699][ T5426] FAULT_INJECTION: forcing a failure. [ 61.825699][ T5426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.839016][ T5426] CPU: 1 UID: 0 PID: 5426 Comm: syz.2.593 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 61.839082][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.839095][ T5426] Call Trace: [ 61.839102][ T5426] [ 61.839109][ T5426] __dump_stack+0x1d/0x30 [ 61.839130][ T5426] dump_stack_lvl+0xe8/0x140 [ 61.839149][ T5426] dump_stack+0x15/0x1b [ 61.839167][ T5426] should_fail_ex+0x265/0x280 [ 61.839233][ T5426] should_fail_alloc_page+0xf2/0x100 [ 61.839261][ T5426] __alloc_frozen_pages_noprof+0xff/0x360 [ 61.839300][ T5426] alloc_pages_mpol+0xb3/0x250 [ 61.839399][ T5426] alloc_pages_noprof+0x90/0x130 [ 61.839491][ T5426] pgd_alloc+0x51/0x2e0 [ 61.839515][ T5426] mm_init+0x34b/0x810 [ 61.839540][ T5426] ? kmem_cache_alloc_noprof+0x220/0x310 [ 61.839687][ T5426] ? mm_alloc+0x2b/0xa0 [ 61.839714][ T5426] mm_alloc+0x81/0xa0 [ 61.839736][ T5426] alloc_bprm+0x20e/0x350 [ 61.839772][ T5426] do_execveat_common+0x12e/0x750 [ 61.839881][ T5426] __x64_sys_execve+0x5c/0x70 [ 61.839916][ T5426] x64_sys_call+0x13ab/0x2fb0 [ 61.839942][ T5426] do_syscall_64+0xd2/0x200 [ 61.840030][ T5426] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.840061][ T5426] ? clear_bhb_loop+0x40/0x90 [ 61.840087][ T5426] ? clear_bhb_loop+0x40/0x90 [ 61.840114][ T5426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.840159][ T5426] RIP: 0033:0x7f19f465e9a9 [ 61.840176][ T5426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.840310][ T5426] RSP: 002b:00007f19f2cbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 61.840332][ T5426] RAX: ffffffffffffffda RBX: 00007f19f4885fa0 RCX: 00007f19f465e9a9 [ 61.840346][ T5426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 61.840359][ T5426] RBP: 00007f19f2cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 61.840401][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.840413][ T5426] R13: 0000000000000000 R14: 00007f19f4885fa0 R15: 00007ffe88408f28 [ 61.840431][ T5426] [ 62.138132][ T5433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.145388][ T5433] IPv6: NLM_F_CREATE should be set when creating new route [ 62.175712][ T5434] ipvlan2: entered promiscuous mode [ 62.181108][ T5434] ipvlan2: entered allmulticast mode [ 62.186624][ T5434] macvlan0: entered allmulticast mode [ 62.272978][ T5443] FAULT_INJECTION: forcing a failure. [ 62.272978][ T5443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.286296][ T5443] CPU: 1 UID: 0 PID: 5443 Comm: syz.3.600 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 62.286323][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.286387][ T5443] Call Trace: [ 62.286394][ T5443] [ 62.286402][ T5443] __dump_stack+0x1d/0x30 [ 62.286425][ T5443] dump_stack_lvl+0xe8/0x140 [ 62.286556][ T5443] dump_stack+0x15/0x1b [ 62.286577][ T5443] should_fail_ex+0x265/0x280 [ 62.286658][ T5443] should_fail+0xb/0x20 [ 62.286690][ T5443] should_fail_usercopy+0x1a/0x20 [ 62.286734][ T5443] _copy_from_user+0x1c/0xb0 [ 62.286800][ T5443] vmemdup_user+0x59/0xd0 [ 62.286828][ T5443] map_lookup_elem+0x18f/0x460 [ 62.286866][ T5443] ? security_bpf+0x2b/0x90 [ 62.286888][ T5443] __sys_bpf+0x3ae/0x790 [ 62.286982][ T5443] __x64_sys_bpf+0x41/0x50 [ 62.287009][ T5443] x64_sys_call+0x2478/0x2fb0 [ 62.287032][ T5443] do_syscall_64+0xd2/0x200 [ 62.287059][ T5443] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.287091][ T5443] ? clear_bhb_loop+0x40/0x90 [ 62.287115][ T5443] ? clear_bhb_loop+0x40/0x90 [ 62.287136][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.287210][ T5443] RIP: 0033:0x7f343110e9a9 [ 62.287224][ T5443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.287309][ T5443] RSP: 002b:00007f342f76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.287329][ T5443] RAX: ffffffffffffffda RBX: 00007f3431335fa0 RCX: 00007f343110e9a9 [ 62.287344][ T5443] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000001 [ 62.287359][ T5443] RBP: 00007f342f76f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.287373][ T5443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.287385][ T5443] R13: 0000000000000000 R14: 00007f3431335fa0 R15: 00007fffc9ff00f8 [ 62.287402][ T5443] [ 62.503142][ T5424] Set syz1 is full, maxelem 65536 reached [ 62.575669][ T5453] loop4: detected capacity change from 0 to 1024 [ 62.576185][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 62.592605][ T5453] EXT4-fs: Ignoring removed nobh option [ 62.605805][ T5453] EXT4-fs: dax option not supported [ 62.618921][ T5457] FAULT_INJECTION: forcing a failure. [ 62.618921][ T5457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.632286][ T5457] CPU: 1 UID: 0 PID: 5457 Comm: syz.0.605 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 62.632314][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.632327][ T5457] Call Trace: [ 62.632394][ T5457] [ 62.632401][ T5457] __dump_stack+0x1d/0x30 [ 62.632423][ T5457] dump_stack_lvl+0xe8/0x140 [ 62.632513][ T5457] dump_stack+0x15/0x1b [ 62.632529][ T5457] should_fail_ex+0x265/0x280 [ 62.632566][ T5457] should_fail_alloc_page+0xf2/0x100 [ 62.632596][ T5457] __alloc_frozen_pages_noprof+0xff/0x360 [ 62.632646][ T5457] alloc_pages_mpol+0xb3/0x250 [ 62.632689][ T5457] alloc_pages_noprof+0x90/0x130 [ 62.632721][ T5457] __pud_alloc+0x47/0x4c0 [ 62.632742][ T5457] ? get_partial_node+0x2e0/0x320 [ 62.632828][ T5457] handle_mm_fault+0x1882/0x2be0 [ 62.632855][ T5457] ? check_vma_flags+0x26e/0x340 [ 62.632921][ T5457] __get_user_pages+0x1036/0x1fb0 [ 62.632957][ T5457] get_user_pages_remote+0x1dc/0x7a0 [ 62.633026][ T5457] get_arg_page+0x8e/0x1e0 [ 62.633055][ T5457] copy_string_kernel+0x134/0x340 [ 62.633175][ T5457] do_execveat_common+0x5ad/0x750 [ 62.633214][ T5457] ? getname_flags+0x154/0x3b0 [ 62.633239][ T5457] __x64_sys_execveat+0x73/0x90 [ 62.633325][ T5457] x64_sys_call+0x2dae/0x2fb0 [ 62.633350][ T5457] do_syscall_64+0xd2/0x200 [ 62.633380][ T5457] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.633489][ T5457] ? clear_bhb_loop+0x40/0x90 [ 62.633510][ T5457] ? clear_bhb_loop+0x40/0x90 [ 62.633535][ T5457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.633561][ T5457] RIP: 0033:0x7f1865f7e9a9 [ 62.633659][ T5457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.633743][ T5457] RSP: 002b:00007f18645e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 62.633765][ T5457] RAX: ffffffffffffffda RBX: 00007f18661a5fa0 RCX: 00007f1865f7e9a9 [ 62.633780][ T5457] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 62.633793][ T5457] RBP: 00007f18645e7090 R08: 0000000000001000 R09: 0000000000000000 [ 62.633805][ T5457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.633888][ T5457] R13: 0000000000000000 R14: 00007f18661a5fa0 R15: 00007fffa20745b8 [ 62.633907][ T5457] [ 62.637984][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 62.932596][ T5466] loop0: detected capacity change from 0 to 512 [ 62.941063][ T5466] ext2: Bad value for 'sb' [ 63.150513][ T5484] loop4: detected capacity change from 0 to 1024 [ 63.158994][ T5484] EXT4-fs: Ignoring removed nobh option [ 63.195971][ T5484] EXT4-fs: Ignoring removed bh option [ 63.268398][ T5492] __nla_validate_parse: 1 callbacks suppressed [ 63.268411][ T5492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.618'. [ 63.298298][ T5484] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 63.346277][ T5496] FAULT_INJECTION: forcing a failure. [ 63.346277][ T5496] name failslab, interval 1, probability 0, space 0, times 0 [ 63.359060][ T5496] CPU: 1 UID: 0 PID: 5496 Comm: syz.3.619 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 63.359088][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.359150][ T5496] Call Trace: [ 63.359155][ T5496] [ 63.359162][ T5496] __dump_stack+0x1d/0x30 [ 63.359184][ T5496] dump_stack_lvl+0xe8/0x140 [ 63.359207][ T5496] dump_stack+0x15/0x1b [ 63.359248][ T5496] should_fail_ex+0x265/0x280 [ 63.359285][ T5496] should_failslab+0x8c/0xb0 [ 63.359311][ T5496] __kmalloc_cache_node_noprof+0x54/0x320 [ 63.359343][ T5496] ? __get_vm_area_node+0x106/0x1d0 [ 63.359408][ T5496] __get_vm_area_node+0x106/0x1d0 [ 63.359443][ T5496] __vmalloc_node_range_noprof+0x273/0xe00 [ 63.359480][ T5496] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 63.359550][ T5496] ? mntput_no_expire+0x6f/0x3c0 [ 63.359581][ T5496] ? __rcu_read_unlock+0x4f/0x70 [ 63.359610][ T5496] ? selinux_capable+0x1f9/0x270 [ 63.359686][ T5496] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 63.359800][ T5496] __vmalloc_noprof+0x83/0xc0 [ 63.359830][ T5496] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 63.359861][ T5496] bpf_prog_alloc_no_stats+0x47/0x390 [ 63.359950][ T5496] ? bpf_prog_alloc+0x2a/0x150 [ 63.359981][ T5496] bpf_prog_alloc+0x3c/0x150 [ 63.360075][ T5496] bpf_prog_load+0x514/0x1070 [ 63.360125][ T5496] ? security_bpf+0x2b/0x90 [ 63.360145][ T5496] __sys_bpf+0x51d/0x790 [ 63.360244][ T5496] __x64_sys_bpf+0x41/0x50 [ 63.360274][ T5496] x64_sys_call+0x2478/0x2fb0 [ 63.360299][ T5496] do_syscall_64+0xd2/0x200 [ 63.360316][ T5496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.360386][ T5496] ? clear_bhb_loop+0x40/0x90 [ 63.360410][ T5496] ? clear_bhb_loop+0x40/0x90 [ 63.360479][ T5496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.360539][ T5496] RIP: 0033:0x7f343110e9a9 [ 63.360555][ T5496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.360573][ T5496] RSP: 002b:00007f342f76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.360605][ T5496] RAX: ffffffffffffffda RBX: 00007f3431335fa0 RCX: 00007f343110e9a9 [ 63.360686][ T5496] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 63.360699][ T5496] RBP: 00007f342f76f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.360711][ T5496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.360730][ T5496] R13: 0000000000000001 R14: 00007f3431335fa0 R15: 00007fffc9ff00f8 [ 63.360750][ T5496] [ 63.607855][ T5496] syz.3.619: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 63.623861][ T5496] CPU: 1 UID: 0 PID: 5496 Comm: syz.3.619 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 63.623894][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.623908][ T5496] Call Trace: [ 63.623915][ T5496] [ 63.623923][ T5496] __dump_stack+0x1d/0x30 [ 63.623948][ T5496] dump_stack_lvl+0xe8/0x140 [ 63.624030][ T5496] dump_stack+0x15/0x1b [ 63.624051][ T5496] warn_alloc+0x12b/0x1a0 [ 63.624092][ T5496] __vmalloc_node_range_noprof+0x297/0xe00 [ 63.624158][ T5496] ? mntput_no_expire+0x6f/0x3c0 [ 63.624190][ T5496] ? __rcu_read_unlock+0x4f/0x70 [ 63.624274][ T5496] ? selinux_capable+0x1f9/0x270 [ 63.624365][ T5496] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 63.624459][ T5496] __vmalloc_noprof+0x83/0xc0 [ 63.624525][ T5496] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 63.624558][ T5496] bpf_prog_alloc_no_stats+0x47/0x390 [ 63.624591][ T5496] ? bpf_prog_alloc+0x2a/0x150 [ 63.624625][ T5496] bpf_prog_alloc+0x3c/0x150 [ 63.624671][ T5496] bpf_prog_load+0x514/0x1070 [ 63.624718][ T5496] ? security_bpf+0x2b/0x90 [ 63.624784][ T5496] __sys_bpf+0x51d/0x790 [ 63.624822][ T5496] __x64_sys_bpf+0x41/0x50 [ 63.624854][ T5496] x64_sys_call+0x2478/0x2fb0 [ 63.624881][ T5496] do_syscall_64+0xd2/0x200 [ 63.624903][ T5496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.624977][ T5496] ? clear_bhb_loop+0x40/0x90 [ 63.625009][ T5496] ? clear_bhb_loop+0x40/0x90 [ 63.625041][ T5496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.625068][ T5496] RIP: 0033:0x7f343110e9a9 [ 63.625086][ T5496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.625108][ T5496] RSP: 002b:00007f342f76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.625130][ T5496] RAX: ffffffffffffffda RBX: 00007f3431335fa0 RCX: 00007f343110e9a9 [ 63.625146][ T5496] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 63.625227][ T5496] RBP: 00007f342f76f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.625242][ T5496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.625322][ T5496] R13: 0000000000000001 R14: 00007f3431335fa0 R15: 00007fffc9ff00f8 [ 63.625344][ T5496] [ 63.625364][ T5496] Mem-Info: [ 63.850170][ T5496] active_anon:11069 inactive_anon:1 isolated_anon:0 [ 63.850170][ T5496] active_file:16290 inactive_file:2480 isolated_file:0 [ 63.850170][ T5496] unevictable:0 dirty:535 writeback:0 [ 63.850170][ T5496] slab_reclaimable:3127 slab_unreclaimable:26174 [ 63.850170][ T5496] mapped:32600 shmem:3062 pagetables:1468 [ 63.850170][ T5496] sec_pagetables:0 bounce:0 [ 63.850170][ T5496] kernel_misc_reclaimable:0 [ 63.850170][ T5496] free:1862474 free_pcp:19212 free_cma:0 [ 63.895258][ T5496] Node 0 active_anon:44276kB inactive_anon:4kB active_file:65160kB inactive_file:9920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130400kB dirty:2140kB writeback:0kB shmem:12248kB writeback_tmp:0kB kernel_stack:3744kB pagetables:5872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 63.924252][ T5496] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.952972][ T5496] lowmem_reserve[]: 0 2882 7860 7860 [ 63.958363][ T5496] Node 0 DMA32 free:2947824kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 63.988433][ T5496] lowmem_reserve[]: 0 0 4978 4978 [ 63.993603][ T5496] Node 0 Normal free:4486712kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44276kB inactive_anon:4kB active_file:65160kB inactive_file:9920kB unevictable:0kB writepending:2140kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:73352kB local_pcp:58272kB free_cma:0kB [ 64.025687][ T5496] lowmem_reserve[]: 0 0 0 0 [ 64.030276][ T5496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 64.042966][ T5496] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947824kB [ 64.059128][ T5496] Node 0 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (ME) 354*32kB (ME) 313*64kB (UM) 81*128kB (UME) 57*256kB (UME) 45*512kB (UME) 38*1024kB (UM) 19*2048kB (UME) 1057*4096kB (UM) = 4486712kB [ 64.077579][ T5496] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 64.086870][ T5496] 18985 total pagecache pages [ 64.091548][ T5496] 2 pages in swap cache [ 64.095706][ T5496] Free swap = 124988kB [ 64.099863][ T5496] Total swap = 124996kB [ 64.104066][ T5496] 2097051 pages RAM [ 64.107852][ T5496] 0 pages HighMem/MovableOnly [ 64.112525][ T5496] 80813 pages reserved [ 64.154309][ T5503] loop2: detected capacity change from 0 to 1024 [ 64.183076][ T5503] EXT4-fs: Ignoring removed orlov option [ 64.193202][ T5503] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 64.207881][ T5505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.623'. [ 64.220128][ T5513] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 64.220128][ T5513] The task syz.1.624 (5513) triggered the difference, watch for misbehavior. [ 64.238552][ T5515] tipc: Started in network mode [ 64.243559][ T5515] tipc: Node identity ac1414aa, cluster identity 4711 [ 64.259936][ T5515] tipc: Enabled bearer , priority 10 [ 64.268525][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 64.268547][ T29] audit: type=1400 audit(1752849045.882:1034): avc: denied { ioctl } for pid=5506 comm="syz.1.624" path="socket:[10027]" dev="sockfs" ino=10027 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.401573][ T5529] IPVS: Error connecting to the multicast addr [ 64.401530][ T29] audit: type=1400 audit(1752849046.022:1035): avc: denied { setopt } for pid=5527 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.429289][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 64.439548][ T29] audit: type=1400 audit(1752849046.062:1036): avc: denied { write } for pid=5525 comm="syz.3.630" name="pfkey" dev="proc" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 64.510964][ T29] audit: type=1400 audit(1752849046.132:1037): avc: denied { read write } for pid=5536 comm="syz.2.633" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.528770][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.534346][ T29] audit: type=1400 audit(1752849046.132:1038): avc: denied { open } for pid=5536 comm="syz.2.633" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.541676][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.572330][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.580401][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.587916][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.595503][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.602984][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.610512][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.617946][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.625363][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.632786][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.640221][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.647613][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.655049][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.662571][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.671410][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.678810][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.686228][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.693632][ T3401] hid-generic 0000:0000:0000.0001: item fetching failed at offset 9/43 [ 64.702241][ T3401] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 