last executing test programs: 2.939659946s ago: executing program 3 (id=2073): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x51e, &(0x7f0000001e80)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 2.506110552s ago: executing program 1 (id=2083): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) mkdir(0x0, 0x6) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x7, &(0x7f0000000080)=0xa) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x401]}, &(0x7f0000000040), 0x8) 2.304772696s ago: executing program 3 (id=2088): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 1.954533401s ago: executing program 3 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='mm_vmscan_lru_isolate\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) r3 = socket$kcm(0x10, 0x2, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000100)="4d2e2e7c8bd8018d531b71", 0xb}], 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) syz_emit_ethernet(0xe2, &(0x7f0000000280)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa8, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @remote, @private1, [@dstopts={0x2c, 0xd, '\x00', [@generic={0x0, 0x32, "d7897ecdf7133b3e03ab65762dcf02a95b38f5f35b434e6b81725b3d3973928969b768c9410e28bdcd980653a292d702b12e"}, @generic={0x0, 0x1b, "eb4422a287b5b723e69524086158beaf54180a3224d73d99edb3f5"}, @jumbo, @hao={0xc9, 0x10, @mcast1}, @jumbo]}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.894921042s ago: executing program 3 (id=2094): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000150000003d36", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000200000000"], 0x48) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18004ca701000000000008000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c844, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x20) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x2c}}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000001780)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000001680)=""/163, 0xa3}, {&(0x7f0000001740)=""/4, 0x4}, {&(0x7f0000003940)=""/4096, 0x1000}], 0x7, &(0x7f0000001800)=""/128, 0x80}, 0x3ff}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004940)=""/148, 0x94}, {&(0x7f0000001880)=""/4, 0x4}], 0x2, &(0x7f0000004a40)=""/29, 0x1d}, 0x2e}, {{&(0x7f0000004a80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004b00)=""/58, 0x3a}, {&(0x7f0000004b40)=""/3, 0x3}, {&(0x7f0000004b80)=""/11, 0xb}, {&(0x7f0000004bc0)=""/228, 0xe4}, {&(0x7f0000004cc0)=""/237, 0xed}], 0x5, &(0x7f0000004e40)=""/107, 0x6b}, 0x4}], 0x4, 0x2040, 0x0) setrlimit(0x9, &(0x7f0000000180)={0x9, 0x7fffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) unshare(0x28020100) socket$nl_netfilter(0x10, 0x3, 0xc) 1.890060542s ago: executing program 0 (id=2097): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r0, 0x2004, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000380)=0x80000000, 0x4) mq_notify(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x17, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) 1.674727015s ago: executing program 2 (id=2101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}, 0x1c) creat(0x0, 0x9c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x1, 0x7fff7ffd}]}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.580180427s ago: executing program 0 (id=2102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r3, 0x0, 0x478) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x18) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.459417188s ago: executing program 1 (id=2103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r3, 0x0, 0x478) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x18) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 962.186306ms ago: executing program 1 (id=2104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x7}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 961.545156ms ago: executing program 2 (id=2105): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe, 0x3ff}}, './file0\x00'}) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) socket$inet(0x2, 0xa, 0x94645b90) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 958.662856ms ago: executing program 3 (id=2106): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x2, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x1, 0x52e, &(0x7f0000000600)="$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") 837.291078ms ago: executing program 2 (id=2108): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) socket$kcm(0x29, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x2, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0xbf, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x201, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0xb4, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 836.060528ms ago: executing program 1 (id=2109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r2, 0x0, 0x478) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x18) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 798.748928ms ago: executing program 3 (id=2111): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x415}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) 757.463169ms ago: executing program 0 (id=2112): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 719.24515ms ago: executing program 0 (id=2114): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, 0x0) 718.211999ms ago: executing program 2 (id=2115): syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x2d8, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x865}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x262}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb87}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3000000}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6a7}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9d, 0x3, "00d3bc6963724aadf9ba3e2d76a2c2fc8bd2f4527d75fc14e0701a8851cc67c030b7f37465b2fc35fbc81f5372480c31af9d50ceb3540586ec6ba3667dff088fc608d609925f33c753d3a3c78d707a226d02515507ab26a1d32e2937eeea3a8ae01839412589faf2488ad8d2815a8326259209004ed6571f48edca88c0949e47939ee5cde4e23c49e40abe7567343fdff3b253f83ab6000000"}, @TIPC_NLA_NODE_ID={0xca, 0x3, "d97900bf07f4400ced04abe3c47a29767a1612186d373c67f14fa08ef9bbd9da78ac47cac65f4d34cb296038cc3fadb01d2aaa6fd59dfd59c6f962fc707f996693700ae1752425fdfe835d36d327369f14427eb95d951d7c5c26f38ffd9b86fb9256dd4a3426c8a27c227992d77e0eba0a6d3ab9edb9eaad5889054aaca3e945d3f8180e74dbb1fdc188359837c502771ff945ce1a2f4dea644f86c92f34581f6b14e736585a0618d00210729f39fe25d91b74d20185c88ab4fe57b1c18d765442026c6609db"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x1}, 0x844) write$tun(0xffffffffffffffff, 0x0, 0x82) 617.046411ms ago: executing program 0 (id=2116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r3, 0x0, 0x478) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x18) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 560.951072ms ago: executing program 1 (id=2119): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 449.764263ms ago: executing program 1 (id=2120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7f9b, 0x40, &(0x7f00000004c0)="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", 0xfc, 0x7, 0xffff, 0x0, 0x7, 0x3, &(0x7f00000005c0)="3a292ef5b9323525a53226e554c298ce96b39314fb92917707f4560e3f87da9bf9742f5db009ce6bd7edf40c5e99c5af83ecf8426851898bca2e4087db71d14b5edbc3d30a56670165f0af33d35d805a93d20f66bbbf9817b5fea6322a9b7f0316d3310ff23a28bc2083b74c176c60f1485f8904"}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@delchain={0x9ec, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x9c0, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x14, 0x1, 0x7}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0xb, 0x7f, 0x80, 0xbf, 0x0, 0x486d, 0x8000, 0x7, 0x3, 0x81, 0x0, 0x400, 0xfffffffb, 0xbb, 0x7, 0x5, 0x7fff, 0xffffffff, 0x38b, 0x1000000, 0x5, 0x40, 0xc, 0x4d, 0x7ff, 0x4, 0x7, 0x9, 0x80000001, 0x3, 0x2, 0x3, 0x93fb, 0x4, 0x7, 0x3, 0x71828161, 0x3, 0x400, 0x0, 0x3, 0xde, 0x65a, 0x1000000, 0x1000, 0x6, 0x2, 0x8829, 0x401, 0x0, 0x9, 0xac, 0xfffffff7, 0x6, 0x3, 0x800000, 0x7, 0x7fffffff, 0xfffffff7, 0x2, 0x9, 0x5, 0x70, 0xff, 0x8, 0x5, 0x2d, 0x101, 0x1000, 0xfffffffe, 0x3, 0x7f2, 0x9, 0x8, 0xa, 0x80000002, 0x4, 0x3, 0x0, 0x7, 0x800, 0xa09, 0x6, 0x9, 0x8, 0x0, 0x401, 0x9, 0xd, 0x4, 0x2c1c, 0x10000, 0xe73, 0x3, 0x2, 0x10001, 0x3, 0x0, 0x8, 0x8, 0x200, 0xfffffff8, 0xd8, 0x9, 0x80000001, 0x2, 0x0, 0x5, 0x571f, 0x2, 0xffff1a3f, 0x4b, 0x5, 0x422, 0x9a31, 0x1c00000, 0xb, 0x4, 0x9, 0x0, 0x2, 0x7, 0x1, 0x3, 0xfffffb97, 0x9, 0x6, 0x2, 0xb8bd, 0x9, 0x0, 0x10, 0x9, 0x400, 0x1000, 0x4, 0x7, 0x3, 0x61, 0x3, 0x3a8, 0x0, 0x7, 0xd, 0x9, 0x7f, 0x8, 0x100, 0x7, 0x9, 0x3, 0x3, 0x6, 0x5, 0x5, 0x3, 0x8, 0xfffffff7, 0x1e544b44, 0x3, 0x1f8a, 0x0, 0x1, 0x1, 0x6, 0x100, 0x9, 0x4ef05d09, 0x8, 0xfffffff8, 0xbe3, 0x2f7, 0x80000000, 0x400, 0xc9f1, 0x9, 0x5, 0x1, 0x7, 0x5, 0xb, 0x9, 0x7, 0x800, 0x6, 0x7, 0x0, 0x8c, 0x3, 0x1, 0xfffffffa, 0x3, 0x7, 0x7, 0x0, 0x400, 0xde9c, 0xfffffffe, 0x9, 0xffff7fff, 0x9, 0x10000, 0xa1d, 0x1, 0x9, 0x3, 0x7, 0x6, 0x401, 0x1, 0x3, 0x8000, 0x1, 0xffffff01, 0x4, 0x8, 0x7bc, 0x3, 0x7, 0x9, 0x3ff, 0x0, 0x1, 0xfff, 0x8, 0x3, 0x1, 0x5, 0x7, 0xfffffff3, 0xe, 0x7fff, 0x8, 0x479, 0xfffffff7, 0x7, 0x9, 0x0, 0x1, 0x40, 0x0, 0x7, 0x7fff, 0x7, 0x7, 0x0, 0x800003, 0x8, 0x9, 0x8, 0x7, 0x4, 0x7, 0x9]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x7, 0x8f, 0x1, 0xfff}, {0x4, 0x0, 0x4, 0x9}, {0x0, 0xe9, 0x4, 0x81}, {0x100, 0x81, 0x6, 0x6}, {0x6, 0x10, 0xb, 0x3ff}, {0xf, 0x1, 0x1, 0x8}, {0x101, 0x0, 0x2, 0x549}, {0x7f, 0x3, 0x0, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x3}}, @TCA_BPF_ACT={0x164, 0x1, [@m_mirred={0xe8, 0x5, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x8, 0x3, 0xf, 0x80000000}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x19, 0x10000000, 0xc96, 0x9c99}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1a5, 0xff, 0x10000000, 0x49a, 0xdd3}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xda, 0x7, 0x1, 0x10001, 0x8}, 0x2, r5}}]}, {0x39, 0x6, "dce5abc8fe071d9bf4ab3744c8478727f3e67f8bfa952f10f205e1754020ea6853fbc1a932bf5c92faeb95f928d09d089201f01547"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x78, 0x10, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x34, 0x6, "8e8e1b8b0a74ea06675c5bce512a917fd2899ac07eb5bda8a366bd4ff73805e9292247771d69f528090391eca481202a"}, {0xc, 0x7, {0xf33c23f9d13067d5}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x9, 0xd0, 0x3, 0x7}, {0xc6, 0x49, 0x5, 0xf38}, {0x4, 0x3, 0xab, 0x1}, {0x1, 0x5, 0xf8, 0xff}, {0x5, 0x3, 0x0, 0x5b88}, {0xd36d, 0x6, 0x1, 0x2}]}}, @TCA_BPF_ACT={0x398, 0x1, [@m_mpls={0x148, 0x17, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x80f3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0xa3, 0x0, 0x1, 0xa033}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f8}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9200}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6004}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0x401, 0x6, 0x1ca8, 0x6}, 0x5}}]}, {0xb3, 0x6, "e247f59379fce8ecf41197bf97b99345fff4fac001ae89629d89ba321837445ed10befd2098812e2aadbbba19460a1d50fde47414741d01e90d2af93b18cf34857e4f0238f1f76144f9d28247ccabf4667421964b9353b7df402e3f2c1c971f76fa984177a65735bb3e42a28e3bfda745d5174adfef36f3837073ccd6775f343f8fb3b0866d211fb82eb5b43f508e9b10cac611a105613261855fe20da036c561d5ed6f87757d68660a79d107978e3"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mpls={0x130, 0x19, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x2, 0x7fffffff, 0xa}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0xc7, 0x6, "151c29acb5d7d22788a01edfac2bc0112c1ec7e3359efea582899a58e64b6bd8177a3a941a11ad5b295a0cd9e97d8b905aa5b2671f57f69214e390dc9eb686bb8bed8aaa943af86e2e11dcc9dfee6953b740e176fa9b8cb361487d32251fe6b83a46505f64ca7e6367af26a7def978a8419a8d8cadcad24e192bede2358218822d7aeeef1773c99d923ebb5bf58d6a1335d11dd0de60826cc043d4c3faefb4110a1c506d6b10dabee7a3a29b62a83e11e32ff51bca1c1b46f968597198798679196d8d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x6c, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x35, 0x6, "edae53a2cb9b2a260a09a42781989a7c66331fd4587a2d7fb1546da4ff925120302c507adf938140707a14f20f18c8e399"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xb0, 0xc, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x2, 0x2, 0xfffffffe, 0x401}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x166}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x800, 0x7, 0x3, 0x4}, 0x2}}]}, {0x29, 0x6, "280871a1afa973a2d2af56a284e2ac46bb074c487e672ec8019091b6065ec92d05889532e9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x9ec}, 0x1, 0x0, 0x0, 0x4008845}, 0x4010) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x80000000}]) 449.129093ms ago: executing program 2 (id=2121): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r0, 0x2004, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000380)=0x80000000, 0x4) mq_notify(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x17, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) 448.431383ms ago: executing program 4 (id=2122): r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 424.457924ms ago: executing program 4 (id=2123): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8932, &(0x7f00000000c0)={'syz_tun\x00', @random='\x00\x00 \x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$ptp(r1, &(0x7f0000000300)=""/80, 0x50) 360.472525ms ago: executing program 4 (id=2124): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, r3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0x200000000000010) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) signalfd4(r9, &(0x7f0000000000)={[0x5]}, 0x8, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r5, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="4b85999e6d235037f2a99f1336084ec58c40cc111cace6beecdd3aab22a6d72ddf7eb5f49a57f40e085359fd3bc00d5c15835450c3169e2a42f0d573d0477584ee82854a773d00716f1f5f0912e39997d0e2efe8b5baa274a632584b25cd99def42b7438acda004e7ed7dd5e3408f596b50f78a5", 0x74}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04f036e1cad18cfd54373e338c0ec5750febba6ed7f5a1e81417f5be8249093c443afb6e079a8ce69be87a7a2f90add956a8b55369b2352ae2f55f14e97cd13433dff904f47555579ae4e4cbbe2961e085b9ac40d001c87836d6347ee59dc5c95927728172"], 0x14}}, 0x0) socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000080)='./bus\x00', 0x0) 232.203557ms ago: executing program 4 (id=2125): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 114.246689ms ago: executing program 4 (id=2126): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, 0x0) 98.785669ms ago: executing program 0 (id=2127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000e20000000000009a6462e8fa5318", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000000a00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='dlm_lock_end\x00', r1, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x3, 0x9, {{0x9, 0x4, 0x1, 0x1d, 0x24, 0x67, 0x0, 0x7, 0x2b, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x8, 0x66, 0x0, 0x1, [0x1]}, @ssrr={0x89, 0x7, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xfffffffc, 0x1000, 0x0, 0x10200, r0, 0x2, '\x00', r6, r5, 0x1, 0x5, 0x2, 0x3, @void, @value, @value=r5}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x189002, 0x181) write(r7, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0xc, 0x0, 0xc}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x1c8, 0xd0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @remote}, [0xffffffff, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'syz_tun\x00', 