64.712210][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.719715][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.727102][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.732775][ T29] audit: type=1400 audit(1752849046.342:1039): avc: denied { mount } for pid=5537 comm="syz.4.636" name="/" dev="configfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.734505][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.759862][ T29] audit: type=1400 audit(1752849046.382:1040): avc: denied { search } for pid=5537 comm="syz.4.636" name="/" dev="configfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.764456][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.786435][ T29] audit: type=1400 audit(1752849046.382:1041): avc: denied { search } for pid=5537 comm="syz.4.636" name="/" dev="configfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.793822][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.815812][ T29] audit: type=1400 audit(1752849046.382:1042): avc: denied { read open } for pid=5537 comm="syz.4.636" path="/" dev="configfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.823147][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.852942][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.860375][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.867856][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.875287][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.882813][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.890302][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.897683][ T3973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.907412][ T3973] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 64.920176][ T5542] FAULT_INJECTION: forcing a failure. [ 64.920176][ T5542] name failslab, interval 1, probability 0, space 0, times 0 [ 64.932872][ T5542] CPU: 0 UID: 0 PID: 5542 Comm: syz.3.637 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 64.932981][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.932994][ T5542] Call Trace: [ 64.933000][ T5542] [ 64.933007][ T5542] __dump_stack+0x1d/0x30 [ 64.933030][ T5542] dump_stack_lvl+0xe8/0x140 [ 64.933053][ T5542] dump_stack+0x15/0x1b [ 64.933127][ T5542] should_fail_ex+0x265/0x280 [ 64.933159][ T5542] should_failslab+0x8c/0xb0 [ 64.933263][ T5542] kmem_cache_alloc_node_noprof+0x57/0x320 [ 64.933433][ T5542] ? __alloc_skb+0x101/0x320 [ 64.933526][ T5542] __alloc_skb+0x101/0x320 [ 64.933555][ T5542] alloc_uevent_skb+0x5c/0x120 [ 64.933585][ T5542] kobject_uevent_net_broadcast+0x23c/0x410 [ 64.933653][ T5542] kobject_uevent_env+0x43d/0x570 [ 64.933680][ T5542] ? device_pm_check_callbacks+0x683/0x6a0 [ 64.933740][ T5542] kobject_uevent+0x1d/0x30 [ 64.933783][ T5542] device_del+0x710/0x790 [ 64.933809][ T5542] device_destroy+0x66/0xa0 [ 64.933834][ T5542] drop_ref+0xbf/0x1a0 [ 64.933852][ T5542] hidraw_disconnect+0x39/0x50 [ 64.933942][ T5542] hid_device_remove+0x158/0x210 [ 64.933969][ T5542] ? __pfx_hid_device_remove+0x10/0x10 [ 64.933997][ T5542] device_release_driver_internal+0x2bb/0x4c0 [ 64.934026][ T5542] device_release_driver+0x19/0x20 [ 64.934064][ T5542] bus_remove_device+0x26d/0x290 [ 64.934102][ T5542] device_del+0x36a/0x790 [ 64.934126][ T5542] hid_destroy_device+0x54/0x120 [ 64.934196][ T5542] uhid_dev_destroy+0x6a/0xb0 [ 64.934218][ T5542] uhid_char_write+0x3aa/0x650 [ 64.934286][ T5542] ? __pfx_uhid_char_write+0x10/0x10 [ 64.934345][ T5542] vfs_write+0x266/0x8e0 [ 64.934375][ T5542] ? __rcu_read_unlock+0x4f/0x70 [ 64.934398][ T5542] ? __fget_files+0x184/0x1c0 [ 64.934419][ T5542] ksys_write+0xda/0x1a0 [ 64.934463][ T5542] __x64_sys_write+0x40/0x50 [ 64.934516][ T5542] x64_sys_call+0x2cdd/0x2fb0 [ 64.934538][ T5542] do_syscall_64+0xd2/0x200 [ 64.934555][ T5542] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.934606][ T5542] ? clear_bhb_loop+0x40/0x90 [ 64.934657][ T5542] ? clear_bhb_loop+0x40/0x90 [ 64.934679][ T5542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.934700][ T5542] RIP: 0033:0x7f343110e9a9 [ 64.934714][ T5542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.934733][ T5542] RSP: 002b:00007f342f76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.934771][ T5542] RAX: ffffffffffffffda RBX: 00007f3431335fa0 RCX: 00007f343110e9a9 [ 64.934857][ T5542] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 64.934870][ T5542] RBP: 00007f342f76f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.934882][ T5542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.934894][ T5542] R13: 0000000000000000 R14: 00007f3431335fa0 R15: 00007fffc9ff00f8 [ 64.934943][ T5542] [ 65.276134][ T5549] fido_id[5549]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.299477][ T5207] tipc: Node number set to 2886997162 [ 65.357801][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 65.367064][ T29] audit: type=1400 audit(1752849046.972:1043): avc: denied { create } for pid=5561 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.403543][ T5562] tmpfs: Unknown parameter 'RXvJ' [ 65.403604][ T5564] loop4: detected capacity change from 0 to 1024 [ 65.436326][ T5564] EXT4-fs: Ignoring removed orlov option [ 65.444681][ T5564] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 65.486962][ T5571] loop2: detected capacity change from 0 to 1024 [ 65.496754][ T5572] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 65.514738][ T5571] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.525699][ T5571] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.554538][ T5571] JBD2: no valid journal superblock found [ 65.560319][ T5571] EXT4-fs (loop2): Could not load journal inode [ 65.581647][ T5575] No such timeout policy "syz0" [ 65.624673][ T5571] loop2: detected capacity change from 0 to 1024 [ 65.863773][ T5571] EXT4-fs mount: 62 callbacks suppressed [ 65.863789][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.908335][ T5571] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.644: Allocating blocks 449-513 which overlap fs metadata [ 65.961233][ T5571] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 65.968209][ T5567] EXT4-fs (loop2): pa ffff888106ad5930: logic 48, phys. 177, len 21 [ 65.976286][ T5567] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 65.994183][ T5598] loop0: detected capacity change from 0 to 128 [ 66.010565][ T5598] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.028848][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.039081][ T5598] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.550191][ T5620] netlink: 'syz.3.660': attribute type 27 has an invalid length. [ 66.558379][ T5620] syz_tun: left promiscuous mode [ 66.746693][ T5628] loop3: detected capacity change from 0 to 512 [ 66.755296][ T5628] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.776558][ T5628] EXT4-fs (loop3): 1 truncate cleaned up [ 66.782849][ T5628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.820719][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.850016][ T5636] netlink: 'syz.3.666': attribute type 27 has an invalid length. [ 66.855135][ T5637] netlink: 'syz.1.664': attribute type 39 has an invalid length. [ 66.867993][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.928995][ T5642] loop0: detected capacity change from 0 to 128 [ 66.957009][ T5642] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.957221][ T5642] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.127330][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.314455][ T5676] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 67.323642][ T5676] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 67.727644][ T5710] loop3: detected capacity change from 0 to 512 [ 67.731250][ T5713] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 67.778197][ T5710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.829508][ T5710] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.896837][ T5722] FAULT_INJECTION: forcing a failure. [ 67.896837][ T5722] name failslab, interval 1, probability 0, space 0, times 0 [ 67.909546][ T5722] CPU: 1 UID: 0 PID: 5722 Comm: syz.2.686 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 67.909631][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.909646][ T5722] Call Trace: [ 67.909653][ T5722] [ 67.909661][ T5722] __dump_stack+0x1d/0x30 [ 67.909689][ T5722] dump_stack_lvl+0xe8/0x140 [ 67.909743][ T5722] dump_stack+0x15/0x1b [ 67.909825][ T5722] should_fail_ex+0x265/0x280 [ 67.909857][ T5722] should_failslab+0x8c/0xb0 [ 67.910003][ T5722] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 67.910037][ T5722] ? security_context_to_sid_core+0x69/0x3b0 [ 67.910120][ T5722] ? selinux_inode_permission+0x532/0x620 [ 67.910143][ T5722] kmemdup_nul+0x36/0xc0 [ 67.910166][ T5722] security_context_to_sid_core+0x69/0x3b0 [ 67.910198][ T5722] ? avc_has_perm_noaudit+0x1b1/0x200 [ 67.910233][ T5722] security_context_to_sid+0x2e/0x40 [ 67.910283][ T5722] selinux_inode_setxattr+0x4af/0x6e0 [ 67.910314][ T5722] security_inode_setxattr+0x13a/0x1b0 [ 67.910353][ T5722] __vfs_setxattr_locked+0x83/0x1d0 [ 67.910393][ T5722] vfs_setxattr+0x132/0x270 [ 67.910435][ T5722] filename_setxattr+0x1ad/0x400 [ 67.910476][ T5722] path_setxattrat+0x2c9/0x310 [ 67.910515][ T5722] __x64_sys_lsetxattr+0x71/0x90 [ 67.910584][ T5722] x64_sys_call+0x1e36/0x2fb0 [ 67.910611][ T5722] do_syscall_64+0xd2/0x200 [ 67.910633][ T5722] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.910727][ T5722] ? clear_bhb_loop+0x40/0x90 [ 67.910753][ T5722] ? clear_bhb_loop+0x40/0x90 [ 67.910778][ T5722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.910804][ T5722] RIP: 0033:0x7f19f465e9a9 [ 67.910822][ T5722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.910872][ T5722] RSP: 002b:00007f19f2cbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 67.910890][ T5722] RAX: ffffffffffffffda RBX: 00007f19f4885fa0 RCX: 00007f19f465e9a9 [ 67.910903][ T5722] RDX: 00002000000000c0 RSI: 0000200000000940 RDI: 0000200000000000 [ 67.910917][ T5722] RBP: 00007f19f2cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 67.911067][ T5722] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000001 [ 67.911082][ T5722] R13: 0000000000000001 R14: 00007f19f4885fa0 R15: 00007ffe88408f28 [ 67.911101][ T5722] [ 67.935645][ T5710] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 67.965146][ T5725] xt_hashlimit: max too large, truncated to 1048576 [ 68.198000][ T5728] loop2: detected capacity change from 0 to 512 [ 68.206523][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.251338][ T5728] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.310688][ T5728] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.687: bad orphan inode 13 [ 68.374130][ T5728] ext4_test_bit(bit=12, block=18) = 1 [ 68.379645][ T5728] is_bad_inode(inode)=0 [ 68.383861][ T5728] NEXT_ORPHAN(inode)=2130706432 [ 68.388783][ T5728] max_ino=32 [ 68.392134][ T5728] i_nlink=1 [ 68.408290][ T5738] netlink: 'syz.3.691': attribute type 27 has an invalid length. [ 68.424041][ T5728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.463162][ T5725] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 68.500824][ T5725] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.687: bg 0: block 248: padding at end of block bitmap is not set [ 68.518297][ T5725] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.687: Failed to acquire dquot type 1 [ 68.531425][ T5725] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.556438][ T5745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 68.565473][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 68.598355][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.711538][ T5751] FAULT_INJECTION: forcing a failure. [ 68.711538][ T5751] name failslab, interval 1, probability 0, space 0, times 0 [ 68.724366][ T5751] CPU: 1 UID: 0 PID: 5751 Comm: syz.2.695 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 68.724395][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.724407][ T5751] Call Trace: [ 68.724413][ T5751] [ 68.724421][ T5751] __dump_stack+0x1d/0x30 [ 68.724446][ T5751] dump_stack_lvl+0xe8/0x140 [ 68.724505][ T5751] dump_stack+0x15/0x1b [ 68.724600][ T5751] should_fail_ex+0x265/0x280 [ 68.724683][ T5751] should_failslab+0x8c/0xb0 [ 68.724708][ T5751] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 68.724738][ T5751] ? sidtab_sid2str_get+0xa0/0x130 [ 68.724766][ T5751] kmemdup_noprof+0x2b/0x70 [ 68.724812][ T5751] sidtab_sid2str_get+0xa0/0x130 [ 68.724835][ T5751] security_sid_to_context_core+0x1eb/0x2e0 [ 68.724861][ T5751] security_sid_to_context+0x27/0x40 [ 68.724883][ T5751] selinux_lsmprop_to_secctx+0x67/0xf0 [ 68.724972][ T5751] security_lsmprop_to_secctx+0x43/0x80 [ 68.725002][ T5751] audit_log_task_context+0x77/0x190 [ 68.725039][ T5751] audit_log_task+0xf4/0x250 [ 68.725109][ T5751] audit_seccomp+0x61/0x100 [ 68.725143][ T5751] ? __seccomp_filter+0x68c/0x10d0 [ 68.725165][ T5751] __seccomp_filter+0x69d/0x10d0 [ 68.725192][ T5751] ? update_load_avg+0x1da/0x820 [ 68.725233][ T5751] ? __list_add_valid_or_report+0x38/0xe0 [ 68.725335][ T5751] ? _raw_spin_unlock+0x26/0x50 [ 68.725363][ T5751] __secure_computing+0x82/0x150 [ 68.725389][ T5751] syscall_trace_enter+0xcf/0x1e0 [ 68.725414][ T5751] do_syscall_64+0xac/0x200 [ 68.725469][ T5751] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.725509][ T5751] ? clear_bhb_loop+0x40/0x90 [ 68.725533][ T5751] ? clear_bhb_loop+0x40/0x90 [ 68.725609][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.725655][ T5751] RIP: 0033:0x7f19f465d3bc [ 68.725670][ T5751] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.725688][ T5751] RSP: 002b:00007f19f2cbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.725754][ T5751] RAX: ffffffffffffffda RBX: 00007f19f4885fa0 RCX: 00007f19f465d3bc [ 68.725769][ T5751] RDX: 000000000000000f RSI: 00007f19f2cbf0a0 RDI: 0000000000000006 [ 68.725783][ T5751] RBP: 00007f19f2cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 68.725797][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.725812][ T5751] R13: 0000000000000000 R14: 00007f19f4885fa0 R15: 00007ffe88408f28 [ 68.725833][ T5751] [ 68.748314][ T5749] loop0: detected capacity change from 0 to 164 [ 68.814923][ T5749] Unable to read rock-ridge attributes [ 68.852308][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 69.153408][ T5766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 69.153430][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 70.052919][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 70.052936][ T29] audit: type=1400 audit(1752849051.672:1350): avc: denied { write } for pid=5775 comm="syz.4.702" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 70.090422][ T5778] hub 6-0:1.0: USB hub found [ 70.090617][ T5778] hub 6-0:1.0: 8 ports detected [ 70.093673][ T5778] lo speed is unknown, defaulting to 1000 [ 70.093689][ T5778] lo speed is unknown, defaulting to 1000 [ 70.093863][ T5778] lo speed is unknown, defaulting to 1000 [ 70.096519][ T5778] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 70.111226][ T5778] lo speed is unknown, defaulting to 1000 [ 70.111515][ T5778] lo speed is unknown, defaulting to 1000 [ 70.111828][ T5778] lo speed is unknown, defaulting to 1000 [ 70.112111][ T5778] lo speed is unknown, defaulting to 1000 [ 70.112510][ T5778] lo speed is unknown, defaulting to 1000 [ 70.112974][ T5778] lo speed is unknown, defaulting to 1000 [ 70.211320][ T5785] team0: Device gtp0 is of different type [ 70.363938][ T5790] loop1: detected capacity change from 0 to 512 [ 70.400138][ T5792] xt_hashlimit: max too large, truncated to 1048576 [ 70.408132][ T5790] vfat: Unknown parameter 'uni_xlate ' [ 70.446668][ T5786] lo speed is unknown, defaulting to 1000 [ 70.480034][ T5792] loop2: detected capacity change from 0 to 512 [ 70.488489][ T5792] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.496299][ T5792] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.706: bad orphan inode 13 [ 70.506497][ T5790] loop1: detected capacity change from 0 to 1024 [ 70.524015][ T5792] ext4_test_bit(bit=12, block=18) = 1 [ 70.529511][ T5792] is_bad_inode(inode)=0 [ 70.533763][ T5792] NEXT_ORPHAN(inode)=2130706432 [ 70.538625][ T5792] max_ino=32 [ 70.541913][ T5792] i_nlink=1 [ 70.551541][ T5790] ext4: Unknown parameter 'subj_type' [ 70.562917][ T29] audit: type=1326 audit(1752849052.182:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f924e84e9a9 code=0x0 [ 70.565829][ T5792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.604489][ T5798] loop0: detected capacity change from 0 to 1024 [ 70.611979][ T5798] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.622928][ T5798] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.639135][ T5798] JBD2: no valid journal superblock found [ 70.644919][ T5798] EXT4-fs (loop0): Could not load journal inode [ 70.677594][ T5792] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 70.680670][ T5792] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.706: bg 0: block 248: padding at end of block bitmap is not set [ 70.680862][ T5792] Quota error (device loop2): write_blk: dquota write failed [ 70.680881][ T5792] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.680902][ T5792] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.706: Failed to acquire dquot type 1 [ 70.685981][ T5792] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.687644][ T5802] loop4: detected capacity change from 0 to 256 [ 70.715988][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.742711][ T5802] bio_check_eod: 2 callbacks suppressed [ 70.742740][ T5802] syz.4.709: attempt to access beyond end of device [ 70.742740][ T5802] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 70.798981][ T5803] loop0: detected capacity change from 0 to 1024 [ 70.825906][ T5803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.836897][ T29] audit: type=1400 audit(1752849052.442:1352): avc: denied { connect } for pid=5808 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.858627][ T29] audit: type=1400 audit(1752849052.462:1353): avc: denied { setopt } for pid=5808 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.869418][ T5798] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.708: Allocating blocks 449-513 which overlap fs metadata [ 70.913910][ T5803] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 70.917454][ T5812] loop4: detected capacity change from 0 to 2048 [ 70.927784][ T29] audit: type=1400 audit(1752849052.542:1354): avc: denied { ioctl } for pid=5811 comm="syz.2.710" path="socket:[12505]" dev="sockfs" ino=12505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.964016][ T5797] EXT4-fs (loop0): pa ffff888106ad59a0: logic 48, phys. 177, len 21 [ 70.964493][ T5816] netlink: 'syz.2.714': attribute type 27 has an invalid length. [ 70.972297][ T5797] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 70.992253][ T3299] loop4: p1 < > p3 p4 [ 70.997284][ T3299] loop4: p3 start 922746880 is beyond EOD, truncated [ 71.004096][ T3299] loop4: p4 size 8388608 extends beyond EOD, truncated [ 71.013191][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.013564][ T5812] loop4: p1 < > p3 p4 [ 71.027089][ T5812] loop4: p3 start 922746880 is beyond EOD, truncated [ 71.033862][ T5812] loop4: p4 size 8388608 extends beyond EOD, truncated [ 71.036089][ T5818] FAULT_INJECTION: forcing a failure. [ 71.036089][ T5818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.053918][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz.0.715 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 71.053987][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.054002][ T5818] Call Trace: [ 71.054010][ T5818] [ 71.054019][ T5818] __dump_stack+0x1d/0x30 [ 71.054043][ T5818] dump_stack_lvl+0xe8/0x140 [ 71.054065][ T5818] dump_stack+0x15/0x1b [ 71.054135][ T5818] should_fail_ex+0x265/0x280 [ 71.054207][ T5818] should_fail+0xb/0x20 [ 71.054235][ T5818] should_fail_usercopy+0x1a/0x20 [ 71.054287][ T5818] _copy_from_user+0x1c/0xb0 [ 71.054310][ T5818] __copy_msghdr+0x244/0x300 [ 71.054349][ T5818] ___sys_sendmsg+0x109/0x1d0 [ 71.054479][ T5818] __x64_sys_sendmsg+0xd4/0x160 [ 71.054598][ T5818] x64_sys_call+0x2999/0x2fb0 [ 71.054624][ T5818] do_syscall_64+0xd2/0x200 [ 71.054670][ T5818] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.054740][ T5818] ? clear_bhb_loop+0x40/0x90 [ 71.054766][ T5818] ? clear_bhb_loop+0x40/0x90 [ 71.054829][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.054855][ T5818] RIP: 0033:0x7f1865f7e9a9 [ 71.054872][ T5818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.054895][ T5818] RSP: 002b:00007f18645e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.054917][ T5818] RAX: ffffffffffffffda RBX: 00007f18661a5fa0 RCX: 00007f1865f7e9a9 [ 71.054982][ T5818] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 71.055061][ T5818] RBP: 00007f18645e7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.055075][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.055090][ T5818] R13: 0000000000000000 R14: 00007f18661a5fa0 R15: 00007fffa20745b8 [ 71.055126][ T5818] [ 71.296319][ T5824] netlink: 168 bytes leftover after parsing attributes in process `syz.2.719'. [ 71.306755][ T5824] loop2: detected capacity change from 0 to 128 [ 71.333245][ T5831] 9pnet: Could not find request transport: tcp޿$GZR9 r3@#hqn [ 71.350641][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 71.361813][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 71.436352][ T5822] lo speed is unknown, defaulting to 1000 [ 71.450985][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 71.454784][ T29] audit: type=1400 audit(1752849053.062:1355): avc: denied { ioctl } for pid=5830 comm="syz.0.721" path="socket:[11631]" dev="sockfs" ino=11631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.562808][ T5845] loop4: detected capacity change from 0 to 512 [ 71.574826][ T5846] loop3: detected capacity change from 0 to 1024 [ 71.582565][ T5845] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 71.612806][ T5845] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.618696][ T5846] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.630181][ T5846] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.630945][ T5845] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.724: Block bitmap for bg 0 marked uninitialized [ 71.656306][ T5845] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 71.666142][ T5845] EXT4-fs (loop4): 1 orphan inode deleted [ 71.675382][ T5845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.691689][ T5846] JBD2: no valid journal superblock found [ 71.697555][ T5846] EXT4-fs (loop3): Could not load journal inode [ 71.743191][ T29] audit: type=1400 audit(1752849053.362:1356): avc: denied { watch watch_reads } for pid=5842 comm="syz.4.724" path="/149/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.785602][ T5846] loop3: detected capacity change from 0 to 1024 [ 71.800100][ T5854] loop2: detected capacity change from 0 to 1024 [ 71.807029][ T5852] loop0: detected capacity change from 0 to 2048 [ 71.816201][ T5858] 9pnet: Could not find request transport: tcp޿$GZR9 r3@#hqnlN [ 71.829569][ T5854] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 71.843912][ T5846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.866571][ T5854] JBD2: no valid journal superblock found [ 71.872379][ T5854] EXT4-fs (loop2): Could not load journal inode [ 71.890861][ T5852] loop0: p1 < > p3 p4 [ 71.896197][ T5852] loop0: p3 start 922746880 is beyond EOD, truncated [ 71.903040][ T5852] loop0: p4 size 8388608 extends beyond EOD, truncated [ 71.936013][ T5846] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.725: Allocating blocks 449-513 which overlap fs metadata [ 71.969976][ T5860] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 71.978298][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 71.988933][ T5844] EXT4-fs (loop3): pa ffff888105755310: logic 48, phys. 177, len 21 [ 71.997048][ T5844] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 72.006515][ T5854] UHID_CREATE from different security context by process 397 (syz.2.727), this is not allowed. [ 72.047933][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.073896][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 72.086087][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.144080][ T29] audit: type=1400 audit(1752849053.762:1357): avc: denied { mounton } for pid=5868 comm="syz.2.733" path="/syzcgroup/net/syz2/cgroup.procs" dev="cgroup" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 72.228568][ T5863] loop0: detected capacity change from 0 to 1024 [ 72.244469][ T5863] EXT4-fs: Ignoring removed orlov option [ 72.251993][ T5863] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 72.275626][ T5863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.292121][ T5863] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.730: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 72.334450][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.386135][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.403991][ T5886] loop3: detected capacity change from 0 to 512 [ 72.434000][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.460505][ T5886] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.461007][ T5895] FAULT_INJECTION: forcing a failure. [ 72.461007][ T5895] name failslab, interval 1, probability 0, space 0, times 0 [ 72.483746][ T5894] loop1: detected capacity change from 0 to 2048 [ 72.490175][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: syz.0.740 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 72.490193][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.490279][ T5895] Call Trace: [ 72.490282][ T5895] [ 72.490287][ T5895] __dump_stack+0x1d/0x30 [ 72.490301][ T5895] dump_stack_lvl+0xe8/0x140 [ 72.490313][ T5895] dump_stack+0x15/0x1b [ 72.490323][ T5895] should_fail_ex+0x265/0x280 [ 72.490393][ T5895] should_failslab+0x8c/0xb0 [ 72.490407][ T5895] kmem_cache_alloc_noprof+0x50/0x310 [ 72.490423][ T5895] ? security_file_alloc+0x32/0x100 [ 72.490454][ T5895] security_file_alloc+0x32/0x100 [ 72.490618][ T5895] init_file+0x5c/0x1d0 [ 72.490632][ T5895] alloc_empty_file+0x8b/0x200 [ 72.490647][ T5895] path_openat+0x68/0x2170 [ 72.490663][ T5895] ? _parse_integer_limit+0x170/0x190 [ 72.490731][ T5895] ? kstrtoull+0x111/0x140 [ 72.490746][ T5895] ? kstrtouint+0x76/0xc0 [ 72.490762][ T5895] do_filp_open+0x109/0x230 [ 72.490885][ T5895] do_sys_openat2+0xa6/0x110 [ 72.490901][ T5895] __x64_sys_openat+0xf2/0x120 [ 72.490918][ T5895] x64_sys_call+0x1af/0x2fb0 [ 72.490931][ T5895] do_syscall_64+0xd2/0x200 [ 72.490943][ T5895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.491027][ T5895] ? clear_bhb_loop+0x40/0x90 [ 72.491040][ T5895] ? clear_bhb_loop+0x40/0x90 [ 72.491053][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.491091][ T5895] RIP: 0033:0x7f1865f7d310 [ 72.491101][ T5895] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 72.491113][ T5895] RSP: 002b:00007f18645e6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 72.491156][ T5895] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1865f7d310 [ 72.491164][ T5895] RDX: 0000000000000002 RSI: 00007f18645e6c10 RDI: 00000000ffffff9c [ 72.491172][ T5895] RBP: 00007f18645e6c10 R08: 0000000000000000 R09: 00007f18645e6987 [ 72.491179][ T5895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 72.491187][ T5895] R13: 0000000000000000 R14: 00007f18661a5fa0 R15: 00007fffa20745b8 [ 72.491251][ T5895] [ 72.740274][ T3497] loop1: p1 < > p3 p4 [ 72.744939][ T3497] loop1: p3 start 922746880 is beyond EOD, truncated [ 72.751746][ T3497] loop1: p4 size 8388608 extends beyond EOD, truncated [ 72.764355][ T5899] netlink: 184 bytes leftover after parsing attributes in process `syz.0.743'. [ 72.771085][ T5894] loop1: p1 < > p3 p4 [ 72.806100][ T5894] loop1: p3 start 922746880 is beyond EOD, truncated [ 72.812945][ T5894] loop1: p4 size 8388608 extends beyond EOD, truncated [ 72.815735][ T5899] lo speed is unknown, defaulting to 1000 [ 72.836304][ T5901] loop0: detected capacity change from 0 to 1024 [ 72.842878][ T5886] Driver unsupported XDP return value 0 on prog (id 518) dev N/A, expect packet loss! [ 72.871475][ T5901] EXT4-fs: Ignoring removed orlov option [ 72.877233][ T5901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.909297][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 72.921381][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 72.937743][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.947631][ T5904] usb usb8: usbfs: process 5904 (syz.1.744) did not claim interface 0 before use [ 72.953804][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 72.959876][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 72.980400][ T5901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.006438][ T5910] FAULT_INJECTION: forcing a failure. [ 73.006438][ T5910] name failslab, interval 1, probability 0, space 0, times 0 [ 73.008803][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 73.019149][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: syz.2.746 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 73.019181][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.019194][ T5910] Call Trace: [ 73.019201][ T5910] [ 73.019210][ T5910] __dump_stack+0x1d/0x30 [ 73.019232][ T5910] dump_stack_lvl+0xe8/0x140 [ 73.019253][ T5910] dump_stack+0x15/0x1b [ 73.019271][ T5910] should_fail_ex+0x265/0x280 [ 73.019305][ T5910] should_failslab+0x8c/0xb0 [ 73.019328][ T5910] kmem_cache_alloc_noprof+0x50/0x310 [ 73.019357][ T5910] ? mas_alloc_nodes+0x265/0x520 [ 73.019384][ T5910] mas_alloc_nodes+0x265/0x520 [ 73.019406][ T5910] mas_preallocate+0x33e/0x520 [ 73.019446][ T5910] __split_vma+0x240/0x650 [ 73.019475][ T5910] ? mas_find+0x4ea/0x610 [ 73.019494][ T5910] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 73.019522][ T5910] mmap_region+0x4ce/0x1580 [ 73.019548][ T5910] ? fixup_exception+0x72e/0xd00 [ 73.019572][ T5910] ? do_user_addr_fault+0xdaf/0x1090 [ 73.019606][ T5910] ? mntput+0x4b/0x80 [ 73.019650][ T5910] do_mmap+0x9b3/0xbe0 [ 73.019686][ T5910] vm_mmap_pgoff+0x17a/0x2e0 [ 73.019718][ T5910] ksys_mmap_pgoff+0x268/0x310 [ 73.019760][ T5910] x64_sys_call+0x1602/0x2fb0 [ 73.019783][ T5910] do_syscall_64+0xd2/0x200 [ 73.019802][ T5910] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.019830][ T5910] ? clear_bhb_loop+0x40/0x90 [ 73.019853][ T5910] ? clear_bhb_loop+0x40/0x90 [ 73.019876][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.019899][ T5910] RIP: 0033:0x7f19f465e9a9 [ 73.019915][ T5910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.019935][ T5910] RSP: 002b:00007f19f2cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 73.019954][ T5910] RAX: ffffffffffffffda RBX: 00007f19f4885fa0 RCX: 00007f19f465e9a9 [ 73.019968][ T5910] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 73.019981][ T5910] RBP: 00007f19f2cbf090 R08: 0000000000000003 R09: 0000000000000000 [ 73.019994][ T5910] R10: 0000000000012011 R11: 0000000000000246 R12: 0000000000000001 [ 73.020007][ T5910] R13: 0000000000000000 R14: 00007f19f4885fa0 R15: 00007ffe88408f28 [ 73.020027][ T5910] [ 73.021584][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 73.280420][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.327930][ T5923] netlink: 100 bytes leftover after parsing attributes in process `syz.3.751'. [ 73.405682][ T5935] loop4: detected capacity change from 0 to 1024 [ 73.423103][ T5935] EXT4-fs: Ignoring removed orlov option [ 73.477773][ T5935] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.532104][ T5935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.568724][ T5935] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.754: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 73.713632][ T5965] Invalid option length (0) for dns_resolver key [ 73.734514][ T5966] loop1: detected capacity change from 0 to 512 [ 73.742464][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.823922][ T5966] EXT4-fs (loop1): too many log groups per flexible block group [ 73.831876][ T5966] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 73.842150][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 73.877304][ T5966] EXT4-fs (loop1): mount failed [ 73.893100][ T5978] loop3: detected capacity change from 0 to 128 [ 73.903237][ T5979] loop4: detected capacity change from 0 to 512 [ 73.934262][ T5978] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 73.942208][ T5978] FAT-fs (loop3): Filesystem has been set read-only [ 73.978451][ T5978] syz.3.764: attempt to access beyond end of device [ 73.978451][ T5978] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 73.994187][ T5978] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.002159][ T5978] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.010682][ T5978] syz.3.764: attempt to access beyond end of device [ 74.010682][ T5978] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 74.024576][ T5978] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.033480][ T5978] syz.3.764: attempt to access beyond end of device [ 74.033480][ T5978] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 74.047496][ T5980] syz.3.764: attempt to access beyond end of device [ 74.047496][ T5980] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 74.060741][ T5980] Buffer I/O error on dev loop3, logical block 2065, async page read [ 74.079448][ T5980] syz.3.764: attempt to access beyond end of device [ 74.079448][ T5980] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 74.092760][ T5978] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.092781][ T5978] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.108475][ T5980] Buffer I/O error on dev loop3, logical block 2066, async page read [ 74.117482][ T5980] syz.3.764: attempt to access beyond end of device [ 74.117482][ T5980] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 74.130776][ T5980] Buffer I/O error on dev loop3, logical block 2067, async page read [ 74.139042][ T5980] syz.3.764: attempt to access beyond end of device [ 74.139042][ T5980] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 74.152279][ T5980] Buffer I/O error on dev loop3, logical block 2068, async page read [ 74.160942][ T5980] syz.3.764: attempt to access beyond end of device [ 74.160942][ T5980] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 74.174117][ T5980] Buffer I/O error on dev loop3, logical block 2069, async page read [ 74.183442][ T5980] syz.3.764: attempt to access beyond end of device [ 74.183442][ T5980] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 74.196746][ T5980] Buffer I/O error on dev loop3, logical block 2070, async page read [ 74.206120][ T5980] Buffer I/O error on dev