'dummy0\x00', {}, {}, 0x70, 0x5c, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1b, 0x9, 0xfff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendfile(r7, r5, 0x0, 0x3ffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) sendfile(r7, r5, 0x0, 0x7ffff000) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x4) 36.57079ms ago: executing program 2 (id=2128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01800000000000000000010000000000004101"], 0x28}}, 0x40000) sendmsg$SMC_PNETID_ADD(r4, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) timerfd_create(0x7, 0x800) write$P9_RVERSION(r1, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000013020000000100002000000000000000000000715cc4ef3f000e8c2644e9f684be863380f7f520346f6108833cecb2c1522ddf8a9a2651b7c057582f8c6bc3baac1431c5b25b450a7f2fc9078fc0f0e8a5e07cdc40af15bf6a9054b168ad08a4246ab9cbb98b69d3cfefdf0e0dbcf68c55c13e4ea06802e211550b7861dfdad703226989"], &(0x7f0000000080)=""/233, 0x32, 0xe9, 0x9}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=2129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x9d15}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}]}, 0x50}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20008841}, 0x80) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000004060102000000000000ed00010000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0xfffe, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x60408c0}, 0x4008052) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.348956][ T8114] RSP: 002b:00007ffa0813f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 152.348975][ T8114] RAX: ffffffffffffffda RBX: 00007ffa09d05fa0 RCX: 00007ffa09ade9a9 [ 152.348987][ T8114] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffffff [ 152.349013][ T8114] RBP: 00007ffa0813f090 R08: 0000000000000000 R09: 0000000000000000 [ 152.349050][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.349064][ T8114] R13: 0000000000000000 R14: 00007ffa09d05fa0 R15: 00007ffcfe2e9ad8 [ 152.349085][ T8114] [ 152.630777][ T8122] loop1: detected capacity change from 0 to 1024 [ 152.638561][ T8120] loop2: detected capacity change from 0 to 512 [ 152.666959][ T8120] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.668833][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 152.688530][ T8122] EXT4-fs: Ignoring removed nobh option [ 152.694219][ T8122] EXT4-fs: inline encryption not supported [ 152.721261][ T8120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.787044][ T8120] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.787670][ T8122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.809715][ T8133] smc: net device bond0 applied user defined pnetid SYZ0 [ 152.826902][ T8133] smc: net device bond0 erased user defined pnetid SYZ0 [ 152.831385][ T8122] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1502: Allocating blocks 385-513 which overlap fs metadata [ 152.863044][ T8136] netlink: 'syz.4.1506': attribute type 4 has an invalid length. [ 152.929723][ T8121] EXT4-fs (loop1): pa ffff888106ab2e70: logic 16, phys. 129, len 24 [ 152.937917][ T8121] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 152.951660][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 152.960669][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 152.986145][ T8140] lo speed is unknown, defaulting to 1000 [ 153.012815][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 153.045874][ T8146] loop2: detected capacity change from 0 to 256 [ 153.105555][ T8146] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.130102][ T8146] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 153.138851][ T8146] FAT-fs (loop2): Filesystem has been set read-only [ 153.254611][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'. [ 153.267831][ T8158] loop0: detected capacity change from 0 to 1024 [ 153.302804][ T8158] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 153.438655][ T8158] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 153.456776][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 153.456794][ T29] audit: type=1400 audit(1752827959.394:4933): avc: denied { create } for pid=8145 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.499471][ T29] audit: type=1400 audit(1752827959.432:4934): avc: denied { ioctl } for pid=8163 comm="syz.1.1516" path="socket:[22804]" dev="sockfs" ino=22804 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.524394][ T29] audit: type=1400 audit(1752827959.432:4935): avc: denied { name_bind } for pid=8163 comm="syz.1.1516" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 153.546125][ T29] audit: type=1400 audit(1752827959.432:4936): avc: denied { node_bind } for pid=8163 comm="syz.1.1516" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 153.591577][ T29] audit: type=1400 audit(1752827959.525:4937): avc: denied { map } for pid=8151 comm="syz.0.1512" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.615977][ T29] audit: type=1400 audit(1752827959.525:4938): avc: denied { read write } for pid=8151 comm="syz.0.1512" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.933735][ T29] audit: type=1400 audit(1752827959.581:4939): avc: denied { sqpoll } for pid=8155 comm="syz.3.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 153.953100][ T29] audit: type=1400 audit(1752827959.797:4940): avc: denied { write } for pid=8168 comm="syz.4.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.955974][ T8173] loop2: detected capacity change from 0 to 1024 [ 153.973526][ T29] audit: type=1400 audit(1752827959.797:4941): avc: denied { read } for pid=8168 comm="syz.4.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.000246][ T29] audit: type=1400 audit(1752827959.797:4942): avc: denied { read } for pid=8168 comm="syz.4.1517" dev="nsfs" ino=4026532594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.014471][ T8172] xt_connbytes: Forcing CT accounting to be enabled [ 154.025148][ T8173] EXT4-fs: Ignoring removed nobh option [ 154.033797][ T8173] EXT4-fs: inline encryption not supported [ 154.037484][ T8172] set match dimension is over the limit! [ 154.072284][ T8172] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 154.080251][ T8172] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1519'. [ 154.118346][ T8173] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1518: Allocating blocks 385-513 which overlap fs metadata [ 154.198604][ T8171] EXT4-fs (loop2): pa ffff888106ab2e70: logic 16, phys. 129, len 24 [ 154.206719][ T8171] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 154.291175][ T8184] random: crng reseeded on system resumption [ 154.311524][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1520'. [ 154.315833][ T8184] Restarting kernel threads ... [ 154.325682][ T8184] Done restarting kernel threads. [ 154.331193][ T8181] loop0: detected capacity change from 0 to 512 [ 154.418379][ T8181] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.432937][ T8194] netlink: 'syz.2.1525': attribute type 4 has an invalid length. [ 154.448169][ T8193] loop3: detected capacity change from 0 to 2048 [ 154.477019][ T8181] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.520503][ T8193] vlan2: entered promiscuous mode [ 154.525604][ T8193] team0: entered promiscuous mode [ 154.533105][ T8193] team_slave_0: entered promiscuous mode [ 154.539116][ T8193] team_slave_1: entered promiscuous mode [ 154.573261][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 154.592999][ T8208] loop0: detected capacity change from 0 to 256 [ 154.605253][ T8211] loop1: detected capacity change from 0 to 512 [ 154.612420][ T8211] ext4: Unknown parameter 'nouser_xattr' [ 154.619716][ T8208] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.647817][ T8208] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 154.656535][ T8208] FAT-fs (loop0): Filesystem has been set read-only [ 154.826885][ T8220] random: crng reseeded on system resumption [ 154.854421][ T8220] Restarting kernel threads ... [ 154.859601][ T8220] Done restarting kernel threads. [ 155.143221][ T8227] FAULT_INJECTION: forcing a failure. [ 155.143221][ T8227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.156416][ T8227] CPU: 1 UID: 0 PID: 8227 Comm: syz.0.1536 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 155.156454][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.156475][ T8227] Call Trace: [ 155.156483][ T8227] [ 155.156492][ T8227] __dump_stack+0x1d/0x30 [ 155.156519][ T8227] dump_stack_lvl+0xe8/0x140 [ 155.156555][ T8227] dump_stack+0x15/0x1b [ 155.156573][ T8227] should_fail_ex+0x265/0x280 [ 155.156645][ T8227] should_fail+0xb/0x20 [ 155.156677][ T8227] should_fail_usercopy+0x1a/0x20 [ 155.156716][ T8227] _copy_from_iter+0xcf/0xe40 [ 155.156874][ T8227] ? __build_skb_around+0x1a0/0x200 [ 155.156913][ T8227] ? __alloc_skb+0x223/0x320 [ 155.157019][ T8227] netlink_sendmsg+0x471/0x6b0 [ 155.157067][ T8227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.157087][ T8227] __sock_sendmsg+0x145/0x180 [ 155.157235][ T8227] ____sys_sendmsg+0x31e/0x4e0 [ 155.157285][ T8227] ___sys_sendmsg+0x17b/0x1d0 [ 155.157345][ T8227] __x64_sys_sendmsg+0xd4/0x160 [ 155.157415][ T8227] x64_sys_call+0x2999/0x2fb0 [ 155.157438][ T8227] do_syscall_64+0xd2/0x200 [ 155.157573][ T8227] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 155.157681][ T8227] ? clear_bhb_loop+0x40/0x90 [ 155.157774][ T8227] ? clear_bhb_loop+0x40/0x90 [ 155.157855][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.157883][ T8227] RIP: 0033:0x7ffa09ade9a9 [ 155.157960][ T8227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.157979][ T8227] RSP: 002b:00007ffa0813f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.158000][ T8227] RAX: ffffffffffffffda RBX: 00007ffa09d05fa0 RCX: 00007ffa09ade9a9 [ 155.158016][ T8227] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 155.158044][ T8227] RBP: 00007ffa0813f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.158057][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.158070][ T8227] R13: 0000000000000000 R14: 00007ffa09d05fa0 R15: 00007ffcfe2e9ad8 [ 155.158135][ T8227] [ 155.419493][ T8231] loop0: detected capacity change from 0 to 512 [ 155.430592][ T8231] ext4: Unknown parameter 'nouser_xattr' [ 155.577892][ T8236] loop2: detected capacity change from 0 to 512 [ 155.595985][ T8236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.717563][ T8247] netlink: 'syz.1.1544': attribute type 6 has an invalid length. [ 155.745952][ T8246] Process accounting resumed [ 155.768118][ T8250] random: crng reseeded on system resumption [ 155.770878][ T8236] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.781213][ T8250] Restarting kernel threads ... [ 155.789681][ T8250] Done restarting kernel threads. [ 155.824785][ T8254] smc: net device bond0 applied user defined pnetid SYZ0 [ 155.832946][ T8254] smc: net device bond0 erased user defined pnetid SYZ0 [ 155.844207][ T8248] lo speed is unknown, defaulting to 1000 [ 155.955440][ T8262] loop2: detected capacity change from 0 to 512 [ 155.962919][ T8262] ext4: Unknown parameter 'nouser_xattr' [ 155.974296][ T8269] netlink: 'syz.4.1554': attribute type 7 has an invalid length. [ 156.143681][ T8277] loop0: detected capacity change from 0 to 2048 [ 156.209973][ T4306] loop0: p1 < > p4 [ 156.216953][ T4306] loop0: p4 size 8388608 extends beyond EOD, truncated [ 156.231703][ T8277] loop0: p1 < > p4 [ 156.237920][ T8277] loop0: p4 size 8388608 extends beyond EOD, truncated [ 156.317507][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 156.328691][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 156.373119][ T8285] smc: net device bond0 applied user defined pnetid SYZ0 [ 156.385015][ T8285] smc: net device bond0 erased user defined pnetid SYZ0 [ 156.446268][ T8287] loop2: detected capacity change from 0 to 1024 [ 156.470280][ T8287] EXT4-fs: Ignoring removed nobh option [ 156.475984][ T8287] EXT4-fs: inline encryption not supported [ 156.506610][ T8287] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1561: Allocating blocks 385-513 which overlap fs metadata [ 156.629080][ T8286] EXT4-fs (loop2): pa ffff888106ab2ee0: logic 16, phys. 129, len 24 [ 156.637186][ T8286] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 156.742670][ T8302] serio: Serial port ptm0 [ 156.761049][ T8304] random: crng reseeded on system resumption [ 156.792413][ T8304] Restarting kernel threads ... [ 156.797588][ T8304] Done restarting kernel threads. [ 157.029306][ T8313] FAULT_INJECTION: forcing a failure. [ 157.029306][ T8313] name failslab, interval 1, probability 0, space 0, times 0 [ 157.042155][ T8313] CPU: 0 UID: 0 PID: 8313 Comm: syz.1.1569 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 157.042198][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.042273][ T8313] Call Trace: [ 157.042282][ T8313] [ 157.042292][ T8313] __dump_stack+0x1d/0x30 [ 157.042338][ T8313] dump_stack_lvl+0xe8/0x140 [ 157.042365][ T8313] dump_stack+0x15/0x1b [ 157.042387][ T8313] should_fail_ex+0x265/0x280 [ 157.042476][ T8313] ? audit_log_d_path+0x8d/0x150 [ 157.042508][ T8313] should_failslab+0x8c/0xb0 [ 157.042538][ T8313] __kmalloc_cache_noprof+0x4c/0x320 [ 157.042576][ T8313] audit_log_d_path+0x8d/0x150 [ 157.042626][ T8313] audit_log_d_path_exe+0x42/0x70 [ 157.042662][ T8313] audit_log_task+0x1e9/0x250 [ 157.042695][ T8313] audit_seccomp+0x61/0x100 [ 157.042721][ T8313] ? __seccomp_filter+0x68c/0x10d0 [ 157.042743][ T8313] __seccomp_filter+0x69d/0x10d0 [ 157.042790][ T8313] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.042825][ T8313] ? vfs_write+0x75e/0x8e0 [ 157.042858][ T8313] ? __rcu_read_unlock+0x4f/0x70 [ 157.042950][ T8313] ? __fget_files+0x184/0x1c0 [ 157.042972][ T8313] __secure_computing+0x82/0x150 [ 157.042994][ T8313] syscall_trace_enter+0xcf/0x1e0 [ 157.043079][ T8313] do_syscall_64+0xac/0x200 [ 157.043098][ T8313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.043128][ T8313] ? clear_bhb_loop+0x40/0x90 [ 157.043157][ T8313] ? clear_bhb_loop+0x40/0x90 [ 157.043217][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.043239][ T8313] RIP: 0033:0x7f92a18be9a9 [ 157.043255][ T8313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.043277][ T8313] RSP: 002b:00007f929ff27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 157.043352][ T8313] RAX: ffffffffffffffda RBX: 00007f92a1ae5fa0 RCX: 00007f92a18be9a9 [ 157.043367][ T8313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 157.043379][ T8313] RBP: 00007f929ff27090 R08: 0000000000000000 R09: 0000000000000000 [ 157.043391][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.043403][ T8313] R13: 0000000000000000 R14: 00007f92a1ae5fa0 R15: 00007ffc09d4ba78 [ 157.043430][ T8313] [ 157.408448][ T8299] syz.0.1563 (8299) used greatest stack depth: 9032 bytes left [ 157.423259][ T8315] loop1: detected capacity change from 0 to 512 [ 157.439344][ T8315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.510742][ T8315] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.698378][ T8322] loop2: detected capacity change from 0 to 512 [ 157.717455][ T8291] syz.0.1563 (8291) used greatest stack depth: 5824 bytes left [ 157.731451][ T8322] ext4: Unknown parameter 'nouser_xattr' [ 157.780072][ T8326] siw: device registration error -23 [ 157.843123][ T8324] loop1: detected capacity change from 0 to 512 [ 157.858171][ T8324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.884796][ T8328] loop0: detected capacity change from 0 to 128 [ 157.885016][ T8329] __nla_validate_parse: 5 callbacks suppressed [ 157.885037][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'. [ 157.912475][ T8324] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.932116][ T8335] random: crng reseeded on system resumption [ 157.936758][ T8328] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.959672][ T8335] Restarting kernel threads ... [ 157.964982][ T8335] Done restarting kernel threads. [ 157.995745][ T8339] loop3: detected capacity change from 0 to 1024 [ 158.002696][ T8339] EXT4-fs: Ignoring removed orlov option [ 158.063604][ T8339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1577'. [ 158.087209][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'. [ 158.154667][ T8348] netlink: 'syz.3.1580': attribute type 7 has an invalid length. [ 158.174531][ T8350] netlink: 'syz.1.1579': attribute type 4 has an invalid length. [ 158.212712][ T8355] random: crng reseeded on system resumption [ 158.232981][ T8355] Restarting kernel threads ... [ 158.238529][ T8355] Done restarting kernel threads. [ 158.248222][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 158.257324][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 158.266308][ T8353] loop2: detected capacity change from 0 to 512 [ 158.282930][ T8353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.302009][ T8353] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.330278][ T8361] No such timeout policy "syz0" [ 158.346216][ T8363] FAULT_INJECTION: forcing a failure. [ 158.346216][ T8363] name failslab, interval 1, probability 0, space 0, times 0 [ 158.358914][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.3.1585 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 158.359013][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.359075][ T8363] Call Trace: [ 158.359082][ T8363] [ 158.359090][ T8363] __dump_stack+0x1d/0x30 [ 158.359118][ T8363] dump_stack_lvl+0xe8/0x140 [ 158.359144][ T8363] dump_stack+0x15/0x1b [ 158.359166][ T8363] should_fail_ex+0x265/0x280 [ 158.359275][ T8363] should_failslab+0x8c/0xb0 [ 158.359306][ T8363] __kvmalloc_node_noprof+0x123/0x4e0 [ 158.359426][ T8363] ? xt_alloc_table_info+0x3b/0x80 [ 158.359469][ T8363] ? should_fail_ex+0xdb/0x280 [ 158.359556][ T8363] xt_alloc_table_info+0x3b/0x80 [ 158.359599][ T8363] do_ip6t_set_ctl+0x5a5/0x840 [ 158.359646][ T8363] ? kstrtoull+0x111/0x140 [ 158.359682][ T8363] ? __rcu_read_unlock+0x4f/0x70 [ 158.359730][ T8363] nf_setsockopt+0x196/0x1b0 [ 158.359756][ T8363] ipv6_setsockopt+0x11a/0x130 [ 158.359781][ T8363] tcp_setsockopt+0x95/0xb0 [ 158.359849][ T8363] sock_common_setsockopt+0x69/0x80 [ 158.359919][ T8363] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 158.359947][ T8363] __sys_setsockopt+0x184/0x200 [ 158.360028][ T8363] __x64_sys_setsockopt+0x64/0x80 [ 158.360069][ T8363] x64_sys_call+0x2bd5/0x2fb0 [ 158.360098][ T8363] do_syscall_64+0xd2/0x200 [ 158.360173][ T8363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.360258][ T8363] ? clear_bhb_loop+0x40/0x90 [ 158.360288][ T8363] ? clear_bhb_loop+0x40/0x90 [ 158.360332][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.360361][ T8363] RIP: 0033:0x7f432dbee9a9 [ 158.360425][ T8363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.360450][ T8363] RSP: 002b:00007f432c24f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.360475][ T8363] RAX: ffffffffffffffda RBX: 00007f432de15fa0 RCX: 00007f432dbee9a9 [ 158.360492][ T8363] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 158.360508][ T8363] RBP: 00007f432c24f090 R08: 0000000000000478 R09: 0000000000000000 [ 158.360525][ T8363] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 158.360541][ T8363] R13: 0000000000000000 R14: 00007f432de15fa0 R15: 00007ffff641f178 [ 158.360568][ T8363] [ 158.683620][ T8375] macvlan1: entered promiscuous mode [ 158.689430][ T8375] ipvlan0: entered promiscuous mode [ 158.695401][ T8375] ipvlan0: left promiscuous mode [ 158.701065][ T8375] macvlan1: left promiscuous mode [ 158.718597][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1591'. [ 158.739654][ T8377] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8377 comm=syz.3.1591 [ 158.925120][ T8384] netlink: 'syz.3.1593': attribute type 7 has an invalid length. [ 158.952113][ T8382] lo speed is unknown, defaulting to 1000 [ 158.987702][ T8388] loop4: detected capacity change from 0 to 512 [ 158.996255][ T8388] ext4: Unknown parameter 'nouser_xattr' [ 159.022863][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'. [ 159.086637][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 159.086654][ T29] audit: type=1400 audit(1752827964.661:5224): avc: denied { append } for pid=8395 comm="syz.1.1598" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 159.122382][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1599'. [ 159.125485][ T29] audit: type=1326 audit(1752827964.689:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.1.1598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92a18be9a9 code=0x0 [ 159.153038][ T8398] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 159.154215][ T29] audit: type=1400 audit(1752827964.689:5226): avc: denied { read write } for pid=8393 comm="syz.4.1597" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 159.162044][ T8398] audit: out of memory in audit_log_start [ 159.186094][ T29] audit: type=1400 audit(1752827964.689:5227): avc: denied { open } for pid=8393 comm="syz.4.1597" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 159.218876][ T8394] loop4: detected capacity change from 0 to 2048 [ 159.226803][ T29] audit: type=1400 audit(1752827964.717:5228): avc: denied { read } for pid=8397 comm="syz.3.1599" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.250297][ T29] audit: type=1400 audit(1752827964.717:5229): avc: denied { open } for pid=8397 comm="syz.3.1599" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.474753][ T8411] random: crng reseeded on system resumption [ 159.491356][ T8411] Restarting kernel threads ... [ 159.496470][ T8411] Done restarting kernel threads. [ 159.572906][ T8413] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.587844][ T8413] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 159.734223][ T29] audit: type=1400 audit(1752827965.269:5230): avc: denied { sqpoll } for pid=8414 comm="syz.2.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.775359][ T8421] netlink: 'syz.0.1605': attribute type 7 has an invalid length. [ 159.809009][ T8425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1606'. [ 159.842490][ T8427] netlink: 'syz.0.1608': attribute type 4 has an invalid length. [ 159.910426][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 159.985691][ T8436] loop4: detected capacity change from 0 to 512 [ 159.998230][ T8436] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.017047][ T8436] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.121101][ T8447] loop4: detected capacity change from 0 to 512 [ 160.128555][ T8447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.153574][ T8447] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.173692][ T8446] loop1: detected capacity change from 0 to 512 [ 160.191057][ T8446] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.218135][ T8451] loop2: detected capacity change from 0 to 512 [ 160.228488][ T8451] ext4: Unknown parameter 'nouser_xattr' [ 160.259155][ T8446] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.295674][ T29] audit: type=1400 audit(1752827965.783:5231): avc: denied { create } for pid=8454 comm="syz.4.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.457346][ T8464] random: crng reseeded on system resumption [ 160.477573][ T8462] loop1: detected capacity change from 0 to 512 [ 160.493642][ T8464] Restarting kernel threads ... [ 160.506953][ T8462] ext4: Unknown parameter 'nouser_xattr' [ 160.515277][ T8464] Done restarting kernel threads. [ 160.811579][ T8482] set match dimension is over the limit! [ 160.816872][ T8486] loop1: detected capacity change from 0 to 512 [ 160.841430][ T8482] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 160.865768][ T8486] ext4: Unknown parameter 'nouser_xattr' [ 161.148245][ T8500] netlink: 'syz.0.1635': attribute type 7 has an invalid length. [ 161.206922][ T8503] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 161.233257][ T8503] SELinux: failed to load policy [ 161.271742][ T8510] random: crng reseeded on system resumption [ 161.316051][ T8510] Restarting kernel threads ... [ 161.325215][ T8510] Done restarting kernel threads. [ 161.389169][ T8516] netlink: 'syz.1.1641': attribute type 21 has an invalid length. [ 161.416321][ T8518] loop2: detected capacity change from 0 to 512 [ 161.448742][ T8520] smc: net device bond0 applied user defined pnetid SYZ0 [ 161.458188][ T8516] loop1: detected capacity change from 0 to 8192 [ 161.465251][ T8518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.474501][ T8516] msdos: Unknown parameter 'no' [ 161.484434][ T8520] smc: net device bond0 erased user defined pnetid SYZ0 [ 161.510284][ T8518] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.611424][ T8527] loop1: detected capacity change from 0 to 1024 [ 161.625351][ T8527] EXT4-fs: Ignoring removed nobh option [ 161.630999][ T8527] EXT4-fs: inline encryption not supported [ 161.726713][ T8527] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1645: Allocating blocks 385-513 which overlap fs metadata [ 161.793997][ T8543] FAULT_INJECTION: forcing a failure. [ 161.793997][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 161.806813][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.4.1652 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 161.806847][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.806862][ T8543] Call Trace: [ 161.806871][ T8543] [ 161.806879][ T8543] __dump_stack+0x1d/0x30 [ 161.806950][ T8543] dump_stack_lvl+0xe8/0x140 [ 161.806977][ T8543] dump_stack+0x15/0x1b [ 161.807034][ T8543] should_fail_ex+0x265/0x280 [ 161.807074][ T8543] ? tcf_action_init_1+0x11e/0x4a0 [ 161.807164][ T8543] should_failslab+0x8c/0xb0 [ 161.807209][ T8543] __kmalloc_cache_noprof+0x4c/0x320 [ 161.807270][ T8543] tcf_action_init_1+0x11e/0x4a0 [ 161.807315][ T8543] tcf_action_init+0x267/0x6d0 [ 161.807388][ T8543] tc_ctl_action+0x291/0x830 [ 161.807526][ T8543] ? __pfx_tc_ctl_action+0x10/0x10 [ 161.807559][ T8543] rtnetlink_rcv_msg+0x657/0x6d0 [ 161.807596][ T8543] netlink_rcv_skb+0x120/0x220 [ 161.807693][ T8543] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.807778][ T8543] rtnetlink_rcv+0x1c/0x30 [ 161.807803][ T8543] netlink_unicast+0x5a8/0x680 [ 161.807844][ T8543] netlink_sendmsg+0x58b/0x6b0 [ 161.807875][ T8543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.807901][ T8543] __sock_sendmsg+0x145/0x180 [ 161.807934][ T8543] ____sys_sendmsg+0x31e/0x4e0 [ 161.807982][ T8543] ___sys_sendmsg+0x17b/0x1d0 [ 161.808061][ T8543] __x64_sys_sendmsg+0xd4/0x160 [ 161.808150][ T8543] x64_sys_call+0x2999/0x2fb0 [ 161.808176][ T8543] do_syscall_64+0xd2/0x200 [ 161.808196][ T8543] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.808263][ T8543] ? clear_bhb_loop+0x40/0x90 [ 161.808288][ T8543] ? clear_bhb_loop+0x40/0x90 [ 161.808313][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.808338][ T8543] RIP: 0033:0x7fd974eae9a9 [ 161.808416][ T8543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.808437][ T8543] RSP: 002b:00007fd973517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.808459][ T8543] RAX: ffffffffffffffda RBX: 00007fd9750d5fa0 RCX: 00007fd974eae9a9 [ 161.808474][ T8543] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 161.808489][ T8543] RBP: 00007fd973517090 R08: 0000000000000000 R09: 0000000000000000 [ 161.808503][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.808518][ T8543] R13: 0000000000000000 R14: 00007fd9750d5fa0 R15: 00007ffcaa269a48 [ 161.808540][ T8543] [ 161.811268][ T8526] EXT4-fs (loop1): pa ffff888106a604d0: logic 16, phys. 129, len 24 [ 161.970719][ T8545] loop2: detected capacity change from 0 to 128 [ 161.971756][ T8526] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, [ 161.998299][ T8546] loop0: detected capacity change from 0 to 1024 [ 162.001766][ T8526] free 0, pa_free 8 [ 162.117986][ T8546] EXT4-fs: Ignoring removed nobh option [ 162.123621][ T8546] EXT4-fs: inline encryption not supported [ 162.133446][ T8548] loop4: detected capacity change from 0 to 1024 [ 162.158642][ T8548] EXT4-fs: Ignoring removed nobh option [ 162.164455][ T8548] EXT4-fs: Ignoring removed bh option [ 162.221304][ T8550] xt_socket: unknown flags 0xc [ 162.246567][ T8546] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1653: Allocating blocks 385-513 which overlap fs metadata [ 162.261187][ T8548] netlink: 'syz.4.1656': attribute type 2 has an invalid length. [ 162.267171][ T8546] EXT4-fs (loop0): pa ffff888106ab2ee0: logic 16, phys. 129, len 24 [ 162.277000][ T8546] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 162.347879][ T8546] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 162.360248][ T8546] EXT4-fs (loop0): This should not happen!! Data will be lost [ 162.360248][ T8546] [ 162.370200][ T8546] EXT4-fs (loop0): Total free blocks count 0 [ 162.376283][ T8546] EXT4-fs (loop0): Free/Dirty block details [ 162.382230][ T8546] EXT4-fs (loop0): free_blocks=128 [ 162.387471][ T8546] EXT4-fs (loop0): dirty_blocks=0 [ 162.392526][ T8546] EXT4-fs (loop0): Block reservation details [ 162.398625][ T8546] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 162.594703][ T8572] loop2: detected capacity change from 0 to 1024 [ 162.605659][ T8550] loop3: detected capacity change from 0 to 256 [ 162.614985][ T8550] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.634757][ T8572] EXT4-fs: Ignoring removed nobh option [ 162.640463][ T8572] EXT4-fs: inline encryption not supported [ 162.652773][ T8550] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 162.661422][ T8550] FAT-fs (loop3): Filesystem has been set read-only [ 162.720217][ T8572] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1660: Allocating blocks 385-513 which overlap fs metadata [ 162.757037][ T8570] EXT4-fs (loop2): pa ffff888106ab2ee0: logic 16, phys. 129, len 24 [ 162.765254][ T8570] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 162.886370][ T8589] loop4: detected capacity change from 0 to 512 [ 162.904727][ T8589] ext4: Unknown parameter 'nouser_xattr' [ 162.946564][ T8593] loop3: detected capacity change from 0 to 512 [ 162.954400][ T8597] netlink: 'syz.0.1671': attribute type 6 has an invalid length. [ 162.982150][ T8593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.000711][ T8597] Process accounting resumed [ 163.022031][ T8593] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.097549][ T8603] loop4: detected capacity change from 0 to 512 [ 163.117832][ T8603] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.149368][ T8603] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.336057][ T8630] loop3: detected capacity change from 0 to 512 [ 163.343642][ T8630] ext4: Unknown parameter 'nouser_xattr' [ 163.353213][ T8630] __nla_validate_parse: 16 callbacks suppressed [ 163.353226][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1683'. [ 163.417301][ T8634] loop4: detected capacity change from 0 to 512 [ 163.427863][ T8636] netlink: 'syz.2.1687': attribute type 4 has an invalid length. [ 163.429666][ T8638] netlink: 'syz.3.1686': attribute type 7 has an invalid length. [ 163.436565][ T8634] ext4: Unknown parameter 'nouser_xattr' [ 163.507481][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'. [ 163.516458][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 163.577095][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1684'. [ 163.939176][ T8670] Process accounting resumed [ 163.953215][ T8673] random: crng reseeded on system resumption [ 163.969174][ T8673] Restarting kernel threads ... [ 163.974515][ T8673] Done restarting kernel threads. [ 163.978876][ T8674] warn_alloc: 2 callbacks suppressed [ 163.978896][ T8674] syz.0.1699: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 163.999522][ T8674] CPU: 0 UID: 0 PID: 8674 Comm: syz.0.1699 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 163.999560][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.999575][ T8674] Call Trace: [ 163.999583][ T8674] [ 163.999663][ T8674] __dump_stack+0x1d/0x30 [ 163.999687][ T8674] dump_stack_lvl+0xe8/0x140 [ 163.999710][ T8674] dump_stack+0x15/0x1b [ 163.999785][ T8674] warn_alloc+0x12b/0x1a0 [ 163.999820][ T8674] ? audit_log_end+0x1d7/0x1f0 [ 163.999872][ T8674] ? audit_log_end+0x1d7/0x1f0 [ 163.999981][ T8674] __vmalloc_node_range_noprof+0x9c/0xe00 [ 164.000025][ T8674] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 164.000070][ T8674] ? slow_avc_audit+0x104/0x140 [ 164.000125][ T8674] ? should_fail_ex+0x30/0x280 [ 164.000161][ T8674] ? xskq_create+0x36/0xe0 [ 164.000301][ T8674] vmalloc_user_noprof+0x7d/0xb0 [ 164.000344][ T8674] ? xskq_create+0x80/0xe0 [ 164.000515][ T8674] xskq_create+0x80/0xe0 [ 164.000544][ T8674] xsk_init_queue+0x95/0xf0 [ 164.000567][ T8674] xsk_setsockopt+0x35c/0x510 [ 164.000612][ T8674] ? __pfx_xsk_setsockopt+0x10/0x10 [ 164.000648][ T8674] __sys_setsockopt+0x184/0x200 [ 164.000686][ T8674] __x64_sys_setsockopt+0x64/0x80 [ 164.000720][ T8674] x64_sys_call+0x2bd5/0x2fb0 [ 164.000747][ T8674] do_syscall_64+0xd2/0x200 [ 164.000782][ T8674] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.000825][ T8674] ? clear_bhb_loop+0x40/0x90 [ 164.000848][ T8674] ? clear_bhb_loop+0x40/0x90 [ 164.000871][ T8674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.000906][ T8674] RIP: 0033:0x7ffa09ade9a9 [ 164.000923][ T8674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.000943][ T8674] RSP: 002b:00007ffa0813f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.000962][ T8674] RAX: ffffffffffffffda RBX: 00007ffa09d05fa0 RCX: 00007ffa09ade9a9 [ 164.001050][ T8674] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 164.001063][ T8674] RBP: 00007ffa09b60ca1 R08: 0000000000000004 R09: 0000000000000000 [ 164.001084][ T8674] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.001097][ T8674] R13: 0000000000000000 R14: 00007ffa09d05fa0 R15: 00007ffcfe2e9ad8 [ 164.001119][ T8674] [ 164.001167][ T8674] Mem-Info: [ 164.157379][ T3400] IPVS: starting estimator thread 0... [ 164.158054][ T8674] active_anon:74417 inactive_anon:12129 isolated_anon:0 [ 164.158054][ T8674] active_file:23703 inactive_file:2675 isolated_file:0 [ 164.158054][ T8674] unevictable:0 dirty:489 writeback:0 [ 164.158054][ T8674] slab_reclaimable:3579 slab_unreclaimable:59145 [ 164.158054][ T8674] mapped:29713 shmem:78007 pagetables:2041 [ 164.158054][ T8674] sec_pagetables:0 bounce:0 [ 164.158054][ T8674] kernel_misc_reclaimable:0 [ 164.158054][ T8674] free:1727468 free_pcp:41115 free_cma:0 [ 164.283842][ T8674] Node 0 active_anon:297668kB inactive_anon:48516kB active_file:94812kB inactive_file:10700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118968kB dirty:2072kB writeback:0kB shmem:312028kB writeback_tmp:0kB kernel_stack:4736kB pagetables:8164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.313436][ T8674] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.342193][ T8674] lowmem_reserve[]: 0 2882 7860 7860 [ 164.347613][ T8674] Node 0 DMA32 free:2947724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 164.377951][ T8674] lowmem_reserve[]: 0 0 4978 4978 [ 164.383152][ T8674] Node 0 Normal free:3946788kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:297668kB inactive_anon:48516kB active_file:94812kB inactive_file:10700kB unevictable:0kB writepending:2072kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:160572kB local_pcp:62124kB free_cma:0kB [ 164.415786][ T8674] lowmem_reserve[]: 0 0 0 0 [ 164.420349][ T8674] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.433197][ T8674] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947724kB [ 164.449313][ T8674] Node 0 Normal: 1883*4kB (UME) 1025*8kB (UME) 319*16kB (UME) 112*32kB (UM) 407*64kB (UME) 262*128kB (UME) 145*256kB (UME) 112*512kB (UME) 76*1024kB (UME) 42*2048kB (UM) 880*4096kB (UM) = 3946788kB [ 164.469059][ T8674] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 164.478400][ T8674] 104416 total pagecache pages [ 164.483235][ T8674] 6 pages in swap cache [ 164.487402][ T8674] Free swap = 105236kB [ 164.491595][ T8674] Total swap = 124996kB [ 164.495763][ T8674] 2097051 pages RAM [ 164.499586][ T8674] 0 pages HighMem/MovableOnly [ 164.504312][ T8674] 80813 pages reserved [ 164.556626][ T8684] lo speed is unknown, defaulting to 1000 [ 164.580768][ T8688] loop0: detected capacity change from 0 to 1024 [ 164.596430][ T8685] IPVS: using max 2496 ests per chain, 124800 per kthread [ 164.599240][ T8688] EXT4-fs: Ignoring removed nobh option [ 164.606882][ T29] kauditd_printk_skb: 697 callbacks suppressed [ 164.606901][ T29] audit: type=1400 audit(1752827969.824:5923): avc: denied { create } for pid=8682 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.609375][ T8688] EXT4-fs: inline encryption not supported [ 164.641450][ T29] audit: type=1400 audit(1752827969.861:5924): avc: denied { read } for pid=8682 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.707586][ T29] audit: type=1400 audit(1752827969.918:5925): avc: denied { mount } for pid=8687 comm="syz.0.1704" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 164.717865][ T8688] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1704: Allocating blocks 385-513 which overlap fs metadata [ 164.747982][ T29] audit: type=1400 audit(1752827969.918:5926): avc: denied { add_name } for pid=8687 comm="syz.0.1704" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.768816][ T29] audit: type=1400 audit(1752827969.918:5927): avc: denied { create } for pid=8687 comm="syz.0.1704" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.789241][ T29] audit: type=1400 audit(1752827969.918:5928): avc: denied { read write } for pid=8687 comm="syz.0.1704" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.812083][ T29] audit: type=1400 audit(1752827969.918:5929): avc: denied { open } for pid=8687 comm="syz.0.1704" path="/353/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.814610][ T8688] EXT4-fs (loop0): pa ffff888106a604d0: logic 16, phys. 129, len 24 [ 164.843317][ T8688] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 164.881882][ T8688] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 164.894245][ T8688] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.894245][ T8688] [ 164.904013][ T8688] EXT4-fs (loop0): Total free blocks count 0 [ 164.910088][ T8688] EXT4-fs (loop0): Free/Dirty block details [ 164.915931][ T8705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1710'. [ 164.915989][ T8688] EXT4-fs (loop0): free_blocks=128 [ 164.930389][ T8688] EXT4-fs (loop0): dirty_blocks=0 [ 164.935497][ T8688] EXT4-fs (loop0): Block reservation details [ 164.941534][ T8688] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 164.964880][ T29] audit: type=1400 audit(1752827969.983:5930): avc: denied { connect } for pid=8696 comm="syz.2.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.984713][ T29] audit: type=1400 audit(1752827969.983:5931): avc: denied { write } for pid=8696 comm="syz.2.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.004160][ T29] audit: type=1400 audit(1752827970.151:5932): avc: denied { create } for pid=8687 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.147236][ T8720] random: crng reseeded on system resumption [ 165.160024][ T8720] Restarting kernel threads ... [ 165.174433][ T8720] Done restarting kernel threads. [ 165.213937][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.221513][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.229044][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.246170][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.253698][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.261148][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.268677][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.276126][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.283684][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.291119][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.298725][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.306210][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.313742][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.382112][ T8732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1721'. [ 165.395921][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.403692][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.411347][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.418995][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.426872][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.434428][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.438396][ T8735] netlink: 'syz.0.1722': attribute type 7 has an invalid length. [ 165.441983][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.457107][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.464607][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.472068][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.479534][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.487064][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.494571][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.502054][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.505034][ T8738] loop0: detected capacity change from 0 to 512 [ 165.509767][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 165.519040][ T8738] ext4: Unknown parameter 'nouser_xattr' [ 165.527046][ T3393] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 165.591224][ T8740] lo speed is unknown, defaulting to 1000 [ 165.660817][ T8739] fido_id[8739]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.704731][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'. [ 165.759389][ T8743] loop4: detected capacity change from 0 to 512 [ 165.827559][ T8743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.889403][ T8748] FAULT_INJECTION: forcing a failure. [ 165.889403][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.902623][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.1.1725 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 165.902723][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.902735][ T8748] Call Trace: [ 165.902743][ T8748] [ 165.902754][ T8748] __dump_stack+0x1d/0x30 [ 165.902848][ T8748] dump_stack_lvl+0xe8/0x140 [ 165.902872][ T8748] dump_stack+0x15/0x1b [ 165.902889][ T8748] should_fail_ex+0x265/0x280 [ 165.902993][ T8748] should_fail+0xb/0x20 [ 165.903094][ T8748] should_fail_usercopy+0x1a/0x20 [ 165.903125][ T8748] _copy_from_iter+0xcf/0xe40 [ 165.903163][ T8748] ? __build_skb_around+0x1a0/0x200 [ 165.903306][ T8748] ? __alloc_skb+0x223/0x320 [ 165.903338][ T8748] netlink_sendmsg+0x471/0x6b0 [ 165.903365][ T8748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.903391][ T8748] __sock_sendmsg+0x145/0x180 [ 165.903493][ T8748] ____sys_sendmsg+0x31e/0x4e0 [ 165.903539][ T8748] ___sys_sendmsg+0x17b/0x1d0 [ 165.903682][ T8748] __x64_sys_sendmsg+0xd4/0x160 [ 165.903727][ T8748] x64_sys_call+0x2999/0x2fb0 [ 165.903809][ T8748] do_syscall_64+0xd2/0x200 [ 165.903827][ T8748] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.903853][ T8748] ? clear_bhb_loop+0x40/0x90 [ 165.903876][ T8748] ? clear_bhb_loop+0x40/0x90 [ 165.903907][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.903935][ T8748] RIP: 0033:0x7f92a18be9a9 [ 165.903951][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.903974][ T8748] RSP: 002b:00007f929ff06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.904000][ T8748] RAX: ffffffffffffffda RBX: 00007f92a1ae6080 RCX: 00007f92a18be9a9 [ 165.904057][ T8748] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 000000000000000b [ 165.904072][ T8748] RBP: 00007f929ff06090 R08: 0000000000000000 R09: 0000000000000000 [ 165.904087][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.904103][ T8748] R13: 0000000000000000 R14: 00007f92a1ae6080 R15: 00007ffc09d4ba78 [ 165.904210][ T8748] [ 166.118196][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.125423][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.155258][ T8743] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.222690][ T8757] loop3: detected capacity change from 0 to 1024 [ 166.263798][ T8757] EXT4-fs: Ignoring removed nobh option [ 166.269745][ T8757] EXT4-fs: inline encryption not supported [ 166.292687][ T8745] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.301255][ T8745] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.309861][ T8745] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.318421][ T8745] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.338805][ T8757] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1728: Allocating blocks 385-513 which overlap fs metadata [ 166.407013][ T8756] EXT4-fs (loop3): pa ffff888106a60620: logic 16, phys. 129, len 24 [ 166.415262][ T8756] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 166.463331][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1730'. [ 166.481828][ T8771] Process accounting resumed [ 166.516057][ T8777] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1732'. [ 166.525824][ T8777] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1732'. [ 166.605288][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.610474][ T8783] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 166.612766][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.627994][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.649693][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.657186][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.664640][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.672104][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.679518][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.687058][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.694543][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.701991][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.709499][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.717064][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.723768][ T8793] random: crng reseeded on system resumption [ 166.727360][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.738011][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.745532][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.752960][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.760450][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.767974][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.775509][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.783000][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.790545][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.797963][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.805514][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.813007][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.820449][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.827865][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.835334][ T8764] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 166.846332][ T8764] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 166.923868][ T8793] Restarting kernel threads ... [ 166.928978][ T8800] loop4: detected capacity change from 0 to 512 [ 