loop3, logical block 2071, async page read [ 74.214373][ T5980] Buffer I/O error on dev loop3, logical block 2072, async page read [ 74.527211][ T5964] syz.2.761 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 74.538287][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: syz.2.761 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 74.538322][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.538337][ T5964] Call Trace: [ 74.538345][ T5964] [ 74.538354][ T5964] __dump_stack+0x1d/0x30 [ 74.538379][ T5964] dump_stack_lvl+0xe8/0x140 [ 74.538401][ T5964] dump_stack+0x15/0x1b [ 74.538478][ T5964] dump_header+0x81/0x220 [ 74.538533][ T5964] oom_kill_process+0x334/0x3f0 [ 74.538607][ T5964] out_of_memory+0x979/0xb80 [ 74.538641][ T5964] try_charge_memcg+0x5e6/0x9e0 [ 74.538708][ T5964] charge_memcg+0x51/0xc0 [ 74.538825][ T5964] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 74.538861][ T5964] __read_swap_cache_async+0x1df/0x350 [ 74.538897][ T5964] swap_cluster_readahead+0x277/0x3e0 [ 74.538965][ T5964] swapin_readahead+0xde/0x6f0 [ 74.539059][ T5964] ? __filemap_get_folio+0x4f7/0x6b0 [ 74.539099][ T5964] ? swap_cache_get_folio+0x77/0x200 [ 74.539135][ T5964] do_swap_page+0x301/0x2430 [ 74.539215][ T5964] ? css_rstat_updated+0xcd/0x5b0 [ 74.539252][ T5964] ? __pfx_default_wake_function+0x10/0x10 [ 74.539281][ T5964] handle_mm_fault+0x9a5/0x2be0 [ 74.539308][ T5964] ? mas_walk+0xf2/0x120 [ 74.539417][ T5964] do_user_addr_fault+0x636/0x1090 [ 74.539523][ T5964] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 74.539562][ T5964] exc_page_fault+0x62/0xa0 [ 74.539592][ T5964] asm_exc_page_fault+0x26/0x30 [ 74.539665][ T5964] RIP: 0033:0x7f19f4691213 [ 74.539681][ T5964] Code: e5 08 00 48 8d 3d b6 e5 08 00 e8 e8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 74.539701][ T5964] RSP: 002b:00007ffe88409048 EFLAGS: 00010293 [ 74.539766][ T5964] RAX: 00000000fffffffa RBX: 00007f19f4885fa0 RCX: 0000000000000000 [ 74.539779][ T5964] RDX: 00007ffe88409060 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.539807][ T5964] RBP: 00007f19f4887ba0 R08: 000000001d0dcbb2 R09: 7fffffffffffffff [ 74.539820][ T5964] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000012310 [ 74.539833][ T5964] R13: 00007f19f4886080 R14: ffffffffffffffff R15: 00007ffe884091a0 [ 74.539853][ T5964] [ 74.755216][ T5964] memory: usage 307200kB, limit 307200kB, failcnt 223 [ 74.762117][ T5964] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 74.770055][ T5964] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 74.770072][ T5964] Memory cgroup stats for /syz2: [ 74.770471][ T5964] cache 0 [ 74.770480][ T5964] rss 0 [ 74.770487][ T5964] shmem 0 [ 74.770495][ T5964] mapped_file 1576960 [ 74.770503][ T5964] dirty 0 [ 74.770509][ T5964] writeback 0 [ 74.770516][ T5964] workingset_refault_anon 26 [ 74.770524][ T5964] workingset_refault_file 95 [ 74.770539][ T5964] swap 196608 [ 74.770546][ T5964] swapcached 8192 [ 74.770554][ T5964] pgpgin 38139 [ 74.770562][ T5964] pgpgout 38137 [ 74.770576][ T5964] pgfault 52905 [ 74.770584][ T5964] pgmajfault 31 [ 74.770593][ T5964] inactive_anon 8192 [ 74.770601][ T5964] active_anon 0 [ 74.770610][ T5964] inactive_file 0 [ 74.770618][ T5964] active_file 0 [ 74.770626][ T5964] unevictable 0 [ 74.770641][ T5964] hierarchical_memory_limit 314572800 [ 74.770651][ T5964] hierarchical_memsw_limit 9223372036854771712 [ 74.770661][ T5964] total_cache 0 [ 74.770667][ T5964] total_rss 0 [ 74.770674][ T5964] total_shmem 0 [ 74.770680][ T5964] total_mapped_file 1576960 [ 74.770688][ T5964] total_dirty 0 [ 74.770695][ T5964] total_writeback 0 [ 74.770703][ T5964] total_workingset_refault_anon 26 [ 74.770713][ T5964] total_workingset_refault_file 95 [ 74.770728][ T5964] total_swap 196608 [ 74.770736][ T5964] total_swapcached 8192 [ 74.770745][ T5964] total_pgpgin 38139 [ 74.770754][ T5964] total_pgpgout 38137 [ 74.770763][ T5964] total_pgfault 52905 [ 74.770773][ T5964] total_pgmajfault 31 [ 74.770796][ T5964] total_inactive_anon 8192 [ 74.770804][ T5964] total_active_anon 0 [ 74.770811][ T5964] total_inactive_file 0 [ 74.770818][ T5964] total_active_file 0 [ 74.770825][ T5964] total_unevictable 0 [ 74.770833][ T5964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.761,pid=5964,uid=0 [ 74.770949][ T5964] Memory cgroup out of memory: Killed process 5964 (syz.2.761) total-vm:95300kB, anon-rss:944kB, file-rss:23860kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 74.813861][ T5996] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 75.001697][ T5996] netlink: 224 bytes leftover after parsing attributes in process `syz.0.770'. [ 75.018527][ T5965] syz.2.761 (5965) used greatest stack depth: 6952 bytes left [ 75.088866][ T6007] loop3: detected capacity change from 0 to 2048 [ 75.099740][ T6004] loop4: detected capacity change from 0 to 1024 [ 75.107930][ T6004] EXT4-fs: Ignoring removed orlov option [ 75.115861][ T6004] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 75.130072][ T3299] Alternate GPT is invalid, using primary GPT. [ 75.136442][ T3299] loop3: p1 p2 p3 [ 75.148273][ T6004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.163174][ T6004] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.772: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 75.185423][ T6007] Alternate GPT is invalid, using primary GPT. [ 75.191829][ T6007] loop3: p1 p2 p3 [ 75.209299][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 75.209313][ T29] audit: type=1400 audit(1752849056.822:1462): avc: denied { ioctl } for pid=6005 comm="syz.3.774" path="/dev/loop3p2" dev="devtmpfs" ino=1197 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.282428][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.309206][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 75.318148][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 75.344323][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 75.482719][ T29] audit: type=1400 audit(1752849057.092:1463): avc: denied { mount } for pid=6019 comm="syz.1.779" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.505868][ T29] audit: type=1400 audit(1752849057.102:1464): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.811393][ T6036] 9pnet: Could not find request transport: 0xffffffffffffffff [ 75.869599][ T29] audit: type=1326 audit(1752849057.482:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f77a8e9a9 code=0x7ffc0000 [ 75.893179][ T29] audit: type=1326 audit(1752849057.482:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f77a8e9a9 code=0x7ffc0000 [ 75.916767][ T29] audit: type=1326 audit(1752849057.482:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f9f77a8e9a9 code=0x7ffc0000 [ 75.940133][ T29] audit: type=1326 audit(1752849057.482:1468): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f77a8e9a9 code=0x7ffc0000 [ 75.964098][ T29] audit: type=1326 audit(1752849057.482:1469): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f77a8e9a9 code=0x7ffc0000 [ 75.987908][ T29] audit: type=1326 audit(1752849057.482:1470): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f9f77a8e9a9 code=0x7ffc0000 [ 76.011694][ T29] audit: type=1326 audit(1752849057.482:1471): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f77a8e9a9 code=0x7ffc0000 [ 76.022941][ T6039] lo speed is unknown, defaulting to 1000 [ 76.049901][ T6048] loop1: detected capacity change from 0 to 1024 [ 76.061984][ T6048] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.072908][ T6048] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 76.092002][ T6048] JBD2: no valid journal superblock found [ 76.097762][ T6048] EXT4-fs (loop1): Could not load journal inode [ 76.204900][ T6056] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 76.297355][ T6066] serio: Serial port ptm0 [ 76.350525][ T6074] capability: warning: `syz.0.796' uses 32-bit capabilities (legacy support in use) [ 76.410927][ T6078] netlink: 'syz.3.800': attribute type 13 has an invalid length. [ 76.429430][ T6071] lo speed is unknown, defaulting to 1000 [ 76.596274][ T6083] lo speed is unknown, defaulting to 1000 [ 76.879046][ T6106] netlink: 'syz.1.806': attribute type 13 has an invalid length. [ 76.915105][ T6106] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.928986][ T6106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.025098][ T6107] lo speed is unknown, defaulting to 1000 [ 77.262038][ T6127] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 77.270370][ T6127] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 77.531887][ T6145] lo speed is unknown, defaulting to 1000 [ 77.629029][ T6157] lo speed is unknown, defaulting to 1000 [ 77.692050][ T6171] netlink: 5 bytes