166.930074][ T8793] Done restarting kernel threads. [ 166.940443][ T8800] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.975773][ T8800] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.129998][ T8814] loop1: detected capacity change from 0 to 1024 [ 167.151979][ T8811] loop4: detected capacity change from 0 to 512 [ 167.159523][ T8807] hub 2-0:1.0: USB hub found [ 167.160815][ T8814] EXT4-fs: Ignoring removed nobh option [ 167.169786][ T8814] EXT4-fs: inline encryption not supported [ 167.176581][ T8807] hub 2-0:1.0: 8 ports detected [ 167.184083][ T8811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.211227][ T8811] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.222536][ T8814] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1743: Allocating blocks 385-513 which overlap fs metadata [ 167.239371][ T8814] EXT4-fs (loop1): pa ffff888106a60620: logic 16, phys. 129, len 24 [ 167.247489][ T8814] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 167.259645][ T8814] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 167.272111][ T8814] EXT4-fs (loop1): This should not happen!! Data will be lost [ 167.272111][ T8814] [ 167.282006][ T8814] EXT4-fs (loop1): Total free blocks count 0 [ 167.288049][ T8814] EXT4-fs (loop1): Free/Dirty block details [ 167.294109][ T8814] EXT4-fs (loop1): free_blocks=128 [ 167.299323][ T8814] EXT4-fs (loop1): dirty_blocks=0 [ 167.304495][ T8814] EXT4-fs (loop1): Block reservation details [ 167.310509][ T8814] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 167.563361][ T8842] loop4: detected capacity change from 0 to 1024 [ 167.570758][ T8842] EXT4-fs: Ignoring removed nobh option [ 167.576465][ T8842] EXT4-fs: inline encryption not supported [ 167.601966][ T8842] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1751: Allocating blocks 385-513 which overlap fs metadata [ 167.664893][ T8841] EXT4-fs (loop4): pa ffff888106ab2ee0: logic 16, phys. 129, len 24 [ 167.673017][ T8841] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 167.693768][ T8848] netlink: 'syz.2.1752': attribute type 7 has an invalid length. [ 167.813980][ T8856] loop0: detected capacity change from 0 to 1024 [ 167.817584][ T8857] random: crng reseeded on system resumption [ 167.841460][ T8857] Restarting kernel threads ... [ 167.847342][ T8857] Done restarting kernel threads. [ 167.891437][ T8856] EXT4-fs: Ignoring removed nobh option [ 167.897131][ T8856] EXT4-fs: Ignoring removed bh option [ 168.051336][ T8867] loop4: detected capacity change from 0 to 128 [ 168.053838][ T8865] xt_connbytes: Forcing CT accounting to be enabled [ 168.092318][ T8865] set match dimension is over the limit! [ 168.125793][ T8865] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 168.403292][ T8876] netlink: 'syz.3.1763': attribute type 7 has an invalid length. [ 168.621704][ T8890] random: crng reseeded on system resumption [ 168.645195][ T8890] Restarting kernel threads ... [ 168.650444][ T8890] Done restarting kernel threads. [ 168.697418][ T8896] loop0: detected capacity change from 0 to 256 [ 168.723744][ T8899] netlink: 'syz.3.1771': attribute type 21 has an invalid length. [ 168.769081][ T8896] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.780511][ T8902] netlink: 'syz.2.1772': attribute type 4 has an invalid length. [ 168.788459][ T8899] __nla_validate_parse: 4 callbacks suppressed [ 168.788473][ T8899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1771'. [ 168.803750][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1771'. [ 168.818832][ T8896] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 168.827587][ T8896] FAT-fs (loop0): Filesystem has been set read-only [ 168.891796][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 168.900964][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 169.003313][ T8909] smc: net device bond0 applied user defined pnetid SYZ0 [ 169.010638][ T8909] smc: net device bond0 erased user defined pnetid SYZ0 [ 169.376141][ T8924] random: crng reseeded on system resumption [ 169.392300][ T8924] Restarting kernel threads ... [ 169.403372][ T8924] Done restarting kernel threads. [ 169.756345][ T8928] xt_socket: unknown flags 0xc [ 170.003668][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 170.003687][ T29] audit: type=1400 audit(1752827974.875:6226): avc: denied { create } for pid=8938 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 170.085736][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 170.173952][ T8943] loop2: detected capacity change from 0 to 1024 [ 170.427542][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1788'. [ 170.908659][ T29] audit: type=1400 audit(1752827974.922:6227): avc: denied { sqpoll } for pid=8936 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.928004][ T29] audit: type=1400 audit(1752827974.969:6228): avc: denied { read } for pid=8938 comm="syz.2.1787" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 170.951318][ T29] audit: type=1400 audit(1752827974.969:6229): avc: denied { open } for pid=8938 comm="syz.2.1787" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 170.975319][ T29] audit: type=1400 audit(1752827974.969:6230): avc: denied { ioctl } for pid=8938 comm="syz.2.1787" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.000732][ T29] audit: type=1400 audit(1752827975.053:6231): avc: denied { create } for pid=8942 comm="syz.4.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.020465][ T29] audit: type=1400 audit(1752827975.053:6232): avc: denied { setopt } for pid=8942 comm="syz.4.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.040007][ T29] audit: type=1400 audit(1752827975.118:6233): avc: denied { write } for pid=8942 comm="syz.4.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.059342][ T29] audit: type=1400 audit(1752827975.203:6234): avc: denied { create } for pid=8942 comm="syz.4.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.079338][ T29] audit: type=1400 audit(1752827975.240:6235): avc: denied { read } for pid=8938 comm="syz.2.1787" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.165506][ T8957] random: crng reseeded on system resumption [ 171.190202][ T8955] loop3: detected capacity change from 0 to 512 [ 171.197285][ T8959] loop2: detected capacity change from 0 to 1024 [ 171.202879][ T8957] Restarting kernel threads ... [ 171.207252][ T8955] ext4: Unknown parameter 'nouser_xattr' [ 171.208858][ T8957] Done restarting kernel threads. [ 171.219437][ T8959] loop2: detected capacity change from 0 to 512 [ 171.230134][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 171.264486][ T8959] EXT4-fs mount: 60 callbacks suppressed [ 171.264558][ T8959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.283879][ T8959] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.302911][ T8959] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1793: corrupted xattr block 33: overlapping e_value [ 171.317969][ T8959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.342330][ T8963] FAULT_INJECTION: forcing a failure. [ 171.342330][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 171.355029][ T8963] CPU: 1 UID: 0 PID: 8963 Comm: syz.3.1794 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 171.355063][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.355127][ T8963] Call Trace: [ 171.355149][ T8963] [ 171.355157][ T8963] __dump_stack+0x1d/0x30 [ 171.355186][ T8963] dump_stack_lvl+0xe8/0x140 [ 171.355225][ T8963] dump_stack+0x15/0x1b [ 171.355247][ T8963] should_fail_ex+0x265/0x280 [ 171.355288][ T8963] should_failslab+0x8c/0xb0 [ 171.355397][ T8963] __kmalloc_cache_node_noprof+0x54/0x320 [ 171.355434][ T8963] ? __get_vm_area_node+0x106/0x1d0 [ 171.355548][ T8963] __get_vm_area_node+0x106/0x1d0 [ 171.355665][ T8963] get_vm_area+0x65/0xa0 [ 171.355700][ T8963] ? arena_map_alloc+0x1e6/0x370 [ 171.355722][ T8963] arena_map_alloc+0x1e6/0x370 [ 171.355758][ T8963] map_create+0x840/0xb90 [ 171.355792][ T8963] ? security_bpf+0x2b/0x90 [ 171.355857][ T8963] __sys_bpf+0x5ab/0x790 [ 171.355907][ T8963] __x64_sys_bpf+0x41/0x50 [ 171.355939][ T8963] x64_sys_call+0x2478/0x2fb0 [ 171.355961][ T8963] do_syscall_64+0xd2/0x200 [ 171.356045][ T8963] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.356081][ T8963] ? clear_bhb_loop+0x40/0x90 [ 171.356131][ T8963] ? clear_bhb_loop+0x40/0x90 [ 171.356160][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.356186][ T8963] RIP: 0033:0x7f432dbee9a9 [ 171.356201][ T8963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.356259][ T8963] RSP: 002b:00007f432c24f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.356285][ T8963] RAX: ffffffffffffffda RBX: 00007f432de15fa0 RCX: 00007f432dbee9a9 [ 171.356301][ T8963] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 0000000000000000 [ 171.356313][ T8963] RBP: 00007f432c24f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.356325][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.356337][ T8963] R13: 0000000000000000 R14: 00007f432de15fa0 R15: 00007ffff641f178 [ 171.356424][ T8963] [ 171.357581][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.626607][ T8972] loop3: detected capacity change from 0 to 512 [ 171.636422][ T8972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.657178][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'. [ 171.666185][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 171.679040][ T8974] smc: net device bond0 applied user defined pnetid SYZ0 [ 171.692405][ T8974] smc: net device bond0 erased user defined pnetid SYZ0 [ 171.709347][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 171.720282][ T8972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.724267][ T8980] loop2: detected capacity change from 0 to 1024 [ 171.738040][ T8972] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.743184][ T8980] EXT4-fs: Ignoring removed nobh option [ 171.755414][ T8980] EXT4-fs: inline encryption not supported [ 171.791032][ T8980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.812874][ T8980] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1796: Allocating blocks 385-513 which overlap fs metadata [ 171.828680][ T8980] EXT4-fs (loop2): pa ffff888106ab2ee0: logic 16, phys. 129, len 24 [ 171.837020][ T8980] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 171.850960][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.852190][ T8980] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 171.872259][ T8980] EXT4-fs (loop2): This should not happen!! Data will be lost [ 171.872259][ T8980] [ 171.882016][ T8980] EXT4-fs (loop2): Total free blocks count 0 [ 171.885506][ T8987] loop0: detected capacity change from 0 to 1024 [ 171.888150][ T8980] EXT4-fs (loop2): Free/Dirty block details [ 171.888169][ T8980] EXT4-fs (loop2): free_blocks=128 [ 171.888186][ T8980] EXT4-fs (loop2): dirty_blocks=0 [ 171.888213][ T8980] EXT4-fs (loop2): Block reservation details [ 171.888226][ T8980] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 171.905080][ T8987] EXT4-fs: Ignoring removed nobh option [ 171.928339][ T8987] EXT4-fs: Ignoring removed bh option [ 171.954800][ T8987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.991879][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.026211][ T8999] set match dimension is over the limit! [ 172.058753][ T8999] netlink: 'syz.0.1806': attribute type 1 has an invalid length. [ 172.067835][ T9001] random: crng reseeded on system resumption [ 172.110899][ T9001] Restarting kernel threads ... [ 172.117344][ T9001] Done restarting kernel threads. [ 172.134783][ T9005] set match dimension is over the limit! [ 172.166389][ T9005] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 172.200762][ T9011] smc: net device bond0 applied user defined pnetid SYZ0 [ 172.212842][ T9009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9009 comm=syz.3.1811 [ 172.234598][ T9011] smc: net device bond0 erased user defined pnetid SYZ0 [ 172.384963][ T9029] random: crng reseeded on system resumption [ 172.396626][ T9029] Restarting kernel threads ... [ 172.402108][ T9029] Done restarting kernel threads. [ 172.490041][ T9032] netlink: 'syz.2.1821': attribute type 21 has an invalid length. [ 172.617337][ T9039] loop1: detected capacity change from 0 to 128 [ 172.639491][ T9039] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 173.164017][ T9043] lo speed is unknown, defaulting to 1000 [ 173.330238][ T9057] netlink: 'syz.1.1829': attribute type 4 has an invalid length. [ 173.525682][ T9071] loop2: detected capacity change from 0 to 128 [ 173.700109][ T9084] set match dimension is over the limit! [ 173.762931][ T9084] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 173.787301][ T9078] FAULT_INJECTION: forcing a failure. [ 173.787301][ T9078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.800481][ T9078] CPU: 1 UID: 0 PID: 9078 Comm: syz.4.1837 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 173.800519][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.800588][ T9078] Call Trace: [ 173.800595][ T9078] [ 173.800605][ T9078] __dump_stack+0x1d/0x30 [ 173.800643][ T9078] dump_stack_lvl+0xe8/0x140 [ 173.800745][ T9078] dump_stack+0x15/0x1b [ 173.800768][ T9078] should_fail_ex+0x265/0x280 [ 173.800803][ T9078] should_fail+0xb/0x20 [ 173.800830][ T9078] should_fail_usercopy+0x1a/0x20 [ 173.800951][ T9078] _copy_to_user+0x20/0xa0 [ 173.800978][ T9078] simple_read_from_buffer+0xb5/0x130 [ 173.801014][ T9078] proc_fail_nth_read+0x100/0x140 [ 173.801054][ T9078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.801141][ T9078] vfs_read+0x1a0/0x6f0 [ 173.801172][ T9078] ? __rcu_read_unlock+0x4f/0x70 [ 173.801239][ T9078] ? __fget_files+0x184/0x1c0 [ 173.801262][ T9078] ksys_read+0xda/0x1a0 [ 173.801329][ T9078] __x64_sys_read+0x40/0x50 [ 173.801433][ T9078] x64_sys_call+0x2d77/0x2fb0 [ 173.801560][ T9078] do_syscall_64+0xd2/0x200 [ 173.801579][ T9078] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.801607][ T9078] ? clear_bhb_loop+0x40/0x90 [ 173.801635][ T9078] ? clear_bhb_loop+0x40/0x90 [ 173.801699][ T9078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.801721][ T9078] RIP: 0033:0x7fd974ead3bc [ 173.801737][ T9078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 173.801756][ T9078] RSP: 002b:00007fd973517030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.801823][ T9078] RAX: ffffffffffffffda RBX: 00007fd9750d5fa0 RCX: 00007fd974ead3bc [ 173.801836][ T9078] RDX: 000000000000000f RSI: 00007fd9735170a0 RDI: 000000000000000a [ 173.801872][ T9078] RBP: 00007fd973517090 R08: 0000000000000000 R09: 0000000000000000 [ 173.801885][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.801898][ T9078] R13: 0000000000000000 R14: 00007fd9750d5fa0 R15: 00007ffcaa269a48 [ 173.801920][ T9078] [ 174.164767][ T9102] loop4: detected capacity change from 0 to 512 [ 174.172064][ T9102] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.187984][ T9102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.200686][ T9102] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.236916][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.284239][ T9118] loop1: detected capacity change from 0 to 1024 [ 174.291311][ T9118] EXT4-fs: Ignoring removed nobh option [ 174.297021][ T9118] EXT4-fs: inline encryption not supported [ 174.349999][ T9118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.364951][ T9118] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1849: Allocating blocks 385-513 which overlap fs metadata [ 174.392270][ T9117] EXT4-fs (loop1): pa ffff888106a604d0: logic 16, phys. 129, len 24 [ 174.400373][ T9117] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 174.517294][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.609957][ T9127] lo speed is unknown, defaulting to 1000 [ 174.956446][ T9132] loop3: detected capacity change from 0 to 512 [ 174.964811][ T9132] ext4: Unknown parameter 'nouser_xattr' [ 174.974208][ T9134] __nla_validate_parse: 19 callbacks suppressed [ 174.974228][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1854'. [ 174.989624][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1854'. [ 175.022391][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1853'. [ 175.079145][ T9141] netlink: 'syz.3.1857': attribute type 4 has an invalid length. [ 175.151706][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 175.160783][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 175.181063][ T9145] loop4: detected capacity change from 0 to 8192 [ 175.207553][ T9150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1861'. [ 175.387599][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 175.387618][ T29] audit: type=1326 audit(1752827979.898:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.417254][ T29] audit: type=1326 audit(1752827979.898:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.440713][ T29] audit: type=1326 audit(1752827979.898:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.464371][ T29] audit: type=1326 audit(1752827979.898:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.475413][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 175.487860][ T29] audit: type=1326 audit(1752827979.898:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.520421][ T29] audit: type=1326 audit(1752827979.898:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.543906][ T29] audit: type=1326 audit(1752827979.898:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.567546][ T29] audit: type=1326 audit(1752827979.898:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.591026][ T29] audit: type=1326 audit(1752827979.898:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.614512][ T29] audit: type=1326 audit(1752827979.898:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 175.726593][ T9163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1864'. [ 175.773417][ T9166] loop0: detected capacity change from 0 to 128 [ 175.889571][ T9170] loop1: detected capacity change from 0 to 512 [ 175.897235][ T9170] ext4: Unknown parameter 'nouser_xattr' [ 175.911274][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1867'. [ 175.945535][ T9173] loop1: detected capacity change from 0 to 1024 [ 175.956461][ T9173] EXT4-fs: Ignoring removed nobh option [ 175.962148][ T9173] EXT4-fs: Ignoring removed bh option [ 176.102513][ T9173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.170859][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.181753][ T9189] random: crng reseeded on system resumption [ 176.200668][ T9189] Restarting kernel threads ... [ 176.205746][ T9189] Done restarting kernel threads. [ 176.238858][ T9194] random: crng reseeded on system resumption [ 176.272202][ T9194] Restarting kernel threads ... [ 176.274770][ T9198] loop4: detected capacity change from 0 to 512 [ 176.279766][ T9194] Done restarting kernel threads. [ 176.298192][ T9198] ext4: Unknown parameter 'nouser_xattr' [ 176.318923][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 176.390379][ T9204] netlink: 'syz.4.1880': attribute type 21 has an invalid length. [ 176.783091][ T9221] random: crng reseeded on system resumption [ 176.812181][ T9223] xt_socket: unknown flags 0xc [ 176.827383][ T9221] Restarting kernel threads ... [ 176.839708][ T9221] Done restarting kernel threads. [ 176.931647][ T9225] loop2: detected capacity change from 0 to 2048 [ 177.011826][ T9225] Alternate GPT is invalid, using primary GPT. [ 177.018138][ T9225] loop2: p1 p2 p3 [ 177.148411][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 177.247132][ T9242] loop3: detected capacity change from 0 to 1024 [ 177.256273][ T9238] lo speed is unknown, defaulting to 1000 [ 177.268484][ T9242] EXT4-fs: Ignoring removed nobh option [ 177.274127][ T9242] EXT4-fs: Ignoring removed bh option [ 177.341166][ T9242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.382435][ T9248] random: crng reseeded on system resumption [ 177.405237][ T9248] Restarting kernel threads ... [ 177.412562][ T9248] Done restarting kernel threads. [ 177.436516][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.456765][ T9253] random: crng reseeded on system resumption [ 177.469016][ T9253] Restarting kernel threads ... [ 177.494342][ T9253] Done restarting kernel threads. [ 177.563407][ T9266] xt_TCPMSS: Only works on TCP SYN packets [ 177.578142][ T9264] loop4: detected capacity change from 0 to 512 [ 177.601327][ T9268] xt_socket: unknown flags 0xc [ 177.619489][ T9264] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 177.676334][ T9264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.700735][ T9264] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.765372][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.798694][ T9286] random: crng reseeded on system resumption [ 177.827676][ T9286] Restarting kernel threads ... [ 177.835188][ T9286] Done restarting kernel threads. [ 177.875910][ T9289] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 177.921268][ T9300] loop1: detected capacity change from 0 to 256 [ 177.929780][ T9298] loop2: detected capacity change from 0 to 128 [ 177.944246][ T9300] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.980585][ T9300] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 177.989266][ T9300] FAT-fs (loop1): Filesystem has been set read-only [ 178.017724][ T9306] xt_socket: unknown flags 0xc [ 178.143077][ T9315] wg2: entered promiscuous mode [ 178.148017][ T9315] wg2: entered allmulticast mode [ 178.239278][ T9328] random: crng reseeded on system resumption [ 178.253559][ T9328] Restarting kernel threads ... [ 178.258766][ T9328] Done restarting kernel threads. [ 178.339862][ T9340] random: crng reseeded on system resumption [ 178.352446][ T9340] Restarting kernel threads ... [ 178.358420][ T9340] Done restarting kernel threads. [ 178.387355][ T9342] FAULT_INJECTION: forcing a failure. [ 178.387355][ T9342] name failslab, interval 1, probability 0, space 0, times 0 [ 178.400328][ T9342] CPU: 0 UID: 0 PID: 9342 Comm: syz.2.1934 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 178.400357][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.400372][ T9342] Call Trace: [ 178.400381][ T9342] [ 178.400392][ T9342] __dump_stack+0x1d/0x30 [ 178.400433][ T9342] dump_stack_lvl+0xe8/0x140 [ 178.400460][ T9342] dump_stack+0x15/0x1b [ 178.400486][ T9342] should_fail_ex+0x265/0x280 [ 178.400523][ T9342] should_failslab+0x8c/0xb0 [ 178.400623][ T9342] kmem_cache_alloc_node_noprof+0x57/0x320 [ 178.400706][ T9342] ? __alloc_skb+0x101/0x320 [ 178.400742][ T9342] __alloc_skb+0x101/0x320 [ 178.400830][ T9342] netlink_alloc_large_skb+0xba/0xf0 [ 178.400912][ T9342] netlink_sendmsg+0x3cf/0x6b0 [ 178.400935][ T9342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.400961][ T9342] __sock_sendmsg+0x145/0x180 [ 178.400994][ T9342] ____sys_sendmsg+0x31e/0x4e0 [ 178.401058][ T9342] ___sys_sendmsg+0x17b/0x1d0 [ 178.401156][ T9342] __x64_sys_sendmsg+0xd4/0x160 [ 178.401215][ T9342] x64_sys_call+0x2999/0x2fb0 [ 178.401239][ T9342] do_syscall_64+0xd2/0x200 [ 178.401258][ T9342] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.401339][ T9342] ? clear_bhb_loop+0x40/0x90 [ 178.401368][ T9342] ? clear_bhb_loop+0x40/0x90 [ 178.401397][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.401439][ T9342] RIP: 0033:0x7febedabe9a9 [ 178.401460][ T9342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.401511][ T9342] RSP: 002b:00007febec127038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.401536][ T9342] RAX: ffffffffffffffda RBX: 00007febedce5fa0 RCX: 00007febedabe9a9 [ 178.401550][ T9342] RDX: 000000000004a0c8 RSI: 0000200000001980 RDI: 0000000000000005 [ 178.401562][ T9342] RBP: 00007febec127090 R08: 0000000000000000 R09: 0000000000000000 [ 178.401626][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.401643][ T9342] R13: 0000000000000000 R14: 00007febedce5fa0 R15: 00007ffe50f25f28 [ 178.401672][ T9342] [ 178.730997][ T9350] loop3: detected capacity change from 0 to 128 [ 178.790740][ T9355] lo speed is unknown, defaulting to 1000 [ 178.807320][ T9353] random: crng reseeded on system resumption [ 178.889934][ T9361] random: crng reseeded on system resumption [ 178.936086][ T9361] Restarting kernel threads ... [ 178.959637][ T9351] SELinux: policydb magic number 0x5000005 does not match expected magic number 0xf97cff8c [ 178.981050][ T9361] Done restarting kernel threads. [ 179.002331][ T9351] SELinux: failed to load policy [ 179.053763][ T9365] loop1: detected capacity change from 0 to 1024 [ 179.062764][ T9365] EXT4-fs: Ignoring removed nobh option [ 179.068415][ T9365] EXT4-fs: Ignoring removed bh option [ 179.106734][ T9365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.120235][ T9373] loop0: detected capacity change from 0 to 1024 [ 179.157724][ T9373] EXT4-fs: Ignoring removed nobh option [ 179.163384][ T9373] EXT4-fs: Ignoring removed bh option [ 179.170866][ T2995] udevd[2995]: worker [4306] terminated by signal 33 (Unknown signal 33) [ 179.198609][ T2995] udevd[2995]: worker [4306] failed while handling '/devices/virtual/block/loop0' [ 179.213087][ T9373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.264743][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.325346][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.348398][ T9382] netlink: 'syz.0.1946': attribute type 1 has an invalid length. [ 179.396684][ T9389] xt_socket: unknown flags 0xc [ 179.480360][ T9393] loop3: detected capacity change from 0 to 1024 [ 179.487170][ T9395] warn_alloc: 5 callbacks suppressed [ 179.487183][ T9395] syz.1.1952: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 179.507184][ T9395] CPU: 1 UID: 0 PID: 9395 Comm: syz.1.1952 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 179.507273][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.507287][ T9395] Call Trace: [ 179.507294][ T9395] [ 179.507303][ T9395] __dump_stack+0x1d/0x30 [ 179.507325][ T9395] dump_stack_lvl+0xe8/0x140 [ 179.507346][ T9395] dump_stack+0x15/0x1b [ 179.507426][ T9395] warn_alloc+0x12b/0x1a0 [ 179.507456][ T9395] ? audit_log_end+0x1d7/0x1f0 [ 179.507533][ T9395] ? audit_log_end+0x1d7/0x1f0 [ 179.507646][ T9395] __vmalloc_node_range_noprof+0x9c/0xe00 [ 179.507753][ T9395] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 179.507785][ T9395] ? slow_avc_audit+0x104/0x140 [ 179.507821][ T9395] ? should_fail_ex+0x30/0x280 [ 179.507861][ T9395] ? xskq_create+0x36/0xe0 [ 179.508025][ T9395] vmalloc_user_noprof+0x7d/0xb0 [ 179.508058][ T9395] ? xskq_create+0x80/0xe0 [ 179.508088][ T9395] xskq_create+0x80/0xe0 [ 179.508156][ T9395] xsk_init_queue+0x95/0xf0 [ 179.508185][ T9395] xsk_setsockopt+0x35c/0x510 [ 179.508277][ T9395] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.508303][ T9395] __sys_setsockopt+0x184/0x200 [ 179.508369][ T9395] __x64_sys_setsockopt+0x64/0x80 [ 179.508472][ T9395] x64_sys_call+0x2bd5/0x2fb0 [ 179.508494][ T9395] do_syscall_64+0xd2/0x200 [ 179.508511][ T9395] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.508539][ T9395] ? clear_bhb_loop+0x40/0x90 [ 179.508568][ T9395] ? clear_bhb_loop+0x40/0x90 [ 179.508647][ T9395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.508668][ T9395] RIP: 0033:0x7f92a18be9a9 [ 179.508684][ T9395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.508710][ T9395] RSP: 002b:00007f929ff27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.508810][ T9395] RAX: ffffffffffffffda RBX: 00007f92a1ae5fa0 RCX: 00007f92a18be9a9 [ 179.508828][ T9395] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 179.508907][ T9395] RBP: 00007f92a1940ca1 R08: 0000000000000004 R09: 0000000000000000 [ 179.508919][ T9395] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.508933][ T9395] R13: 0000000000000000 R14: 00007f92a1ae5fa0 R15: 00007ffc09d4ba78 [ 179.508961][ T9395] [ 179.508970][ T9395] Mem-Info: [ 179.538152][ T9395] active_anon:59892 inactive_anon:29229 isolated_anon:0 [ 179.538152][ T9395] active_file:13331 inactive_file:4812 isolated_file:0 [ 179.538152][ T9395] unevictable:0 dirty:638 writeback:1 [ 179.538152][ T9395] slab_reclaimable:3645 slab_unreclaimable:58984 [ 179.538152][ T9395] mapped:33721 shmem:81018 pagetables:2014 [ 179.538152][ T9395] sec_pagetables:0 bounce:0 [ 179.538152][ T9395] kernel_misc_reclaimable:0 [ 179.538152][ T9395] free:1765089 free_pcp:9194 free_cma:0 [ 179.659956][ T9393] EXT4-fs: Ignoring removed nobh option [ 179.660853][ T9395] Node 0 active_anon:227968kB inactive_anon:116916kB active_file:53324kB inactive_file:19248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119340kB dirty:2552kB writeback:4kB shmem:312588kB writeback_tmp:0kB kernel_stack:4880kB pagetables:7824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.665318][ T9393] EXT4-fs: inline encryption not supported [ 179.768360][ T9403] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 179.785311][ T9395] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 179.792222][ T9398] random: crng reseeded on system resumption [ 179.820826][ T9395] lowmem_reserve[]: 0 2882 7860 7860 [ 179.820890][ T9395] Node 0 DMA32 free:2947724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 179.820982][ T9395] lowmem_reserve[]: 0 0 4978 4978 [ 179.821093][ T9395] Node 0 Normal free:4110380kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:228084kB inactive_anon:116916kB active_file:53324kB inactive_file:19248kB unevictable:0kB writepending:2556kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:30880kB local_pcp:11224kB free_cma:0kB [ 179.821315][ T9395] lowmem_reserve[]: 0 0 0 0 [ 179.821349][ T9395] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.821533][ T9395] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947724kB [ 179.821761][ T9395] Node 0 Normal: 696*4kB [ 179.831424][ T9403] team0: Device ipvlan2 is already an upper device of the team interface [ 179.834565][ T9395] (ME) [ 179.898433][ T9393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.904611][ T9395] 1646*8kB (UM) 1418*16kB (UME) 1351*32kB (UME) 794*64kB (UME) 362*128kB (UME) 169*256kB (UME) 132*512kB (UME) 91*1024kB (UME) 50*2048kB (UM) 885*4096kB (UM) = 4110416kB [ 180.019950][ T9395] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 180.029287][ T9395] 96302 total pagecache pages [ 180.034000][ T9395] 6 pages in swap cache [ 180.038169][ T9395] Free swap = 105236kB [ 180.042325][ T9395] Total swap = 124996kB [ 180.046587][ T9395] 2097051 pages RAM [ 180.050412][ T9395] 0 pages HighMem/MovableOnly [ 180.055204][ T9395] 80813 pages reserved [ 180.141466][ T9414] loop1: detected capacity change from 0 to 1024 [ 180.156212][ T9414] EXT4-fs: Ignoring removed nobh option [ 180.161933][ T9414] EXT4-fs: inline encryption not supported [ 180.193170][ T9418] loop0: detected capacity change from 0 to 1024 [ 180.203605][ T9418] EXT4-fs: Ignoring removed nobh option [ 180.209326][ T9418] EXT4-fs: inline encryption not supported [ 180.227766][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.236382][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.238056][ T9414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.270773][ T9418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.289730][ T9414] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1958: Allocating blocks 385-513 which overlap fs metadata [ 180.305444][ T9414] EXT4-fs (loop1): pa ffff888106a604d0: logic 16, phys. 129, len 24 [ 180.307501][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.313515][ T9414] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 180.327234][ T9418] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1959: Allocating blocks 385-513 which overlap fs metadata [ 180.348929][ T9414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 180.354340][ T9418] EXT4-fs (loop0): pa ffff888106ab2f50: logic 16, phys. 129, len 24 [ 180.361463][ T9414] EXT4-fs (loop1): This should not happen!! Data will be lost [ 180.361463][ T9414] [ 180.369472][ T9418] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 180.379161][ T9414] EXT4-fs (loop1): Total free blocks count 0 [ 180.379181][ T9414] EXT4-fs (loop1): Free/Dirty block details [ 180.379196][ T9414] EXT4-fs (loop1): free_blocks=128 [ 180.406387][ T9414] EXT4-fs (loop1): dirty_blocks=0 [ 180.411492][ T9414] EXT4-fs (loop1): Block reservation details [ 180.417539][ T9414] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 180.438490][ T9418] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 180.450842][ T9418] EXT4-fs (loop0): This should not happen!! Data will be lost [ 180.450842][ T9418] [ 180.460528][ T9418] EXT4-fs (loop0): Total free blocks count 0 [ 180.466699][ T9418] EXT4-fs (loop0): Free/Dirty block details [ 180.472690][ T9418] EXT4-fs (loop0): free_blocks=128 [ 180.477844][ T9418] EXT4-fs (loop0): dirty_blocks=0 [ 180.482947][ T9418] EXT4-fs (loop0): Block reservation details [ 180.488982][ T9418] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 180.542394][ T9434] loop4: detected capacity change from 0 to 256 [ 180.550833][ T9435] __nla_validate_parse: 18 callbacks suppressed [ 180.550853][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 180.562825][ T9434] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.598805][ T9434] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 180.604910][ T9437] smc: net device bond0 applied user defined pnetid SYZ0 [ 180.607450][ T9434] FAT-fs (loop4): Filesystem has been set read-only [ 180.615018][ T9437] smc: net device bond0 erased user defined pnetid SYZ0 [ 180.742165][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 180.742184][ T29] audit: type=1400 audit(1752827984.921:6646): avc: denied { create } for pid=9443 comm="syz.0.