leftover after parsing attributes in process `syz.2.835'. [ 77.751019][ T6178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6178 comm=syz.4.840 [ 77.912517][ T6200] binfmt_misc: register: failed to install interpreter file ./file2 [ 78.006943][ T6210] ALSA: seq fatal error: cannot create timer (-22) [ 78.019999][ T6214] FAULT_INJECTION: forcing a failure. [ 78.019999][ T6214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.020884][ T6213] lo: entered promiscuous mode [ 78.033203][ T6214] CPU: 0 UID: 0 PID: 6214 Comm: syz.2.855 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 78.033312][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.033326][ T6214] Call Trace: [ 78.033332][ T6214] [ 78.033410][ T6214] __dump_stack+0x1d/0x30 [ 78.033461][ T6214] dump_stack_lvl+0xe8/0x140 [ 78.033483][ T6214] dump_stack+0x15/0x1b [ 78.033501][ T6214] should_fail_ex+0x265/0x280 [ 78.033535][ T6214] should_fail+0xb/0x20 [ 78.033630][ T6214] should_fail_usercopy+0x1a/0x20 [ 78.033690][ T6214] _copy_to_user+0x20/0xa0 [ 78.033739][ T6214] simple_read_from_buffer+0xb5/0x130 [ 78.033827][ T6214] proc_fail_nth_read+0x100/0x140 [ 78.033874][ T6214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.033911][ T6214] vfs_read+0x1a0/0x6f0 [ 78.033945][ T6214] ? __rcu_read_unlock+0x4f/0x70 [ 78.034001][ T6214] ? __fget_files+0x184/0x1c0 [ 78.034023][ T6214] ksys_read+0xda/0x1a0 [ 78.034128][ T6214] __x64_sys_read+0x40/0x50 [ 78.034162][ T6214] x64_sys_call+0x2d77/0x2fb0 [ 78.034187][ T6214] do_syscall_64+0xd2/0x200 [ 78.034207][ T6214] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.034264][ T6214] ? clear_bhb_loop+0x40/0x90 [ 78.034320][ T6214] ? clear_bhb_loop+0x40/0x90 [ 78.034345][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.034369][ T6214] RIP: 0033:0x7f19f465d3bc [ 78.034387][ T6214] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.034462][ T6214] RSP: 002b:00007f19f2cbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.034483][ T6214] RAX: ffffffffffffffda RBX: 00007f19f4885fa0 RCX: 00007f19f465d3bc [ 78.034527][ T6214] RDX: 000000000000000f RSI: 00007f19f2cbf0a0 RDI: 0000000000000004 [ 78.034541][ T6214] RBP: 00007f19f2cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 78.034554][ T6214] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 78.034568][ T6214] R13: 0000000000000000 R14: 00007f19f4885fa0 R15: 00007ffe88408f28 [ 78.034587][ T6214] [ 78.157506][ T6221] SELinux: syz.2.857 (6221) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 78.166345][ T6226] xt_hashlimit: max too large, truncated to 1048576 [ 78.264841][ T6213] tunl0: entered promiscuous mode [ 78.270560][ T6213] gre0: entered promiscuous mode [ 78.285074][ T6226] loop3: detected capacity change from 0 to 512 [ 78.292653][ T6213] gretap0: entered promiscuous mode [ 78.300211][ T6213] erspan0: entered promiscuous mode [ 78.308990][ T6226] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.314940][ T6213] ip_vti0: entered promiscuous mode [ 78.316313][ T6226] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.860: bad orphan inode 13 [ 78.321151][ T6213] ip6_vti0: entered promiscuous mode [ 78.336688][ T6213] sit0: entered promiscuous mode [ 78.343293][ T6213] ip6tnl0: entered promiscuous mode [ 78.349287][ T6213] ip6gre0: entered promiscuous mode [ 78.350202][ T6226] ext4_test_bit(bit=12, block=18) = 1 [ 78.360011][ T6226] is_bad_inode(inode)=0 [ 78.364182][ T6226] NEXT_ORPHAN(inode)=2130706432 [ 78.369105][ T6226] max_ino=32 [ 78.372339][ T6226] i_nlink=1 [ 78.375483][ T6213] ip6gretap0: entered promiscuous mode [ 78.377161][ T6226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.393508][ T6213] bridge0: entered promiscuous mode [ 78.399335][ T6213] vcan0: entered promiscuous mode [ 78.410529][ T6213] team0: entered promiscuous mode [ 78.417465][ T6213] team_slave_0: entered promiscuous mode [ 78.423291][ T6213] team_slave_1: entered promiscuous mode [ 78.423752][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 78.429941][ T6213] dummy0: entered promiscuous mode [ 78.437760][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 78.453217][ T6213] nlmon0: entered promiscuous mode [ 78.458861][ T6226] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 78.468450][ T6213] caif0: entered promiscuous mode [ 78.473659][ T6213] batadv0: entered promiscuous mode [ 78.478973][ T6213] vxcan0: entered promiscuous mode [ 78.484466][ T6213] vxcan1: entered promiscuous mode [ 78.489711][ T6213] veth0: entered promiscuous mode [ 78.494846][ T6213] veth1: entered promiscuous mode [ 78.500337][ T6213] wg0: entered promiscuous mode [ 78.505508][ T6226] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.860: bg 0: block 248: padding at end of block bitmap is not set [ 78.520856][ T6213] wg1: entered promiscuous mode [ 78.525852][ T6213] wg2: entered promiscuous mode [ 78.530976][ T6226] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.860: Failed to acquire dquot type 1 [ 78.531042][ T6213] veth0_to_bridge: entered promiscuous mode [ 78.548409][ T6213] veth1_to_bridge: entered promiscuous mode [ 78.554679][ T6213] veth0_to_bond: entered promiscuous mode [ 78.556492][ T6226] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.560637][ T6213] bond_slave_0: entered promiscuous mode [ 78.581004][ T6213] veth1_to_bond: entered promiscuous mode [ 78.586850][ T6213] bond_slave_1: entered promiscuous mode [ 78.593022][ T6213] veth0_to_team: entered promiscuous mode [ 78.599017][ T6213] veth1_to_team: entered promiscuous mode [ 78.605349][ T6213] veth0_to_batadv: entered promiscuous mode [ 78.611419][ T6213] batadv_slave_0: entered promiscuous mode [ 78.617486][ T6213] veth1_to_batadv: entered promiscuous mode [ 78.623771][ T6213] batadv_slave_1: entered promiscuous mode [ 78.630100][ T6213] xfrm0: entered promiscuous mode [ 78.649858][ T6213] veth0_to_hsr: entered promiscuous mode [ 78.658733][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.668999][ T6213] veth1_to_hsr: entered promiscuous mode [ 78.686941][ T6213] hsr0: entered promiscuous mode [ 78.697576][ T6213] veth1_virt_wifi: entered promiscuous mode [ 78.704845][ T6213] veth0_virt_wifi: entered promiscuous mode [ 78.711556][ T6213] macvtap0: entered promiscuous mode [ 78.717086][ T6213] macsec0: entered promiscuous mode [ 78.723725][ T6213] geneve0: entered promiscuous mode [ 78.729161][ T6213] geneve1: entered promiscuous mode [ 78.734990][ T6213] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 78.754063][ T6213] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 78.761816][ T6213] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 78.778205][ T6213] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 78.791853][ T6213] batadv0.5: entered promiscuous mode [ 78.814439][ T6231] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 78.832089][ T6231] team0: Port device dummy0 added [ 78.869270][ T3497] ================================================================== [ 78.877388][ T3497] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 78.884085][ T3497] [ 78.886409][ T3497] write to 0xffff88810576bc10 of 8 bytes by task 2997 on cpu 0: [ 78.894047][ T3497] __dentry_kill+0x142/0x4b0 [ 78.898639][ T3497] dput+0x5e/0xd0 [ 78.902286][ T3497] step_into+0x5b2/0x820 [ 78.906535][ T3497] walk_component+0x162/0x220 [ 78.911211][ T3497] path_lookupat+0xfe/0x2a0 [ 78.915723][ T3497] filename_lookup+0x2d7/0x340 [ 78.920511][ T3497] do_readlinkat+0x7d/0x320 [ 78.925037][ T3497] __x64_sys_readlink+0x47/0x60 [ 78.929908][ T3497] x64_sys_call+0x2cf3/0x2fb0 [ 78.934594][ T3497] do_syscall_64+0xd2/0x200 [ 78.939195][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.945100][ T3497] [ 78.947415][ T3497] read to 0xffff88810576bc10 of 8 bytes by task 3497 on cpu 1: [ 78.954992][ T3497] fast_dput+0x5f/0x2c0 [ 78.959145][ T3497] dput+0x24/0xd0 [ 78.962954][ T3497] do_unlinkat+0x299/0x4c0 [ 78.967375][ T3497] __x64_sys_unlink+0x2e/0x40 [ 78.972204][ T3497] x64_sys_call+0x22a6/0x2fb0 [ 78.976881][ T3497] do_syscall_64+0xd2/0x200 [ 78.981391][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.987291][ T3497] [ 78.989607][ T3497] value changed: 0xffff888237a64088 -> 0x0000000000000000 [ 78.996711][ T3497] [ 78.999037][ T3497] Reported by Kernel Concurrency Sanitizer on: [ 79.005184][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: udevd Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 79.017170][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.027247][ T3497] ================================================================== [ 79.068034][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.870'. [ 79.088352][ T6251] sd 0:0:1:0: device reset