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 180.789578][ T29] audit: type=1400 audit(1752827984.949:6647): avc: denied { write } for pid=9443 comm="syz.0.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 180.809193][ T29] audit: type=1400 audit(1752827984.949:6648): avc: denied { compute_member } for pid=9443 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 180.878902][ T9451] xt_socket: unknown flags 0xc [ 180.902037][ T29] audit: type=1326 audit(1752827985.052:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 180.925610][ T29] audit: type=1326 audit(1752827985.052:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 180.949090][ T29] audit: type=1326 audit(1752827985.062:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 180.972610][ T29] audit: type=1326 audit(1752827985.062:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 180.996027][ T29] audit: type=1326 audit(1752827985.062:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 181.019529][ T29] audit: type=1326 audit(1752827985.062:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 181.043005][ T29] audit: type=1326 audit(1752827985.062:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa09ade9a9 code=0x7ffc0000 [ 181.070933][ T9452] loop2: detected capacity change from 0 to 1024 [ 181.090007][ T9452] EXT4-fs: Ignoring removed nobh option [ 181.095716][ T9452] EXT4-fs: Ignoring removed bh option [ 181.110840][ T9455] loop0: detected capacity change from 0 to 512 [ 181.121102][ T9455] ext4: Unknown parameter 'nouser_xattr' [ 181.235074][ T9452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.260971][ T9452] netlink: 'syz.2.1971': attribute type 2 has an invalid length. [ 181.273001][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1972'. [ 181.284122][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.318744][ T9462] xt_connbytes: Forcing CT accounting to be enabled [ 181.325466][ T9462] Cannot find set identified by id 0 to match [ 181.339784][ T9462] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 181.347649][ T9462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1973'. [ 181.407893][ T9468] loop2: detected capacity change from 0 to 1024 [ 181.414560][ T9470] loop3: detected capacity change from 0 to 512 [ 181.424008][ T9468] EXT4-fs: Ignoring removed nobh option [ 181.429666][ T9468] EXT4-fs: inline encryption not supported [ 181.436562][ T9470] ext4: Unknown parameter 'nouser_xattr' [ 181.447618][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 181.457790][ T9472] lo speed is unknown, defaulting to 1000 [ 181.494442][ T9468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.521260][ T9477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1979'. [ 181.534454][ T9475] veth0: entered promiscuous mode [ 181.565683][ T9482] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1981'. [ 181.604773][ T9479] loop4: detected capacity change from 0 to 512 [ 181.634857][ T9485] loop3: detected capacity change from 0 to 8192 [ 181.666024][ T9479] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.703149][ T9479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.718530][ T9479] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.736892][ T9480] veth0: left promiscuous mode [ 181.746455][ T9491] loop1: detected capacity change from 0 to 512 [ 181.753691][ T9491] ext4: Unknown parameter 'nouser_xattr' [ 181.772327][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.838797][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.897187][ T9498] loop2: detected capacity change from 0 to 1024 [ 181.924440][ T9500] set match dimension is over the limit! [ 181.938366][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 181.947871][ T9498] EXT4-fs: Ignoring removed nobh option [ 181.953593][ T9498] EXT4-fs: inline encryption not supported [ 181.968913][ T9500] netlink: 'syz.4.1987': attribute type 1 has an invalid length. [ 181.976758][ T9500] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1987'. [ 182.002596][ T9498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.072364][ T9506] loop1: detected capacity change from 0 to 512 [ 182.096220][ T9506] ext4: Unknown parameter 'nouser_xattr' [ 182.145060][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1990'. [ 182.171254][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.336459][ T9518] loop1: detected capacity change from 0 to 8192 [ 182.810418][ T9525] lo speed is unknown, defaulting to 1000 [ 183.013689][ T9533] netlink: 'syz.4.1999': attribute type 21 has an invalid length. [ 183.025193][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1999'. [ 183.034757][ T9531] loop1: detected capacity change from 0 to 512 [ 183.053700][ T9531] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.074432][ T9531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.087315][ T9537] loop0: detected capacity change from 0 to 512 [ 183.094645][ T9537] ext4: Unknown parameter 'nouser_xattr' [ 183.101402][ T9531] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.223058][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.261146][ T9553] FAULT_INJECTION: forcing a failure. [ 183.261146][ T9553] name failslab, interval 1, probability 0, space 0, times 0 [ 183.273882][ T9553] CPU: 0 UID: 0 PID: 9553 Comm: syz.1.2006 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 183.273920][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.273938][ T9553] Call Trace: [ 183.274010][ T9553] [ 183.274021][ T9553] __dump_stack+0x1d/0x30 [ 183.274049][ T9553] dump_stack_lvl+0xe8/0x140 [ 183.274082][ T9553] dump_stack+0x15/0x1b [ 183.274109][ T9553] should_fail_ex+0x265/0x280 [ 183.274142][ T9553] should_failslab+0x8c/0xb0 [ 183.274197][ T9553] kmem_cache_alloc_noprof+0x50/0x310 [ 183.274232][ T9553] ? getname_flags+0x80/0x3b0 [ 183.274259][ T9553] ? kstrtouint+0x76/0xc0 [ 183.274295][ T9553] getname_flags+0x80/0x3b0 [ 183.274389][ T9553] user_path_at+0x28/0x130 [ 183.274416][ T9553] user_statfs+0x4d/0x110 [ 183.274500][ T9553] __x64_sys_statfs+0x65/0xf0 [ 183.274529][ T9553] ? fput+0x8f/0xc0 [ 183.274636][ T9553] ? ksys_write+0x192/0x1a0 [ 183.274683][ T9553] x64_sys_call+0x1edd/0x2fb0 [ 183.274746][ T9553] do_syscall_64+0xd2/0x200 [ 183.274765][ T9553] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.274795][ T9553] ? clear_bhb_loop+0x40/0x90 [ 183.274825][ T9553] ? clear_bhb_loop+0x40/0x90 [ 183.274855][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.274922][ T9553] RIP: 0033:0x7f92a18be9a9 [ 183.274939][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.275032][ T9553] RSP: 002b:00007f929ff27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 183.275127][ T9553] RAX: ffffffffffffffda RBX: 00007f92a1ae5fa0 RCX: 00007f92a18be9a9 [ 183.275204][ T9553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 183.275221][ T9553] RBP: 00007f929ff27090 R08: 0000000000000000 R09: 0000000000000000 [ 183.275238][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.275255][ T9553] R13: 0000000000000000 R14: 00007f92a1ae5fa0 R15: 00007ffc09d4ba78 [ 183.275277][ T9553] [ 183.540500][ T9555] bond2: entered promiscuous mode [ 183.545764][ T9555] bond2: entered allmulticast mode [ 183.551931][ T9555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.560296][ T9558] loop1: detected capacity change from 0 to 8192 [ 183.576460][ T9555] bond2 (unregistering): Released all slaves [ 183.606536][ T9563] set match dimension is over the limit! [ 183.621938][ T9563] netlink: 'syz.3.2008': attribute type 1 has an invalid length. [ 183.632466][ T9562] lo speed is unknown, defaulting to 1000 [ 183.771444][ T9567] xt_cluster: node mask cannot exceed total number of nodes [ 183.844397][ T9572] loop2: detected capacity change from 0 to 512 [ 183.870899][ T9572] ext4: Unknown parameter 'nouser_xattr' [ 184.389167][ T9597] loop3: detected capacity change from 0 to 256 [ 184.400060][ T9597] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.427674][ T9597] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 184.436265][ T9597] FAT-fs (loop3): Filesystem has been set read-only [ 184.601464][ T9587] sctp: [Deprecated]: syz.2.2017 (pid 9587) Use of int in maxseg socket option. [ 184.601464][ T9587] Use struct sctp_assoc_value instead [ 184.699306][ T9604] loop0: detected capacity change from 0 to 256 [ 184.714005][ T9604] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.730898][ T9604] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 184.739514][ T9604] FAT-fs (loop0): Filesystem has been set read-only [ 184.878720][ T9607] loop4: detected capacity change from 0 to 512 [ 184.923198][ T9607] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.945836][ T9607] EXT4-fs (loop4): mount failed [ 184.988804][ T9617] smc: net device bond0 applied user defined pnetid SYZ0 [ 184.996773][ T9617] smc: net device bond0 erased user defined pnetid SYZ0 [ 185.046232][ T9619] loop4: detected capacity change from 0 to 512 [ 185.066618][ T9619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.095384][ T9619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.108414][ T9619] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.151908][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.176907][ T9634] random: crng reseeded on system resumption [ 185.195457][ T9634] Restarting kernel threads ... [ 185.212146][ T9636] loop3: detected capacity change from 0 to 2048 [ 185.219450][ T9634] Done restarting kernel threads. [ 185.263604][ T3299] Alternate GPT is invalid, using primary GPT. [ 185.270034][ T3299] loop3: p1 p2 p3 [ 185.281917][ T9643] set match dimension is over the limit! [ 185.370626][ T9643] netlink: 'syz.0.2034': attribute type 1 has an invalid length. [ 185.383607][ T9648] smc: net device bond0 applied user defined pnetid SYZ0 [ 185.406746][ T9648] smc: net device bond0 erased user defined pnetid SYZ0 [ 185.447865][ T9636] Alternate GPT is invalid, using primary GPT. [ 185.454330][ T9636] loop3: p1 p2 p3 [ 185.486848][ T9649] lo speed is unknown, defaulting to 1000 [ 185.536398][ T9655] random: crng reseeded on system resumption [ 185.570540][ T9655] Restarting kernel threads ... [ 185.584692][ T9655] Done restarting kernel threads. [ 185.713053][ T9660] wg2: entered promiscuous mode [ 185.718051][ T9660] wg2: entered allmulticast mode [ 185.812688][ T9660] loop3: detected capacity change from 0 to 512 [ 185.822031][ T9660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.845668][ T9660] EXT4-fs (loop3): failed to initialize system zone (-117) [ 185.861564][ T9660] EXT4-fs (loop3): mount failed [ 186.016231][ T9671] loop2: detected capacity change from 0 to 8192 [ 186.069106][ T9673] loop3: detected capacity change from 0 to 512 [ 186.078531][ T9673] ext4: Unknown parameter 'nouser_xattr' [ 186.088143][ T9673] __nla_validate_parse: 5 callbacks suppressed [ 186.088157][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2046'. [ 186.154243][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 186.154262][ T29] audit: type=1326 audit(1752827989.982:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432dbee9a9 code=0x7ffc0000 [ 186.162852][ T9678] random: crng reseeded on system resumption [ 186.190294][ T29] audit: type=1326 audit(1752827990.010:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f432dbee9a9 code=0x7ffc0000 [ 186.217199][ T9678] Restarting kernel threads ... [ 186.223274][ T9678] Done restarting kernel threads. [ 186.284436][ T9682] loop1: detected capacity change from 0 to 2048 [ 186.307918][ T29] audit: type=1326 audit(1752827990.010:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432dbee9a9 code=0x7ffc0000 [ 186.331448][ T29] audit: type=1326 audit(1752827990.010:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432dbee9a9 code=0x7ffc0000 [ 186.355162][ T29] audit: type=1326 audit(1752827990.010:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f432dbee9a9 code=0x7ffc0000 [ 186.378629][ T29] audit: type=1326 audit(1752827990.010:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432dbee9a9 code=0x7ffc0000 [ 186.402361][ T29] audit: type=1326 audit(1752827990.010:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432dbee9a9 code=0x7ffc0000 [ 186.425823][ T29] audit: type=1326 audit(1752827990.010:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f432dbee9a9 code=0x7ffc0000 [ 186.449377][ T29] audit: type=1326 audit(1752827990.019:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f432dbee9e3 code=0x7ffc0000 [ 186.472641][ T29] audit: type=1400 audit(1752827990.019:6864): avc: denied { map } for pid=9675 comm="syz.3.2048" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.561663][ T9682] Alternate GPT is invalid, using primary GPT. [ 186.568077][ T9682] loop1: p1 p2 p3 [ 186.604504][ T9694] loop3: detected capacity change from 0 to 2048 [ 186.641347][ T9697] lo speed is unknown, defaulting to 1000 [ 186.717046][ T9694] Alternate GPT is invalid, using primary GPT. [ 186.723383][ T9694] loop3: p1 p2 p3 [ 186.787838][ T9709] loop3: detected capacity change from 0 to 1024 [ 186.850996][ T9709] EXT4-fs: Ignoring removed nobh option [ 186.856738][ T9709] EXT4-fs: Ignoring removed bh option [ 186.909957][ T9709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.926798][ T9709] netlink: 'syz.3.2061': attribute type 2 has an invalid length. [ 187.005111][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.048793][ T9720] loop1: detected capacity change from 0 to 512 [ 187.068728][ T9720] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.086482][ T9722] set match dimension is over the limit! [ 187.092976][ T9722] netlink: 'syz.0.2067': attribute type 1 has an invalid length. [ 187.100849][ T9722] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2067'. [ 187.112417][ T9720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.132781][ T9720] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.143523][ T9726] loop3: detected capacity change from 0 to 512 [ 187.150322][ T9726] ext4: Unknown parameter 'nouser_xattr' [ 187.232931][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.281681][ T9732] FAULT_INJECTION: forcing a failure. [ 187.281681][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 187.294669][ T9732] CPU: 0 UID: 0 PID: 9732 Comm: syz.1.2069 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 187.294697][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.294711][ T9732] Call Trace: [ 187.294720][ T9732] [ 187.294730][ T9732] __dump_stack+0x1d/0x30 [ 187.294758][ T9732] dump_stack_lvl+0xe8/0x140 [ 187.294911][ T9732] dump_stack+0x15/0x1b [ 187.295013][ T9732] should_fail_ex+0x265/0x280 [ 187.295055][ T9732] should_failslab+0x8c/0xb0 [ 187.295129][ T9732] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 187.295155][ T9732] ? __d_alloc+0x3d/0x350 [ 187.295258][ T9732] __d_alloc+0x3d/0x350 [ 187.295279][ T9732] ? mpol_shared_policy_init+0xbd/0x4c0 [ 187.295315][ T9732] d_alloc_pseudo+0x1e/0x80 [ 187.295346][ T9732] alloc_file_pseudo+0x71/0x160 [ 187.295479][ T9732] __shmem_file_setup+0x1de/0x210 [ 187.295521][ T9732] shmem_file_setup+0x3b/0x50 [ 187.295617][ T9732] __se_sys_memfd_create+0x2c3/0x590 [ 187.295653][ T9732] __x64_sys_memfd_create+0x31/0x40 [ 187.295692][ T9732] x64_sys_call+0x122f/0x2fb0 [ 187.295830][ T9732] do_syscall_64+0xd2/0x200 [ 187.295854][ T9732] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 187.295911][ T9732] ? clear_bhb_loop+0x40/0x90 [ 187.295938][ T9732] ? clear_bhb_loop+0x40/0x90 [ 187.295960][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.295981][ T9732] RIP: 0033:0x7f92a18be9a9 [ 187.296009][ T9732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.296034][ T9732] RSP: 002b:00007f929ff26e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 187.296059][ T9732] RAX: ffffffffffffffda RBX: 000000000000054e RCX: 00007f92a18be9a9 [ 187.296074][ T9732] RDX: 00007f929ff26ef0 RSI: 0000000000000000 RDI: 00007f92a1941634 [ 187.296090][ T9732] RBP: 0000200000000600 R08: 00007f929ff26bb7 R09: 00007f929ff26e40 [ 187.296107][ T9732] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 187.296123][ T9732] R13: 00007f929ff26ef0 R14: 00007f929ff26eb0 R15: 00002000000005c0 [ 187.296152][ T9732] [ 187.337908][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 187.541297][ T9737] random: crng reseeded on system resumption [ 187.557785][ T9737] Restarting kernel threads ... [ 187.564173][ T9737] Done restarting kernel threads. [ 187.666291][ T9746] loop3: detected capacity change from 0 to 512 [ 187.678090][ T9742] loop1: detected capacity change from 0 to 8192 [ 187.691868][ T9746] EXT4-fs: Ignoring removed nobh option [ 187.716998][ T9753] loop4: detected capacity change from 0 to 1024 [ 187.724725][ T9753] EXT4-fs: Ignoring removed nobh option [ 187.730356][ T9753] EXT4-fs: Ignoring removed bh option [ 187.738756][ T9746] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.2073: corrupted inode contents [ 187.751324][ T9755] Cannot find set identified by id 0 to match [ 187.759136][ T9746] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.2073: mark_inode_dirty error [ 187.766555][ T9755] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 187.776236][ T9753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.778267][ T9755] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2078'. [ 187.801918][ T9746] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.2073: corrupted inode contents [ 187.823711][ T9746] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2073: mark_inode_dirty error [ 187.848301][ T9753] netlink: 'syz.4.2077': attribute type 2 has an invalid length. [ 187.849446][ T9746] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2073: Failed to acquire dquot type 0 [ 187.878742][ T9746] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2073: corrupted inode contents [ 187.893960][ T9746] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.2073: mark_inode_dirty error [ 187.906003][ T9746] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2073: corrupted inode contents [ 187.911792][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.919990][ T9746] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2073: mark_inode_dirty error [ 187.956310][ T9746] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2073: corrupted inode contents [ 187.977030][ T9746] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 187.987679][ T9765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2081'. [ 188.000776][ T9746] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2073: corrupted inode contents [ 188.004543][ T9768] loop4: detected capacity change from 0 to 1024 [ 188.020594][ T9768] EXT4-fs: Ignoring removed nobh option [ 188.026276][ T9768] EXT4-fs: inline encryption not supported [ 188.032622][ T9746] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.2073: mark_inode_dirty error [ 188.052199][ T9746] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 188.062864][ T9746] EXT4-fs (loop3): 1 truncate cleaned up [ 188.069014][ T9746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.088121][ T9746] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.143999][ T9768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.160678][ T9777] loop0: detected capacity change from 0 to 4096 [ 188.171239][ T9768] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2080: Allocating blocks 385-513 which overlap fs metadata [ 188.254914][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.266155][ T9768] EXT4-fs (loop4): pa ffff888106a604d0: logic 16, phys. 129, len 24 [ 188.274215][ T9768] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 188.285716][ T9777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.330048][ T9768] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 188.342362][ T9768] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.342362][ T9768] [ 188.352200][ T9768] EXT4-fs (loop4): Total free blocks count 0 [ 188.358261][ T9768] EXT4-fs (loop4): Free/Dirty block details [ 188.364308][ T9768] EXT4-fs (loop4): free_blocks=128 [ 188.369453][ T9768] EXT4-fs (loop4): dirty_blocks=0 [ 188.374570][ T9768] EXT4-fs (loop4): Block reservation details [ 188.380712][ T9768] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 188.383641][ T9789] EXT4-fs (loop0): shut down requested (2) [ 188.406080][ T9784] lo speed is unknown, defaulting to 1000 [ 188.490345][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.663317][ T9798] openvswitch: netlink: Message has 6 unknown bytes. [ 188.849627][ T9805] netlink: 40107 bytes leftover after parsing attributes in process `syz.2.2095'. [ 188.877167][ T9808] loop0: detected capacity change from 0 to 512 [ 188.884466][ T9808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.898853][ T9808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.912230][ T9808] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.022406][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.178662][ T9824] loop1: detected capacity change from 0 to 1024 [ 189.203220][ T9824] EXT4-fs: Ignoring removed nobh option [ 189.208921][ T9824] EXT4-fs: inline encryption not supported [ 189.259367][ T9822] loop2: detected capacity change from 0 to 8192 [ 189.271861][ T9824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.318591][ T9824] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2103: Allocating blocks 385-513 which overlap fs metadata [ 189.334986][ T9824] EXT4-fs (loop1): pa ffff888106a60700: logic 16, phys. 129, len 24 [ 189.343038][ T9824] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 189.355512][ T9824] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 189.367927][ T9824] EXT4-fs (loop1): This should not happen!! Data will be lost [ 189.367927][ T9824] [ 189.377651][ T9824] EXT4-fs (loop1): Total free blocks count 0 [ 189.383859][ T9824] EXT4-fs (loop1): Free/Dirty block details [ 189.389852][ T9824] EXT4-fs (loop1): free_blocks=128 [ 189.395080][ T9824] EXT4-fs (loop1): dirty_blocks=0 [ 189.400169][ T9824] EXT4-fs (loop1): Block reservation details [ 189.406176][ T9824] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 189.426967][ T9828] loop0: detected capacity change from 0 to 1024 [ 189.435474][ T9828] EXT4-fs: Ignoring removed nobh option [ 189.441107][ T9828] EXT4-fs: inline encryption not supported [ 189.460483][ T9828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.498524][ T9828] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2102: Allocating blocks 385-513 which overlap fs metadata [ 189.514779][ T9828] EXT4-fs (loop0): pa ffff888106ab2e00: logic 16, phys. 129, len 24 [ 189.522931][ T9828] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 189.534475][ T9828] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 189.546735][ T9828] EXT4-fs (loop0): This should not happen!! Data will be lost [ 189.546735][ T9828] [ 189.556539][ T9828] EXT4-fs (loop0): Total free blocks count 0 [ 189.562581][ T9828] EXT4-fs (loop0): Free/Dirty block details [ 189.568532][ T9828] EXT4-fs (loop0): free_blocks=128 [ 189.573714][ T9828] EXT4-fs (loop0): dirty_blocks=0 [ 189.578801][ T9828] EXT4-fs (loop0): Block reservation details [ 189.584848][ T9828] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 189.650603][ T9834] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 189.693143][ T9837] xt_socket: unknown flags 0xc [ 189.717763][ T9834] loop3: detected capacity change from 0 to 2048 [ 189.724733][ T9834] msdos: Unknown parameter '' [ 189.759196][ T9844] loop1: detected capacity change from 0 to 1024 [ 189.766920][ T9844] EXT4-fs: Ignoring removed nobh option [ 189.772604][ T9844] EXT4-fs: inline encryption not supported [ 189.812123][ T9844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.830044][ T9844] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2109: Allocating blocks 385-513 which overlap fs metadata [ 189.896418][ T9843] EXT4-fs (loop1): pa ffff888106a60700: logic 16, phys. 129, len 24 [ 189.904556][ T9843] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 189.950749][ T9856] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2113'. [ 189.963293][ T9861] loop2: detected capacity change from 0 to 2048 [ 189.989988][ T9866] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2117'. [ 190.004424][ T9867] loop0: detected capacity change from 0 to 1024 [ 190.011884][ T9867] EXT4-fs: Ignoring removed nobh option [ 190.017541][ T9867] EXT4-fs: inline encryption not supported [ 190.020611][ T9861] Alternate GPT is invalid, using primary GPT. [ 190.029965][ T9861] loop2: p1 p2 p3 [ 190.044646][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.044737][ T9867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.114169][ T9867] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2116: Allocating blocks 385-513 which overlap fs metadata [ 190.131129][ T9867] EXT4-fs (loop0): pa ffff888106a60700: logic 16, phys. 129, len 24 [ 190.139295][ T9867] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 190.217369][ T9882] set match dimension is over the limit! [ 190.224818][ T9867] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 190.237108][ T9867] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.237108][ T9867] [ 190.246913][ T9867] EXT4-fs (loop0): Total free blocks count 0 [ 190.252916][ T9867] EXT4-fs (loop0): Free/Dirty block details [ 190.258934][ T9867] EXT4-fs (loop0): free_blocks=128 [ 190.264181][ T9867] EXT4-fs (loop0): dirty_blocks=0 [ 190.269294][ T9867] EXT4-fs (loop0): Block reservation details [ 190.275411][ T9867] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 190.302828][ T9884] loop2: detected capacity change from 0 to 512 [ 190.310026][ T9882] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 190.317801][ T9882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2124'. [ 190.327546][ T9884] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.393953][ T9886] usb usb6: usbfs: process 9886 (syz.1.2120) did not claim interface 0 before use [ 190.417875][ T9884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.439053][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'. [ 190.449990][ T9886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9886 comm=syz.1.2120 [ 190.463133][ T9884] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.520709][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.622108][ T9894] loop4: detected capacity change from 0 to 1024 [ 190.629412][ T9894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.690964][ T3305] ================================================================== [ 190.699119][ T3305] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 190.706881][ T3305] [ 190.709212][ T3305] read-write to 0xffff888237d26f10 of 8 bytes by task 9894 on cpu 1: [ 190.717298][ T3305] find_get_block_common+0x4f0/0x960 [ 190.722616][ T3305] __find_get_block_nonatomic+0x25/0x30 [ 190.728185][ T3305] ext4_free_blocks+0x442/0x1400 [ 190.733139][ T3305] ext4_ext_remove_space+0x177b/0x2900 [ 190.738626][ T3305] ext4_ext_truncate+0xc7/0x170 [ 190.743501][ T3305] ext4_truncate+0x703/0xad0 [ 190.748139][ T3305] ext4_evict_inode+0x89c/0xd80 [ 190.753028][ T3305] evict+0x2e3/0x550 [ 190.756941][ T3305] iput+0x447/0x5b0 [ 190.760761][ T3305] ext4_xattr_ibody_set+0x347/0x3c0 [ 190.765984][ T3305] ext4_xattr_set_handle+0x923/0xe70 [ 190.771298][ T3305] ext4_xattr_set+0x18e/0x240 [ 190.776004][ T3305] ext4_xattr_trusted_set+0x3c/0x50 [ 190.781223][ T3305] __vfs_setxattr+0x2e6/0x310 [ 190.785932][ T3305] __vfs_setxattr_noperm+0xe8/0x410 [ 190.791245][ T3305] __vfs_setxattr_locked+0x1af/0x1d0 [ 190.796561][ T3305] vfs_setxattr+0x132/0x270 [ 190.801089][ T3305] filename_setxattr+0x1ad/0x400 [ 190.806054][ T3305] path_setxattrat+0x2c9/0x310 [ 190.810833][ T3305] __x64_sys_lsetxattr+0x71/0x90 [ 190.815783][ T3305] x64_sys_call+0x1e36/0x2fb0 [ 190.820480][ T3305] do_syscall_64+0xd2/0x200 [ 190.824995][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.830902][ T3305] [ 190.833237][ T3305] read to 0xffff888237d26f10 of 8 bytes by task 3305 on cpu 0: [ 190.840797][ T3305] has_bh_in_lru+0x35/0x1f0 [ 190.845338][ T3305] smp_call_function_many_cond+0x389/0xbf0 [ 190.851167][ T3305] on_each_cpu_cond_mask+0x3c/0x80 [ 190.856294][ T3305] invalidate_bh_lrus+0x2a/0x30 [ 190.861172][ T3305] blkdev_flush_mapping+0x9a/0x1a0 [ 190.866311][ T3305] bdev_release+0x2bf/0x3d0 [ 190.870834][ T3305] blkdev_release+0x15/0x20 [ 190.875357][ T3305] __fput+0x298/0x650 [ 190.879361][ T3305] ____fput+0x1c/0x30 [ 190.883363][ T3305] task_work_run+0x131/0x1a0 [ 190.887971][ T3305] exit_to_user_mode_loop+0xe4/0x100 [ 190.893282][ T3305] do_syscall_64+0x1d6/0x200 [ 190.897889][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.903800][ T3305] [ 190.906152][ T3305] value changed: 0xffff88811a41c680 -> 0xffff88811a41cf70 [ 190.913287][ T3305] [ 190.915622][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 190.921790][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 190.934426][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.944498][ T3305] ==================================================================